Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Feb. 9, 2026, 12:59 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
238701 7.5 危険 dark age cms - Dark Age CMS の login.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2009-0326 2012-06-26 16:10 2009-01-29 Show GitHub Exploit DB Packet Storm
238702 7.5 危険 bibciter - BibCiter における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2009-0324 2012-06-26 16:10 2009-01-29 Show GitHub Exploit DB Packet Storm
238703 6.8 警告 grid2000 - FlexCell Grid Control における任意ファイルを作成される脆弱性 CWE-Other
その他 		CVE-2009-0301 2012-06-26 16:10 2009-01-27 Show GitHub Exploit DB Packet Storm
238704 7.5 危険 Groone's World - Groone GLinks の index.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2009-0299 2012-06-26 16:10 2009-01-27 Show GitHub Exploit DB Packet Storm
238705 7.5 危険 clicktech - ClickAuction の login_check.asp における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2009-0297 2012-06-26 16:10 2009-01-27 Show GitHub Exploit DB Packet Storm
238706 7.5 危険 gempar - Script Toko Online の shop_display_products.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2009-0296 2012-06-26 16:10 2009-01-27 Show GitHub Exploit DB Packet Storm
238707 4.3 警告 bbsxp - BBSXP の error.asp におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2009-0285 2012-06-26 16:10 2009-01-27 Show GitHub Exploit DB Packet Storm
238708 7.5 危険 flaxweb - Flax Article Manager の category.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2009-0284 2012-06-26 16:10 2009-01-27 Show GitHub Exploit DB Packet Storm
238709 4.3 警告 aobosoft - Oblog の err.asp におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2009-0283 2012-06-26 16:10 2009-01-27 Show GitHub Exploit DB Packet Storm
238710 7.5 危険 asp-project - Asp Project Management における管理アクセス権を取得される脆弱性 CWE-287
不適切な認証 		CVE-2009-0280 2012-06-26 16:10 2009-01-27 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:April 26, 2026, 4:08 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
256091 5.5 MEDIUM
Local 		linux linux_kernel In the Linux kernel, the following vulnerability has been resolved: btrfs: get rid of warning on transaction commit when using flushoncommit When using the flushoncommit mount option, during almost… CWE-667
 Improper Locking 		CVE-2022-48920 2024-09-12 22:04 2024-08-22 Show GitHub Exploit DB Packet Storm
256092 4.7 MEDIUM
Local 		linux linux_kernel In the Linux kernel, the following vulnerability has been resolved: sched/fair: Fix fault in reweight_entity Syzbot found a GPF in reweight_entity. This has been bisected to commit 4ef0c5c6b5ba ("k… CWE-362
Race Condition 		CVE-2022-48921 2024-09-12 21:58 2024-08-22 Show GitHub Exploit DB Packet Storm
256093 5.5 MEDIUM
Local 		linux linux_kernel In the Linux kernel, the following vulnerability has been resolved: riscv: fix oops caused by irqsoff latency tracer The trace_hardirqs_{on,off}() require the caller to setup frame pointer properly… CWE-476
 NULL Pointer Dereference 		CVE-2022-48922 2024-09-12 21:52 2024-08-22 Show GitHub Exploit DB Packet Storm
256094 5.5 MEDIUM
Local 		linux linux_kernel In the Linux kernel, the following vulnerability has been resolved: btrfs: prevent copying too big compressed lzo segment Compressed length can be corrupted to be a lot larger than memory we have a… CWE-787
 Out-of-bounds Write 		CVE-2022-48923 2024-09-12 21:50 2024-08-22 Show GitHub Exploit DB Packet Storm
256095 7.2 HIGH
Network 		lifterlms lifterlms The LifterLMS – WP LMS for eLearning, Online Courses, & Quizzes plugin for WordPress is vulnerable to blind SQL Injection via the 'order' parameter in all versions up to, and including, 7.7.5 due to … CWE-89
SQL Injection 		CVE-2024-7349 2024-09-12 21:43 2024-09-6 Show GitHub Exploit DB Packet Storm
256096 9.8 CRITICAL
Network 		plechevandrey wp-recall The WP-Recall – Registration, Profile, Commerce & More plugin for WordPress is vulnerable to privilege escalation/account takeover in all versions up to, and including, 16.26.8. This is due to to plu… CWE-639
 Authorization Bypass Through User-Controlled Key 		CVE-2024-8292 2024-09-12 21:37 2024-09-6 Show GitHub Exploit DB Packet Storm
256097 - - - A vulnerability was found in Shandong Star Measurement and Control Equipment Heating Network Wireless Monitoring System 5.6.2 and classified as critical. Affected by this issue is the function GetDat… CWE-89
SQL Injection 		CVE-2024-8705 2024-09-12 21:35 2024-09-12 Show GitHub Exploit DB Packet Storm
256098 - - - A vulnerability, which was classified as problematic, was found in JFinalCMS up to 20240903. This affects the function update of the file /admin/template/update of the component com.cms.controller.ad… CWE-22
Path Traversal 		CVE-2024-8694 2024-09-12 21:35 2024-09-12 Show GitHub Exploit DB Packet Storm
256099 - - - A vulnerability, which was classified as problematic, has been found in Kaon CG3000 1.01.43. Affected by this issue is some unknown functionality of the component dhcpcd Command Handler. The manipula… CWE-79
Cross-site Scripting 		CVE-2024-8693 2024-09-12 21:35 2024-09-12 Show GitHub Exploit DB Packet Storm
256100 - - - evilnapsis Inventio Lite Versions v4 and before is vulnerable to SQL Injection via the "username" parameter in "/?action=processlogin." - CVE-2024-44541 2024-09-12 21:35 2024-09-12 Show GitHub Exploit DB Packet Storm