Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Feb. 9, 2026, 12:59 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
230941 4.3 警告 Joomla! - Joomla! におけるクロスサイトリクエストフォージェリの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2009-1938 2012-09-25 17:27 2009-06-3 Show GitHub Exploit DB Packet Storm
230942 4.3 警告 LightNEasy - LightNEasy のコメント投稿機能におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2009-1937 2012-09-25 17:27 2009-06-5 Show GitHub Exploit DB Packet Storm
230943 4.3 警告 ICQ - ICQ の URL Search Hook におけるスタックベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2009-1915 2012-09-25 17:27 2009-06-4 Show GitHub Exploit DB Packet Storm
230944 4.9 警告 Linux - sparc64 プラットフォーム上の Linux kernel におけるサービス運用妨害 (DoS) の脆弱性 CWE-20
不適切な入力確認 		CVE-2009-1914 2012-09-25 17:27 2009-03-19 Show GitHub Exploit DB Packet Storm
230945 5.1 警告 luxbum - LuxBum の manager.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2009-1913 2012-09-25 17:27 2009-06-4 Show GitHub Exploit DB Packet Storm
230946 6.9 警告 Linux - Linux kernel の tun サブシステムにおける権限を取得される脆弱性 CWE-119
バッファエラー 		CVE-2009-1897 2012-09-25 17:27 2009-07-5 Show GitHub Exploit DB Packet Storm
230947 7.5 危険 kenseiboard - Kensei Board の index.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2009-1853 2012-09-25 17:27 2009-06-1 Show GitHub Exploit DB Packet Storm
230948 4.3 警告 Paessler AG - PRTG Traffic Grapher の Monitor_Bandwidth 関数におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2009-1849 2012-09-25 17:27 2009-06-1 Show GitHub Exploit DB Packet Storm
230949 7.5 危険 joomlame - Joomla! 用の AgoraGroups コンポーネントにおける SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2009-1848 2012-09-25 17:27 2009-06-1 Show GitHub Exploit DB Packet Storm
230950 4.3 警告 lussumo - Lussumo Vanilla の ajax/updatecheck.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2009-1845 2012-09-25 17:27 2009-06-1 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:April 26, 2026, 4:08 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
284691 - mkportal mkportal SQL injection vulnerability in index.php in MKPortal 1.1 RC1 allows remote attackers to execute arbitrary SQL commands via the ida parameter in a gallery foto_show action. CWE-89
SQL Injection 		CVE-2007-6467 2018-10-16 06:54 2007-12-20 Show GitHub Exploit DB Packet Storm
284692 - phpay phpay Incomplete blacklist vulnerability in main.php in phPay 2.02.01 on Windows allows remote attackers to conduct directory traversal attacks and include and execute arbitrary local files via a ..\ (dot … CWE-22
Path Traversal 		CVE-2007-6471 2018-10-16 06:54 2007-12-20 Show GitHub Exploit DB Packet Storm
284693 - rosoftengineering rosoft_media_player Stack-based buffer overflow in Rosoft Media Player 4.1.7, 4.1.8, and possibly earlier versions allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a… CWE-119
Incorrect Access of Indexable Resource ('Range Error')  		CVE-2007-6478 2018-10-16 06:54 2007-12-21 Show GitHub Exploit DB Packet Storm
284694 - safenet sentinel_keys_server
sentinel_protection_server 		Directory traversal vulnerability in SafeNet Sentinel Protection Server 7.0.0 through 7.4.0 and possibly earlier versions, and Sentinel Keys Server 1.0.3 and possibly earlier versions, allows remote … CWE-22
Path Traversal 		CVE-2007-6483 2018-10-16 06:54 2007-12-21 Show GitHub Exploit DB Packet Storm
284695 - centreon centreon Multiple PHP remote file inclusion vulnerabilities in Centreon 1.4.1 (aka Oreon 1.4) allow remote attackers to execute arbitrary PHP code via a URL in the fileOreonConf parameter to (1) MakeXML.php o… CWE-94
Code Injection 		CVE-2007-6485 2018-10-16 06:54 2007-12-21 Show GitHub Exploit DB Packet Storm
284696 - kvaliitti webdoc_cms Multiple SQL injection vulnerabilities in Kvaliitti WebDoc 3.0 CMS allow remote attackers to execute arbitrary SQL commands via (1) the cat_id parameter to categories.asp; and probably (2) the docume… CWE-89
NVD-CWE-noinfo
SQL Injection 		CVE-2007-6491 2018-10-16 06:54 2007-12-21 Show GitHub Exploit DB Packet Storm
284697 - imesh.com imesh The IMWeb.IMWebControl.1 ActiveX control in IMWeb.dll 7.0.0.x, and possibly IMWebControl.dll, in iMesh 7.1.0.x and earlier allows remote attackers to cause a denial of service (Internet Explorer 7 cr… CWE-20
 Improper Input Validation  		CVE-2007-6492 2018-10-16 06:54 2007-12-21 Show GitHub Exploit DB Packet Storm
284698 - imesh.com imesh The IMWeb.IMWebControl.1 ActiveX control in IMWeb.dll 7.0.0.x, and possibly IMWebControl.dll, in iMesh 7.1.0.x and earlier allows remote attackers to execute arbitrary code via a certain argument to … CWE-20
 Improper Input Validation  		CVE-2007-6493 2018-10-16 06:54 2007-12-21 Show GitHub Exploit DB Packet Storm
284699 - hosting_controller hosting_controller Hosting Controller 6.1 Hot fix 3.3 and earlier allows remote attackers to obtain login access via a request to hosting/addreseller.asp with a username in the reseller parameter, followed by a request… CWE-20
 Improper Input Validation  		CVE-2007-6494 2018-10-16 06:54 2007-12-21 Show GitHub Exploit DB Packet Storm
284700 - hosting_controller hosting_controller inc_newuser.asp in Hosting Controller 6.1 Hot fix 3.3 and earlier allows remote authenticated users to change the permissions of directories named (1) db, (2) www, (3) Special, and (4) log at arbitra… CWE-264
Permissions, Privileges, and Access Controls 		CVE-2007-6495 2018-10-16 06:54 2007-12-21 Show GitHub Exploit DB Packet Storm