Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Feb. 9, 2026, 12:59 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
223991 4.3 警告 Tribal Ltd. - Tribiq CMS Community の index.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2008-5961 2012-12-20 19:10 2009-01-23 Show GitHub Exploit DB Packet Storm
223992 7.5 危険 Tribal Ltd. - Tribiq CMS Community の index.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-5960 2012-12-20 19:10 2009-01-23 Show GitHub Exploit DB Packet Storm
223993 5 警告 phpstreet - Wbstreet におけるデータベースの資格情報を取得される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2008-5956 2012-12-20 19:10 2009-01-23 Show GitHub Exploit DB Packet Storm
223994 7.5 危険 phpstreet - Wbstreet の show.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-5955 2012-12-20 19:10 2009-01-23 Show GitHub Exploit DB Packet Storm
223995 7.5 危険 tiddlywiki - ccTiddly における PHP リモートファイルインクルージョンの脆弱性 CWE-94
コード・インジェクション 		CVE-2008-5949 2012-12-20 19:10 2009-01-23 Show GitHub Exploit DB Packet Storm
223996 6.8 警告 yapbb - YapBB の include/class_yapbbcooker.php における PHP リモートファイルインクルージョンの脆弱性 CWE-94
コード・インジェクション 		CVE-2008-5947 2012-12-20 19:10 2009-01-22 Show GitHub Exploit DB Packet Storm
223997 7.5 危険 PHP-Fusion - PHP-Fusion の readmore.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-5946 2012-12-20 19:10 2009-01-22 Show GitHub Exploit DB Packet Storm
223998 7.8 危険 zkesoft - AyeView におけるサービス運用妨害 (メモリ消費またはアプリケーションクラッシュ) の脆弱性 CWE-20
不適切な入力確認 		CVE-2008-5937 2012-12-20 19:10 2009-01-21 Show GitHub Exploit DB Packet Storm
223999 5 警告 the net guys - The Net Guys ASPired2Blog におけるユーザ名などを含むデータベースファイルをダウンロードされる脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2008-5931 2012-12-20 19:10 2009-01-21 Show GitHub Exploit DB Packet Storm
224000 7.5 危険 the net guys - The Net Guys ASPired2Blog の admin/blog_comments.asp における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-5930 2012-12-20 19:10 2009-01-21 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:April 19, 2026, 4:09 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
1401 4.3 MEDIUM
Network 		- - Cross Site Request Forgery vulnerability in Phpbb phbb3 v.3.3.15 allows a local attacker to execute arbitrary code via the Admin Control Panel icon management functionality. CWE-352
 Origin Validation Error 		CVE-2025-70811 2026-04-15 02:16 2026-04-10 Show GitHub Exploit DB Packet Storm
1402 8.8 HIGH
Network 		- - Cross Site Request Forgery vulnerability in Phpbb phbb3 v.3.3.15 allows a local attacker to execute arbitrary code via the login function and the authentication mechanism CWE-352
 Origin Validation Error 		CVE-2025-70810 2026-04-15 02:16 2026-04-10 Show GitHub Exploit DB Packet Storm
1403 8.8 HIGH
Network 		- - An issue was discovered in Kiamo before 8.4 allowing authenticated administrative attackers to execute arbitrary PHP code on the server. CWE-94
Code Injection 		CVE-2025-70364 2026-04-15 02:16 2026-04-10 Show GitHub Exploit DB Packet Storm
1404 9.8 CRITICAL
Network 		microsoft azure_cloud_shell Server-side request forgery (ssrf) in Azure Cloud Shell allows an unauthorized attacker to elevate privileges over a network. CWE-918
Server-Side Request Forgery (SSRF)  		CVE-2026-32169 2026-04-15 02:14 2026-03-20 Show GitHub Exploit DB Packet Storm
1405 9.8 CRITICAL
Network 		microsoft azure_cloud_shell Falsificación de petición del lado del servidor (SSRF) en Azure Cloud Shell permite a un atacante no autorizado elevar privilegios sobre una red. CWE-918
Server-Side Request Forgery (SSRF)  		CVE-2026-32169 2026-04-15 02:14 2026-03-20 Show GitHub Exploit DB Packet Storm
1406 4.3 MEDIUM
Network 		google chrome Inappropriate implementation in PDF in Google Chrome prior to 147.0.7727.55 allowed a remote attacker to bypass navigation restrictions via a crafted HTML page. (Chromium security severity: Low) CWE-358
 Improperly Implemented Security Check for Standard 		CVE-2026-5894 2026-04-15 02:06 2026-04-9 Show GitHub Exploit DB Packet Storm
1407 6.6 MEDIUM
Local 		google chrome Insufficient policy enforcement in PWAs in Google Chrome prior to 147.0.7727.55 allowed a remote attacker who had compromised the renderer process to install a PWA without user consent via a crafted … CWE-1268
CVE-2026-5892 2026-04-15 02:06 2026-04-9 Show GitHub Exploit DB Packet Storm
1408 7.5 HIGH
Network 		gitlab gitlab GitLab has remediated an issue in GitLab CE/EE affecting all versions from 13.0 before 18.8.9, 18.9 before 18.9.5, and 18.10 before 18.10.3 that could have allowed an unauthenticated user to cause de… CWE-1284
 Improper Validation of Specified Quantity in Input 		CVE-2025-12664 2026-04-15 02:04 2026-04-9 Show GitHub Exploit DB Packet Storm
1409 4.3 MEDIUM
Network 		gitlab gitlab GitLab has remediated an issue in GitLab EE affecting all versions from 16.6 before 18.8.9, 18.9 before 18.9.5, and 18.10 before 18.10.3 that under certain circumstances could have allowed an authent… CWE-862
 Missing Authorization 		CVE-2025-9484 2026-04-15 02:03 2026-04-9 Show GitHub Exploit DB Packet Storm
1410 5.7 MEDIUM
Network 		gitlab gitlab GitLab has remediated an issue in GitLab EE affecting all versions from 18.0.0 before 18.8.9, 18.9 before 18.9.5, and 18.10 before 18.10.3 that in Code Quality reports could have allowed an authentic… CWE-94
Code Injection 		CVE-2026-1516 2026-04-15 02:03 2026-04-9 Show GitHub Exploit DB Packet Storm