Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 18, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
232081 6.9 警告 tkman - tkman の tkman における任意のファイルを上書きされる脆弱性 CWE-59
リンク解釈の問題 		CVE-2008-5137 2012-12-20 18:52 2008-11-18 Show GitHub Exploit DB Packet Storm
232082 4.3 警告 scripts4profit - Scripts4Profit DXShopCart の search.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2008-5119 2012-12-20 18:52 2008-11-17 Show GitHub Exploit DB Packet Storm
232083 4 警告 WordPress.org - WordPress におけるクロスサイトリクエストフォージェリ (CSRF) 攻撃を実行される脆弱性 CWE-352
同一生成元ポリシー違反 		CVE-2008-5113 2012-12-20 18:52 2008-11-17 Show GitHub Exploit DB Packet Storm
232084 4 警告 Zope Foundation - Zope の PythonScripts におけるサービス運用妨害 (DoS) の脆弱性 CWE-399
リソース管理の問題 		CVE-2008-5102 2012-12-20 18:52 2008-11-17 Show GitHub Exploit DB Packet Storm
232085 5 警告 TYPO3 Association - TYPO3 File List エクステンションにおける重要な情報を取得される脆弱性 CWE-200
情報漏えい 		CVE-2008-5096 2012-12-20 18:52 2008-11-14 Show GitHub Exploit DB Packet Storm
232086 7.5 危険 TYPO3 Association - TYPO3 Another Backend Login エクステンションにおける SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-5087 2012-12-20 18:52 2008-11-14 Show GitHub Exploit DB Packet Storm
232087 6.8 警告 scripts frenzy - E-Uploader Pro における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-5075 2012-12-20 18:52 2008-11-14 Show GitHub Exploit DB Packet Storm
232088 7.5 危険 PHP-Fusion - PHP-Fusion 用の Freshlinks モジュールにおける SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-5074 2012-12-20 18:52 2008-11-14 Show GitHub Exploit DB Packet Storm
232089 9 危険 yoxel - Yoxel の itpm_estimate.php における任意の PHP コードを実行される脆弱性 CWE-94
コード・インジェクション 		CVE-2008-5071 2012-12-20 18:52 2008-11-14 Show GitHub Exploit DB Packet Storm
232090 7.5 危険 Pro Chat Rooms - Pro Chat Rooms における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-5070 2012-12-20 18:52 2008-11-14 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 19, 2026, 4:01 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
210961 6.1 MEDIUM
Network 		coremail_xt_project coremail_xt jsp/upload.jsp in Coremail XT 5.0 allows XSS via an uploaded personal signature, as demonstrated by a .jpg.html filename in the signImgFile parameter. CWE-79
Cross-site Scripting 		CVE-2020-29133 2024-11-21 14:23 2020-11-27 Show GitHub Exploit DB Packet Storm
210962 5.4 MEDIUM
Network 		ericsson bscs_ix_r18_billing_\&_rating_mx
bscs_ix_r18_billing_\&_rating_admx 		In Ericsson BSCS iX R18 Billing & Rating iX R18, ADMX is a web base module in BSCS iX that is vulnerable to stored XSS via the name or description field to a solutionUnitServlet?SuName=UserReferenceD… CWE-79
Cross-site Scripting 		CVE-2020-29145 2024-11-21 14:23 2020-11-27 Show GitHub Exploit DB Packet Storm
210963 4.3 MEDIUM
Network 		libslirp_project
debian
fedoraproject 		libslirp
debian_linux
fedora 		slirp.c in libslirp through 4.3.1 has a buffer over-read because it tries to read a certain amount of header data even if that exceeds the total packet length. CWE-125
Out-of-bounds Read 		CVE-2020-29130 2024-11-21 14:23 2020-11-27 Show GitHub Exploit DB Packet Storm
210964 4.3 MEDIUM
Network 		libslirp_project
fedoraproject
debian 		libslirp
fedora
debian_linux 		ncsi.c in libslirp through 4.3.1 has a buffer over-read because it tries to read a certain amount of header data even if that exceeds the total packet length. CWE-125
Out-of-bounds Read 		CVE-2020-29129 2024-11-21 14:23 2020-11-27 Show GitHub Exploit DB Packet Storm
210965 7.5 HIGH
Network 		bigbluebutton bigbluebutton An issue was discovered in BigBlueButton through 2.2.29. When at attacker is able to view an account_activations/edit?token= URI, the attacker can create an approved user account associated with an e… CWE-200
Information Exposure 		CVE-2020-29043 2024-11-21 14:23 2020-11-27 Show GitHub Exploit DB Packet Storm
210966 3.7 LOW
Network 		bigbluebutton bigbluebutton An issue was discovered in BigBlueButton through 2.2.29. A brute-force attack may occur because an unlimited number of codes can be entered for a meeting that is protected by an access code. CWE-307
mproper Restriction of Excessive Authentication Attempts 		CVE-2020-29042 2024-11-21 14:23 2020-11-27 Show GitHub Exploit DB Packet Storm
210967 9.8 CRITICAL
Network 		petl_project petl petl before 1.68, in some configurations, allows resolution of entities in an XML document. CWE-91
Blind XPath Injection 		CVE-2020-29128 2024-11-21 14:23 2020-11-26 Show GitHub Exploit DB Packet Storm
210968 8.8 HIGH
Network 		x11vnc_project
fedoraproject
debian 		x11vnc
fedora
debian_linux 		scan.c in x11vnc 0.9.16 uses IPC_CREAT|0777 in shmget calls, which allows access by actors other than the current user. CWE-732
 Incorrect Permission Assignment for Critical Resource 		CVE-2020-29074 2024-11-21 14:23 2020-11-26 Show GitHub Exploit DB Packet Storm
210969 4.8 MEDIUM
Network 		oscommerce oscommerce osCommerce 2.3.4.1 has XSS vulnerability via the authenticated user entering the XSS payload into the title section of newsletters. CWE-79
Cross-site Scripting 		CVE-2020-29070 2024-11-21 14:23 2020-11-26 Show GitHub Exploit DB Packet Storm
210970 6.1 MEDIUM
Network 		liquidfiles liquidfiles A Cross-Site Script Inclusion vulnerability was found on LiquidFiles before 3.3.19. This client-side attack requires user interaction (opening a link) and successful exploitation could lead to encryp… CWE-829
 Inclusion of Functionality from Untrusted Control Sphere 		CVE-2020-29072 2024-11-21 14:23 2020-11-25 Show GitHub Exploit DB Packet Storm