Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 9, 2026, 4:11 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
231201 7.5 危険 scripts24 - Scripts24 iPost および iTGP の go.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2008-3491 2012-12-20 18:52 2008-08-6 Show GitHub Exploit DB Packet Storm
231202 7.5 危険 phpx - PHPX の includes/functions.inc.php の checkCookie 関数における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2008-3489 2012-12-20 18:52 2008-08-6 Show GitHub Exploit DB Packet Storm
231203 7.5 危険 phpauctions - PHPAuction GPL の profile.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2008-3487 2012-12-20 18:52 2008-08-6 Show GitHub Exploit DB Packet Storm
231204 4.3 警告 screwturn - ScrewTurn Wiki におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2008-3483 2012-12-20 18:52 2008-08-5 Show GitHub Exploit DB Packet Storm
231205 2.6 注意 The phpMyAdmin Project - phpMyAdmin におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2008-3457 2012-12-20 18:52 2008-07-28 Show GitHub Exploit DB Packet Storm
231206 6.4 警告 The phpMyAdmin Project - phpMyAdmin におけるなりすましされる脆弱性 CWE-59
リンク解釈の問題
CVE-2008-3456 2012-12-20 18:52 2008-07-28 Show GitHub Exploit DB Packet Storm
231207 4 警告 phpwebgallery - PhpWebGallery における他のユーザの電子メールアドレスを取得される脆弱性 CWE-200
情報漏えい
CVE-2008-3451 2012-12-20 18:52 2008-08-4 Show GitHub Exploit DB Packet Storm
231208 7.5 危険 phpmyrealty - PMR の index.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2008-3445 2012-12-20 18:52 2008-08-4 Show GitHub Exploit DB Packet Storm
231209 7.5 危険 winzip - WinZip における任意のコードを実行される脆弱性 CWE-94
コード・インジェクション
CVE-2008-3442 2012-12-20 18:52 2008-08-1 Show GitHub Exploit DB Packet Storm
231210 7.5 危険 サン・マイクロシステムズ - Sun Java における任意のコードを実行される脆弱性 CWE-94
コード・インジェクション
CVE-2008-3440 2012-12-20 18:52 2008-08-1 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 9, 2026, 4:16 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
213321 7.5 HIGH
Network
coreftp core_ftp Buffer overflow vulnerability in Core FTP Server v2 Build 697, via a crafted username. CWE-120
Classic Buffer Overflow
CVE-2020-19595 2024-11-21 14:09 2021-04-6 Show GitHub Exploit DB Packet Storm
213322 5.4 MEDIUM
Network
mblog_project mblog Cross Site Scripting (XSS) vulnerability in mblog 3.5 via the signature field to /settings/profile. CWE-79
Cross-site Scripting
CVE-2020-19619 2024-11-21 14:09 2021-04-2 Show GitHub Exploit DB Packet Storm
213323 5.4 MEDIUM
Network
mblog_project mblog Cross Site Scripting (XSS) vulnerability in mblog 3.5 via the post content field to /post/editing. CWE-79
Cross-site Scripting
CVE-2020-19618 2024-11-21 14:09 2021-04-2 Show GitHub Exploit DB Packet Storm
213324 5.4 MEDIUM
Network
mblog_project mblog Cross Site Scripting (XSS) vulnerability in mblog 3.5 via the nickname field to /settings/profile. CWE-79
Cross-site Scripting
CVE-2020-19617 2024-11-21 14:09 2021-04-2 Show GitHub Exploit DB Packet Storm
213325 5.4 MEDIUM
Network
mblog_project mblog Cross Site Scripting (XSS) vulnerability in mblog 3.5 via the post header field to /post/editing. CWE-79
Cross-site Scripting
CVE-2020-19616 2024-11-21 14:09 2021-04-2 Show GitHub Exploit DB Packet Storm
213326 7.5 HIGH
Network
flycms_project flycms Server Side Request Forgery (SSRF) vulnerability in saveUrlAs function in ImagesService.java in sunkaifei FlyCMS version 20190503. CWE-918
Server-Side Request Forgery (SSRF) 
CVE-2020-19613 2024-11-21 14:09 2021-04-2 Show GitHub Exploit DB Packet Storm
213327 6.1 MEDIUM
Network
insma wifi_mini_spy_1080p_hd_security_ip_camera_firmware Cross Site Scripting (XSS) vulnerability in INSMA Wifi Mini Spy 1080P HD Security IP Camera 1.9.7 B via all fields in the FTP settings page to the "goform/formSetFtpCfg" settings page. CWE-79
Cross-site Scripting
CVE-2020-19643 2024-11-21 14:09 2021-03-30 Show GitHub Exploit DB Packet Storm
213328 6.2 MEDIUM
Physics
insma wifi_mini_spy_1080p_hd_security_ip_camera_firmware An issue was discovered in INSMA Wifi Mini Spy 1080P HD Security IP Camera 1.9.7 B. A local attacker can execute arbitrary code via editing the 'recdata.db' file to call a specially crafted GoAhead A… CWE-434
 Unrestricted Upload of File with Dangerous Type 
CVE-2020-19642 2024-11-21 14:09 2021-03-30 Show GitHub Exploit DB Packet Storm
213329 8.8 HIGH
Network
insma wifi_mini_spy_1080p_hd_security_ip_camera_firmware An issue was discovered in INSMA Wifi Mini Spy 1080P HD Security IP Camera 1.9.7 B. Authenticated attackers with the "Operator" Privilege can gain admin privileges via a crafted request to '/goform/f… NVD-CWE-Other
CVE-2020-19641 2024-11-21 14:09 2021-03-30 Show GitHub Exploit DB Packet Storm
213330 7.5 HIGH
Network
insma wifi_mini_spy_1080p_hd_security_ip_camera_firmware An issue was discovered in INSMA Wifi Mini Spy 1080P HD Security IP Camera 1.9.7 B. An unauthenticated attacker can reboot the device causing a Denial of Service, via a hidden reboot command to '/med… NVD-CWE-noinfo
CVE-2020-19640 2024-11-21 14:09 2021-03-30 Show GitHub Exploit DB Packet Storm