Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 25, 2026, 6 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
247671 4.3 警告 The Dojo Foundation - Dojo の dijit.Editor におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2008-6681 2012-06-26 16:10 2009-04-9 Show GitHub Exploit DB Packet Storm
247672 7.5 危険 dirk bartley - nweb2fax の viewrq.php における任意のコードを実行される脆弱性 CWE-78
OSコマンド・インジェクション
CVE-2008-6669 2012-06-26 16:10 2009-04-8 Show GitHub Exploit DB Packet Storm
247673 5 警告 dirk bartley - nweb2fax におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル
CVE-2008-6668 2012-06-26 16:10 2009-04-8 Show GitHub Exploit DB Packet Storm
247674 6.8 警告 anantasoft - Ananta CMS の change.php における管理者の権限を取得される脆弱性 CWE-94
コード・インジェクション
CVE-2008-6665 2012-06-26 16:10 2009-04-8 Show GitHub Exploit DB Packet Storm
247675 4.3 警告 AVG Technologies
Linux
- AVG Anti-Virus におけるサービス運用妨害 (DoS) の脆弱性 CWE-20
不適切な入力確認
CVE-2008-6662 2012-06-26 16:10 2009-04-7 Show GitHub Exploit DB Packet Storm
247676 5 警告 BitDefender
Linux
- Bitdefender のスキャンエンジンにおける整数オーバーフローの脆弱性 CWE-189
数値処理の問題
CVE-2008-6661 2012-06-26 16:10 2009-04-7 Show GitHub Exploit DB Packet Storm
247677 4.3 警告 comscripts - GEDCOM_TO_MYSQL におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2008-6655 2012-06-26 16:10 2009-04-7 Show GitHub Exploit DB Packet Storm
247678 4.3 警告 coronamatrix - CoronaMatrix phpAddressBook の index.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2008-6646 2012-06-26 16:10 2009-04-7 Show GitHub Exploit DB Packet Storm
247679 7.5 危険 dotcontent - DotContent FluentCMS の view.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2008-6642 2012-06-26 16:10 2009-04-7 Show GitHub Exploit DB Packet Storm
247680 6.5 警告 ASP indir - Shader TV (Beta) における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2008-6641 2012-06-26 16:10 2009-04-7 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 25, 2026, 4:04 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
212111 9.8 CRITICAL
Network
emby emby Emby Server before 4.5.0 allows SSRF via the Items/RemoteSearch/Image ImageURL parameter. CWE-918
Server-Side Request Forgery (SSRF) 
CVE-2020-26948 2024-11-21 14:20 2020-10-11 Show GitHub Exploit DB Packet Storm
212112 7.8 HIGH
Local
getmonero monero monero-wallet-gui in Monero GUI before 0.17.1.0 includes the . directory in an embedded RPATH (with a preference ahead of /usr/lib), which allows local users to gain privileges via a Trojan horse lib… CWE-427
 Uncontrolled Search Path Element
CVE-2020-26947 2024-11-21 14:20 2020-10-11 Show GitHub Exploit DB Packet Storm
212113 8.1 HIGH
Network
mybatis mybatis MyBatis before 3.5.6 mishandles deserialization of object streams. CWE-502
 Deserialization of Untrusted Data
CVE-2020-26945 2024-11-21 14:20 2020-10-11 Show GitHub Exploit DB Packet Storm
212114 9.8 CRITICAL
Network
phpmyadmin
opensuse
fedoraproject
debian
phpmyadmin
leap
backports_sle
fedora
debian_linux
An issue was discovered in SearchController in phpMyAdmin before 4.9.6 and 5.x before 5.0.3. A SQL injection vulnerability was discovered in how phpMyAdmin processes SQL statements in the search feat… CWE-89
SQL Injection
CVE-2020-26935 2024-11-21 14:20 2020-10-11 Show GitHub Exploit DB Packet Storm
212115 6.1 MEDIUM
Network
phpmyadmin
opensuse
fedoraproject
debian
phpmyadmin
leap
backports_sle
fedora
debian_linux
phpMyAdmin before 4.9.6 and 5.x before 5.0.3 allows XSS through the transformation feature via a crafted link. CWE-79
Cross-site Scripting
CVE-2020-26934 2024-11-21 14:20 2020-10-11 Show GitHub Exploit DB Packet Storm
212116 4.3 MEDIUM
Network
sympa
debian
sympa
debian_linux
debian/sympa.postinst for the Debian Sympa package before 6.2.40~dfsg-7 uses mode 4755 for sympa_newaliases-wrapper, whereas the intended permissions are mode 4750 (for access by the sympa group) CWE-732
 Incorrect Permission Assignment for Critical Resource
CVE-2020-26932 2024-11-21 14:20 2020-10-11 Show GitHub Exploit DB Packet Storm
212117 6.5 MEDIUM
Adjacent
netgear wc7500_firmware
wc7600_firmware
wc9500_firmware
Certain NETGEAR devices are affected by disclosure of sensitive information. This affects WC7500 before 6.5.5.24, WC7600 before 6.5.5.24, WC7600v2 before 6.5.5.24, and WC9500 before 6.5.5.24. NVD-CWE-noinfo
CVE-2020-26931 2024-11-21 14:20 2020-10-9 Show GitHub Exploit DB Packet Storm
212118 3.8 LOW
Network
netgear ex7700_firmware NETGEAR EX7700 devices before 1.0.0.210 are affected by incorrect configuration of security settings. CWE-1188
 Insecure Default Initialization of Resource
CVE-2020-26930 2024-11-21 14:20 2020-10-9 Show GitHub Exploit DB Packet Storm
212119 8.0 HIGH
Adjacent
netgear r6230_firmware
r6220_firmware
Certain NETGEAR devices are affected by command injection by an authenticated user. This affects R6220 before 1.1.0.100 and R6230 before 1.1.0.100. CWE-77
Command Injection
CVE-2020-26929 2024-11-21 14:20 2020-10-9 Show GitHub Exploit DB Packet Storm
212120 9.6 CRITICAL
Adjacent
netgear cbr40_firmware
rbk752_firmware
rbk852_firmware
rbr750_firmware
rbr850_firmware
rbs750_firmware
rbs850_firmware
Certain NETGEAR devices are affected by authentication bypass. This affects CBR40 before 2.5.0.10, RBK752 before 3.2.15.25, RBR750 before 3.2.15.25, RBS750 before 3.2.15.25, RBK852 before 3.2.10.11, … NVD-CWE-noinfo
CVE-2020-26928 2024-11-21 14:20 2020-10-9 Show GitHub Exploit DB Packet Storm