Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 4, 2026, 4 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
206431 4 警告 Moodle - Moodle の enrol/externallib.php の core_enrol_get_enrolled_users Web サービスにおける重要なコース参加者の情報を取得される脆弱性 CWE-200
CWE-264
CVE-2015-5339 2016-03-3 15:48 2015-11-16 Show GitHub Exploit DB Packet Storm
206432 6.8 警告 Moodle - Moodle のレッスンモジュールにおけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反
CVE-2015-5338 2016-03-3 15:48 2015-11-16 Show GitHub Exploit DB Packet Storm
206433 4.3 警告 Moodle - Moodle におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2015-5337 2016-03-3 15:48 2015-11-16 Show GitHub Exploit DB Packet Storm
206434 3.5 注意 Moodle - Moodle の survey モジュールにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2015-5336 2016-03-3 15:48 2015-11-16 Show GitHub Exploit DB Packet Storm
206435 4.3 警告 Moodle - Moodle の admin/registration/register.php におけるクロスサイトリクエストフォージェリの脆弱性 CWE-200
CWE-352
CVE-2015-5335 2016-03-3 15:48 2015-11-16 Show GitHub Exploit DB Packet Storm
206436 7.1 危険 Moodle - Moodle の Atto におけるサービス運用妨害 (DoS) の脆弱性 CWE-399
リソース管理の問題
CVE-2015-5332 2016-03-3 15:48 2015-11-16 Show GitHub Exploit DB Packet Storm
206437 4 警告 Moodle - Moodle におけるアクセス制限を回避される脆弱性 CWE-Other
その他
CVE-2015-5331 2016-03-3 15:48 2015-11-16 Show GitHub Exploit DB Packet Storm
206438 4 警告 Moodle - Moodle の Forum モジュールにおける任意のグループに投稿される脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2015-5272 2016-03-3 15:48 2015-09-21 Show GitHub Exploit DB Packet Storm
206439 4.9 警告 Moodle - Moodle の enrol/meta/locallib.php の enrol_meta_sync 関数における管理者権限を取得される脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2015-5266 2016-03-3 15:46 2015-09-21 Show GitHub Exploit DB Packet Storm
206440 4.3 警告 IBM - IBM Business Process Manager の Process Portal におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2015-8524 2016-03-3 14:05 2015-12-8 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 4, 2026, 4:17 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
347381 - coolforum coolforum Multiple SQL injection vulnerabilities in CoolForum 0.8 and earlier allow remote attackers to execute arbitrary SQL commands via (1) the pseudo parameter to entete.php or (2) the login parameter to r… NVD-CWE-Other
CVE-2005-0858 2017-07-11 10:32 2005-05-2 Show GitHub Exploit DB Packet Storm
347382 - delegate delegate Multiple buffer overflows in DeleGate before 8.11.1 may allow attackers to cause a denial of service or execute arbitrary code, possibly due to "overflows on arrays." NVD-CWE-Other
CVE-2005-0861 2017-07-11 10:32 2005-05-2 Show GitHub Exploit DB Packet Storm
347383 - phpopenchat phpopenchat Cross-site scripting (XSS) vulnerability in PHPOpenChat v3.x allows remote attackers to inject arbitrary web script or HTML via (1) the chatter parameter to regulars.php or (2) the chatter, chatter1,… NVD-CWE-Other
CVE-2005-0863 2017-07-11 10:32 2005-05-2 Show GitHub Exploit DB Packet Storm
347384 - phpsysinfo phpsysinfo phpSysInfo 2.3 allows remote attackers to obtain sensitive information via a direct request to (1) class.OpenBSD.inc.php, (2) class.NetBSD.inc.php, (3) class.FreeBSD.inc.php, (4) class.Darwin.inc.php… NVD-CWE-Other
CVE-2005-0869 2017-07-11 10:32 2005-05-2 Show GitHub Exploit DB Packet Storm
347385 - phpsysinfo phpsysinfo Multiple cross-site scripting (XSS) vulnerabilities in phpSysInfo 2.3, when register_globals is enabled, allow remote attackers to inject arbitrary web script or HTML via the (1) sensor_program param… NVD-CWE-Other
CVE-2005-0870 2017-07-11 10:32 2005-05-2 Show GitHub Exploit DB Packet Storm
347386 - phpbb_group phpbb calendar_scheduler.php in Topic Calendar 1.0.1 module for phpBB, when running on a Microsoft IIS server, allows remote attackers to obtain sensitive information via invalid parameters, which reveal t… NVD-CWE-Other
CVE-2005-0871 2017-07-11 10:32 2005-05-2 Show GitHub Exploit DB Packet Storm
347387 - phpbb_group phpbb Cross-site scripting (XSS) vulnerability in calendar_scheduler.php in the Topic Calendar 1.0.1 module for phpBB allows remote attackers to inject arbitrary web script or HTML via the start parameter. NVD-CWE-Other
CVE-2005-0872 2017-07-11 10:32 2005-05-2 Show GitHub Exploit DB Packet Storm
347388 - dnsmasq dnsmasq Off-by-one buffer overflow in Dnsmasq before 2.21 may allow attackers to execute arbitrary code via the DHCP lease file. NVD-CWE-Other
CVE-2005-0876 2017-07-11 10:32 2005-05-2 Show GitHub Exploit DB Packet Storm
347389 - mercuryboard mercuryboard_message_board Cross-site scripting (XSS) vulnerability in MercuryBoard before 1.1.3 allows remote attackers to inject arbitrary web script or HTML via the title field of a PM (private message). NVD-CWE-Other
CVE-2005-0878 2017-07-11 10:32 2005-03-23 Show GitHub Exploit DB Packet Storm
347390 - vortex_portal vortex_portal PHP remote file include vulnerability in (1) content.php and (2) index.php for Vortex Portal allows remote attackers to execute arbitrary PHP code via a URL in the act parameter. NVD-CWE-Other
CVE-2005-0879 2017-07-11 10:32 2005-05-2 Show GitHub Exploit DB Packet Storm