Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 12, 2026, 10 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
235281 7.5 危険 MyBB Group - MyBB の misc.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-3965 2012-09-25 17:17 2008-09-10 Show GitHub Exploit DB Packet Storm
235282 5 警告 IBM - IBM DB2 UDB の JDBC Applet Server Service におけるサービス運用妨害 (DoS) の脆弱性 CWE-20
不適切な入力確認 		CVE-2008-3960 2012-09-25 17:17 2008-09-4 Show GitHub Exploit DB Packet Storm
235283 5 警告 IBM - IBM DB2 UDB におけるサービス運用妨害 (DoS) の脆弱性 CWE-noinfo
情報不足 		CVE-2008-3959 2012-09-25 17:17 2008-05-2 Show GitHub Exploit DB Packet Storm
235284 7.5 危険 IBM - IBM DB2 UDB におけるサービス運用妨害 (DoS) の脆弱性 CWE-noinfo
情報不足 		CVE-2008-3958 2012-09-25 17:17 2008-09-4 Show GitHub Exploit DB Packet Storm
235285 9.3 危険 マイクロソフト - Microsoft Windows Image Acquisition Logger ActiveX コントロールにおけるファイルを強制的にダウンロードされる脆弱性 CWE-20
不適切な入力確認 		CVE-2008-3957 2012-09-25 17:17 2008-09-10 Show GitHub Exploit DB Packet Storm
235286 9.3 危険 マイクロソフト - Microsoft Organization Chart の orgchart.exe におけるサービス運用妨害 (DoS) の脆弱性 CWE-94
コード・インジェクション 		CVE-2008-3956 2012-09-25 17:17 2008-09-10 Show GitHub Exploit DB Packet Storm
235287 7.5 危険 masir camp - Masir Camp E-Shop Module の index.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-3955 2012-09-25 17:17 2008-09-10 Show GitHub Exploit DB Packet Storm
235288 7.2 危険 ヒューレット・パッカード - OpenVMS Alpha の DCL における権限を取得される脆弱性 CWE-20
不適切な入力確認 		CVE-2008-3947 2012-09-25 17:17 2008-09-5 Show GitHub Exploit DB Packet Storm
235289 7.5 危険 ozsari - Full PHP Emlak Script の landsee.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-3942 2012-09-25 17:17 2008-09-5 Show GitHub Exploit DB Packet Storm
235290 4.4 警告 ヒューレット・パッカード - OpenVMS の HP TCP/IP Services の finger クライアントにおけるフォーマットストリングの脆弱性 CWE-134
書式文字列の問題 		CVE-2008-3940 2012-09-25 17:17 2008-09-5 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 12, 2026, 5:06 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
347561 - jaxcms jaxcms Directory traversal vulnerability in index.php in jaxCMS 1.0 allows remote attackers to include and execute arbitrary local files via directory traversal sequences in the p parameter. CWE-22
Path Traversal 		CVE-2010-1043 2010-03-23 13:00 2010-03-23 Show GitHub Exploit DB Packet Storm
347562 - design-cars com_productbook SQL injection vulnerability in the Productbook (com_productbook) component 1.0.4 for Joomla! allows remote attackers to execute arbitrary SQL commands via the id parameter in a detail action to index… CWE-89
SQL Injection 		CVE-2010-1045 2010-03-23 13:00 2010-03-23 Show GitHub Exploit DB Packet Storm
347563 - uiga business_portal Cross-site scripting (XSS) vulnerability in blog/index.php in Uiga Business Portal allows remote attackers to inject arbitrary web script or HTML via the textcomment parameter (aka the Comment Box) i… CWE-79
Cross-site Scripting 		CVE-2010-1048 2010-03-23 13:00 2010-03-23 Show GitHub Exploit DB Packet Storm
347564 - alexandre_dubus audistat SQL injection vulnerability in index.php in AudiStat 1.3 allows remote attackers to execute arbitrary SQL commands via the mday parameter. CWE-89
SQL Injection 		CVE-2010-1050 2010-03-23 13:00 2010-03-23 Show GitHub Exploit DB Packet Storm
347565 - alexandre_dubus audistat Multiple SQL injection vulnerabilities in index.php in AudiStat 1.3 allow remote attackers to execute arbitrary SQL commands via the (1) year and (2) month parameters. NOTE: the provenance of this i… CWE-89
SQL Injection 		CVE-2010-1051 2010-03-23 13:00 2010-03-23 Show GitHub Exploit DB Packet Storm
347566 - alexandre_dubus audistat Multiple cross-site scripting (XSS) vulnerabilities in index.php in AudiStat 1.3 allow remote attackers to inject arbitrary web script or HTML via the (1) year and (2) mday parameters. NOTE: the pro… CWE-79
Cross-site Scripting 		CVE-2010-1052 2010-03-23 13:00 2010-03-23 Show GitHub Exploit DB Packet Storm
347567 - marcus_krause t3sec_saltedpw The TYPO3 Security - Salted user password hashes (t3sec_saltedpw) extension before 0.2.13 for TYPO3 allows remote attackers to bypass authentication via unspecified vectors. CWE-287
Improper Authentication 		CVE-2010-1022 2010-03-23 02:17 2010-03-20 Show GitHub Exploit DB Packet Storm
347568 - sk-typo3 sk_simplegallery Cross-site scripting (XSS) vulnerability in the Simple Gallery (sk_simplegallery) extension 0.0.9 and earlier for TYPO3 allows remote attackers to inject arbitrary web script or HTML via unspecified … CWE-79
Cross-site Scripting 		CVE-2010-1020 2010-03-23 01:58 2010-03-20 Show GitHub Exploit DB Packet Storm
347569 - mathias_schreiber nf_cleandb SQL injection vulnerability in the CleanDB (nf_cleandb) extension 1.0.7 and earlier for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors. CWE-89
SQL Injection 		CVE-2010-1012 2010-03-23 00:04 2010-03-20 Show GitHub Exploit DB Packet Storm
347570 - viewvc viewvc Cross-site scripting (XSS) vulnerability in the view_queryform function in lib/viewvc.py in ViewVC before 1.0.10, and 1.1.x before 1.1.4, allows remote attackers to inject arbitrary web script or HTM… CWE-79
Cross-site Scripting 		CVE-2010-0736 2010-03-22 13:00 2010-03-20 Show GitHub Exploit DB Packet Storm