Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":June 11, 2026, 6:13 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
247071	7.5	危険	dream4	-	dream4 Koobi Pro の index.php における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2008-2036	2012-06-26 16:02	2008-04-30	Show	GitHub Exploit DB Packet Storm

247072	5	警告	acritum	-	Acritum Femitter Server の FTP サービスにおけるサービス運用妨害 (DoS) の脆弱性	CWE-20 不適切な入力確認	CVE-2008-2032	2012-06-26 16:02	2008-04-30	Show	GitHub Exploit DB Packet Storm

247073	4.3	警告	F5 Networks	-	F5 FirePass 4100 SSL VPN の installControl.php3 におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2008-2030	2012-06-26 16:02	2008-04-30	Show	GitHub Exploit DB Packet Storm

247074	6.8	警告	e107.org webze opendb labgab TorrentFlux PHPNUKE my123tkshop phpmybittorrent	-	Francisco Burzi PHP-Nuke などの製品で使用される CAPTCHA における CAPTCHA 検証を通過する脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2008-2020	2012-06-26 16:02	2008-04-29	Show	GitHub Exploit DB Packet Storm

247075	7.5	危険	chilkat software	-	Chilek Content Management System におけるディレクトリトラバーサルの脆弱性	CWE-22 パス・トラバーサル	CVE-2008-2017	2012-06-26 16:02	2008-04-29	Show	GitHub Exploit DB Packet Storm

247076	7.5	危険	chilkat software	-	Chilek Content Management System における PHP リモートファイルインクルージョンの脆弱性	CWE-94 コード・インジェクション	CVE-2008-2016	2012-06-26 16:02	2008-04-29	Show	GitHub Exploit DB Packet Storm

247077	9.3	危険	アップルマイクロソフト	-	Windows XP および Vista の Apple QuickTime Player における任意のコードを実行される脆弱性	CWE-noinfo 情報不足	CVE-2008-2010	2012-06-26 16:02	2008-04-29	Show	GitHub Exploit DB Packet Storm

247078	9.3	危険	Cerulean Studios	-	Cerulean Studios Trillian の Display Names メッセージ機能におけるバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2008-2008	2012-06-26 16:02	2008-04-29	Show	GitHub Exploit DB Packet Storm

247079	4.3	警告	アップル	-	Apple iCal におけるサービス運用妨害 (DoS) の脆弱性	CWE-20 不適切な入力確認	CVE-2008-2006	2012-06-26 16:02	2008-05-22	Show	GitHub Exploit DB Packet Storm

247080	7.5	危険	badblue	-	BadBlue Personal Edition におけるサービス運用妨害の脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2008-2003	2012-06-26 16:02	2008-04-28	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:June 12, 2026, 4:20 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
219851	8.8	HIGH Network	onthegosystems	sitepress-multilingual-cms	The sitepress-multilingual-cms (WPML) plugin before 4.3.7-b.2 for WordPress has CSRF due to a loose comparison. This leads to remote code execution in includes/class-wp-installer.php via a series of …	CWE-352 Origin Validation Error	CVE-2020-10568	2024-11-21 13:55	2020-03-14	Show	GitHub Exploit DB Packet Storm

219852	9.8	CRITICAL Network	tecrail	responsive_filemanager	An issue was discovered in Responsive Filemanager through 9.14.0. In the ajax_calls.php file in the save_img action in the name parameter, there is no validation of what kind of extension is sent. Th…	CWE-20 Improper Input Validation	CVE-2020-10567	2024-11-21 13:55	2020-03-14	Show	GitHub Exploit DB Packet Storm

219853	7.8	HIGH Local	freebsd	freebsd	grub2-bhyve, as used in FreeBSD bhyve before revision 525916 2020-02-12, mishandles font loading by a guest through a grub2.cfg file, leading to a buffer overflow.	CWE-120 Classic Buffer Overflow	CVE-2020-10566	2024-11-21 13:55	2020-03-14	Show	GitHub Exploit DB Packet Storm

219854	7.8	HIGH Local	freebsd	freebsd	grub2-bhyve, as used in FreeBSD bhyve before revision 525916 2020-02-12, does not validate the address provided as part of a memrw command (read_* or write_*) by a guest through a grub2.cfg file. Thi…	CWE-119 Incorrect Access of Indexable Resource ('Range Error')	CVE-2020-10565	2024-11-21 13:55	2020-03-14	Show	GitHub Exploit DB Packet Storm

219855	9.8	CRITICAL Network	iptanus	wordpress_file_upload	An issue was discovered in the File Upload plugin before 4.13.0 for WordPress. A directory traversal can lead to remote code execution by uploading a crafted txt file into the lib directory, because …	CWE-22 Path Traversal	CVE-2020-10564	2024-11-21 13:55	2020-03-14	Show	GitHub Exploit DB Packet Storm

219856	9.8	CRITICAL Network	devome	grr	An issue was discovered in DEVOME GRR before 3.4.1c. frmcontactlist.php mishandles a SQL query.	CWE-89 SQL Injection	CVE-2020-10563	2024-11-21 13:55	2020-03-14	Show	GitHub Exploit DB Packet Storm

219857	7.2	HIGH Network	devome	grr	An issue was discovered in DEVOME GRR before 3.4.1c. admin_edit_room.php mishandles file uploads.	CWE-434 Unrestricted Upload of File with Dangerous Type	CVE-2020-10562	2024-11-21 13:55	2020-03-14	Show	GitHub Exploit DB Packet Storm

219858	6.1	MEDIUM Network	primetek	primefaces	An XSS issue was discovered in tooltip/tooltip.js in PrimeTek PrimeFaces 7.0.11. In a web application using PrimeFaces, an attacker can provide JavaScript code in an input field whose data is later u…	CWE-79 Cross-site Scripting	CVE-2020-10544	2024-11-21 13:55	2020-03-14	Show	GitHub Exploit DB Packet Storm

219859	9.8	CRITICAL Network	zohocorp	manageengine_opmanager	Zoho ManageEngine OpManager before 12.4.179 allows remote code execution via a specially crafted Mail Server Settings v1 API request. This was fixed in 12.5.108.	NVD-CWE-noinfo	CVE-2020-10541	2024-11-21 13:55	2020-03-13	Show	GitHub Exploit DB Packet Storm

219860	8.8	HIGH Network	untis	webuntis	Untis WebUntis before 2020.9.6 allows CSRF for certain combinations of rights and modules.	CWE-352 Origin Validation Error	CVE-2020-10540	2024-11-21 13:55	2020-03-13	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed