Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 14, 2026, 10 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
227491 7.5 危険 recly - Joomla! 用の competitions コンポーネントにおける PHP リモートファイルインクルージョンの脆弱性 CWE-94
コード・インジェクション 		CVE-2008-5790 2012-12-20 19:10 2008-12-31 Show GitHub Exploit DB Packet Storm
227492 7.5 危険 recly - Joomla! 用の Recly Interactive feederator コンポーネントにおける PHP リモートファイルインクルージョンの脆弱性 CWE-94
コード・インジェクション 		CVE-2008-5789 2012-12-20 19:10 2008-12-31 Show GitHub Exploit DB Packet Storm
227493 7.5 危険 v3chat - V3 Chat - Profiles/Dating Script における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-5785 2012-12-20 19:10 2008-12-31 Show GitHub Exploit DB Packet Storm
227494 7.5 危険 v3chat - V3 Chat - Profiles/Dating Script における認証を回避される脆弱性 CWE-287
不適切な認証 		CVE-2008-5784 2012-12-20 19:10 2008-12-31 Show GitHub Exploit DB Packet Storm
227495 7.5 危険 v3chat - V3 Chat Live Support の admin/index.php における認証を回避される脆弱性 CWE-287
不適切な認証 		CVE-2008-5783 2012-12-20 19:10 2008-12-31 Show GitHub Exploit DB Packet Storm
227496 7.5 危険 zeeways - ZeeMatri の bannerclick.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-5782 2012-12-20 19:10 2008-12-31 Show GitHub Exploit DB Packet Storm
227497 7.5 危険 phpweather - PHP Weather の test.php におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2008-5771 2012-12-20 19:10 2008-12-30 Show GitHub Exploit DB Packet Storm
227498 4.3 警告 phpweather - PHP Weather の config/make_config.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2008-5770 2012-12-20 19:10 2008-12-30 Show GitHub Exploit DB Packet Storm
227499 7.5 危険 sirium - XOOPS 用の AM Events モジュールにおける SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-5768 2012-12-20 19:10 2008-12-30 Show GitHub Exploit DB Packet Storm
227500 6.8 警告 phparanoid - PHParanoid におけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反 		CVE-2008-5758 2012-12-20 19:10 2008-12-30 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 14, 2026, 4 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
274811 - debian
gaia-gis 		debian_linux
freexl 		FreeXL before 1.0.0i allows remote attackers to cause a denial of service (stack corruption) or possibly execute arbitrary code via a crafted sector in a workbook. CWE-20
 Improper Input Validation  		CVE-2015-2753 2024-11-21 11:27 2015-03-31 Show GitHub Exploit DB Packet Storm
274812 - shibboleth
debian 		service_provider
debian_linux 		Shibboleth Service Provider (SP) before 2.5.4 allows remote authenticated users to cause a denial of service (crash) via a crafted SAML message. CWE-20
 Improper Input Validation  		CVE-2015-2684 2024-11-21 11:27 2015-03-31 Show GitHub Exploit DB Packet Storm
274813 - nih
php
fedoraproject
debian
opensuse 		libzip
php
fedora
debian_linux
opensuse 		Integer overflow in the _zip_cdir_new function in zip_dirent.c in libzip 0.11.2 and earlier, as used in the ZIP extension in PHP before 5.4.39, 5.5.x before 5.5.23, and 5.6.x before 5.6.7 and other p… CWE-189
Numeric Errors 		CVE-2015-2331 2024-11-21 11:27 2015-03-30 Show GitHub Exploit DB Packet Storm
274814 - redhat
apple
opensuse
php 		enterprise_linux_desktop
enterprise_linux_workstation
enterprise_linux_server
enterprise_linux_hpc_node
enterprise_linux_server_eus
enterprise_linux_hpc_node_eus
mac_os_x
opensus… 		The move_uploaded_file implementation in ext/standard/basic_functions.c in PHP before 5.4.39, 5.5.x before 5.5.23, and 5.6.x before 5.6.7 truncates a pathname upon encountering a \x00 character, whic… CWE-264
Permissions, Privileges, and Access Controls 		CVE-2015-2348 2024-11-21 11:27 2015-03-30 Show GitHub Exploit DB Packet Storm
274815 - rxspencer_project
debian
canonical
opensuse
php 		rxspencer
debian_linux
ubuntu_linux
opensuse
php 		Integer overflow in the regcomp implementation in the Henry Spencer BSD regex library (aka rxspencer) alpha3.8.g5 on 32-bit platforms, as used in NetBSD through 6.1.5 and other products, might allow … CWE-190
 Integer Overflow or Wraparound 		CVE-2015-2305 2024-11-21 11:27 2015-03-30 Show GitHub Exploit DB Packet Storm
274816 - canonical
debian
opensuse
php
apple
redhat 		ubuntu_linux
debian_linux
opensuse
php
mac_os_x
enterprise_linux_desktop
enterprise_linux_workstation
enterprise_linux_server
enterprise_linux_hpc_node
enterprise_linux_ser… 		Use-after-free vulnerability in the phar_rename_archive function in phar_object.c in PHP before 5.5.22 and 5.6.x before 5.6.6 allows remote attackers to cause a denial of service or possibly have uns… CWE-416
 Use After Free 		CVE-2015-2301 2024-11-21 11:27 2015-03-30 Show GitHub Exploit DB Packet Storm
274817 - websense v-series_appliances
triton_ap_data
triton_ap_web
triton_ap_email 		Websense TRITON AP-WEB before 8.0.0 does not properly restrict access to files in explorer_wse/, which allows remote attackers to obtain sensitive information via a direct request to a (1) Web Securi… CWE-200
Information Exposure 		CVE-2015-2748 2024-11-21 11:27 2015-03-26 Show GitHub Exploit DB Packet Storm
274818 - websense v-series_appliances
triton 		Multiple cross-site scripting (XSS) vulnerabilities in the data loss prevention (DLP) incident Forensics Preview in Websense Triton 7.8.3 and V-Series 7.7 appliances allow remote attackers to inject … CWE-79
Cross-site Scripting 		CVE-2015-2747 2024-11-21 11:27 2015-03-26 Show GitHub Exploit DB Packet Storm
274819 - websense v-series_appliances
triton 		The network diagnostics tool (CommandLineServlet) in the Appliance Manager command line utility (CLU) in Websense TRITON 7.8.3 and V-Series appliances before 7.8.4 Hotfix 02 allows remote authenticat… CWE-77
Command Injection 		CVE-2015-2746 2024-11-21 11:27 2015-03-26 Show GitHub Exploit DB Packet Storm
274820 - citrix command_center Citrix Command Center before 5.1 Build 35.4 and 5.2 before Build 42.7 does not properly restrict access to the Advent Java Management Extensions (JMX) Servlet, which allows remote attackers to execut… CWE-264
Permissions, Privileges, and Access Controls 		CVE-2015-2683 2024-11-21 11:27 2015-03-26 Show GitHub Exploit DB Packet Storm