Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 31, 2026, 6 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
230811 4.3 警告 WordPress.org - WordPress 用の Captcha! プラグインにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2008-0206 2012-12-20 18:34 2008-01-9 Show GitHub Exploit DB Packet Storm
230812 4.3 警告 WordPress.org - WordPress 用の Math Comment Spam Protection プラグインにおけるクロスサイトリクエストフォージェリの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2008-0205 2012-12-20 18:34 2008-01-9 Show GitHub Exploit DB Packet Storm
230813 4.3 警告 WordPress.org - WordPress 用の Math Comment Spam Protection プラグインにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2008-0204 2012-12-20 18:34 2008-01-9 Show GitHub Exploit DB Packet Storm
230814 4.3 警告 WordPress.org - WordPress 用の Cryptographp プラグインにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2008-0203 2012-12-20 18:34 2008-01-9 Show GitHub Exploit DB Packet Storm
230815 5 警告 pro search - PRO-Search におけるサービス運用妨害 (DoS) の脆弱性 CWE-20
不適切な入力確認
CVE-2008-0199 2012-12-20 18:34 2008-01-9 Show GitHub Exploit DB Packet Storm
230816 4.3 警告 WordPress.org - WordPress 用の WP-ContactForm プラグインにおけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反
CVE-2008-0198 2012-12-20 18:34 2008-01-9 Show GitHub Exploit DB Packet Storm
230817 4.3 警告 WordPress.org - WordPress 用の WP-ContactForm プラグインにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2008-0197 2012-12-20 18:34 2008-01-9 Show GitHub Exploit DB Packet Storm
230818 5 警告 WordPress.org - WordPress におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル
CVE-2008-0196 2012-12-20 18:34 2008-01-9 Show GitHub Exploit DB Packet Storm
230819 5 警告 WordPress.org - WordPress における重要な情報を取得される脆弱性 CWE-200
情報漏えい
CVE-2008-0195 2012-12-20 18:34 2008-01-9 Show GitHub Exploit DB Packet Storm
230820 7.5 危険 WordPress.org - WordPress の wp-db-backup.php におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル
CVE-2008-0194 2012-12-20 18:34 2008-01-9 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 1, 2026, 4:12 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
209931 4.8 MEDIUM
Network
naviwebs navigatecms Cross Site Scripting (XSS) vulnerability in NavigateCMS NavigateCMS 2.9 via the name="wrong_path_redirect" feature. CWE-79
Cross-site Scripting
CVE-2020-23243 2024-11-21 14:13 2021-07-27 Show GitHub Exploit DB Packet Storm
209932 4.8 MEDIUM
Network
naviwebs navigatecms Cross Site Scripting (XSS) vulnerability in NavigateCMS 2.9 when performing a Create or Edit via the Tools feature. CWE-79
Cross-site Scripting
CVE-2020-23242 2024-11-21 14:13 2021-07-27 Show GitHub Exploit DB Packet Storm
209933 4.8 MEDIUM
Network
cmsmadesimple cms_made_simple Cross Site Scripting (XSS) vulnerability in CMS Made Simple 2.2.14 in "Extra" via 'News > Article" feature. CWE-79
Cross-site Scripting
CVE-2020-23241 2024-11-21 14:13 2021-07-27 Show GitHub Exploit DB Packet Storm
209934 4.8 MEDIUM
Network
cmsmadesimple cms_made_simple Cross Site Scripting (XSS) vulnerablity in CMS Made Simple 2.2.14 via the Logic field in the Content Manager feature. CWE-79
Cross-site Scripting
CVE-2020-23240 2024-11-21 14:13 2021-07-27 Show GitHub Exploit DB Packet Storm
209935 4.8 MEDIUM
Network
textpattern textpattern Cross Site Scripting (XSS) vulnerability in Textpattern CMS 4.8.1 via Custom fields in the Menu Preferences feature. CWE-79
Cross-site Scripting
CVE-2020-23239 2024-11-21 14:13 2021-07-27 Show GitHub Exploit DB Packet Storm
209936 5.4 MEDIUM
Network
evo evolution_cms Cross Site Scripting (XSS) vulnerability in Evolution CMS 2.0.2 via the Document Manager feature. CWE-79
Cross-site Scripting
CVE-2020-23238 2024-11-21 14:13 2021-07-27 Show GitHub Exploit DB Packet Storm
209937 4.8 MEDIUM
Network
lavalite lavalite Cross Site Scripting (XSS) vulnerabiity exists in LavaLite CMS 5.8.0 via the Menu Blocks feature, which can be bypassed by using HTML event handlers, such as "ontoggle,". CWE-79
Cross-site Scripting
CVE-2020-23234 2024-11-21 14:13 2021-07-27 Show GitHub Exploit DB Packet Storm
209938 7.5 HIGH
Network
lwip_project lwip A buffer overflow vulnerability in the zepif_linkoutput() function of Free Software Foundation lwIP git head version and version 2.1.2 allows attackers to access sensitive information via a crafted 6… CWE-120
Classic Buffer Overflow
CVE-2020-22284 2024-11-21 14:13 2021-07-23 Show GitHub Exploit DB Packet Storm
209939 7.5 HIGH
Network
lwip_project lwip A buffer overflow vulnerability in the icmp6_send_response_with_addrs_and_netif() function of Free Software Foundation lwIP version git head allows attackers to access sensitive information via a cra… CWE-120
Classic Buffer Overflow
CVE-2020-22283 2024-11-21 14:13 2021-07-23 Show GitHub Exploit DB Packet Storm
209940 6.1 MEDIUM
Network
piwigo piwigo A cross site scripting (XSS) vulnerability in /admin.php?page=permalinks of Piwigo 2.10.1 allows attackers to execute arbitrary web scripts or HTML. CWE-79
Cross-site Scripting
CVE-2020-22150 2024-11-21 14:13 2021-07-22 Show GitHub Exploit DB Packet Storm