Vulnerability Search Top
Show Search Menu
|
You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database). |
JVN Vulnerability Information
Update Date":May 19, 2026, 6 p.m.
| No | CVSS | Level Attach Vector |
Vendor Name | Project Name | Title | CWE | CVE | Update Date | Publication Date | Impact Show |
Exploit PoC Search |
|---|---|---|---|---|---|---|---|---|---|---|---|
| 226971 | 7.5 | 危険 | todd rogers | - | PHPRecipeBook の index.php における SQL インジェクションの脆弱性 |
CWE-89
SQLインジェクション |
CVE-2009-4883 | 2012-12-20 19:28 | 2010-06-11 | Show | GitHub Exploit DB Packet Storm |
| 226972 | 4.3 | 警告 | zonecheck | - | ZoneCheck の zc/publisher/html.rb におけるクロスサイトスクリプティングの脆弱性 |
CWE-79
クロスサイト・スクリプティング（XSS） |
CVE-2009-4882 | 2012-12-20 19:28 | 2010-05-26 | Show | GitHub Exploit DB Packet Storm |
| 226973 | 6.8 | 警告 | plain black | - | WebGUI におけるクロスサイトリクエストフォージェリの脆弱性 |
CWE-352
同一生成元ポリシー違反 |
CVE-2009-4877 | 2012-12-20 19:28 | 2010-05-26 | Show | GitHub Exploit DB Packet Storm |
| 226974 | 6.4 | 警告 | scripts.oldguy | - | TalkBack におけるコメントを変更される脆弱性 |
CWE-264
認可・権限・アクセス制御 |
CVE-2009-4874 | 2012-12-20 19:28 | 2010-05-26 | Show | GitHub Exploit DB Packet Storm |
| 226975 | 10 | 危険 | rhinosoft | - | Rhino Software Serv-U Web Client の HTTP サーバにおけるスタックベースのバッファオーバーフローの脆弱性 |
CWE-119
バッファエラー |
CVE-2009-4873 | 2012-12-20 19:28 | 2010-05-26 | Show | GitHub Exploit DB Packet Storm |
| 226976 | 7.5 | 危険 | phpcityportal | - | PHPCityPortal の login.php における SQL インジェクションの脆弱性 |
CWE-89
SQLインジェクション |
CVE-2009-4870 | 2012-12-20 19:28 | 2010-05-11 | Show | GitHub Exploit DB Packet Storm |
| 226977 | 4.3 | 警告 | tony million | - | Tuniac におけるバッファオーバーフローの脆弱性 |
CWE-119
バッファエラー |
CVE-2009-4867 | 2012-12-20 19:28 | 2010-05-11 | Show | GitHub Exploit DB Packet Storm |
| 226978 | 4.3 | 警告 | PunBB | - | PunBB の profile.php におけるクロスサイトスクリプティングの脆弱性 |
CWE-79
クロスサイト・スクリプティング（XSS） |
CVE-2009-4894 | 2012-12-20 19:28 | 2009-05-20 | Show | GitHub Exploit DB Packet Storm |
| 226979 | 9.3 | 危険 | ultraplayer | - | UltraPlayer Media Player におけるスタックベースのバッファオーバーフローの脆弱性 |
CWE-119
バッファエラー |
CVE-2009-4863 | 2012-12-20 19:28 | 2010-05-11 | Show | GitHub Exploit DB Packet Storm |
| 226980 | 4.3 | 警告 | supportpro | - | SupportPRO SupportDesk の shownews.php におけるクロスサイトスクリプティングの脆弱性 |
CWE-79
クロスサイト・スクリプティング（XSS） |
CVE-2009-4861 | 2012-12-20 19:28 | 2010-05-11 | Show | GitHub Exploit DB Packet Storm |
NVD Vulnerability Information
Update Date:May 19, 2026, 4:16 a.m.
