Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Feb. 9, 2026, 12:59 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
239331 7.5 危険 easysitenetwork - Jokes Complete Website の joke.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2008-5174 2012-06-26 16:03 2008-11-19 Show GitHub Exploit DB Packet Storm
239332 4.3 警告 forumsoftware - Yazd Forum Software におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2008-5172 2012-06-26 16:03 2008-11-19 Show GitHub Exploit DB Packet Storm
239333 7.5 危険 easysitenetwork - Cheats Complete Website の item.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2008-5170 2012-06-26 16:03 2008-11-19 Show GitHub Exploit DB Packet Storm
239334 7.5 危険 easysitenetwork - Drinks Complete Website の drinks/drink.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2008-5169 2012-06-26 16:03 2008-11-19 Show GitHub Exploit DB Packet Storm
239335 7.5 危険 easysitenetwork - Tips Complete Website の tip.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2008-5168 2012-06-26 16:03 2008-11-19 Show GitHub Exploit DB Packet Storm
239336 9.3 危険 BoonEx - Boonex Orca の layout/default/params.php における PHP リモートファイルインクルージョンの脆弱性 CWE-94
コード・インジェクション
CVE-2008-5167 2012-06-26 16:03 2008-11-19 Show GitHub Exploit DB Packet Storm
239337 7.5 危険 easysitenetwork - Riddles Website の riddle.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2008-5166 2012-06-26 16:03 2008-11-19 Show GitHub Exploit DB Packet Storm
239338 7.5 危険 eticket - eTicket における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2008-5165 2012-06-26 16:03 2008-11-19 Show GitHub Exploit DB Packet Storm
239339 10 危険 clientsoftware - Client Software WinCom LPD Total のリモート管理プロトコル処理における整数オーバーフローの脆弱性 CWE-189
数値処理の問題
CVE-2008-5159 2012-06-26 16:03 2008-11-18 Show GitHub Exploit DB Packet Storm
239340 7.5 危険 clientsoftware - Client Software WinCom LPD Total における管理者操作を実行される脆弱性 CWE-287
不適切な認証
CVE-2008-5158 2012-06-26 16:03 2008-11-18 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:April 18, 2026, 4:11 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
307321 - phpcomasy phpcomasy SQL injection vulnerability in index.php in phpComasy 0.7.5 and earlier allows remote attackers to execute arbitrary SQL commands via the id parameter. NOTE: an examination of the 0.7.5 source code … CWE-89
SQL Injection
CVE-2005-3744 2011-08-5 13:00 2005-11-22 Show GitHub Exploit DB Packet Storm
307322 - tru-zone nukeet SQL injection vulnerability in the Search module in Tru-Zone Nuke ET 3.2, and possibly earlier versions, allows remote attackers to execute arbitrary SQL commands via the query parameter. CWE-89
SQL Injection
CVE-2005-3748 2011-08-5 13:00 2005-11-22 Show GitHub Exploit DB Packet Storm
307323 - omnistar_interactive omnistar_live SQL injection vulnerability in kb.php in Omnistar Live 5.2 and earlier allows remote attackers to execute arbitrary SQL commands via the (1) id and (2) category_id parameter. NOTE: due to a typo, an… CWE-89
SQL Injection
CVE-2005-3840 2011-08-5 13:00 2005-11-27 Show GitHub Exploit DB Packet Storm
307324 - altantisfaq altantis_knowledge_base_software SQL injection vulnerability in search.php in AtlantisFAQ Knowledge Base Software 2.03 and earlier allows remote attackers to execute arbitrary SQL commands via the searchStr parameter. CWE-89
SQL Injection
CVE-2005-3881 2011-08-5 13:00 2005-11-29 Show GitHub Exploit DB Packet Storm
307325 - cfmagic magic_list_pro SQL injection vulnerability in view_archive.cfm in CFMagic Magic List Pro 2.5 allows remote attackers to execute arbitrary SQL commands via the ListID parameter. CWE-89
SQL Injection
CVE-2005-4073 2011-08-5 13:00 2005-12-8 Show GitHub Exploit DB Packet Storm
307326 - kde kdegraphics Stack consumption vulnerability in the KFILE JPEG (kfile_jpeg) plugin in kdegraphics 3, as used by konqueror, digikam, and other KDE image browsers, allows remote attackers to cause a denial of servi… CWE-399
 Resource Management Errors
CVE-2006-6297 2011-08-4 13:00 2006-12-5 Show GitHub Exploit DB Packet Storm
307327 - mimms
xine
mimms
xine-lib
Stack-based buffer overflow in libmms, as used by (a) MiMMS 0.0.9 and (b) xine-lib 1.1.0 and earlier, allows remote attackers to cause a denial of service (application crash) and possibly execute arb… CWE-119
Incorrect Access of Indexable Resource ('Range Error') 
CVE-2006-2200 2011-08-2 13:00 2006-06-28 Show GitHub Exploit DB Packet Storm
307328 - jed_wing chm_lib Stack-based buffer overflow in the _chm_find_in_PMGL function in chm_lib.c for chmlib before 0.36, as used in products such as KchmViewer, allows user-assisted attackers to execute arbitrary code via… CWE-119
Incorrect Access of Indexable Resource ('Range Error') 
CVE-2005-2930 2011-08-2 13:00 2005-10-29 Show GitHub Exploit DB Packet Storm
307329 - freebsd
nrl
freebsd
opie
Off-by-one error in the __opiereadrec function in readrec.c in libopie in OPIE 2.4.1-test1 and earlier, as used on FreeBSD 6.4 through 8.1-PRERELEASE and other platforms, allows remote attackers to c… CWE-189
Numeric Errors
CVE-2010-1938 2011-07-29 11:37 2010-05-29 Show GitHub Exploit DB Packet Storm
307330 - matthias_graubner mg_help SQL injection vulnerability in the Helpdesk (mg_help) extension 1.1.6 and earlier for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors. CWE-89
SQL Injection
CVE-2010-0333 2011-07-26 13:00 2010-01-16 Show GitHub Exploit DB Packet Storm