Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 16, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
246741 7.5 危険 CKEditor Team
phpList		 - FCKeditor の editor/filemanager/browser/default/connectors/php/connector.php における任意のコードを実行される脆弱性 CWE-94
コード・インジェクション 		CVE-2008-6178 2012-06-26 16:10 2009-02-19 Show GitHub Exploit DB Packet Storm
246742 4.3 警告 clip-share - ClipShare の fullscreen.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2008-6173 2012-06-26 16:10 2009-02-19 Show GitHub Exploit DB Packet Storm
246743 6.8 警告 easy-script - CSPartner の gestion.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-6165 2012-06-26 16:10 2009-02-18 Show GitHub Exploit DB Packet Storm
246744 4.3 警告 dreamcost - DreamCost HostAdmin の index.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2008-6164 2012-06-26 16:10 2009-02-20 Show GitHub Exploit DB Packet Storm
246745 7.5 危険 bux - Bux.to Clone スクリプトにおける管理アクセス権を取得される脆弱性 CWE-287
不適切な認証 		CVE-2008-6162 2012-06-26 16:10 2009-02-20 Show GitHub Exploit DB Packet Storm
246746 6.5 警告 formfields - AdMan の editCampaign.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-6156 2012-06-26 16:10 2009-02-16 Show GitHub Exploit DB Packet Storm
246747 5 警告 aspapp - ForumApp におけるデータベースをダウンロードされる脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2008-6147 2012-06-26 16:10 2009-02-16 Show GitHub Exploit DB Packet Storm
246748 6.8 警告 deluxebb - DeluxeBB の pm.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-6146 2012-06-26 16:10 2009-02-16 Show GitHub Exploit DB Packet Storm
246749 7.5 危険 china-on-site - FlexPHPic の admin/usercheck.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-6142 2012-06-26 16:10 2009-02-16 Show GitHub Exploit DB Packet Storm
246750 6.8 警告 brickhost - phpScheduleIt の reserve.php における任意の PHP コードを実行される脆弱性 CWE-94
コード・インジェクション 		CVE-2008-6132 2012-06-26 16:10 2009-02-13 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 16, 2026, 4:13 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
219231 5.5 MEDIUM
Local 		canonical whoopsie In whoopsie, parse_report() from whoopsie.c allows a local attacker to cause a denial of service via a crafted file. The DoS is caused by resource exhaustion due to a memory leak. Fixed in 0.2.52.5ub… CWE-401
 Missing Release of Memory after Effective Lifetime 		CVE-2020-11937 2024-11-21 13:58 2020-08-7 Show GitHub Exploit DB Packet Storm
219232 6.1 MEDIUM
Network 		plesk onyx A GET-based XSS reflected vulnerability in Plesk Onyx 17.8.11 allows remote unauthenticated users to inject arbitrary JavaScript, HTML, or CSS via a GET parameter. CWE-79
Cross-site Scripting 		CVE-2020-11584 2024-11-21 13:58 2020-08-4 Show GitHub Exploit DB Packet Storm
219233 6.1 MEDIUM
Network 		plesk obsidian A GET-based XSS reflected vulnerability in Plesk Obsidian 18.0.17 allows remote unauthenticated users to inject arbitrary JavaScript, HTML, or CSS via a GET parameter. CWE-79
Cross-site Scripting 		CVE-2020-11583 2024-11-21 13:58 2020-08-4 Show GitHub Exploit DB Packet Storm
219234 5.9 MEDIUM
Local 		canonical ubuntu_linux It was discovered that snapctl user-open allowed altering the $XDG_DATA_DIRS environment variable when calling the system xdg-open. OpenURL() in usersession/userd/launcher.go would alter $XDG_DATA_DI… CWE-668
 Exposure of Resource to Wrong Sphere 		CVE-2020-11934 2024-11-21 13:58 2020-07-30 Show GitHub Exploit DB Packet Storm
219235 6.8 MEDIUM
Physics 		canonical ubuntu_linux
snapd 		cloud-init as managed by snapd on Ubuntu Core 16 and Ubuntu Core 18 devices was run without restrictions on every boot, which a physical attacker could exploit by crafting cloud-init user-data/meta-d… NVD-CWE-Other
CVE-2020-11933 2024-11-21 13:58 2020-07-30 Show GitHub Exploit DB Packet Storm
219236 5.3 MEDIUM
Network 		avertx hd838_firmware
hd438_firmware 		An issue was discovered in AvertX Auto focus Night Vision HD Indoor/Outdoor IP Dome Camera HD838 and Night Vision HD Indoor/Outdoor Mini IP Bullet Camera HD438. Failed web UI login attempts elicit di… CWE-203
 Information Exposure Through Discrepancy 		CVE-2020-11625 2024-11-21 13:58 2020-07-24 Show GitHub Exploit DB Packet Storm
219237 9.8 CRITICAL
Network 		avertx hd838_firmware
hd438_firmware 		An issue was discovered in AvertX Auto focus Night Vision HD Indoor/Outdoor IP Dome Camera HD838 and Night Vision HD Indoor/Outdoor Mini IP Bullet Camera HD438. They do not require users to change th… CWE-521
Weak Password Requirements  		CVE-2020-11624 2024-11-21 13:58 2020-07-24 Show GitHub Exploit DB Packet Storm
219238 6.8 MEDIUM
Physics 		avertx hd838_firmware
hd438_firmware 		An issue was discovered in AvertX Auto focus Night Vision HD Indoor/Outdoor IP Dome Camera HD838 and Night Vision HD Indoor/Outdoor Mini IP Bullet Camera HD438. An attacker with physical access to th… NVD-CWE-noinfo
CVE-2020-11623 2024-11-21 13:58 2020-07-24 Show GitHub Exploit DB Packet Storm
219239 9.8 CRITICAL
Network 		superwebmailer superwebmailer SuperWebMailer 7.21.0.01526 is susceptible to a remote code execution vulnerability in the Language parameter of mailingupgrade.php. An unauthenticated remote attacker can exploit this behavior to ex… CWE-94
Code Injection 		CVE-2020-11546 2024-11-21 13:58 2020-07-15 Show GitHub Exploit DB Packet Storm
219240 7.8 HIGH
Local 		gog galaxy In GOG Galaxy 1.2.67, there is a service that is vulnerable to weak file/service permissions: GalaxyClientService.exe. An attacker can put malicious code in a Trojan horse GalaxyClientService.exe. Af… CWE-732
 Incorrect Permission Assignment for Critical Resource 		CVE-2020-11827 2024-11-21 13:58 2020-07-15 Show GitHub Exploit DB Packet Storm