Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Feb. 9, 2026, 12:59 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
229381 4.3 警告 VWar - Virtual War におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2010-5064 2012-10-10 15:16 2012-10-8 Show GitHub Exploit DB Packet Storm
229382 7.5 危険 VWar - Virtual War の article.phpにおける SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2010-5063 2012-10-10 15:15 2012-10-8 Show GitHub Exploit DB Packet Storm
229383 4.3 警告 Smarty - Smarty におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2012-4437 2012-10-10 14:00 2012-10-10 Show GitHub Exploit DB Packet Storm
229384 6.8 警告 Plume CMS - Plume CMS におけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反 		CVE-2012-1414 2012-10-10 13:49 2012-10-7 Show GitHub Exploit DB Packet Storm
229385 2.6 注意 Proc::ProcessTable - Perl 用 Proc::ProcessTable モジュールにおける任意のファイルを上書される脆弱性 CWE-59
リンク解釈の問題 		CVE-2011-4363 2012-10-10 13:49 2012-10-7 Show GitHub Exploit DB Packet Storm
229386 5 警告 Joomla! - Joomla! におけるインストールパスを取得される脆弱性 CWE-20
不適切な入力確認 		CVE-2011-4911 2012-10-10 10:36 2009-06-30 Show GitHub Exploit DB Packet Storm
229387 4.3 警告 Joomla! - Joomla! におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2011-4910 2012-10-10 10:34 2009-06-3 Show GitHub Exploit DB Packet Storm
229388 4.3 警告 Joomla! - Joomla! におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2011-4909 2012-10-10 10:32 2009-06-30 Show GitHub Exploit DB Packet Storm
229389 4.3 警告 MODX - MODx Revolution におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2010-5278 2012-10-10 10:13 2010-09-30 Show GitHub Exploit DB Packet Storm
229390 4.9 警告 Views Bulk Operations project - Drupal 用 Views Bulk Operations モジュールにおけるアクセス制限を回避される脆弱性 CWE-noinfo
情報不足 		CVE-2010-5277 2012-10-10 10:06 2010-10-6 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:April 22, 2026, 4 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
285021 - eye.fi eye-fi_manager WS-Proxy in Eye-Fi 1.1.2 allows remote attackers to cause a denial of service (crash) via an empty query string to port 59278 and other unspecified vectors. NVD-CWE-Other
CVE-2008-7137 2018-10-12 05:58 2009-09-2 Show GitHub Exploit DB Packet Storm
285022 - eye.fi eye-fi_manager The Manager in Eye-Fi 1.1.2 generates predictable snonce values based on the time of day, which allows remote attackers to bypass authentication and upload arbitrary images by guessing the snonce. CWE-310
Cryptographic Issues 		CVE-2008-7138 2018-10-12 05:58 2009-09-2 Show GitHub Exploit DB Packet Storm
285023 - eye.fi eye-fi_manager Multiple cross-site request forgery (CSRF) vulnerabilities in WS-Proxy in Eye-Fi 1.1.2 allow remote attackers to hijack the authentication of users for requests that modify configuration via a SOAPAc… CWE-352
 Origin Validation Error 		CVE-2008-7139 2018-10-12 05:58 2009-09-2 Show GitHub Exploit DB Packet Storm
285024 - cpanel cpanel Absolute path traversal vulnerability in the Disk Usage module (frontend/x/diskusage/index.html) in cPanel 11.18.3 allows remote attackers to list arbitrary directories via the showtree parameter. CWE-22
Path Traversal 		CVE-2008-7142 2018-10-12 05:58 2009-09-2 Show GitHub Exploit DB Packet Storm
285025 - phpbb phpbb phpBB 2.0.23 includes the session ID in a request to modcp.php when the moderator or administrator closes a thread, which allows remote attackers to hijack the session via a post in the thread contai… CWE-200
Information Exposure 		CVE-2008-7143 2018-10-12 05:58 2009-09-2 Show GitHub Exploit DB Packet Storm
285026 - coronamatrix phpaddressbook Multiple SQL injection vulnerabilities in index.php in CoronaMatrix phpAddressBook 2.0 allow remote attackers to execute arbitrary SQL commands via the (1) username or (2) parameters. CWE-89
SQL Injection 		CVE-2008-7145 2018-10-12 05:58 2009-09-2 Show GitHub Exploit DB Packet Storm
285027 - fortinet fortigate-1000 Fortinet FortiGuard Fortinet FortiGate-1000 3.00 build 040075,070111 allows remote attackers to bypass URL filtering via fragmented GET or POST requests that use HTTP/1.0 without the Host header. NO… CWE-264
Permissions, Privileges, and Access Controls 		CVE-2008-7161 2018-10-12 05:58 2009-09-4 Show GitHub Exploit DB Packet Storm
285028 - alice gate2_plus_wi-fi Cross-site request forgery in cp06_wifi_m_nocifr.cgi in the administrator panel in TELECOM ITALIA Alice Gate2 Plus Wi-Fi allows remote attackers to hijack the authentication of administrators for req… CWE-352
 Origin Validation Error 		CVE-2008-7165 2018-10-12 05:58 2009-09-4 Show GitHub Exploit DB Packet Storm
285029 - gameservers gsc GSC build 2067 and earlier relies on the client to enforce administrator privileges, which allows remote attackers to execute arbitrary administrator commands via a crafted packet. CWE-264
Permissions, Privileges, and Access Controls 		CVE-2008-7170 2018-10-12 05:58 2009-09-8 Show GitHub Exploit DB Packet Storm
285030 - juracapecoffee internet_connectivity_kit The Jura Internet Connection Kit for the Jura Impressa F90 coffee maker does not properly restrict access to privileged functions, which allows remote attackers to cause a denial of service (physical… CWE-264
Permissions, Privileges, and Access Controls 		CVE-2008-7173 2018-10-12 05:58 2009-09-8 Show GitHub Exploit DB Packet Storm