Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":June 4, 2026, 4 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
230711	7.5	危険	サン・マイクロシステムズ	-	Sun Java System Directory Proxy Server におけるサーバに対するアクセス制限を回避される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2008-1995	2012-12-20 18:52	2008-04-25	Show	GitHub Exploit DB Packet Storm

230712	4.3	警告	pixel motion	-	Blog Pixel Motion の liste_article.php におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2008-1986	2012-12-20 18:52	2008-04-27	Show	GitHub Exploit DB Packet Storm

230713	8.5	危険	サン・マイクロシステムズ	-	Sun Ray Kiosk Mode におけるルートの権限を取得される脆弱性	CWE-noinfo 情報不足	CVE-2008-2112	2012-12-20 18:52	2008-05-5	Show	GitHub Exploit DB Packet Storm

230714	9.3	危険	Yahoo!	-	Yahoo! Assistant の ActiveX コントロールにおける任意のコードを実行される脆弱性	CWE-399 リソース管理の問題	CVE-2008-2111	2012-12-20 18:52	2008-05-7	Show	GitHub Exploit DB Packet Storm

230715	7.5	危険	qto	-	QTOFileManager の qtofm.php における任意の PHP コードをアップロードされる脆弱性	CWE-20 不適切な入力確認	CVE-2008-2110	2012-12-20 18:52	2008-05-7	Show	GitHub Exploit DB Packet Storm

230716	7.5	危険	phpforge	-	PHP Forge の admin/news.php における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2008-2088	2012-12-20 18:52	2008-05-6	Show	GitHub Exploit DB Packet Storm

230717	6.8	警告	softbiz	-	Softbiz Web Host Directory Script の search_result.php における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2008-2087	2012-12-20 18:52	2008-05-6	Show	GitHub Exploit DB Packet Storm

230718	6.8	警告	prozilla	-	Prozilla Hosting Index の directory.php における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2008-2083	2012-12-20 18:52	2008-05-5	Show	GitHub Exploit DB Packet Storm

230719	4.3	警告	siteman	-	Siteman の index.php におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2008-2082	2012-12-20 18:52	2008-05-5	Show	GitHub Exploit DB Packet Storm

230720	9	危険	siteman	-	Siteman の index.php におけるディレクトリトラバーサルの脆弱性	CWE-22 パス・トラバーサル	CVE-2008-2081	2012-12-20 18:52	2008-05-5	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:June 4, 2026, 4:17 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
209691	9.8	CRITICAL Network	online_bus_booking_system_project	online_bus_booking_system	In SourceCodester Online Bus Booking System 1.0, there is Authentication bypass on the Admin Login screen in admin.php via username or password SQL injection.	CWE-89 SQL Injection	CVE-2020-25273	2024-11-21 14:17	2020-10-8	Show	GitHub Exploit DB Packet Storm

209692	6.1	MEDIUM Network	online_bus_booking_system_project	online_bus_booking_system	In SourceCodester Online Bus Booking System 1.0, there is XSS through the name parameter in book_now.php.	CWE-79 Cross-site Scripting	CVE-2020-25272	2024-11-21 14:17	2020-10-8	Show	GitHub Exploit DB Packet Storm

209693	5.4	MEDIUM Network	phpgurukul	hospital_management_system	PHPGurukul hospital-management-system-in-php 4.0 allows XSS via admin/patient-search.php, doctor/search.php, book-appointment.php, doctor/appointment-history.php, or admin/appointment-history.php.	CWE-79 Cross-site Scripting	CVE-2020-25271	2024-11-21 14:17	2020-10-8	Show	GitHub Exploit DB Packet Storm

209694	5.4	MEDIUM Network	phpgurukul	hostel_management_system	PHPGurukul hostel-management-system 2.1 allows XSS via Guardian Name, Guardian Relation, Guardian Contact no, Address, or City.	CWE-79 Cross-site Scripting	CVE-2020-25270	2024-11-21 14:17	2020-10-8	Show	GitHub Exploit DB Packet Storm

209695	7.1	HIGH Network	pyrocms	pyrocms	PyroCMS 3.7 is vulnerable to cross-site request forgery (CSRF) via the admin/addons/uninstall/anomaly.module.blocks URI: an arbitrary plugin will be deleted.	CWE-352 Origin Validation Error	CVE-2020-25263	2024-11-21 14:17	2020-10-8	Show	GitHub Exploit DB Packet Storm

209696	4.3	MEDIUM Network	pyrocms	pyrocms	PyroCMS 3.7 is vulnerable to cross-site request forgery (CSRF) via the admin/pages/delete/ URI: pages will be deleted.	CWE-352 Origin Validation Error	CVE-2020-25262	2024-11-21 14:17	2020-10-8	Show	GitHub Exploit DB Packet Storm

209697	5.4	MEDIUM Network	getsymphony	symphony	Cross-site scripting (XSS) vulnerabilities in Symphony CMS 3.0.0 allow remote attackers to inject arbitrary web script or HTML to fields['body'] param via events\event.publish_article.php	CWE-79 Cross-site Scripting	CVE-2020-25343	2024-11-21 14:17	2020-10-7	Show	GitHub Exploit DB Packet Storm

209698	5.3	MEDIUM Network	pritunl	pritunl	Pritunl 1.29.2145.25 allows attackers to enumerate valid VPN usernames via a series of /auth/session login attempts. Initially, the server will return error 401. However, if the username is valid, th…	CWE-203 Information Exposure Through Discrepancy	CVE-2020-25200	2024-11-21 14:17	2020-10-2	Show	GitHub Exploit DB Packet Storm

209699	4.8	MEDIUM Network	mantisbt	mantisbt	An issue was discovered in MantisBT before 2.24.3. When editing an Issue in a Project where a Custom Field with a crafted Regular Expression property is used, improper escaping of the corresponding f…	CWE-79 Cross-site Scripting	CVE-2020-25288	2024-11-21 14:17	2020-10-1	Show	GitHub Exploit DB Packet Storm

209700	8.8	HIGH Network	observium	observium	An issue was discovered in Observium Professional, Enterprise & Community 20.8.10631. It is vulnerable to directory traversal and local file inclusion due to the fact that there is an unrestricted po…	CWE-22 CWE-434 Path Traversal Unrestricted Upload of File with Dangerous Type	CVE-2020-25149	2024-11-21 14:17	2020-09-26	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed