Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 30, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
238551 7.5 危険 OpenX - OpenX の admin/campaign-zone-link.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2012-4990 2012-10-24 16:39 2012-10-22 Show GitHub Exploit DB Packet Storm
238552 4.3 警告 OpenX - OpenX の admin/plugin-index.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2012-4989 2012-10-24 16:38 2012-10-22 Show GitHub Exploit DB Packet Storm
238553 6.8 警告 Intelliants - Subrion CMS におけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反 		CVE-2012-4773 2012-10-24 16:37 2012-10-22 Show GitHub Exploit DB Packet Storm
238554 7.5 危険 Intelliants - Subrion CMS の register/ における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2012-4772 2012-10-24 16:37 2012-10-22 Show GitHub Exploit DB Packet Storm
238555 4.3 警告 Intelliants - Subrion CMS におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2012-4771 2012-10-24 16:36 2012-10-22 Show GitHub Exploit DB Packet Storm
238556 3.6 注意 OpenFabrics Alliance - ibacm における ib_acm デーモンログまたは ibacm.port ファイルを上書きされる脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2012-4518 2012-10-24 16:35 2012-10-22 Show GitHub Exploit DB Packet Storm
238557 5 警告 OpenFabrics Alliance - ibacm におけるサービス運用妨害 (DoS) の脆弱性 CWE-399
リソース管理の問題 		CVE-2012-4517 2012-10-24 16:34 2012-10-22 Show GitHub Exploit DB Packet Storm
238558 5.8 警告 OpenFabrics Alliance - librdmacm におけるアプリケーションのアドレス解決情報を設定される脆弱性 CWE-Other
その他 		CVE-2012-4516 2012-10-24 15:52 2012-10-22 Show GitHub Exploit DB Packet Storm
238559 5.8 警告 libsocialweb - libsocialweb における重要な情報を取得される脆弱性 CWE-16
環境設定 		CVE-2012-4511 2012-10-24 15:36 2012-10-22 Show GitHub Exploit DB Packet Storm
238560 7.5 危険 Intelliants - Subrion CMS の admin/index.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2011-5212 2012-10-24 11:39 2012-10-22 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 30, 2026, 4:22 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
358391 - percha com_perchadownloadsattach Directory traversal vulnerability in the Percha Downloads Attach (com_perchadownloadsattach) component 1.1 for Joomla! allows remote attackers to read arbitrary files and possibly have unspecified ot… CWE-22
Path Traversal 		CVE-2010-2037 2010-05-26 13:00 2010-05-25 Show GitHub Exploit DB Packet Storm
358392 - shopex ecshop SQL injection vulnerability in search.php in ECShop 2.7.2 allows remote attackers to execute arbitrary SQL commands via the encode parameter. NOTE: some of these details are obtained from third part… CWE-89
SQL Injection 		CVE-2010-2042 2010-05-26 13:00 2010-05-25 Show GitHub Exploit DB Packet Storm
358393 - activehelper com_activehelper_livehelp Multiple cross-site scripting (XSS) vulnerabilities in the ActiveHelper LiveHelp (com_activehelper_livehelp) component 2.0.3 for Joomla! allow remote attackers to inject arbitrary web script or HTML … CWE-79
Cross-site Scripting 		CVE-2010-2046 2010-05-26 13:00 2010-05-26 Show GitHub Exploit DB Packet Storm
358394 - manageengine adaudit_plus Cross-site scripting (XSS) vulnerability in jsp/audit/reports/ExportReport.jsp in ManageEngine ADAudit Plus 4.0.0 build 4043 allows remote attackers to inject arbitrary web script or HTML via the rep… CWE-79
Cross-site Scripting 		CVE-2010-2049 2010-05-26 13:00 2010-05-26 Show GitHub Exploit DB Packet Storm
358395 - debliteck dbcart SQL injection vulnerability in article.php in Debliteck DBCart allows remote attackers to execute arbitrary SQL commands via the id parameter. CWE-89
SQL Injection 		CVE-2010-2051 2010-05-26 13:00 2010-05-26 Show GitHub Exploit DB Packet Storm
358396 - andreas_schwarzkopf accessibility_glossary SQL injection vulnerability in the Accessibility Glossary (a21glossary) extension 0.4.10 and earlier for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors. CWE-89
SQL Injection 		CVE-2009-4803 2010-05-26 13:00 2010-04-23 Show GitHub Exploit DB Packet Storm
358397 - andreas_schwarzkopf accessibility_glossary A fix for this vulnerability was included in 0.4.11. The latest release can be downloaded at: http://typo3.org/extensions/repository/view/a21glossary/current/ CWE-89
SQL Injection 		CVE-2009-4803 2010-05-26 13:00 2010-04-23 Show GitHub Exploit DB Packet Storm
358398 - sun opensolaris The default configuration of Oracle OpenSolaris snv_91 through snv_131 allows attackers to have an unspecified impact via vectors related to using kclient to join a Windows Active Directory domain. CWE-16
Configuration 		CVE-2010-0559 2010-05-25 14:51 2010-02-6 Show GitHub Exploit DB Packet Storm
358399 - info-zip unzip Directory traversal vulnerability in Info-ZIP UnZip 5.42 and earlier allows attackers to overwrite arbitrary files during archive extraction via a .. (dot dot) in an extracted filename. NVD-CWE-Other
CVE-2001-1268 2010-05-25 13:10 2001-07-12 Show GitHub Exploit DB Packet Storm
358400 - info-zip unzip Info-ZIP UnZip 5.42 and earlier allows attackers to overwrite arbitrary files during archive extraction via filenames in the archive that begin with the '/' (slash) character. NVD-CWE-Other
CVE-2001-1269 2010-05-25 13:10 2001-07-12 Show GitHub Exploit DB Packet Storm