Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 25, 2026, 10:01 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
247641 4 警告 シトリックス・システムズ - Citrix Web Interface for Java Application Servers のセッション切断機能におけるユーザの Web インターフェースセッションへのアクセス権を取得される脆弱性 CWE-Other
その他 		CVE-2008-6830 2012-06-26 16:10 2008-10-24 Show GitHub Exploit DB Packet Storm
247642 7.5 危険 bookingcentre - Venalsur Booking Centre Booking System の admin/checklogin.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-6810 2012-06-26 16:10 2009-05-18 Show GitHub Exploit DB Packet Storm
247643 7.5 危険 bookingcentre - Hotels Group の Venalsur Booking Centre Booking System の hotel_habitaciones.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-6809 2012-06-26 16:10 2009-05-18 Show GitHub Exploit DB Packet Storm
247644 6.8 警告 7-shop - 7Shop の includes/imageupload.php における任意のファイルを実行される脆弱性 CWE-20
不適切な入力確認 		CVE-2008-6806 2012-06-26 16:10 2009-05-12 Show GitHub Exploit DB Packet Storm
247645 6.8 警告 DFLabs - DFLabs PTK の lib/file_content.php の get_file_type 関数における任意のコマンドを実行される脆弱性 CWE-20
不適切な入力確認 		CVE-2008-6793 2012-06-26 16:10 2009-05-7 Show GitHub Exploit DB Packet Storm
247646 5 警告 codewiz - GeekiGeeki の geekigeeki.py におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2008-6786 2012-06-26 16:10 2009-05-1 Show GitHub Exploit DB Packet Storm
247647 6.8 警告 galaxyscripts - Mini File Host における任意のコードを実行される脆弱性 CWE-94
コード・インジェクション 		CVE-2008-6785 2012-06-26 16:10 2009-05-1 Show GitHub Exploit DB Packet Storm
247648 10 危険 china-on-site - Flexcustomer の admin/install.php における任意の PHP コードが挿入される脆弱性 CWE-94
コード・インジェクション 		CVE-2008-6761 2012-06-26 16:10 2009-04-28 Show GitHub Exploit DB Packet Storm
247649 6.8 警告 china-on-site - FlexPHPDirectory の add.php における任意のコードを実行される脆弱性 CWE-20
不適切な入力確認 		CVE-2008-6750 2012-06-26 16:10 2009-04-24 Show GitHub Exploit DB Packet Storm
247650 6.8 警告 china-on-site - FlexPHPDirectory の admin/usercheck.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-6749 2012-06-26 16:10 2009-04-24 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 25, 2026, 4:04 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
212081 7.8 HIGH
Local 		avm fritz\!box_7490_firmware FRITZ!OS before 7.21 on FRITZ!Box devices allows a bypass of a DNS Rebinding protection mechanism. NVD-CWE-noinfo
CVE-2020-26887 2024-11-21 14:20 2020-10-23 Show GitHub Exploit DB Packet Storm
212082 9.1 CRITICAL
Network 		hashicorp nomad HashiCorp Nomad and Nomad Enterprise version 0.9.0 up to 0.12.5 client file sandbox feature can be subverted using either the template or artifact stanzas. Fixed in 0.12.6, 0.11.5, and 0.10.6 NVD-CWE-noinfo
CVE-2020-27195 2024-11-21 14:20 2020-10-23 Show GitHub Exploit DB Packet Storm
212083 7.5 HIGH
Network 		octopus octopus_deploy An issue was discovered in Octopus Deploy through 2020.4.4. If enabled, the websocket endpoint may allow an untrusted tentacle host to present itself as a trusted one. NVD-CWE-noinfo
CVE-2020-27155 2024-11-21 14:20 2020-10-23 Show GitHub Exploit DB Packet Storm
212084 5.3 MEDIUM
Network 		atomx atomxcms AtomXCMS 2.0 is affected by Arbitrary File Read via admin/dump.php CWE-22
CWE-668
Path Traversal
 Exposure of Resource to Wrong Sphere 		CVE-2020-26650 2024-11-21 14:20 2020-10-23 Show GitHub Exploit DB Packet Storm
212085 8.1 HIGH
Network 		atomx atomxcms_2 AtomXCMS 2.0 is affected by Incorrect Access Control via admin/dump.php CWE-306
CWE-862
Missing Authentication for Critical Function
 Missing Authorization 		CVE-2020-26649 2024-11-21 14:20 2020-10-23 Show GitHub Exploit DB Packet Storm
212086 5.3 MEDIUM
Network 		lightning_network_daemon_project lightning_network_daemon Prior to 0.10.0-beta, LND (Lightning Network Daemon) would have accepted a counterparty high-S signature and broadcast tx-relay invalid local commitment/HTLC transactions. This can be exploited by an… CWE-354
 Improper Validation of Integrity Check Value 		CVE-2020-26895 2024-11-21 14:20 2020-10-21 Show GitHub Exploit DB Packet Storm
212087 6.1 MEDIUM
Network 		matrix synapse AuthRestServlet in Matrix Synapse before 1.21.0 is vulnerable to XSS due to unsafe interpolation of the session GET parameter. This allows a remote attacker to execute an XSS attack on the domain Syn… CWE-79
Cross-site Scripting 		CVE-2020-26891 2024-11-21 14:20 2020-10-20 Show GitHub Exploit DB Packet Storm
212088 9.8 CRITICAL
Network 		libtaxii_project
eclecticiq 		libtaxii
opentaxii 		TAXII libtaxii through 1.1.117, as used in EclecticIQ OpenTAXII through 0.2.0 and other products, allows SSRF via an initial http:// substring to the parse method, even when the no_network setting is… CWE-918
Server-Side Request Forgery (SSRF)  		CVE-2020-27197 2024-11-21 14:20 2020-10-18 Show GitHub Exploit DB Packet Storm
212089 8.2 HIGH
Network 		lightning_network_daemon_project lightning_network_daemon Prior to 0.11.0-beta, LND (Lightning Network Daemon) had a vulnerability in its invoice database. While claiming on-chain a received HTLC output, it didn't verify that the corresponding outgoing off-… CWE-354
 Improper Validation of Integrity Check Value 		CVE-2020-26896 2024-11-21 14:20 2020-10-21 Show GitHub Exploit DB Packet Storm
212090 5.5 MEDIUM
Local 		linux linux_kernel An issue was discovered in the Linux kernel before 5.8.15. scalar32_min_max_or in kernel/bpf/verifier.c mishandles bounds tracking during use of 64-bit values, aka CID-5b9fbeb75b6a. CWE-681
 Incorrect Conversion between Numeric Types 		CVE-2020-27194 2024-11-21 14:20 2020-10-17 Show GitHub Exploit DB Packet Storm