Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Feb. 9, 2026, 12:59 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
224551 7.5 危険 scripts24 - Scripts24 iPost および iTGP の go.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-3491 2012-12-20 18:52 2008-08-6 Show GitHub Exploit DB Packet Storm
224552 7.5 危険 phpx - PHPX の includes/functions.inc.php の checkCookie 関数における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-3489 2012-12-20 18:52 2008-08-6 Show GitHub Exploit DB Packet Storm
224553 7.5 危険 phpauctions - PHPAuction GPL の profile.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-3487 2012-12-20 18:52 2008-08-6 Show GitHub Exploit DB Packet Storm
224554 4.3 警告 screwturn - ScrewTurn Wiki におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2008-3483 2012-12-20 18:52 2008-08-5 Show GitHub Exploit DB Packet Storm
224555 2.6 注意 The phpMyAdmin Project - phpMyAdmin におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2008-3457 2012-12-20 18:52 2008-07-28 Show GitHub Exploit DB Packet Storm
224556 6.4 警告 The phpMyAdmin Project - phpMyAdmin におけるなりすましされる脆弱性 CWE-59
リンク解釈の問題 		CVE-2008-3456 2012-12-20 18:52 2008-07-28 Show GitHub Exploit DB Packet Storm
224557 4 警告 phpwebgallery - PhpWebGallery における他のユーザの電子メールアドレスを取得される脆弱性 CWE-200
情報漏えい 		CVE-2008-3451 2012-12-20 18:52 2008-08-4 Show GitHub Exploit DB Packet Storm
224558 7.5 危険 phpmyrealty - PMR の index.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-3445 2012-12-20 18:52 2008-08-4 Show GitHub Exploit DB Packet Storm
224559 7.5 危険 winzip - WinZip における任意のコードを実行される脆弱性 CWE-94
コード・インジェクション 		CVE-2008-3442 2012-12-20 18:52 2008-08-1 Show GitHub Exploit DB Packet Storm
224560 7.5 危険 サン・マイクロシステムズ - Sun Java における任意のコードを実行される脆弱性 CWE-94
コード・インジェクション 		CVE-2008-3440 2012-12-20 18:52 2008-08-1 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:April 22, 2026, 4 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
1781 2.2 LOW
Network 		- - Se ha identificado una vulnerabilidad en Mendix OIDC SSO (compatible con Mendix 10) (todas las versiones anteriores a la V4.0.0) y Mendix OIDC SSO (compatible con Mendix 9) (todas las versiones). El … CWE-266
 Incorrect Privilege Assignment 		CVE-2025-40571 2026-04-14 18:16 2025-05-13 Show GitHub Exploit DB Packet Storm
1782 8.2 HIGH
Local 		- - A vulnerability has been identified in SIMATIC Field PG M5 (All versions), SIMATIC Field PG M6 (All versions < V26.01.12), SIMATIC IPC BX-21A (All versions < V31.01.07), SIMATIC IPC BX-32A (All versi… CWE-693
 Protection Mechanism Failure 		CVE-2024-56182 2026-04-14 18:16 2025-03-11 Show GitHub Exploit DB Packet Storm
1783 8.2 HIGH
Local 		- - Se ha identificado una vulnerabilidad en SIMATIC Field PG M5 (todas las versiones), SIMATIC Field PG M6 (todas las versiones &lt; V26.01.12), SIMATIC IPC BX-21A (todas las versiones &lt; V31.01.07), … CWE-693
 Protection Mechanism Failure 		CVE-2024-56182 2026-04-14 18:16 2025-03-11 Show GitHub Exploit DB Packet Storm
1784 8.2 HIGH
Local 		- - A vulnerability has been identified in SIMATIC Field PG M5 (All versions), SIMATIC IPC BX-21A (All versions < V31.01.07), SIMATIC IPC BX-32A (All versions < V29.01.07), SIMATIC IPC BX-39A (All versio… CWE-693
