Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":June 24, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
232511	7.5	危険	xecms	-	xeCMS の admin.php における認証を回避される脆弱性	CWE-287 不適切な認証	CVE-2008-6714	2012-12-20 19:10	2009-04-10	Show	GitHub Exploit DB Packet Storm

232512	5	警告	stalker-game	-	S.T.A.L.K.E.R.: Shadow of Chernobyl の MultipacketReciever::RecievePacket 関数におけるサービス運用妨害 (DoS) の脆弱性	CWE-Other その他	CVE-2008-6705	2012-12-20 19:10	2009-04-10	Show	GitHub Exploit DB Packet Storm

232513	5	警告	stalker-game	-	S.T.A.L.K.E.R.: Shadow of Chernobyl の NET_Compressor::Decompress 関数における整数オーバーフローの脆弱性	CWE-189 数値処理の問題	CVE-2008-6704	2012-12-20 19:10	2009-04-10	Show	GitHub Exploit DB Packet Storm

232514	10	危険	stalker-game	-	S.T.A.L.K.E.R.: Shadow of Chernobyl の IPureServer::_Recieve 関数におけるスタックベースのバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2008-6703	2012-12-20 19:10	2009-04-10	Show	GitHub Exploit DB Packet Storm

232515	5	警告	stalker-game	-	S.T.A.L.K.E.R.: Shadow of Chernobyl におけるサービス運用妨害 (DoS) の脆弱性	CWE-20 不適切な入力確認	CVE-2008-6702	2012-12-20 19:10	2009-04-10	Show	GitHub Exploit DB Packet Storm

232516	4.3	警告	TYPO3 Association	-	TYPO3 用の tjs_reslib エクステンションにおけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2008-6699	2012-12-20 19:10	2009-04-10	Show	GitHub Exploit DB Packet Storm

232517	7.5	危険	sebastian baumann	-	TYPO3 用の Download system エクステンションにおける SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2008-6693	2012-12-20 19:10	2009-04-10	Show	GitHub Exploit DB Packet Storm

232518	7.5	危険	TYPO3 Association	-	TYPO3 用の nd_antispam エクステンションにおける設定を変更される脆弱性	CWE-noinfo 情報不足	CVE-2008-6690	2012-12-20 19:10	2009-04-10	Show	GitHub Exploit DB Packet Storm

232519	7.5	危険	thomas waggershauser	-	TYPO3 用の Frontend Filemanager エクステンションにおける任意のコマンドを実行される脆弱性	CWE-noinfo 情報不足	CVE-2008-6685	2012-12-20 19:10	2009-04-10	Show	GitHub Exploit DB Packet Storm

232520	6.8	警告	YourFreeWorld.com	-	Apartment Search Script の editimage.php における任意のコードを実行される脆弱性	CWE-20 不適切な入力確認	CVE-2008-6684	2012-12-20 19:10	2009-04-10	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:June 24, 2026, 4 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
211171	7.8	HIGH Local	siemens	simaris_configuration	A vulnerability has been identified in SIMARIS configuration (All versions < V4.0.1). During installation to default target folder, incorrect permissions are configured for the application folder and…	-	CVE-2020-28392	2024-11-21 14:22	2021-02-10	Show	GitHub Exploit DB Packet Storm

211172	5.3	MEDIUM Network	siemens	nucleus_source_code nucleus_net capital_vstar pluscontrol_1st_gen nucleus_readystart	A vulnerability has been identified in APOGEE PXC Compact (BACnet) (All versions < V3.5.5), APOGEE PXC Compact (P2 Ethernet) (All versions < V2.8.20), APOGEE PXC Modular (BACnet) (All versions < V3.5…	NVD-CWE-Other	CVE-2020-28388	2024-11-21 14:22	2021-02-10	Show	GitHub Exploit DB Packet Storm

211173	8.6	HIGH Network	decal_project	decal	This affects all versions of package decal. The vulnerability is in the extend function.	NVD-CWE-Other	CVE-2020-28450	2024-11-21 14:22	2021-02-5	Show	GitHub Exploit DB Packet Storm

211174	8.6	HIGH Network	decal_project	decal	This affects all versions of package decal. The vulnerability is in the set function.	NVD-CWE-Other	CVE-2020-28449	2024-11-21 14:22	2021-02-5	Show	GitHub Exploit DB Packet Storm

211175	5.4	MEDIUM Network	solarwinds	serv-u	SolarWinds Serv-U before 15.2.2 allows Authenticated Stored XSS.	CWE-79 Cross-site Scripting	CVE-2020-28001	2024-11-21 14:22	2021-02-4	Show	GitHub Exploit DB Packet Storm

211176	6.5	MEDIUM Network	solarwinds	serv-u	SolarWinds Serv-U before 15.2.2 allows Authenticated Directory Traversal.	CWE-22 Path Traversal	CVE-2020-27994	2024-11-21 14:22	2021-02-4	Show	GitHub Exploit DB Packet Storm

211177	9.8	CRITICAL Network	moxa	edr-g903_firmware edr-g903-t_firmware edr-g902_firmware edr-g902-t_firmware edr-810-2gsfp_firmware edr-810-2gsfp-t_firmware edr-810-vpn-2gsfp_firmware edr-810-vpn-2gsfp-t_firmware	Certain Moxa Inc products are affected by an improper restriction of operations in EDR-G903 Series Firmware Version 5.5 or lower, EDR-G902 Series Firmware Version 5.5 or lower, and EDR-810 Series Fir…	CWE-119 Incorrect Access of Indexable Resource ('Range Error')	CVE-2020-28144	2024-11-21 14:22	2021-02-3	Show	GitHub Exploit DB Packet Storm

211178	6.8	MEDIUM Network	indutny	elliptic	The package elliptic before 6.5.4 are vulnerable to Cryptographic Issues via the secp256k1 implementation in elliptic/ec/key.js. There is no check to confirm that the public key point passed into the…	CWE-327 Use of a Broken or Risky Cryptographic Algorithm	CVE-2020-28498	2024-11-21 14:22	2021-02-3	Show	GitHub Exploit DB Packet Storm

211179	7.3	HIGH Network	totaljs	total.js	This affects the package total.js before 3.4.7. The set function can be used to set a value into the object according to the path. However the keys of the path being set are not properly sanitized, l…	NVD-CWE-Other	CVE-2020-28495	2024-11-21 14:22	2021-02-2	Show	GitHub Exploit DB Packet Storm

211180	8.6	HIGH Network	totaljs	total.js	This affects the package total.js before 3.4.7. The issue occurs in the image.pipe and image.stream functions. The type parameter is used to build the command that is then executed using child_proces…	CWE-78 OS Command	CVE-2020-28494	2024-11-21 14:22	2021-02-2	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed