Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 17, 2026, 4 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
236391 7.5 危険 miniBB - miniBB の bb_admin.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-2067 2012-09-25 17:16 2008-05-2 Show GitHub Exploit DB Packet Storm
236392 4.3 警告 miniBB - miniBB の bb_admin.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2008-2066 2012-09-25 17:16 2008-05-2 Show GitHub Exploit DB Packet Storm
236393 7.5 危険 joovili - Joovili の browse.videos.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-2063 2012-09-25 17:16 2008-05-2 Show GitHub Exploit DB Packet Storm
236394 7.5 危険 netoffice - netOffice Dwins の includes/library.php における認証を回避される脆弱性 CWE-94
コード・インジェクション 		CVE-2008-2044 2012-09-25 17:16 2008-05-1 Show GitHub Exploit DB Packet Storm
236395 7.5 危険 peercast - Peercast の HTTP::getAuthUserPass 関数におけるスタックベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2008-2040 2012-09-25 17:16 2008-04-30 Show GitHub Exploit DB Packet Storm
236396 6.8 警告 miniBB - miniBB の setup_mysql.php などにおける SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-2029 2012-09-25 17:16 2008-04-30 Show GitHub Exploit DB Packet Storm
236397 4.3 警告 miniBB - miniBB におけるフルパスを取得される脆弱性 CWE-200
情報漏えい 		CVE-2008-2028 2012-09-25 17:16 2008-04-30 Show GitHub Exploit DB Packet Storm
236398 4.3 警告 miniBB - miniBB の index.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2008-2024 2012-09-25 17:16 2008-04-30 Show GitHub Exploit DB Packet Storm
236399 7.5 危険 pd9 software - PD9 Software の MegaBBS における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-2023 2012-09-25 17:16 2008-04-30 Show GitHub Exploit DB Packet Storm
236400 4.3 警告 pd9 software - PD9 Software MegaBBS におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2008-2022 2012-09-25 17:16 2008-04-30 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 17, 2026, 4:15 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
348881 - tecnick tcexam Per: http://cwe.mitre.org/data/definitions/434.html 'CWE-434: Unrestricted Upload of File with Dangerous Type' NVD-CWE-Other
CVE-2010-2153 2010-06-4 13:00 2010-06-4 Show GitHub Exploit DB Packet Storm
348882 - dovecot dovecot Unspecified vulnerability in Dovecot 1.2.x before 1.2.11 allows remote attackers to cause a denial of service (CPU consumption) via long headers in an e-mail message. CWE-399
 Resource Management Errors 		CVE-2010-0745 2010-06-3 14:54 2010-05-21 Show GitHub Exploit DB Packet Storm
348883 - barnowl barnowl Buffer overflow in BarnOwl before 1.5.1 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted CC: header. CWE-119
Incorrect Access of Indexable Resource ('Range Error')  		CVE-2010-0793 2010-06-3 14:54 2010-03-17 Show GitHub Exploit DB Packet Storm
348884 - typo3 typo3 PHP remote file inclusion vulnerability in the autoloader in TYPO3 4.3.x before 4.3.3 allows remote attackers to execute arbitrary PHP code via a URL in an input field associated with the className v… CWE-94
Code Injection 		CVE-2010-1153 2010-06-3 13:00 2010-04-21 Show GitHub Exploit DB Packet Storm
348885 - multishopcms multishop_cms SQL injection vulnerability in pages.php in Multishop CMS allows remote attackers to execute arbitrary SQL commands via the id parameter. NOTE: the provenance of this information is unknown; the det… CWE-89
SQL Injection 		CVE-2010-2139 2010-06-3 13:00 2010-06-3 Show GitHub Exploit DB Packet Storm
348886 - multishopcms multishop_cms SQL injection vulnerability in itemdetail.php in Multishop CMS allows remote attackers to execute arbitrary SQL commands via the itemid parameter. NOTE: the provenance of this information is unknown… CWE-89
SQL Injection 		CVE-2010-2140 2010-06-3 13:00 2010-06-3 Show GitHub Exploit DB Packet Storm
348887 - joaktree com_joaktree SQL injection vulnerability in the Joaktree (com_joaktree) component 1.0 for Joomla! allows remote attackers to execute arbitrary SQL commands via the treeId parameter to index.php. CWE-89
SQL Injection 		CVE-2009-4784 2010-06-3 13:00 2010-04-21 Show GitHub Exploit DB Packet Storm
348888 - bhavesh_chauhan com_quicknews SQL injection vulnerability in the Quick News (com_quicknews) component for Joomla! allows remote attackers to execute arbitrary SQL commands via the newsid parameter in a view_item action to index.p… CWE-89
SQL Injection 		CVE-2009-4785 2010-06-3 13:00 2010-04-21 Show GitHub Exploit DB Packet Storm
348889 - pligg pligg_cms Multiple open redirect vulnerabilities in Pligg 1.0.2 and earlier allow remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via the (1) return parameter to pligg/lo… CWE-20
 Improper Input Validation  		CVE-2009-4788 2010-06-3 13:00 2010-04-21 Show GitHub Exploit DB Packet Storm
348890 - mojoblog mojoblog Multiple PHP remote file inclusion vulnerabilities in the MojoBlog component RC 0.15 for Joomla! allow remote attackers to execute arbitrary PHP code via a URL in the mosConfig_absolute_path paramete… CWE-94
Code Injection 		CVE-2009-4789 2010-06-3 13:00 2010-04-21 Show GitHub Exploit DB Packet Storm