 Protection Mechanism Failure 		CVE-2024-56181 2026-04-14 18:16 2025-03-11 Show GitHub Exploit DB Packet Storm
1785 8.2 HIGH
Local 		- - Se ha identificado una vulnerabilidad en SIMATIC Field PG M5 (todas las versiones), SIMATIC IPC BX-21A (todas las versiones &lt; V31.01.07), SIMATIC IPC BX-32A (todas las versiones &lt; V29.01.07), S… CWE-693
 Protection Mechanism Failure 		CVE-2024-56181 2026-04-14 18:16 2025-03-11 Show GitHub Exploit DB Packet Storm
1786 9.1 CRITICAL
Network 		siemens 6gk5205-3bb00-2ab2_firmware
6gk5205-3bb00-2tb2_firmware
6gk5205-3bd00-2tb2_firmware
6gk5205-3bd00-2ab2_firmware
6gk5205-3bf00-2tb2_firmware
6gk5205-3bf00-2ab2_firmware
6gk5208-0ba00… 		Affected devices do not properly sanitize an input field. This could allow an authenticated remote attacker with administrative privileges to inject code or spawn a system root shell. Follow-up of C… CWE-74
Injection 		CVE-2023-44373 2026-04-14 18:16 2023-11-14 Show GitHub Exploit DB Packet Storm
1787 9.1 CRITICAL
Network 		siemens 6gk5205-3bb00-2ab2_firmware
6gk5205-3bb00-2tb2_firmware
6gk5205-3bd00-2tb2_firmware
6gk5205-3bd00-2ab2_firmware
6gk5205-3bf00-2tb2_firmware
6gk5205-3bf00-2ab2_firmware
6gk5208-0ba00… 		Se ha identificado una vulnerabilidad en: SCALANCE XB205-3 (SC, PN) (V &lt; 4.5), SCALANCE XB205-3 (ST, E/IP) (V &lt; 4.5), SCALANCE XB205-3 (ST , E/IP) (V &lt; 4.5), SCALANCE XB205-3 (ST, PN) (V… CWE-74
Injection 		CVE-2023-44373 2026-04-14 18:16 2023-11-14 Show GitHub Exploit DB Packet Storm
1788 4.8 MEDIUM
Network 		siemens scalance_m-800_firmware
scalance_s615_firmware
scalance_sc-600_firmware
scalance_sc622-2c_firmware
scalance_sc632-2c_firmware
scalance_sc636-2c_firmware
scalance_sc642-2c_firmware 		Affected devices do not properly sanitize data introduced by an user when rendering the web interface. This could allow an authenticated remote attacker with administrative privileges to inject code … CWE-80
NVD-CWE-Other
Basic XSS 		CVE-2022-36325 2026-04-14 18:16 2022-08-10 Show GitHub Exploit DB Packet Storm
1789 4.8 MEDIUM
Network 		siemens scalance_m-800_firmware
scalance_s615_firmware
scalance_sc-600_firmware
scalance_sc622-2c_firmware
scalance_sc632-2c_firmware
scalance_sc636-2c_firmware
scalance_sc642-2c_firmware 		Los dispositivos afectados no sanean correctamente los datos introducidos por un usuario al renderizar la interfaz web. Esto podría permitir a un atacante remoto autenticado con privilegios administr… CWE-80
NVD-CWE-Other
Basic XSS 		CVE-2022-36325 2026-04-14 18:16 2022-08-10 Show GitHub Exploit DB Packet Storm
1790 7.5 HIGH
Network 		siemens scalance_m-800_firmware
scalance_s615_firmware
scalance_w700_ieee_802.11ax_firmware
scalance_w700_ieee_802.11n_firmware
scalance_w700_ieee_802.11ac_firmware
scalance_xb-200_firmware 		Affected devices do not properly handle the renegotiation of SSL/TLS parameters. This could allow an unauthenticated remote attacker to bypass the TCP brute force prevention and lead to a denial of s… CWE-770
 Allocation of Resources Without Limits or Throttling 		CVE-2022-36324 2026-04-14 18:16 2022-08-10 Show GitHub Exploit DB Packet Storm