Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Feb. 9, 2026, 12:59 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
223081 4.3 警告 XOOPS - XOOPS におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2009-2783 2012-12-20 19:10 2009-08-17 Show GitHub Exploit DB Packet Storm
223082 7.5 危険 sellatsite.com - Smart ASP Survey の showresult.asp における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2009-2776 2012-12-20 19:10 2009-08-14 Show GitHub Exploit DB Packet Storm
223083 7.5 危険 phparcadescript - PHP Arcade Script の linkout.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2009-2775 2012-12-20 19:10 2009-08-14 Show GitHub Exploit DB Packet Storm
223084 7.5 危険 php-paid4mail - PHP Paid 4 Mail Script の paidbanner.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2009-2774 2012-12-20 19:10 2009-08-14 Show GitHub Exploit DB Packet Storm
223085 7.5 危険 shop-020 - PHP Paid 4 Mail Script の home.php における PHP リモートファイルインクルージョンの脆弱性 CWE-94
コード・インジェクション
CVE-2009-2773 2012-12-20 19:10 2009-08-14 Show GitHub Exploit DB Packet Storm
223086 4.3 警告 realtysoft - PG Roommate Finder Solution におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2009-2772 2012-12-20 19:10 2009-08-14 Show GitHub Exploit DB Packet Storm
223087 7.5 危険 powerupload - PowerUpload における管理者アクセス権を取得される脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2009-2770 2012-12-20 19:10 2009-08-14 Show GitHub Exploit DB Packet Storm
223088 6.8 警告 ultrize - Ultrize TimeSheet の include/timesheet.php における PHP リモートファイルインクルージョンの脆弱性 CWE-94
コード・インジェクション
CVE-2009-2769 2012-12-20 19:10 2009-08-14 Show GitHub Exploit DB Packet Storm
223089 7.5 危険 WordPress.org - WordPress の wp-login.php におけるデータベースの最初のユーザパスワードを強制的にリセットされる脆弱性 CWE-255
証明書・パスワード管理
CVE-2009-2762 2012-12-20 19:10 2009-08-12 Show GitHub Exploit DB Packet Storm
223090 5.5 警告 Roundup - Roundup の cgi/actions.py におけるクラス内の任意の項目を変更される脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2009-2737 2012-12-20 19:10 2009-08-11 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:April 26, 2026, 4:08 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
278341 - sun solaris
sunos
Unknown vulnerability in the libgss Generic Security Services Library in Solaris 7, 8, and 9 allows local users to gain privileges by loading their own GSS-API. NVD-CWE-Other
CVE-2005-1124 2018-10-31 01:26 2005-05-2 Show GitHub Exploit DB Packet Storm
278342 - apple keynote Apple Keynote 2.0 and 2.0.1 allows remote attackers to read arbitrary files via the keynote: URI handler in a crafted Keynote presentation. NVD-CWE-Other
CVE-2005-1408 2018-10-31 01:26 2005-05-26 Show GitHub Exploit DB Packet Storm
278343 - sun solaris
sunos
Unknown vulnerability in Solaris 7 through 9, when using Federated Naming Services (FNS), autofs, and FNS X.500 configuration, allows local users to cause a denial of service (automountd crash) when … NVD-CWE-Other
CVE-2005-1518 2018-10-31 01:26 2005-05-11 Show GitHub Exploit DB Packet Storm
278344 - sun solaris
sunos
Unknown vulnerability in NIS+ on Solaris 7, 8, and 9 allows remote attackers to cause a denial of service (rpc.nisd disabled and NIS+ unavailable) via unknown vectors. NVD-CWE-Other
CVE-2005-1591 2018-10-31 01:26 2005-05-16 Show GitHub Exploit DB Packet Storm
278345 - bea
oracle
weblogic_server
weblogic_portal
BEA WebLogic Server and WebLogic Express 8.1 SP2 and SP3 allows users with the Monitor security role to "shrink or reset JDBC connection pools." NVD-CWE-Other
CVE-2005-1742 2018-10-31 01:26 2005-05-24 Show GitHub Exploit DB Packet Storm
278346 - bea
oracle
weblogic_server
weblogic_portal
BEA WebLogic Server and WebLogic Express 8.1 through Service Pack 3 and 7.0 through Service Pack 5 does not properly handle when a security provider throws an exception, which may cause WebLogic to u… NVD-CWE-Other
CVE-2005-1743 2018-10-31 01:26 2005-05-24 Show GitHub Exploit DB Packet Storm
278347 - bea
oracle
weblogic_server
weblogic_portal
The UserLogin control in BEA WebLogic Portal 8.1 through Service Pack 3 prints the password to standard output when an incorrect login attempt is made, which could make it easier for attackers to gue… NVD-CWE-Other
CVE-2005-1745 2018-10-31 01:26 2005-05-24 Show GitHub Exploit DB Packet Storm
278348 - bea
oracle
weblogic_server
weblogic_portal
The cluster cookie parsing code in BEA WebLogic Server 7.0 through Service Pack 5 attempts to contact any host or port specified in a cookie, even when it is not in the cluster, which allows remote a… NVD-CWE-Other
CVE-2005-1746 2018-10-31 01:26 2005-05-24 Show GitHub Exploit DB Packet Storm
278349 - bea
oracle
weblogic_server
weblogic_portal
Multiple cross-site scripting (XSS) vulnerabilities in BEA WebLogic Server and Express 8.1 through Service Pack 4, and 7.0 through Service Pack 6, allow remote attackers to inject arbitrary web scrip… NVD-CWE-Other
CVE-2005-1747 2018-10-31 01:26 2005-05-24 Show GitHub Exploit DB Packet Storm
278350 - bea
oracle
weblogic_server
weblogic_portal
The embedded LDAP server in BEA WebLogic Server and Express 8.1 through Service Pack 4, and 7.0 through Service Pack 5, allows remote anonymous binds, which may allow remote attackers to view user en… NVD-CWE-Other
CVE-2005-1748 2018-10-31 01:26 2005-05-24 Show GitHub Exploit DB Packet Storm