Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 10, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
231801 7.5 危険 pixel motion - Blog Pixel Motion における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-1867 2012-12-20 18:52 2008-04-17 Show GitHub Exploit DB Packet Storm
231802 9 危険 pixel motion - Blog Pixel Motion の admin/modif_config.php における任意の PHP スクリプトをアップロードされる脆弱性 CWE-94
コード・インジェクション 		CVE-2008-1866 2012-12-20 18:52 2008-04-17 Show GitHub Exploit DB Packet Storm
231803 7.5 危険 prozilla - Prozilla Freelancers の project.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-1864 2012-12-20 18:52 2008-04-17 Show GitHub Exploit DB Packet Storm
231804 7.5 危険 prozilla - Prozilla Cheat Script の view_reviews.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-1863 2012-12-20 18:52 2008-04-17 Show GitHub Exploit DB Packet Storm
231805 5 警告 SmarterTools Inc. - SmarterMail の SmarterMail Web Server におけるサービス運用妨害 (DoS) の脆弱性 CWE-DesignError
CVE-2008-1854 2012-12-20 18:52 2008-04-16 Show GitHub Exploit DB Packet Storm
231806 4.3 警告 SAP - SAP NetWeaver のデフォルト設定におけるクロスサイトスクリプティング攻撃を実行される脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2008-1846 2012-12-20 18:52 2008-04-16 Show GitHub Exploit DB Packet Storm
231807 7.5 危険 w2b - W2B phpHotResources の cat.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-1844 2012-12-20 18:52 2008-04-16 Show GitHub Exploit DB Packet Storm
231808 7.5 危険 w2b - W2B DatingClub の browse.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-1843 2012-12-20 18:52 2008-04-16 Show GitHub Exploit DB Packet Storm
231809 4.3 警告 work system e-commerce - WORK system e-commerce の module/main.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2008-1839 2012-12-20 18:52 2008-04-16 Show GitHub Exploit DB Packet Storm
231810 4.3 警告 swfdec - Swfdec の swfdec_load_object.c における任意のファイルを読まれる脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2008-1834 2012-12-20 18:52 2008-04-16 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 10, 2026, 5 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
210891 6.1 MEDIUM
Network 		touchbase.ai_project touchbase.ai touchbase.ai before version 2.0 is vulnerable to Open Redirect. Impacts can be many, and vary from theft of information and credentials, to the redirection to malicious websites containing attacker-c… - CVE-2020-26219 2024-11-21 14:19 2020-11-12 Show GitHub Exploit DB Packet Storm
210892 6.1 MEDIUM
Network 		touchbase.ai_project touchbase.ai touchbase.ai before version 2.0 is vulnerable to Cross-Site Scripting. The vulnerability allows an attacker to inject HTML payloads which could result in defacement, user redirection to a malicious w… - CVE-2020-26218 2024-11-21 14:19 2020-11-12 Show GitHub Exploit DB Packet Storm
210893 8.6 HIGH
Network 		cisco ios_xr A vulnerability in the ingress packet processing function of Cisco IOS XR Software for Cisco ASR 9000 Series Aggregation Services Routers could allow an unauthenticated, remote attacker to cause a de… CWE-404
 Improper Resource Shutdown or Release 		CVE-2020-26070 2024-11-21 14:19 2020-11-12 Show GitHub Exploit DB Packet Storm
210894 9.8 CRITICAL
Network 		hazelcast hazelcast
jet 		The LDAP authentication method in LdapLoginModule in Hazelcast IMDG Enterprise 4.x before 4.0.3, and Jet Enterprise 4.x through 4.2, doesn't verify properly the password in some system-user-dn scenar… CWE-287
Improper Authentication 		CVE-2020-26168 2024-11-21 14:19 2020-11-10 Show GitHub Exploit DB Packet Storm
210895 6.5 MEDIUM
Network 		cisco edge_fog_fabric A vulnerability in the REST API of Cisco Edge Fog Fabric could allow an authenticated, remote attacker to access files outside of their authorization sphere on an affected device. The vulnerability i… CWE-668
 Exposure of Resource to Wrong Sphere 		CVE-2020-26084 2024-11-21 14:19 2020-11-7 Show GitHub Exploit DB Packet Storm
210896 7.5 HIGH
Network 		teler_project teler In teler before version 0.0.1, if you run teler inside a Docker container and encounter `errors.Exit` function, it will cause denial-of-service (`SIGSEGV`) because it doesn't get process ID and proce… - CVE-2020-26213 2024-11-21 14:19 2020-11-7 Show GitHub Exploit DB Packet Storm
210897 4.3 MEDIUM
Network 		cisco telepresence_collaboration_endpoint A vulnerability in the video endpoint API (xAPI) of Cisco TelePresence Collaboration Endpoint (CE) Software could allow an authenticated, remote attacker to gain access to sensitive information on an… CWE-668
 Exposure of Resource to Wrong Sphere 		CVE-2020-26086 2024-11-21 14:19 2020-11-7 Show GitHub Exploit DB Packet Storm
210898 4.8 MEDIUM
Network 		cisco identity_services_engine A vulnerability in the web-based management interface of Cisco Identity Services Engine (ISE) could allow an authenticated, remote attacker with administrative credentials to conduct a cross-site scr… CWE-79
Cross-site Scripting 		CVE-2020-26083 2024-11-21 14:19 2020-11-7 Show GitHub Exploit DB Packet Storm
210899 9.8 CRITICAL
Network 		alerta_project alerta In Alerta before version 8.1.0, users may be able to bypass LDAP authentication if they provide an empty password when Alerta server is configure to use LDAP as the authorization provider. Only deplo… - CVE-2020-26214 2024-11-21 14:19 2020-11-7 Show GitHub Exploit DB Packet Storm
210900 7.5 HIGH
Network 		linuxfoundation
fedoraproject 		nats-server
fedora 		The JWT library in NATS nats-server before 2.1.9 allows a denial of service (a nil dereference in Go code). CWE-476
 NULL Pointer Dereference 		CVE-2020-26521 2024-11-21 14:19 2020-11-6 Show GitHub Exploit DB Packet Storm