Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":June 21, 2026, 2 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
247161	9.3	危険	マイクロソフト AVG Technologies	-	AVG Anti-Virus における HTML ドキュメント内のマルウェアの検出を回避される脆弱性	CWE-20 不適切な入力確認	CVE-2008-5522	2012-06-26 16:03	2008-12-12	Show	GitHub Exploit DB Packet Storm

247162	9.3	危険	マイクロソフト free-av	-	Avira AntiVir における HTML 文書内のマルウェアの検知を回避される脆弱性	CWE-20 不適切な入力確認	CVE-2008-5521	2012-06-26 16:03	2008-12-12	Show	GitHub Exploit DB Packet Storm

247163	9.4	危険	マイクロソフト Apache Software Foundation	-	Apache Geronimo Application Server の Web 管理コンソールにおけるファイルを任意のディレクトリにアップロードされる脆弱性	CWE-22 パス・トラバーサル	CVE-2008-5518	2012-06-26 16:03	2009-04-17	Show	GitHub Exploit DB Packet Storm

247164	7.5	危険	Git project	-	gitweb の Web インターフェースにおける任意のコマンドを実行される脆弱性	CWE-94 コード・インジェクション	CVE-2008-5517	2012-06-26 16:03	2009-01-13	Show	GitHub Exploit DB Packet Storm

247165	9.3	危険	マイクロソフトアンラボ	-	AhnLab V3 における HTML ドキュメント内のマルウェアの検出を回避される脆弱性	CWE-20 不適切な入力確認	CVE-2008-5520	2012-06-26 16:03	2008-12-12	Show	GitHub Exploit DB Packet Storm

247166	7.5	危険	bandsitecms	-	BandSite CMS における認証を回避される脆弱性	CWE-287 不適切な認証	CVE-2008-5497	2012-06-26 16:03	2008-12-12	Show	GitHub Exploit DB Packet Storm

247167	7.5	危険	Joomla! digitalgreys	-	Joomla! の contactinfo コンポーネントにおける SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2008-5494	2012-06-26 16:03	2008-12-12	Show	GitHub Exploit DB Packet Storm

247168	7.5	危険	clip-share	-	ClipShare の channel_detail.php における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2008-5489	2012-06-26 16:03	2008-12-12	Show	GitHub Exploit DB Packet Storm

247169	7.5	危険	e-topbiz	-	E-topbiz Domain Shop の admin.php における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2008-5488	2012-06-26 16:03	2008-12-12	Show	GitHub Exploit DB Packet Storm

247170	5	警告	5e5	-	Teamtek Universal FTP Server におけるサービス運用妨害 (DoS) の脆弱性	CWE-20 不適切な入力確認	CVE-2008-5431	2012-06-26 16:03	2008-12-11	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:June 21, 2026, 4:01 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
219531	7.5	HIGH Network	onkyo	tx-nr585_firmware	A Local File Inclusion (LFI) issue on Onkyo TX-NR585 1000-0000-000-0008-0000 devices allows remote unauthenticated users on the network to read sensitive files via %2e%2e%2f directory traversal, as d…	CWE-22 Path Traversal	CVE-2020-12447	2024-11-21 13:59	2020-04-29	Show	GitHub Exploit DB Packet Storm

219532	9.8	CRITICAL Network	bigbluebutton	bigbluebutton	BigBlueButton before 2.2.6 allows remote attackers to read arbitrary files because the presfilename (lowercase) value can be a .pdf filename while the presFilename (mixed case) value has a ../ sequen…	CWE-22 Path Traversal	CVE-2020-12443	2024-11-21 13:59	2020-04-29	Show	GitHub Exploit DB Packet Storm

219533	9.8	CRITICAL Network	ivanti	avalanche	Ivanti Avalanche 6.3 allows a SQL injection that is vaguely associated with the Apache HTTP Server, aka Bug 683250.	CWE-89 SQL Injection	CVE-2020-12442	2024-11-21 13:59	2020-04-29	Show	GitHub Exploit DB Packet Storm

219534	5.4	MEDIUM Network	opmantek	open-audit	Open-AudIT 3.3.0 allows an XSS attack after login.	CWE-79 Cross-site Scripting	CVE-2020-12261	2024-11-21 13:59	2020-04-29	Show	GitHub Exploit DB Packet Storm

219535	7.7	HIGH Network	tiny_file_manager_project	tiny_file_manager	In Tiny File Manager 2.4.1 there is a vulnerability in the ajax file backup copy functionality which allows authenticated users to create backup copies of files (with .bak extension) outside the scop…	CWE-22 Path Traversal	CVE-2020-12103	2024-11-21 13:59	2020-04-29	Show	GitHub Exploit DB Packet Storm

219536	5.4	MEDIUM Network	php-fusion	php-fusion	An XSS vulnerability exists in the banners.php page of PHP-Fusion 9.03.50. This can be exploited because the only security measure used against XSS is the stripping of SCRIPT tags. A malicious actor …	CWE-79 Cross-site Scripting	CVE-2020-12438	2024-11-21 13:59	2020-04-29	Show	GitHub Exploit DB Packet Storm

219537	7.7	HIGH Network	tiny_file_manager_project	tiny_file_manager	In Tiny File Manager 2.4.1, there is a Path Traversal vulnerability in the ajax recursive directory listing functionality. This allows authenticated users to enumerate directories and files on the fi…	CWE-22 Path Traversal	CVE-2020-12102	2024-11-21 13:59	2020-04-29	Show	GitHub Exploit DB Packet Storm

219538	6.5	MEDIUM Network	redhat	libvirt enterprise_linux	An issue was discovered in qemuDomainGetStatsIOThread in qemu/qemu_driver.c in libvirt 4.10.0 though 6.x before 6.1.0. A memory leak was found in the virDomainListGetStats libvirt API that is respons…	CWE-401 Missing Release of Memory after Effective Lifetime	CVE-2020-12430	2024-11-21 13:59	2020-04-29	Show	GitHub Exploit DB Packet Storm

219539	9.8	CRITICAL Network	phpgurukul	online_course_registration	Online Course Registration 2.0 has multiple SQL injections that would can lead to a complete database compromise and authentication bypass in the login pages: admin/change-password.php, admin/check_a…	CWE-89 SQL Injection	CVE-2020-12429	2024-11-21 13:59	2020-04-29	Show	GitHub Exploit DB Packet Storm

219540	7.5	HIGH Network	openldap debian opensuse canonical netapp broadcom apple oracle	openldap debian_linux leap ubuntu_linux cloud_backup steelstore_cloud_integrated_storage h410c_firmware h300s_firmware h500s_firmware h700s_firmware h300e_firmware h5…	In filter.c in slapd in OpenLDAP before 2.4.50, LDAP search filters with nested boolean expressions can result in denial of service (daemon crash).	CWE-674 Uncontrolled Recursion	CVE-2020-12243	2024-11-21 13:59	2020-04-29	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed