Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Feb. 9, 2026, 12:59 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
194871 7.2 重要
Network
Piwigo - Piwigo の admin/batch_manager.php におけるファイルインクルージョン攻撃を実行される脆弱性 CWE-284
不適切なアクセス制御
CVE-2016-10084 2017-01-11 17:37 2016-12-19 Show GitHub Exploit DB Packet Storm
194872 6.1 警告
Network
Piwigo - Piwigo の admin/plugin.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2016-10083 2017-01-11 17:37 2016-12-19 Show GitHub Exploit DB Packet Storm
194873 9.8 緊急
Network
s9y - Serendipity の include/functions_installer.inc.php におけるファイルインクルードの脆弱性 CWE-284
不適切なアクセス制御
CVE-2016-10082 2017-01-11 17:07 2016-12-19 Show GitHub Exploit DB Packet Storm
194874 9.8 緊急
Network
Western Digital Corporation - Western Digital MyCloud NAS の /web/google_analytics.php URL における root 権限でコマンドインジェクションを実行される脆弱性 CWE-77
コマンドインジェクション
CVE-2016-10108 2017-01-11 16:31 2016-12-14 Show GitHub Exploit DB Packet Storm
194875 9.8 緊急
Network
Western Digital Corporation - Western Digital MyCloud NAS の index.php ページにおける root 権限でコマンドインジェクションを実行される脆弱性 CWE-77
コマンドインジェクション
CVE-2016-10107 2017-01-11 16:31 2016-12-14 Show GitHub Exploit DB Packet Storm
194876 7.8 重要
Local
ヒューレット・パッカード - HP ThinPro におけるアクセス制限を回避される脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2016-2246 2017-01-11 16:02 2016-10-18 Show GitHub Exploit DB Packet Storm
194877 5.3 警告
Network
The Borg Collective - Borg におけるアーカイブを上書きされる脆弱性 CWE-20
不適切な入力確認
CVE-2016-10100 2017-01-11 15:54 2016-12-18 Show GitHub Exploit DB Packet Storm
194878 5.3 警告
Network
The Borg Collective - Borg におけるアーカイブの一覧を偽造される脆弱性 CWE-310
暗号の問題
CVE-2016-10099 2017-01-11 15:54 2016-12-18 Show GitHub Exploit DB Packet Storm
194879 7 重要
Local
Linux - Linux Kernel の sg の実装における任意のカーネルメモリ領域を読み書きされる脆弱性 CWE-416
解放済みメモリの使用
CVE-2016-10088 2017-01-11 15:45 2016-12-17 Show GitHub Exploit DB Packet Storm
194880 7.8 重要
Local
Linux - Linux Kernel の net/netlink/af_netlink.c の netlink_dump 関数におけるサービス運用妨害 (DoS) の脆弱性 CWE-362
CWE-415
CVE-2016-9806 2017-01-11 15:44 2016-06-24 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:April 26, 2026, 4:08 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
293541 - jamit_software jamit_job_board SQL injection vulnerability in index.php in Jamit Job Board 3.4.10 allows remote attackers to execute arbitrary SQL commands via the show_emp parameter. CWE-89
SQL Injection
CVE-2008-5295 2017-09-29 10:32 2008-12-2 Show GitHub Exploit DB Packet Storm
293542 - pilot_group pg_real_estate_solution SQL injection vulnerability in admin/index.php in PG Real Estate Solution allows remote attackers to execute arbitrary SQL commands via the login_lg parameter (username). NOTE: some of these details… CWE-89
SQL Injection
CVE-2008-5306 2017-09-29 10:32 2008-12-2 Show GitHub Exploit DB Packet Storm
293543 - pilot_group pg_real_roommate_finder_solution SQL injection vulnerability in admin/index.php in PG Roommate Finder Solution allows remote attackers to execute arbitrary SQL commands via the login_lg parameter. NOTE: some of these details are ob… CWE-89
SQL Injection
CVE-2008-5307 2017-09-29 10:32 2008-12-2 Show GitHub Exploit DB Packet Storm
293544 - lovecms the_simple_forum The Simple Forum 3.1d module for LoveCMS 1.6.2 Final does not properly restrict access to administrator functions, which allows remote attackers to change the administrator password via a direct requ… CWE-264
Permissions, Privileges, and Access Controls
CVE-2008-5308 2017-09-29 10:32 2008-12-2 Show GitHub Exploit DB Packet Storm
293545 - netart_media real_estate_portal SQL injection vulnerability in NetArt Media Real Estate Portal 1.2 allows remote attackers to execute arbitrary SQL commands via the ad_id parameter in the re_send_email module to index.php. CWE-89
SQL Injection
CVE-2008-5309 2017-09-29 10:32 2008-12-2 Show GitHub Exploit DB Packet Storm
293546 - netart_media car_portal SQL injection vulnerability in image.php in NetArt Media Car Portal 2.0 allows remote attackers to execute arbitrary SQL commands via the id parameter. CWE-89
SQL Injection
CVE-2008-5310 2017-09-29 10:32 2008-12-2 Show GitHub Exploit DB Packet Storm
293547 - netart_media blog_system SQL injection vulnerability in image.php in NetArt Media Blog System 1.5 allows remote attackers to execute arbitrary SQL commands via the id parameter. CWE-89
SQL Injection
CVE-2008-5311 2017-09-29 10:32 2008-12-2 Show GitHub Exploit DB Packet Storm
293548 - clam_anti-virus clamav Stack consumption vulnerability in libclamav/special.c in ClamAV before 0.94.2 allows remote attackers to cause a denial of service (daemon crash) via a crafted JPEG file, related to the cli_check_jp… CWE-399
 Resource Management Errors
CVE-2008-5314 2017-09-29 10:32 2008-12-4 Show GitHub Exploit DB Packet Storm
293549 - littlecms lcms
little_cms_color_engine
Buffer overflow in the ReadEmbeddedTextTag function in src/cmsio1.c in Little cms color engine (aka lcms) before 1.16 allows attackers to have an unknown impact via vectors related to a length parame… CWE-119
Incorrect Access of Indexable Resource ('Range Error') 
CVE-2008-5316 2017-09-29 10:32 2008-12-4 Show GitHub Exploit DB Packet Storm
293550 - e107 e107 SQL injection vulnerability in usersettings.php in e107 0.7.13 and earlier allows remote authenticated users to execute arbitrary SQL commands via the ue[] parameter. CWE-89
SQL Injection
CVE-2008-5320 2017-09-29 10:32 2008-12-4 Show GitHub Exploit DB Packet Storm