Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 9, 2026, 4 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
198691 8.8 重要
Network
アップル
Debian
Canonical
- 複数の Apple 製品で使用される libxml2 の htmlPArsePubidLiteral および htmlParseSystemiteral 関数におけるサービス運用妨害 (DoS) の脆弱性 CWE-119
バッファエラー
CVE-2016-1837 2016-11-16 16:04 2016-05-16 Show GitHub Exploit DB Packet Storm
198692 8.8 重要
Network
アップル
Debian
Canonical
- 複数の Apple 製品で使用される libxml2 の xmlDictComputeFastKey 関数におけるサービス運用妨害 (DoS) の脆弱性 CWE-119
バッファエラー
CVE-2016-1836 2016-11-16 16:04 2016-05-16 Show GitHub Exploit DB Packet Storm
198693 8.8 重要
Network
アップル
Debian
Canonical
- Apple iOS および OS X で使用される libxml2 の xmlSAX2AttributeNs 関数におけるサービス運用妨害 (DoS) の脆弱性 CWE-119
バッファエラー
CVE-2016-1835 2016-11-16 16:04 2016-05-16 Show GitHub Exploit DB Packet Storm
198694 8.4 重要
Local
Objective Development Software GmbH - Little Snitch におけるバッファオーバーフローの脆弱性 CWE-119
バッファエラー
CVE-2016-8661 2016-11-16 14:53 2016-08-6 Show GitHub Exploit DB Packet Storm
198695 8.4 重要
Local
DELL EMC (旧 EMC Corporation) - EMC Avamar Data Store および Avamar Virtual Edition における Avamar のサーバを侵害される脆弱性 CWE-20
不適切な入力確認
CVE-2016-0909 2016-11-16 14:46 2016-10-20 Show GitHub Exploit DB Packet Storm
198696 8.8 重要
Network
dotCMS - dotCMS の "Site Browser > HTML pages" スクリーンにおける SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2016-8908 2016-11-16 14:11 2016-01-5 Show GitHub Exploit DB Packet Storm
198697 8.8 重要
Network
dotCMS - dotCMS の "Content Types > Content Types" スクリーンにおける SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2016-8907 2016-11-16 14:11 2016-01-5 Show GitHub Exploit DB Packet Storm
198698 8.8 重要
Network
dotCMS - dotCMS の "Site Browser > Links pages" スクリーンにおける SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2016-8906 2016-11-16 14:10 2016-01-5 Show GitHub Exploit DB Packet Storm
198699 8.8 重要
Network
dotCMS - dotCMS の JSONTags サーブレットにおける SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2016-8905 2016-11-16 14:10 2016-01-5 Show GitHub Exploit DB Packet Storm
198700 8.8 重要
Network
dotCMS - dotCMS の "Site Browser > Containers pages" スクリーンにおける SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2016-8904 2016-11-16 14:10 2016-01-5 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 9, 2026, 5:07 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
347381 - vote_pro vote_pro SQL injection vulnerability in poll_frame.php in Vote! Pro 4.0 and earlier allows remote attackers to execute arbitrary SQL commands via the poll_id parameter. CWE-89
SQL Injection
CVE-2005-4632 2008-09-20 13:43 2005-12-31 Show GitHub Exploit DB Packet Storm
347382 - activecampaign supporttrio SQL injection vulnerability in index.php in ActiveCampaign SupportTrio 1.4 allows remote attackers to execute arbitrary SQL commands via the page parameter. NOTE: the provenance of this information … NVD-CWE-Other
CVE-2005-4634 2008-09-20 13:43 2005-12-31 Show GitHub Exploit DB Packet Storm
347383 - class-1 poll_software SQL injection vulnerability in index.php in class-1 Poll Software 0.4 and earlier allows remote attackers to execute arbitrary SQL commands via the (1) pollid or (2) previouspoll parameters. NVD-CWE-Other
CVE-2005-4640 2008-09-20 13:43 2005-12-31 Show GitHub Exploit DB Packet Storm
347384 - eazycms eazycms SQL injection vulnerability in home.php in eazyCMS 2.0 allows remote attackers to execute arbitrary SQL commands via the page_id parameter. NVD-CWE-Other
CVE-2005-4641 2008-09-20 13:43 2005-12-31 Show GitHub Exploit DB Packet Storm
347385 - alstrasoft epay SQL injection vulnerability in index.php in AlstraSoft EPay Pro 2.0 allows remote attackers to execute arbitrary SQL commands via the pmodule parameter. NVD-CWE-Other
CVE-2005-4651 2008-09-20 13:43 2005-12-31 Show GitHub Exploit DB Packet Storm
347386 - sysbotz systems_panel Multiple SQL injection vulnerabilities in Sysbotz Systems Panel 1.0.6 and earlier allow remote attackers to execute arbitrary SQL commands via (1) the cid parameter in knowledgebase/index.php, (2) th… NVD-CWE-Other
CVE-2005-4719 2008-09-20 13:43 2005-12-31 Show GitHub Exploit DB Packet Storm
347387 - nelogic_technologies nephp_publisher Multiple SQL injection vulnerabilities in index.php in NeLogic Nephp Publisher 4.5.2 and earlier allow remote attackers to execute arbitrary SQL commands via the (1) id and (2) nnet_catid parameters. NVD-CWE-Other
CVE-2005-4743 2008-09-20 13:43 2005-12-31 Show GitHub Exploit DB Packet Storm
347388 - sergids top_music_module Multiple SQL injection vulnerabilities in SergiDs Top Music module 3.0 PR3 and earlier for PHP-Nuke allow remote attackers to execute arbitrary SQL commands via the (1) idartist, (2) idsong, and (3) … NVD-CWE-Other
CVE-2005-4781 2008-09-20 13:43 2005-12-31 Show GitHub Exploit DB Packet Storm
347389 - locazo locazolist_classifieds Cross-site scripting (XSS) vulnerability in searchdb.asp in LocazoList 1.03c and earlier allows remote attackers to inject arbitrary web script or HTML via the q parameter. NVD-CWE-Other
CVE-2005-4205 2008-09-20 13:42 2005-12-13 Show GitHub Exploit DB Packet Storm
347390 - php_web_scripts link_up_gold SQL injection vulnerability in poll.php in Link Up Gold 2.5 and earlier allows remote attackers to execute arbitrary SQL commands via the number parameter. NVD-CWE-Other
CVE-2005-4230 2008-09-20 13:42 2005-12-14 Show GitHub Exploit DB Packet Storm