| No | CVSS | Level Attach Vector |
Vendor Name | Project Name | Title | CWE | CVE | Update Date | Publication Date | Show Affected | Exploit PoC Search |
|---|---|---|---|---|---|---|---|---|---|---|---|
| 275061 | - | searchblox | searchblox | Cross-site scripting (XSS) vulnerability in SearchBlox before 8.2.1 allows remote attackers to inject arbitrary web script or HTML via the menu2 parameter to admin/main.jsp. |
CWE-79
Cross-site Scripting |
CVE-2015-3422 | 2024-11-21 11:29 | 2015-06-19 | Show | GitHub Exploit DB Packet Storm | |
| 275062 | - |
automattic debian |
genericons debian_linux |
Cross-site scripting (XSS) vulnerability in example.html in Genericons before 3.3.1, as used in WordPress before 4.2.2, allows remote attackers to inject arbitrary web script or HTML via a fragment i… |
CWE-79
Cross-site Scripting |
CVE-2015-3429 | 2024-11-21 11:29 | 2015-06-18 | Show | GitHub Exploit DB Packet Storm | |
| 275063 | - | ca |
client_automation network_and_systems_management nsm_job_management_option universal_job_management_agent virtual_assurance_for_infrastructure_managers workload_automation_ae |
CA Common Services, as used in CA Client Automation r12.5 SP01, r12.8, and r12.9; CA Network and Systems Management r11.0, r11.1, and r11.2; CA NSM Job Management Option r11.0, r11.1, and r11.2; CA U… |
CWE-20
Improper Input Validation |
CVE-2015-3318 | 2024-11-21 11:29 | 2015-06-17 | Show | GitHub Exploit DB Packet Storm | |
| 275064 | - | ca |
client_automation network_and_systems_management nsm_job_management_option universal_job_management_agent virtual_assurance_for_infrastructure_managers workload_automation_ae |
CA Common Services, as used in CA Client Automation r12.5 SP01, r12.8, and r12.9; CA Network and Systems Management r11.0, r11.1, and r11.2; CA NSM Job Management Option r11.0, r11.1, and r11.2; CA U… |
CWE-119
Incorrect Access of Indexable Resource ('Range Error') |
CVE-2015-3317 | 2024-11-21 11:29 | 2015-06-17 | Show | GitHub Exploit DB Packet Storm | |
| 275065 | - |
broadcom ca |
network_and_systems_management client_automation nsm_job_management_option universal_job_management_agent virtual_assurance_for_infrastructure_managers workload_automation_ae |
CA Common Services, as used in CA Client Automation r12.5 SP01, r12.8, and r12.9; CA Network and Systems Management r11.0, r11.1, and r11.2; CA NSM Job Management Option r11.0, r11.1, and r11.2; CA U… |
NVD-CWE-noinfo
|
CVE-2015-3316 | 2024-11-21 11:29 | 2015-06-17 | Show | GitHub Exploit DB Packet Storm | |
| 275066 | - |
canonical ffmpeg libav |
ubuntu_linux ffmpeg libav |
The msrle_decode_pal4 function in msrledec.c in Libav before 10.7 and 11.x before 11.4 and FFmpeg before 2.0.7, 2.2.x before 2.2.15, 2.4.x before 2.4.8, 2.5.x before 2.5.6, and 2.6.x before 2.6.2 all… |
CWE-119
Incorrect Access of Indexable Resource ('Range Error') |
CVE-2015-3395 | 2024-11-21 11:29 | 2015-06-17 | Show | GitHub Exploit DB Packet Storm | |
| 275067 | - |
oracle apple redhat php |
solaris linux mac_os_x enterprise_linux enterprise_linux_desktop enterprise_linux_workstation enterprise_linux_server enterprise_linux_hpc_node enterprise_linux_server_eus … |
The php_handler function in sapi/apache2handler/sapi_apache2.c in PHP before 5.4.40, 5.5.x before 5.5.24, and 5.6.x before 5.6.8, when the Apache HTTP Server 2.4.x is used, allows remote attackers to… |
CWE-20
Improper Input Validation |
CVE-2015-3330 | 2024-11-21 11:29 | 2015-06-10 | Show | GitHub Exploit DB Packet Storm | |
| 275068 | - |
apple redhat oracle php |
mac_os_x enterprise_linux_desktop enterprise_linux_workstation enterprise_linux_server enterprise_linux_hpc_node enterprise_linux_server_eus enterprise_linux_hpc_node_eus solaris… |
Multiple stack-based buffer overflows in the phar_set_inode function in phar_internal.h in PHP before 5.4.40, 5.5.x before 5.5.24, and 5.6.x before 5.6.8 allow remote attackers to execute arbitrary c… |
CWE-119
Incorrect Access of Indexable Resource ('Range Error') |
CVE-2015-3329 | 2024-11-21 11:29 | 2015-06-10 | Show | GitHub Exploit DB Packet Storm | |
| 275069 | - |
redhat apple php |
enterprise_linux_desktop enterprise_linux_workstation enterprise_linux_server enterprise_linux_hpc_node enterprise_linux_server_eus enterprise_linux_hpc_node_eus enterprise_linux
The phar_parse_metadata function in ext/phar/phar.c in PHP before 5.4.40, 5.5.x before 5.5.24, and 5.6.x before 5.6.8 allows remote attackers to cause a denial of service (heap metadata corruption) o…
|
CWE-119
|
Incorrect Access of Indexable Resource ('Range Error')
CVE-2015-3307
|
2024-11-21 11:29 |
2015-06-10 |
Show
|
GitHub
Exploit DB
Packet Storm
|
| |
| 275070 | - | montala | resourcespace | Directory traversal vulnerability in pages/setup.php in Montala Limited ResourceSpace before 7.2.6727 allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the de… |
CWE-22
Path Traversal |
CVE-2015-3648 | 2024-11-21 11:29 | 2015-06-9 | Show | GitHub Exploit DB Packet Storm |