Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 31, 2026, noon

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
245841	7.5	危険	Mambo Foundation arthur konze webdesign Joomla!	-	Mambo の akogallery beta コンポーネントの index.php における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2008-0561	2012-06-26 15:55	2008-02-4	Show	GitHub Exploit DB Packet Storm

245842	4.3	警告	eticket	-	eTicket の index.php におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2008-0552	2012-06-26 15:55	2008-02-1	Show	GitHub Exploit DB Packet Storm

245843	7.5	危険	bubbling library	-	Bubbling Library におけるディレクトリトラバーサルの脆弱性	CWE-22 パス・トラバーサル	CVE-2008-0545	2012-06-26 15:55	2008-02-1	Show	GitHub Exploit DB Packet Storm

245844	5	警告	gerd tentler	-	Gerd Tentler Simple Forum の thumbnail.php におけるディレクトリトラバーサルの脆弱性	CWE-22 パス・トラバーサル	CVE-2008-0542	2012-06-26 15:55	2008-02-1	Show	GitHub Exploit DB Packet Storm

245845	4.3	警告	gerd tentler	-	Gerd Tentler Simple Forum の forum.php におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2008-0541	2012-06-26 15:55	2008-02-1	Show	GitHub Exploit DB Packet Storm

245846	4.3	警告	F5 Networks	-	F5 BIG-IP ASM の dms/policy/rep_request.php におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2008-0539	2012-06-26 15:55	2008-02-1	Show	GitHub Exploit DB Packet Storm

245847	5	警告	bubbling library	-	Bubbling Library におけるディレクトリトラバーサルの脆弱性	CWE-22 パス・トラバーサル	CVE-2008-0521	2012-06-26 15:55	2008-01-31	Show	GitHub Exploit DB Packet Storm

245848	7.5	危険	Mambo Foundation Joomla! darko selesi	-	Mambo 用および Joomla! 用の Darko Selesi EstateAgent コンポーネントの index.php における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2008-0517	2012-06-26 15:55	2008-01-31	Show	GitHub Exploit DB Packet Storm

245849	6.8	警告	Coppermine Photo Gallery	-	CPG の include/imageObjectIM.class.php における任意のコマンドを実行される脆弱性	CWE-20 不適切な入力確認	CVE-2008-0506	2012-06-26 15:55	2008-01-31	Show	GitHub Exploit DB Packet Storm

245850	4.3	警告	Coppermine Photo Gallery	-	CPG の docs/showdoc.php におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2008-0505	2012-06-26 15:55	2008-01-31	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 31, 2026, 4:16 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
218421	6.1	MEDIUM Network	telos	automated_message_handling_system	: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in prefs.asp of Telos Automated Message Handling System allows a remote attacker to inject arbitra…	CWE-79 Cross-site Scripting	CVE-2019-9540	2024-11-21 13:51	2020-01-4	Show	GitHub Exploit DB Packet Storm

218422	6.1	MEDIUM Network	telos	automated_message_handling_system	: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in ModalWindowPopup.asp of Telos Automated Message Handling System allows a remote attacker to inj…	CWE-79 Cross-site Scripting	CVE-2019-9539	2024-11-21 13:51	2020-01-4	Show	GitHub Exploit DB Packet Storm

218423	6.1	MEDIUM Network	telos	automated_message_handling_system	: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in the LDAP cbURL parameter of Telos Automated Message Handling System allows a remote attacker to…	CWE-79 Cross-site Scripting	CVE-2019-9538	2024-11-21 13:51	2020-01-4	Show	GitHub Exploit DB Packet Storm

218424	6.1	MEDIUM Network	telos	automated_message_handling_system	: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in uploaditem.asp of Telos Automated Message Handling System allows a remote attacker to inject ar…	CWE-79 Cross-site Scripting	CVE-2019-9537	2024-11-21 13:51	2020-01-4	Show	GitHub Exploit DB Packet Storm

218425	5.4	MEDIUM Network	fiberhomegroup	an5506-04-f_firmware	FiberHome an5506-04-f RP2669 devices have XSS.	CWE-79 Cross-site Scripting	CVE-2019-9556	2024-11-21 13:51	2020-01-1	Show	GitHub Exploit DB Packet Storm

218426	6.1	MEDIUM Network	craftcms	craft_cms	In the 3.1.12 Pro version of Craft CMS, XSS has been discovered in the header insertion field when adding source code at an s/admin/entries/news/new URI.	CWE-79 Cross-site Scripting	CVE-2019-9554	2024-11-21 13:51	2020-01-1	Show	GitHub Exploit DB Packet Storm

218427	6.1	MEDIUM Network	boltcms	bolt	Bolt 3.6.4 has XSS via the slug, teaser, or title parameter to editcontent/pages, a related issue to CVE-2017-11128 and CVE-2018-19933.	CWE-79 Cross-site Scripting	CVE-2019-9553	2024-11-21 13:51	2020-01-1	Show	GitHub Exploit DB Packet Storm

218428	6.1	MEDIUM Network	paessler	prtg_network_monitor	PRTG Network Monitor v7.1.3.3378 allows XSS via the /search.htm searchtext parameter. NOTE: This product is discontinued.	CWE-79 Cross-site Scripting	CVE-2019-9207	2024-11-21 13:51	2020-01-1	Show	GitHub Exploit DB Packet Storm

218429	6.1	MEDIUM Network	paessler	prtg_network_monitor	PRTG Network Monitor v7.1.3.3378 allows XSS via the /public/login.htm errormsg or loginurl parameter. NOTE: This product is discontinued.	CWE-79 Cross-site Scripting	CVE-2019-9206	2024-11-21 13:51	2020-01-1	Show	GitHub Exploit DB Packet Storm

218430	8.8	HIGH Network	unity3d	unity_editor	The com.unity3d.kharma protocol handler in Unity Editor 2018.3 allows remote attackers to execute arbitrary code.	CWE-78 OS Command	CVE-2019-9197	2024-11-21 13:51	2020-01-1	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed