Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":June 13, 2026, 4 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
232011	7.5	危険	TYPO3 Association	-	TYPO3 用の Address Directory エクステンションにおける SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2008-3038	2012-12-20 18:52	2008-07-7	Show	GitHub Exploit DB Packet Storm

232012	4.3	警告	TYPO3 Association	-	TYPO3 用の Address Directory エクステンションにおけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2008-3037	2012-12-20 18:52	2008-07-7	Show	GitHub Exploit DB Packet Storm

232013	6.5	警告	xchangeboard	-	XchangeBoard の newThread.php における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2008-3035	2012-12-20 18:52	2008-07-7	Show	GitHub Exploit DB Packet Storm

232014	7.5	危険	rss aggregator	-	RSS-aggregator における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2008-3034	2012-12-20 18:52	2008-07-7	Show	GitHub Exploit DB Packet Storm

232015	9.3	危険	rss aggregator	-	RSS-aggregator における admin 関数へアクセスされ脆弱性	CWE-287 不適切な認証	CVE-2008-3033	2012-12-20 18:52	2008-07-7	Show	GitHub Exploit DB Packet Storm

232016	4.3	警告	The phpMyAdmin Project	-	TYPO3 用の phpMyAdmin エクステンションにおけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2008-3032	2012-12-20 18:52	2008-07-7	Show	GitHub Exploit DB Packet Storm

232017	7.5	危険	Thomas Abeel	-	Simple PHP Agenda の index.php におけるディレクトリトラバーサルの脆弱性	CWE-22 パス・トラバーサル	CVE-2008-3031	2012-12-20 18:52	2008-07-7	Show	GitHub Exploit DB Packet Storm

232018	4.3	警告	Web-Empowered Church Team	-	TYPO3 用の WEC Discussion Forum エクステンションにおけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2008-3029	2012-12-20 18:52	2008-07-7	Show	GitHub Exploit DB Packet Storm

232019	4.3	警告	TYPO3 Association	-	TYPO3 用の Send-A-Card エクステンションにおけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2008-3028	2012-12-20 18:52	2008-07-7	Show	GitHub Exploit DB Packet Storm

232020	7.5	危険	vangogh web cms	-	VanGogh Web CMS の get_article.php における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2008-3027	2012-12-20 18:52	2008-07-7	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:June 13, 2026, 4:20 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
210921	7.5	HIGH Network	os4ed	opensis	OpenSIS Community Edition through 7.6 is affected by incorrect access controls for the file ResetUserInfo.php that allow an unauthenticated attacker to change the password of arbitrary users.	CWE-287 CWE-640 Improper Authentication Weak Password Recovery Mechanism for Forgotten Password	CVE-2020-27408	2024-11-21 14:21	2020-12-5	Show	GitHub Exploit DB Packet Storm

210922	3.3	LOW Local	imagemagick redhat debian	imagemagick enterprise_linux debian_linux	In RestoreMSCWarning() of /coders/pdf.c there are several areas where calls to GetPixelIndex() could result in values outside the range of representable for the unsigned char type. The patch casts th…	CWE-190 Integer Overflow or Wraparound	CVE-2020-27771	2024-11-21 14:21	2020-12-5	Show	GitHub Exploit DB Packet Storm

210923	5.5	MEDIUM Local	imagemagick debian	imagemagick debian_linux	Due to a missing check for 0 value of `replace_extent`, it is possible for offset `p` to overflow in SubstituteString(), causing potential impact to application availability. This could be triggered …	CWE-190 Integer Overflow or Wraparound	CVE-2020-27770	2024-11-21 14:21	2020-12-5	Show	GitHub Exploit DB Packet Storm

210924	7.8	HIGH Local	imagemagick debian	imagemagick debian_linux	A flaw was found in ImageMagick in MagickCore/statistic.c. An attacker who submits a crafted file that is processed by ImageMagick could trigger undefined behavior in the form of values outside the r…	CWE-190 Integer Overflow or Wraparound	CVE-2020-27766	2024-11-21 14:21	2020-12-5	Show	GitHub Exploit DB Packet Storm

210925	3.3	LOW Local	imagemagick redhat debian	imagemagick enterprise_linux debian_linux	A flaw was found in ImageMagick in MagickCore/segment.c. An attacker who submits a crafted file that is processed by ImageMagick could trigger undefined behavior in the form of math division by zero.…	CWE-369 Divide By Zero	CVE-2020-27765	2024-11-21 14:21	2020-12-5	Show	GitHub Exploit DB Packet Storm

210926	3.3	LOW Local	imagemagick redhat debian	imagemagick enterprise_linux debian_linux	A flaw was found in ImageMagick in MagickCore/quantum.h. An attacker who submits a crafted file that is processed by ImageMagick could trigger undefined behavior in the form of values outside the ran…	CWE-190 Integer Overflow or Wraparound	CVE-2020-27767	2024-11-21 14:21	2020-12-5	Show	GitHub Exploit DB Packet Storm

210927	6.8	MEDIUM Local	canonical	snapcraft ubuntu_linux	In some conditions, a snap package built by snapcraft includes the current directory in LD_LIBRARY_PATH, allowing a malicious snap to gain code execution within the context of another snap if both pl…	CWE-427 Uncontrolled Search Path Element	CVE-2020-27348	2024-11-21 14:21	2020-12-4	Show	GitHub Exploit DB Packet Storm

210928	6.1	MEDIUM Network	lxml redhat debian fedoraproject netapp oracle	lxml enterprise_linux software_collections debian_linux fedora snapcenter communications_offline_mediation_controller zfs_storage_appliance_kit	A XSS vulnerability was discovered in python-lxml's clean module. The module's parser didn't properly imitate browsers, which caused different behaviors between the sanitizer and the user's page. A r…	-	CVE-2020-27783	2024-11-21 14:21	2020-12-4	Show	GitHub Exploit DB Packet Storm

210929	7.5	HIGH Network	freedesktop redhat debian	poppler enterprise_linux debian_linux	A flaw was found in Poppler in the way certain PDF files were converted into HTML. A remote attacker could exploit this flaw by providing a malicious PDF file that, when processed by the 'pdftohtml' …	CWE-824 Access of Uninitialized Pointer	CVE-2020-27778	2024-11-21 14:21	2020-12-4	Show	GitHub Exploit DB Packet Storm

210930	3.3	LOW Local	imagemagick debian	imagemagick debian_linux	In /MagickCore/statistic.c, there are several areas in ApplyEvaluateOperator() where a size_t cast should have been a ssize_t cast, which causes out-of-range values under some circumstances when a cr…	CWE-190 Integer Overflow or Wraparound	CVE-2020-27764	2024-11-21 14:21	2020-12-4	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed