Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Feb. 9, 2026, 12:59 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
216281 7.5 危険 Kolja Schleich - WordPress 用 LeagueManager プラグインの leaguemanager.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2013-1852 2014-02-6 16:41 2013-03-15 Show GitHub Exploit DB Packet Storm
216282 4.3 警告 Geeklog - Geeklog の Calendar プラグインの calendar/index.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2013-1470 2014-02-6 16:40 2013-02-20 Show GitHub Exploit DB Packet Storm
216283 4.3 警告 glFusion - glFusion におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2013-1466 2014-02-6 16:39 2013-01-30 Show GitHub Exploit DB Packet Storm
216284 4.3 警告 フォーティネット - Fortinet Fortiweb にクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2013-7181 2014-02-6 16:35 2014-02-3 Show GitHub Exploit DB Packet Storm
216285 4.3 警告 フォーティネット - Fortinet FortiOS にクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2013-7182 2014-02-6 16:34 2014-02-3 Show GitHub Exploit DB Packet Storm
216286 6.9 警告 Rockwell Automation - Rockwell Automation RSLogix 5000 における重要な情報を取得される脆弱性 CWE-255
証明書・パスワード管理
CVE-2014-0755 2014-02-6 15:33 2014-02-4 Show GitHub Exploit DB Packet Storm
216287 5.6 警告 SystemTap - SystemTap における重要な情報を取得される脆弱性 CWE-399
リソース管理の問題
CVE-2012-0875 2014-02-6 15:33 2012-02-20 Show GitHub Exploit DB Packet Storm
216288 6.8 警告 KDE project
Novell
Canonical
- Ark におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル
CVE-2011-2725 2014-02-6 15:32 2011-07-26 Show GitHub Exploit DB Packet Storm
216289 6.8 警告 Rapid7 - Rapid7 Nexpose のセキュリティコンソールにおけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反
CVE-2012-6493 2014-02-6 14:40 2012-12-19 Show GitHub Exploit DB Packet Storm
216290 9.3 危険 Csound - Csound の util/lpci_main.c 内の main 関数におけるスタックベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー
CVE-2012-2108 2014-02-6 14:38 2012-04-4 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:April 26, 2026, 4:08 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
289191 - chernobile chernobile SQL injection vulnerability in default.asp in ChernobiLe 1.0 allows remote attackers to execute arbitrary SQL commands via the User (username) field. CWE-89
SQL Injection
CVE-2007-0582 2017-10-19 10:30 2007-01-31 Show GitHub Exploit DB Packet Storm
289192 - forum_livre forum_livre SQL injection vulnerability in Forum Livre 1.0 allows remote attackers to execute arbitrary SQL commands via the user parameter to info_user.asp. NVD-CWE-Other
CVE-2007-0589 2017-10-19 10:30 2007-01-31 Show GitHub Exploit DB Packet Storm
289193 - forum_livre forum_livre Cross-site scripting (XSS) vulnerability in busca2.asp in Forum Livre 1.0 remote attackers to inject arbitrary web script or HTML via the palavra parameter. NVD-CWE-Other
CVE-2007-0590 2017-10-19 10:30 2007-01-31 Show GitHub Exploit DB Packet Storm
289194 - vu_le_an virtual_path PHP remote file inclusion vulnerability in configure.php in Vu Le An Virtual Path (VirtualPath) 1.0 allows remote attackers to execute arbitrary PHP code via a URL in the phpbb_root_path parameter. NVD-CWE-Other
CVE-2007-0591 2017-10-19 10:30 2007-01-31 Show GitHub Exploit DB Packet Storm
289195 - eclectic_designs cascadianfaq SQL injection vulnerability in index.php in Eclectic Designs CascadianFAQ 4.1 and earlier allows remote attackers to execute arbitrary SQL commands via the catid parameter. NVD-CWE-Other
CVE-2007-0631 2017-10-19 10:30 2007-02-1 Show GitHub Exploit DB Packet Storm
289196 - t-systems_solutions_for_research_gmbh mynews PHP remote file inclusion vulnerability in include/themes/themefunc.php in MyNews 4.2.2 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the myNewsConf[path][sys][index]… NVD-CWE-Other
CVE-2007-0633 2017-10-19 10:30 2007-02-1 Show GitHub Exploit DB Packet Storm
289197 - galeria_zdjec galeria_zdjec Directory traversal vulnerability in zd_numer.php in Galeria Zdjec 3.0 and earlier allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the galeria parameter, as… NVD-CWE-Other
CVE-2007-0637 2017-10-19 10:30 2007-02-1 Show GitHub Exploit DB Packet Storm
289198 - vlad_alexa_mancini phpfootball show.php in Vlad Alexa Mancini PHPFootball 1.6 allows remote attackers to obtain sensitive information (database contents) via a % (percent) character in the dbfieldv parameter. NVD-CWE-Other
CVE-2007-0638 2017-10-19 10:30 2007-02-1 Show GitHub Exploit DB Packet Storm
289199 - guppy guppy Multiple static code injection vulnerabilities in error.php in GuppY 4.5.16 and earlier allow remote attackers to inject arbitrary PHP code into a .inc file in the data/ directory via (1) a REMOTE_AD… NVD-CWE-Other
CVE-2007-0639 2017-10-19 10:30 2007-02-1 Show GitHub Exploit DB Packet Storm
289200 - bloodshed_software dev-c\+\+ Stack-based buffer overflow in Bloodshed Dev-C++ 4.9.9.2 allows user-assisted remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a long line in … NVD-CWE-Other
CVE-2007-0643 2017-10-19 10:30 2007-02-1 Show GitHub Exploit DB Packet Storm