Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":June 20, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
246711	7.5	危険	cmsbright	-	Websens CMSbright の public/page.php における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2008-6991	2012-06-26 16:10	2009-08-19	Show	GitHub Exploit DB Packet Storm

246712	7.5	危険	ezphotogallery	-	Ezphotogallery の gallery.php における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2008-6990	2012-06-26 16:10	2009-08-19	Show	GitHub Exploit DB Packet Storm

246713	7.5	危険	ezphotogallery	-	Ezphotogallery の gallery.php における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2008-6989	2012-06-26 16:10	2009-08-19	Show	GitHub Exploit DB Packet Storm

246714	4.3	警告	ezphotogallery	-	Ezphotogallery におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2008-6988	2012-06-26 16:10	2009-08-19	Show	GitHub Exploit DB Packet Storm

246715	7.5	危険	ezonescripts	-	eZoneScripts Dating Website script における任意のコードを実行される脆弱性	CWE-Other その他	CVE-2008-6987	2012-06-26 16:10	2009-08-19	Show	GitHub Exploit DB Packet Storm

246716	7.5	危険	devalcms	-	devalcms の modules/tool/hitcounter.php における PHP リモートファイルインクルージョンの脆弱性	CWE-94 コード・インジェクション	CVE-2008-6983	2012-06-26 16:10	2009-08-19	Show	GitHub Exploit DB Packet Storm

246717	4.3	警告	devalcms	-	devalcms の index.php におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2008-6982	2012-06-26 16:10	2009-08-19	Show	GitHub Exploit DB Packet Storm

246718	6.8	警告	fullrevolution	-	Full Revolution aspWebAlbum における任意のコードを実行される脆弱性	CWE-20 不適切な入力確認	CVE-2008-6978	2012-06-26 16:10	2009-08-19	Show	GitHub Exploit DB Packet Storm

246719	4.3	警告	fullrevolution	-	Full Revolution aspWebAlbum の album.asp におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2008-6977	2012-06-26 16:10	2009-08-19	Show	GitHub Exploit DB Packet Storm

246720	6.8	警告	dd-wrt	-	DD-WRT 24 sp2 の apply.cgi におけるクロスサイトリクエストフォージェリの脆弱性	CWE-352 同一生成元ポリシー違反	CVE-2008-6975	2012-06-26 16:10	2009-07-20	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:June 20, 2026, 4:01 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
218481	7.8	HIGH Local	win911	win-911	An exploitable local privilege elevation vulnerability exists in the file system permissions of the Win-911 Enterprise V4.20.13 install directory via WIN-911 Account Change Utility. Depending on the …	CWE-276 Incorrect Default Permissions	CVE-2020-13540	2024-11-21 14:01	2021-01-6	Show	GitHub Exploit DB Packet Storm

218482	7.8	HIGH Local	win911	win-911	An exploitable local privilege elevation vulnerability exists in the file system permissions of the Win-911 Enterprise V4.20.13 install directory via “WIN-911 Mobile Runtime” service. Depending on th…	CWE-276 Incorrect Default Permissions	CVE-2020-13539	2024-11-21 14:01	2021-01-6	Show	GitHub Exploit DB Packet Storm

218483	7.5	HIGH Network	xwiki	xwiki	XWiki Platform before 12.8 mishandles escaping in the property displayer.	CWE-116 Improper Encoding or Escaping of Output	CVE-2020-13654	2024-11-21 14:01	2020-12-31	Show	GitHub Exploit DB Packet Storm

218484	4.8	MEDIUM Network	nchsoftware	express_invoice	NCH Express Invoice 8.06 to 8.24 is vulnerable to Reflected XSS in the Quotes List module.	CWE-79 Cross-site Scripting	CVE-2020-13476	2024-11-21 14:01	2020-12-29	Show	GitHub Exploit DB Packet Storm

218485	6.5	MEDIUM Network	nchsoftware	express_accounts	In NCH Express Accounts 8.24 and earlier, an authenticated low-privilege user can enter a crafted URL to access higher-privileged functionalities such as Add/Edit users.	CWE-425 Direct Request ('Forced Browsing')	CVE-2020-13474	2024-11-21 14:01	2020-12-29	Show	GitHub Exploit DB Packet Storm

218486	5.5	MEDIUM Local	nchsoftware	express_accounts	NCH Express Accounts 8.24 and earlier allows local users to discover the cleartext password by reading the configuration file.	CWE-312 Cleartext Storage of Sensitive Information	CVE-2020-13473	2024-11-21 14:01	2020-12-29	Show	GitHub Exploit DB Packet Storm

218487	8.8	HIGH Network	foxitsoftware	foxit_reader	A type confusion vulnerability exists in the JavaScript engine of Foxit Software’s Foxit PDF Reader, version 10.1.0.37527. A specially crafted PDF document can trigger an improper use of an object, r…	CWE-787 CWE-843 Out-of-bounds Write Type Confusion	CVE-2020-13547	2024-11-21 14:01	2020-12-23	Show	GitHub Exploit DB Packet Storm

218488	8.8	HIGH Network	foxitsoftware	foxit_reader	A use-after-free vulnerability exists in the JavaScript engine of Foxit Software’s PDF Reader, version 10.1.0.37527. A specially crafted PDF document can trigger the reuse of previously free memory w…	CWE-416 Use After Free	CVE-2020-13570	2024-11-21 14:01	2020-12-23	Show	GitHub Exploit DB Packet Storm

218489	8.8	HIGH Network	foxitsoftware	foxit_reader	A use after free vulnerability exists in the JavaScript engine of Foxit Software’s Foxit PDF Reader, version 10.1.0.37527. A specially crafted PDF document can trigger reuse of previously free memory…	CWE-416 Use After Free	CVE-2020-13560	2024-11-21 14:01	2020-12-23	Show	GitHub Exploit DB Packet Storm

218490	8.8	HIGH Network	foxitsoftware	foxit_reader	A use after free vulnerability exists in the JavaScript engine of Foxit Software’s Foxit PDF Reader, version 10.1.0.37527. A specially crafted PDF document can trigger reuse of previously free memory…	CWE-416 Use After Free	CVE-2020-13557	2024-11-21 14:01	2020-12-23	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed