Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 8, 2026, 10 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
248271 4.3 警告 CKEditor Team - FCKEditorto の "Basic Toolbar Selection" におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2006-6978 2012-06-26 15:38 2007-02-8 Show GitHub Exploit DB Packet Storm
248272 4.3 警告 freetextbox - FreeTextBox の "Basic Toolbar Selection" におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2006-6977 2012-06-26 15:38 2007-02-8 Show GitHub Exploit DB Packet Storm
248273 7.5 危険 centipaid - CentiPaid の centipaid_class.php における PHP リモートファイルインクルージョンの脆弱性 CWE-94
コード・インジェクション
CVE-2006-6976 2012-06-26 15:38 2007-02-8 Show GitHub Exploit DB Packet Storm
248274 7.5 危険 bti-tracker - BtitTracker の torrents.php における SQL インジェクションの脆弱性 - CVE-2006-6972 2012-06-26 15:38 2007-02-7 Show GitHub Exploit DB Packet Storm
248275 4.3 警告 Andreas Gohr - DokuWiki の lib/exe/fetch.php におけるCRLF インジェクションの脆弱性 - CVE-2006-6965 2012-06-26 15:38 2007-01-29 Show GitHub Exploit DB Packet Storm
248276 7.5 危険 Docebo - Docebo LMS における PHP リモートファイルインクルージョンの脆弱性 - CVE-2006-6963 2012-06-26 15:38 2007-01-29 Show GitHub Exploit DB Packet Storm
248277 6.8 警告 Docebo - Docebo の addons/mod_media/body.php における PHP リモートファイルインクルージョンの脆弱性 CWE-94
コード・インジェクション
CVE-2006-6957 2012-06-26 15:38 2007-01-29 Show GitHub Exploit DB Packet Storm
248278 7.5 危険 Bitweaver - bitweaver の newsletters/edition.php における SQL インジェクションの脆弱性 - CVE-2006-6923 2012-06-26 15:38 2007-01-12 Show GitHub Exploit DB Packet Storm
248279 7.5 危険 deadlock user management system - phpdeadlock における SQL インジェクションの脆弱性 - CVE-2006-6922 2012-06-26 15:38 2007-01-12 Show GitHub Exploit DB Packet Storm
248280 10 危険 geobb - GeoBB の Admin ログインにおける詳細不明な脆弱性 - CVE-2006-6918 2012-06-26 15:38 2007-01-11 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 8, 2026, 4:09 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
211861 9.8 CRITICAL
Network
8cms ljcms An issue in the user login box of LJCMS v1.11 allows attackers to hijack user accounts via brute force attacks. CWE-307
mproper Restriction of Excessive Authentication Attempts
CVE-2020-21237 2024-11-21 14:12 2021-12-28 Show GitHub Exploit DB Packet Storm
211862 8.8 HIGH
Network
damicms damicms A vulnerability in /damicms-master/admin.php?s=/Article/doedit of DamiCMS v6.0 allows attackers to compromise and impersonate user accounts via obtaining a user's session cookie. CWE-352
 Origin Validation Error
CVE-2020-21236 2024-11-21 14:12 2021-12-28 Show GitHub Exploit DB Packet Storm
211863 7.5 HIGH
Network
jeecg jeecg An arbitrary file download vulnerability in jeecg v3.8 allows attackers to access sensitive files via modification of the "localPath" variable. CWE-668
 Exposure of Resource to Wrong Sphere
CVE-2020-20948 2024-11-21 14:12 2021-12-28 Show GitHub Exploit DB Packet Storm
211864 5.4 MEDIUM
Network
qibosoft qibosoft Qibosoft v7 contains a stored cross-site scripting (XSS) vulnerability in the component /admin/index.php?lfj=friendlink&action=add. CWE-79
Cross-site Scripting
CVE-2020-20946 2024-11-21 14:12 2021-12-28 Show GitHub Exploit DB Packet Storm
211865 8.8 HIGH
Network
qibosoft qibosoft A Cross-Site Request Forgery (CSRF) in /admin/index.php?lfj=member&action=editmember of Qibosoft v7 allows attackers to arbitrarily add administrator accounts. CWE-352
 Origin Validation Error
CVE-2020-20945 2024-11-21 14:12 2021-12-28 Show GitHub Exploit DB Packet Storm
211866 9.1 CRITICAL
Network
qibosoft qibosoft An issue in /admin/index.php?lfj=mysql&action=del of Qibosoft v7 allows attackers to arbitrarily delete files. CWE-22
Path Traversal
CVE-2020-20944 2024-11-21 14:12 2021-12-28 Show GitHub Exploit DB Packet Storm
211867 4.3 MEDIUM
Network
qibosoft qibosoft A Cross-Site Request Forgery (CSRF) in /member/post.php?job=postnew&step=post of Qibosoft v7 allows attackers to force victim users into arbitrarily publishing new articles via a crafted URL. CWE-352
 Origin Validation Error
CVE-2020-20943 2024-11-21 14:12 2021-12-28 Show GitHub Exploit DB Packet Storm
211868 6.1 MEDIUM
Network
personal_blog_cms_project personal_blog_cms Blog CMS v1.0 contains a cross-site scripting (XSS) vulnerability in the /controller/CommentAdminController.java component. CWE-79
Cross-site Scripting
CVE-2020-20605 2024-11-21 14:12 2021-12-23 Show GitHub Exploit DB Packet Storm
211869 9.8 CRITICAL
Network
thinkcmf thinkcmf An issue in ThinkCMF X2.2.2 and below allows attackers to execute arbitrary code via a crafted packet. CWE-94
Code Injection
CVE-2020-20601 2024-11-21 14:12 2021-12-23 Show GitHub Exploit DB Packet Storm
211870 5.4 MEDIUM
Network
metinfo metinfo MetInfo 7.0 beta contains a stored cross-site scripting (XSS) vulnerability in the $name parameter of admin/?n=column&c=index&a=doAddColumn. CWE-79
Cross-site Scripting
CVE-2020-20600 2024-11-21 14:12 2021-12-23 Show GitHub Exploit DB Packet Storm