Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 20, 2026, 6 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
258661 7.5 危険 シトリックス・システムズ - Citrix XenCenterWeb の XenServer Resource Kit における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2009-3758 2010-09-14 15:53 2009-10-22 Show GitHub Exploit DB Packet Storm
258662 4.3 警告 シトリックス・システムズ - Citrix XenCenterWeb の XenServer Resource Kit におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2009-3757 2010-09-14 15:53 2009-10-22 Show GitHub Exploit DB Packet Storm
258663 7.2 危険 シトリックス・システムズ - Xen の xend におけるサービス運用妨害 (DoS) の脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2008-5716 2010-09-14 15:53 2008-12-24 Show GitHub Exploit DB Packet Storm
258664 6 警告 VMware - VMware Studio の Virtual Appliance Management Infrastructure における任意のコマンドを実行される脆弱性 CWE-noinfo
情報不足
CVE-2010-2667 2010-09-13 16:05 2010-07-13 Show GitHub Exploit DB Packet Storm
258665 4.4 警告 VMware - VMware Studio における権限を取得される脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2010-2427 2010-09-13 16:05 2010-07-13 Show GitHub Exploit DB Packet Storm
258666 6.8 警告 VMware - VMware SpringSource tc Server Runtime における JMX インターフェイスへのアクセス権を取得される脆弱性 CWE-287
不適切な認証
CVE-2010-1454 2010-09-13 16:05 2010-05-13 Show GitHub Exploit DB Packet Storm
258667 4.3 警告 VMware - VMware View におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2010-1143 2010-09-13 16:04 2010-05-5 Show GitHub Exploit DB Packet Storm
258668 4.9 警告 VMware - 複数の VMware 製品の hcmon.sys におけるサービス運用妨害 (DoS) の脆弱性 CWE-20
不適切な入力確認
CVE-2008-3761 2010-09-13 16:04 2008-08-21 Show GitHub Exploit DB Packet Storm
258669 2.1 注意 VMware - VMware VirtualCenter におけるパスワードを盗まれる脆弱性 CWE-200
情報漏えい
CVE-2008-4278 2010-09-13 16:04 2008-10-3 Show GitHub Exploit DB Packet Storm
258670 5 警告 VMware - VMware VirtualCenter における他のシステムユーザに権限を割り当てられる脆弱性 CWE-200
情報漏えい
CVE-2008-3514 2010-09-13 16:03 2008-08-12 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 21, 2026, 4:01 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
213841 7.1 HIGH
Local
gpac gpac An issue was discovered in gpac 0.8.0. The gf_hinter_track_process function in isom_hinter_track_process.c has a heap-based buffer overflow which can lead to a denial of service (DOS) via a crafted m… CWE-787
 Out-of-bounds Write
CVE-2020-23267 2024-11-21 14:13 2021-09-22 Show GitHub Exploit DB Packet Storm
213842 5.5 MEDIUM
Local
gpac gpac An issue was discovered in gpac 0.8.0. The OD_ReadUTF8String function in odf_code.c has a heap-based buffer overflow which can lead to a denial of service (DOS) via a crafted media file. CWE-787
 Out-of-bounds Write
CVE-2020-23266 2024-11-21 14:13 2021-09-22 Show GitHub Exploit DB Packet Storm
213843 9.8 CRITICAL
Network
chshcms cscms A remote code execution (RCE) vulnerability in the \Playsong.php component of cscms v4.1 allows attackers to execute arbitrary commands. NVD-CWE-noinfo
CVE-2020-22848 2024-11-21 14:13 2021-08-31 Show GitHub Exploit DB Packet Storm
213844 6.1 MEDIUM
Network
cacti
debian
cacti
debian_linux
Multiple Cross Site Scripting (XSS) vulneratiblities exist in Cacti 1.2.12 in (1) reports_admin.php, (2) data_queries.php, (3) data_input.php, (4) graph_templates.php, (5) graphs.php, (6) reports_adm… CWE-79
Cross-site Scripting
CVE-2020-23226 2024-11-21 14:13 2021-08-28 Show GitHub Exploit DB Packet Storm
213845 8.8 HIGH
Network
centreon centreon /graphStatus/displayServiceStatus.php in Centreon 19.10.8 allows remote attackers to execute arbitrary OS commands via shell metacharacters in the RRDdatabase_path parameter. CWE-78
OS Command 
CVE-2020-22345 2024-11-21 14:13 2021-08-19 Show GitHub Exploit DB Packet Storm
213846 7.5 HIGH
Network
joyplus-cms_project joyplus-cms A vulnerability in the \inc\config.php component of joyplus-cms v1.6 allows attackers to access sensitive information. CWE-552
 Files or Directories Accessible to External Parties
CVE-2020-22124 2024-11-21 14:13 2021-08-19 Show GitHub Exploit DB Packet Storm
213847 7.5 HIGH
Network
find_a_place_ljcms_project find_a_place_ljcms A SQL injection vulnerability in /oa.php?c=Staff&a=read of Find a Place LJCMS v 1.3 allows attackers to access sensitive database information via a crafted POST request. CWE-89
SQL Injection
CVE-2020-22122 2024-11-21 14:13 2021-08-19 Show GitHub Exploit DB Packet Storm
213848 8.8 HIGH
Network
txjia imcat A remote code execution (RCE) vulnerability in /root/run/adm.php?admin-ediy&part=exdiy of imcat v5.1 allows authenticated attackers to execute arbitrary code. CWE-94
Code Injection
CVE-2020-22120 2024-11-21 14:13 2021-08-19 Show GitHub Exploit DB Packet Storm
213849 6.5 MEDIUM
Network
webtareas_project webtareas Path Traversal vulneraility exists in webTareas 2.0 via the extpath parameter in general_serv.php, which could let a malicious user read arbitrary files. CWE-22
Path Traversal
CVE-2020-23069 2024-11-21 14:13 2021-08-19 Show GitHub Exploit DB Packet Storm
213850 6.1 MEDIUM
Network
atutor atutor A reflected cross site scripting (XSS) vulnerability in the /header.tmpl.php component of ATutor 2.2.4 allows attackers to execute arbitrary web scripts or HTML via a crafted payload. CWE-79
Cross-site Scripting
CVE-2020-23341 2024-11-21 14:13 2021-08-18 Show GitHub Exploit DB Packet Storm