Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 31, 2026, 2 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
229941 6.8 警告 source workshop - Web Directory Script の index.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2008-4091 2012-12-20 18:52 2008-09-15 Show GitHub Exploit DB Packet Storm
229942 7.5 危険 source workshop - Reciprocal Links Manager の index.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2008-4086 2012-12-20 18:52 2008-09-15 Show GitHub Exploit DB Packet Storm
229943 4.4 警告 stephenjungels - Plait の plaiter における任意のファイルを上書きされる脆弱性 CWE-59
リンク解釈の問題
CVE-2008-4085 2012-12-20 18:52 2008-09-15 Show GitHub Exploit DB Packet Storm
229944 7.5 危険 stash - Stash の admin/login.php における認証を回避される脆弱性 CWE-287
不適切な認証
CVE-2008-4081 2012-12-20 18:52 2008-09-15 Show GitHub Exploit DB Packet Storm
229945 6.8 警告 stash - Stash における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2008-4080 2012-12-20 18:52 2008-09-15 Show GitHub Exploit DB Packet Storm
229946 7.5 危険 zanfi solutions - Zanfi Autodealers CMS AutOnline の index.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2008-4074 2012-12-20 18:52 2008-09-15 Show GitHub Exploit DB Packet Storm
229947 7.5 危険 zanfi solutions - Zanfi Autodealers CMS AutOnline の index.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2008-4073 2012-12-20 18:52 2008-09-15 Show GitHub Exploit DB Packet Storm
229948 7.5 危険 phsdev - phsBlog の index.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2008-4072 2012-12-20 18:52 2008-09-15 Show GitHub Exploit DB Packet Storm
229949 7.5 危険 texmedia - Million Pixel Script の tops_top.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2008-4055 2012-12-20 18:52 2008-09-11 Show GitHub Exploit DB Packet Storm
229950 4.6 警告 トレンドマイクロ - Trend Micro NSC モジュールの Trend Micro Personal Firewall サービスにおけるアクセス制限を回避される脆弱性 CWE-287
不適切な認証
CVE-2008-3866 2012-12-20 18:52 2009-01-16 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 31, 2026, 4:16 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
293481 - moodle moodle Multiple cross-site scripting (XSS) vulnerabilities in lib/conditionlib.php in Moodle 2.4.x before 2.4.5 and 2.5.x before 2.5.1 allow remote attackers to inject arbitrary web script or HTML via the c… CWE-79
Cross-site Scripting
CVE-2013-2244 2024-11-21 10:51 2013-07-29 Show GitHub Exploit DB Packet Storm
293482 - moodle moodle mod/lesson/pagetypes/matching.php in Moodle through 2.2.11, 2.3.x before 2.3.8, 2.4.x before 2.4.5, and 2.5.x before 2.5.1 allows remote authenticated users to obtain sensitive answer information by … CWE-200
Information Exposure
CVE-2013-2243 2024-11-21 10:51 2013-07-29 Show GitHub Exploit DB Packet Storm
293483 - moodle moodle mod/chat/gui_sockets/index.php in Moodle through 2.1.10, 2.2.x before 2.2.11, 2.3.x before 2.3.8, 2.4.x before 2.4.5, and 2.5.x before 2.5.1 does not consider the mod/chat:chat capability before auth… CWE-264
Permissions, Privileges, and Access Controls
CVE-2013-2242 2024-11-21 10:51 2013-07-29 Show GitHub Exploit DB Packet Storm
293484 - hp loadrunner Unspecified vulnerability in HP LoadRunner before 11.52 allows remote attackers to execute arbitrary code via unknown vectors, aka ZDI-CAN-1671. NVD-CWE-noinfo
CVE-2013-2370 2024-11-21 10:51 2013-07-29 Show GitHub Exploit DB Packet Storm
293485 - hp loadrunner Unspecified vulnerability in HP LoadRunner before 11.52 allows remote attackers to execute arbitrary code via unknown vectors, aka ZDI-CAN-1670. NVD-CWE-noinfo
CVE-2013-2369 2024-11-21 10:51 2013-07-29 Show GitHub Exploit DB Packet Storm
293486 - hp loadrunner Unspecified vulnerability in HP LoadRunner before 11.52 allows remote attackers to cause a denial of service via unknown vectors, aka ZDI-CAN-1669. NVD-CWE-noinfo
CVE-2013-2368 2024-11-21 10:51 2013-07-29 Show GitHub Exploit DB Packet Storm
293487 - apache http_server mod_session_dbd.c in the mod_session_dbd module in the Apache HTTP Server before 2.4.5 proceeds with save operations for a session without considering the dirty flag and the requirement for a new ses… NVD-CWE-noinfo
CVE-2013-2249 2024-11-21 10:51 2013-07-24 Show GitHub Exploit DB Packet Storm
293488 - redhat jboss_operations_network
richfaces
jboss_enterprise_web_platform
jboss_enterprise_portal_platform
jboss_enterprise_soa_platform
jboss_web_framework_kit
jboss_enterprise_application_…
ResourceBuilderImpl.java in the RichFaces 3.x through 5.x implementation in Red Hat JBoss Web Framework Kit before 2.3.0, Red Hat JBoss Web Platform through 5.2.0, Red Hat JBoss Enterprise Applicatio… CWE-264
Permissions, Privileges, and Access Controls
CVE-2013-2165 2024-11-21 10:51 2013-07-23 Show GitHub Exploit DB Packet Storm
293489 - hp database_and_middleware_automation HP Database and Middleware Automation (DMA) 10.x before 10.10, when SSL is used, allows remote attackers to obtain sensitive information via unspecified vectors. NVD-CWE-noinfo
CVE-2013-2365 2024-11-21 10:51 2013-07-22 Show GitHub Exploit DB Packet Storm
293490 - hp system_management_homepage Cross-site scripting (XSS) vulnerability in HP System Management Homepage (SMH) before 7.2.1 allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors. CWE-79
Cross-site Scripting
CVE-2013-2364 2024-11-21 10:51 2013-07-22 Show GitHub Exploit DB Packet Storm