Vulnerability Search Top

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

Vulnerability Information Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":Feb. 9, 2026, 12:59 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
1471	4.3	警告 Network	xlplugins	nextmove	xlpluginsのWordPress用nextmoveにおけるクロスサイトリクエストフォージェリの脆弱性	CWE-352 同一生成元ポリシー違反	CVE-2024-32104	2026-01-27 17:38	2024-04-15	Show	GitHub Exploit DB Packet Storm

1472	4.3	警告 Network	xlplugins	finale	xlpluginsのWordPress用finaleにおけるクロスサイトリクエストフォージェリの脆弱性	CWE-352 同一生成元ポリシー違反	CVE-2024-32107	2026-01-27 17:38	2024-04-11	Show	GitHub Exploit DB Packet Storm

1473	6.1	警告 Network	Repute Infosystems	arforms	Repute InfosystemsのWordPress用arformsにおけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2024-32702	2026-01-27 17:38	2024-04-24	Show	GitHub Exploit DB Packet Storm

1474	8.8	重要 Network	Repute Infosystems	arforms	Repute InfosystemsのWordPress用arformsにおけるSQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2024-32706	2026-01-27 17:38	2024-04-24	Show	GitHub Exploit DB Packet Storm

1475	7.1	重要 Local	Debian Linux	Debian GNU/Linux Linux Kernel	Debian等の複数ベンダの製品における例外的な状態のチェックに関する脆弱性	CWE-754 例外的な状態における不適切なチェック	CVE-2024-35785	2026-01-27 17:38	2024-05-17	Show	GitHub Exploit DB Packet Storm

1476	7.1	重要 Local	Debian Linux	Debian GNU/Linux Linux Kernel	Debian等の複数ベンダの製品における不特定の脆弱性	CWE-noinfo 情報不足	CVE-2024-35871	2026-01-27 17:38	2024-05-19	Show	GitHub Exploit DB Packet Storm

1477	7.1	重要 Local	Debian Linux	Debian GNU/Linux Linux Kernel	Debian等の複数ベンダの製品における境界外読み取りに関する脆弱性	CWE-125 境界外読み取り	CVE-2024-36883	2026-01-27 17:38	2024-05-30	Show	GitHub Exploit DB Packet Storm

1478	7.8	重要 Local	Debian Linux	Debian GNU/Linux Linux Kernel	Debian等の複数ベンダの製品における解放済みメモリの使用に関する脆弱性	CWE-416 CWE-416	CVE-2024-36886	2026-01-27 17:38	2024-05-30	Show	GitHub Exploit DB Packet Storm

1479	7.8	重要 Local	Debian Linux	Debian GNU/Linux Linux Kernel	Debian等の複数ベンダの製品における解放済みメモリの使用に関する脆弱性	CWE-416 解放済みメモリの使用	CVE-2024-36904	2026-01-27 17:38	2024-05-30	Show	GitHub Exploit DB Packet Storm

1480	7.1	重要 Local	Debian Linux	Debian GNU/Linux Linux Kernel	Debian等の複数ベンダの製品における境界外読み取りに関する脆弱性	CWE-125 境界外読み取り	CVE-2024-36916	2026-01-27 17:38	2024-05-30	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:April 23, 2026, 4 a.m.

No	CVSS	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
283101	-	joomla mambo	com_facileforms	SQL injection vulnerability in the Facile Forms (com_facileforms) component for Joomla! and Mambo allows remote attackers to execute arbitrary SQL commands via the catid parameter to index.php.	CWE-89 SQL Injection	CVE-2008-0855	2018-10-16 07:03	2008-02-21	Show	GitHub Exploit DB Packet Storm

283102	-	woltlab	burning_board	SQL injection vulnerability in index.php in WoltLab Burning Board 3.0.3 PL 1 allows remote attackers to execute arbitrary SQL commands via the sortOrder parameter to the PMList page.	CWE-89 SQL Injection	CVE-2008-0857	2018-10-16 07:03	2008-02-21	Show	GitHub Exploit DB Packet Storm

283103	-	bea_systems	aqualogic_interaction plumtree_foundation	Cross-site scripting (XSS) vulnerability in portal/server.pt in BEA AquaLogic Interaction 6.1 through MP1 and Plumtree Foundation 6.0 through SP1 allows remote attackers to inject arbitrary web scrip…	CWE-79 Cross-site Scripting	CVE-2008-0867	2018-10-16 07:03	2008-02-21	Show	GitHub Exploit DB Packet Storm

283104	-	now	sms_mms_gateway	Multiple stack-based buffer overflows in Now SMS/MMS Gateway 2007.06.27 and earlier allow remote attackers to execute arbitrary code via a (1) long password in an Authorization header to the HTTP ser…	CWE-119 Incorrect Access of Indexable Resource ('Range Error')	CVE-2008-0871	2018-10-16 07:03	2008-02-22	Show	GitHub Exploit DB Packet Storm

283105	-	smartertools	smartermail_enterprise	Cross-site scripting (XSS) vulnerability in SmarterTools SmarterMail Enterprise 4.3 allows remote attackers to inject arbitrary web script or HTML via a STYLE attribute of an element in the Subject f…	CWE-79 Cross-site Scripting	CVE-2008-0872	2018-10-16 07:03	2008-02-22	Show	GitHub Exploit DB Packet Storm

283106	-	jlmzone	classifieds	SQL injection vulnerability in index.php in the jlmZone Classifieds module for XOOPS allows remote attackers to execute arbitrary SQL commands via the cid parameter in an Adsview action.	CWE-89 SQL Injection	CVE-2008-0873	2018-10-16 07:03	2008-02-22	Show	GitHub Exploit DB Packet Storm

283107	-	xoops	eempregos_module	SQL injection vulnerability in index.php in the eEmpregos module for XOOPS allows remote attackers to execute arbitrary SQL commands via the cid parameter in a view action.	CWE-89 SQL Injection	CVE-2008-0874	2018-10-16 07:03	2008-02-22	Show	GitHub Exploit DB Packet Storm

283108	-	xoops	eempregos_module	Additional information was found while analyzing this vulnerability. http://www.securityfocus.com/bid/27905	CWE-89 SQL Injection	CVE-2008-0874	2018-10-16 07:03	2008-02-22	Show	GitHub Exploit DB Packet Storm

283109	-	jinzora	media_jukebox	Multiple cross-site scripting (XSS) vulnerabilities in Jinzora Media Jukebox 2.7.5 allow remote attackers to inject arbitrary web script or HTML via the (1) frontend, (2) set_frontend, (3) jz_path, (…	CWE-79 Cross-site Scripting	CVE-2008-0877	2018-10-16 07:03	2008-02-22	Show	GitHub Exploit DB Packet Storm

283110	-	jinzora	media_jukebox	During analysis additional information was found for this vulnerability. http://www.securityfocus.com/bid/27876/info	CWE-79 Cross-site Scripting	CVE-2008-0877	2018-10-16 07:03	2008-02-22	Show	GitHub Exploit DB Packet Storm