Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Feb. 9, 2026, 12:59 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
229611 4.3 警告 UBB Systems - UBB.threads の forums/ubbthreads.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2012-5104 2012-09-26 16:44 2012-09-23 Show GitHub Exploit DB Packet Storm
229612 4.3 警告 Denis Nelubin - Ggb Guestbook の action/add-submit.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2012-5103 2012-09-26 16:44 2012-01-5 Show GitHub Exploit DB Packet Storm
229613 4.3 警告 Dariusz Handzlik - VertrigoServ の inc/extensions.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2012-5102 2012-09-26 16:43 2012-09-23 Show GitHub Exploit DB Packet Storm
229614 7.5 危険 Joomla Extension Development - Joomla! 用 JExtensions JE Poll コンポーネントにおける SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2012-5101 2012-09-26 16:42 2012-09-23 Show GitHub Exploit DB Packet Storm
229615 5 警告 luizpicanco - HServer におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2012-5100 2012-09-26 16:41 2012-09-23 Show GitHub Exploit DB Packet Storm
229616 4.3 警告 PHPB2B - PHPB2B の list.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2012-5099 2012-09-26 16:40 2012-09-23 Show GitHub Exploit DB Packet Storm
229617 7.5 危険 Php-X-Links - Php-X-Links における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2012-5098 2012-09-26 16:40 2012-09-23 Show GitHub Exploit DB Packet Storm
229618 7.5 危険 ヒューレット・パッカード - HP SiteScope の SOAP 機能における任意のコードを実行される脆弱性 CWE-noinfo
情報不足 		CVE-2012-3264 2012-09-26 16:38 2012-09-19 Show GitHub Exploit DB Packet Storm
229619 10 危険 ヒューレット・パッカード - HP SiteScope の SOAP 機能における任意のコードを実行される脆弱性 CWE-noinfo
情報不足 		CVE-2012-3263 2012-09-26 16:37 2012-09-19 Show GitHub Exploit DB Packet Storm
229620 10 危険 ヒューレット・パッカード - HP SiteScope の SOAP 機能における任意のコードを実行される脆弱性 CWE-noinfo
情報不足 		CVE-2012-3262 2012-09-26 16:37 2012-09-19 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:April 19, 2026, 4:09 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
284911 - vbulletin vbulletin SQL injection vulnerability in admincp/admincalendar.php in vBulletin 3.7.3.pl1 allows remote authenticated administrators to execute arbitrary SQL commands via the holidayinfo[recurring] parameter, … CWE-89
SQL Injection 		CVE-2008-6256 2018-10-12 05:57 2009-02-25 Show GitHub Exploit DB Packet Storm
284912 - appstate phpwebsite SQL injection vulnerability in links.php in Appalachian State University phpWebSite allows remote attackers to execute arbitrary SQL commands via the cid parameter in a viewlink action. CWE-89
SQL Injection 		CVE-2008-6266 2018-10-12 05:57 2009-02-25 Show GitHub Exploit DB Packet Storm
284913 - phpf1 max\'s_guestbook Cross-site scripting (XSS) vulnerability in index.php in Max's Guestbook allows remote attackers to inject arbitrary web script or HTML via the (1) name, (2) email, and (3) message parameters. CWE-79
Cross-site Scripting 		CVE-2008-6359 2018-10-12 05:57 2009-03-3 Show GitHub Exploit DB Packet Storm
284914 - cs-cart cs-cart SQL injection vulnerability in core/user.php in CS-Cart 1.3.5 and earlier allows remote attackers to execute arbitrary SQL commands via the cs_cookies[customer_user_id] cookie parameter. CWE-89
SQL Injection 		CVE-2008-6394 2018-10-12 05:57 2009-03-5 Show GitHub Exploit DB Packet Storm
284915 - datalifecms datalife_engine Cross-site scripting (XSS) vulnerability in admin.php in DataLife Engine (DLE) 7.2 allows remote attackers to inject arbitrary web script or HTML via the query string. CWE-79
Cross-site Scripting 		CVE-2008-6406 2018-10-12 05:57 2009-03-6 Show GitHub Exploit DB Packet Storm
284916 - torrenttrader torrenttrader SQL injection vulnerability in scrape.php in TorrentTrader before 2008-05-13 allows remote attackers to execute arbitrary SQL commands via the info_hash parameter. CWE-89
SQL Injection 		CVE-2008-6418 2018-10-12 05:57 2009-03-7 Show GitHub Exploit DB Packet Storm
284917 - hivemaker hivemaker SQL injection vulnerability in index.php in Hivemaker Professional 1.0.2 and earlier, when magic_quotes_gpc is disabled, allows remote attackers to execute arbitrary SQL commands via the cid paramete… CWE-89
SQL Injection 		CVE-2008-6427 2018-10-12 05:57 2009-03-7 Show GitHub Exploit DB Packet Storm
284918 - bmforum bmforum Multiple cross-site scripting (XSS) vulnerabilities in BMForum 5.6 allow remote attackers to inject arbitrary web script or HTML via the (1) outpused parameter to index.php, the (2) footer_copyright … CWE-79
Cross-site Scripting 		CVE-2008-6431 2018-10-12 05:57 2009-03-7 Show GitHub Exploit DB Packet Storm
284919 - phpsqlitecms phpsqlitecms Multiple cross-site scripting (XSS) vulnerabilities in phpSQLiteCMS 1 RC2 allow remote attackers to inject arbitrary web script or HTML via the (1) lang[home], (2) lang[admin_menu], and (3) lang[admi… CWE-79
Cross-site Scripting 		CVE-2008-6435 2018-10-12 05:57 2009-03-7 Show GitHub Exploit DB Packet Storm
284920 - lukas_waldauf phpfreeforum Multiple cross-site scripting (XSS) vulnerabilities in PHPFreeForum 1.0 RC2 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) message parameter to error.php, and t… CWE-79
Cross-site Scripting 		CVE-2008-6437 2018-10-12 05:57 2009-03-7 Show GitHub Exploit DB Packet Storm