Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 19, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
247981 7.5 危険 efestech - EfesTECH Video の default.asp における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-1641 2012-06-26 16:02 2008-04-2 Show GitHub Exploit DB Packet Storm
247982 7.5 危険 emedia office gmbh - CuteFlow における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-1632 2012-06-26 16:02 2008-04-2 Show GitHub Exploit DB Packet Storm
247983 7.5 危険 emedia office gmbh - CuteFlow の login.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-1631 2012-06-26 16:02 2008-04-2 Show GitHub Exploit DB Packet Storm
247984 4.3 警告 emedia office gmbh - CuteFlow におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2008-1630 2012-06-26 16:02 2008-04-2 Show GitHub Exploit DB Packet Storm
247985 3.5 注意 cds software consortium - CDS Invenio における任意のユーザの電子メール通知アラートを削除される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2008-1627 2012-06-26 16:02 2008-04-2 Show GitHub Exploit DB Packet Storm
247986 7.5 危険 eggblog - eggBlog における SQL インジェクションの脆弱性 CWE-20
CWE-89
CVE-2008-1626 2012-06-26 16:02 2008-03-28 Show GitHub Exploit DB Packet Storm
247987 6.8 警告 AVAST Software s.r.o. - avast! Home and Professional の aavmker4.sys における権限を取得される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2008-1625 2012-06-26 16:02 2008-04-2 Show GitHub Exploit DB Packet Storm
247988 6.8 警告 geertsen holdings inc - GeeCarts における PHP リモートファイルインクルージョンの脆弱性 CWE-94
コード・インジェクション 		CVE-2008-1622 2012-06-26 16:02 2008-04-2 Show GitHub Exploit DB Packet Storm
247989 4.3 警告 geertsen holdings inc - GeeCarts におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2008-1621 2012-06-26 16:02 2008-04-2 Show GitHub Exploit DB Packet Storm
247990 7.5 危険 2X Software - 2X ThinClientServer の 2X TFTP サービスにおけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2008-1620 2012-06-26 16:02 2008-04-2 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 19, 2026, 4:01 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
212031 8.8 HIGH
Network 		sapplica sentrifugo In Sentrifugo 3.2, users can share an announcement under "Organization -> Announcements" tab. Also, in this page, users can upload attachments with the shared announcements. This "Upload Attachment" … CWE-434
 Unrestricted Upload of File with Dangerous Type  		CVE-2020-26804 2024-11-21 14:20 2020-11-13 Show GitHub Exploit DB Packet Storm
212032 8.8 HIGH
Network 		sapplica sentrifugo In Sentrifugo 3.2, users can upload an image under "Assets -> Add" tab. This "Upload Images" functionality is suffered from "Unrestricted File Upload" vulnerability so attacker can upload malicious f… CWE-434
 Unrestricted Upload of File with Dangerous Type  		CVE-2020-26803 2024-11-21 14:20 2020-11-13 Show GitHub Exploit DB Packet Storm
212033 10.0 CRITICAL
Network 		sap solution_manager SAP Solution Manager (JAVA stack), version - 7.20, allows an unauthenticated attacker to compromise the system because of missing authorization checks in the Upgrade Legacy Ports Service, this has an… CWE-306
Missing Authentication for Critical Function 		CVE-2020-26824 2024-11-21 14:20 2020-11-11 Show GitHub Exploit DB Packet Storm
212034 8.8 HIGH
Network 		tibco iprocess_workspace_browser The Core component of TIBCO Software Inc.'s TIBCO iProcess Workspace (Browser) contains a vulnerability that theoretically allows an unauthenticated attacker with network access to execute a Cross Si… CWE-352
 Origin Validation Error 		CVE-2020-27146 2024-11-21 14:20 2020-11-11 Show GitHub Exploit DB Packet Storm
212035 10.0 CRITICAL
Network 		sap solution_manager SAP Solution Manager (JAVA stack), version - 7.20, allows an unauthenticated attacker to compromise the system because of missing authorization checks in the Upgrade Diagnostics Agent Connection Serv… CWE-306
Missing Authentication for Critical Function 		CVE-2020-26823 2024-11-21 14:20 2020-11-11 Show GitHub Exploit DB Packet Storm
212036 10.0 CRITICAL
Network 		sap solution_manager SAP Solution Manager (JAVA stack), version - 7.20, allows an unauthenticated attacker to compromise the system because of missing authorization checks in the Outside Discovery Configuration Service, … CWE-306
Missing Authentication for Critical Function 		CVE-2020-26822 2024-11-21 14:20 2020-11-11 Show GitHub Exploit DB Packet Storm
212037 10.0 CRITICAL
Network 		sap solution_manager SAP Solution Manager (JAVA stack), version - 7.20, allows an unauthenticated attacker to compromise the system because of missing authorization checks in the SVG Converter Service, this has an impact… CWE-306
Missing Authentication for Critical Function 		CVE-2020-26821 2024-11-21 14:20 2020-11-11 Show GitHub Exploit DB Packet Storm
212038 7.2 HIGH
Network 		sap netweaver_application_server_java SAP NetWeaver AS JAVA, versions - 7.20, 7.30, 7.31, 7.40, 7.50, allows an attacker who is authenticated as an administrator to use the administrator console, to expose unauthenticated access to the f… CWE-434
 Unrestricted Upload of File with Dangerous Type  		CVE-2020-26820 2024-11-21 14:20 2020-11-11 Show GitHub Exploit DB Packet Storm
212039 8.8 HIGH
Network 		sap netweaver_application_server_abap SAP NetWeaver AS ABAP (Web Dynpro), versions - 731, 740, 750, 751, 752, 753, 754, 755, 782, allows an authenticated user to access Web Dynpro components, that allows them to read and delete database … NVD-CWE-noinfo
CVE-2020-26819 2024-11-21 14:20 2020-11-11 Show GitHub Exploit DB Packet Storm
212040 8.8 HIGH
Network 		sap netweaver_application_server_abap SAP NetWeaver AS ABAP (Web Dynpro), versions - 731, 740, 750, 751, 752, 753, 754, 755, 782, allows an authenticated user to access Web Dynpro components, which reveals sensitive system information th… CWE-862
 Missing Authorization 		CVE-2020-26818 2024-11-21 14:20 2020-11-11 Show GitHub Exploit DB Packet Storm