Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Feb. 9, 2026, 12:59 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
239481 10 危険 datafeedfile - DFF PHP Framework API における PHP リモートファイルインクルージョンの脆弱性 CWE-94
コード・インジェクション 		CVE-2008-4502 2012-06-26 16:02 2008-10-8 Show GitHub Exploit DB Packet Storm
239482 7.5 危険 built2go - Built2Go Real Estate Listings の event_detail.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-4497 2012-06-26 16:02 2008-10-8 Show GitHub Exploit DB Packet Storm
239483 5 警告 アップル - Apple Mail.app における重要なメールを読まれる脆弱性 CWE-200
情報漏えい 		CVE-2008-4491 2012-06-26 16:02 2008-10-8 Show GitHub Exploit DB Packet Storm
239484 10 危険 atarone - Atarone CMS の ap-save.php におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2008-4489 2012-06-26 16:02 2008-10-7 Show GitHub Exploit DB Packet Storm
239485 4.3 警告 atarone - Atarone CMS の ap-pages.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2008-4488 2012-06-26 16:02 2008-10-7 Show GitHub Exploit DB Packet Storm
239486 6.8 警告 atarone - Atarone CMS の ap-save.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-4487 2012-06-26 16:02 2008-10-7 Show GitHub Exploit DB Packet Storm
239487 4.3 警告 ブルーコートシステムズ - Blue Coat SGOS の ICAP patience page におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2008-4485 2012-06-26 16:02 2008-10-7 Show GitHub Exploit DB Packet Storm
239488 6.8 警告 cruxsoftware - Crux Gallery の main.php における管理アクセス権を取得される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2008-4484 2012-06-26 16:02 2008-10-7 Show GitHub Exploit DB Packet Storm
239489 6.8 警告 cruxsoftware - Crux Gallery の index.php におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2008-4483 2012-06-26 16:02 2008-10-7 Show GitHub Exploit DB Packet Storm
239490 7.2 危険 GNU Project - ibackup における任意のファイルを上書きされる脆弱性 CWE-59
リンク解釈の問題 		CVE-2008-4475 2012-06-26 16:02 2008-10-7 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:April 23, 2026, 4 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
308541 - xmpie ustore Multiple cross-site scripting (XSS) vulnerabilities in UStore allow remote attackers to inject arbitrary web script or HTML via the (1) Cat parameter in default.asp and the (2) accessdenied parameter… NVD-CWE-Other
CVE-2005-4355 2011-03-8 11:28 2005-12-20 Show GitHub Exploit DB Packet Storm
308542 - xmpie ustore SQL injection vulnerability in UStore allows remote attackers to execute arbitrary SQL commands via the (1) username and (2) password fields. NOTE: the provenance of this information is unknown; the… NVD-CWE-Other
CVE-2005-4356 2011-03-8 11:28 2005-12-20 Show GitHub Exploit DB Packet Storm
308543 - oodie odfaq SQL injection vulnerability in includes/core.inc.php in ODFaq 2.1.0 allows remote attackers to execute arbitrary SQL commands via the (1) cat and (2) srcText parameters to faq.php. NVD-CWE-Other
CVE-2005-4359 2011-03-8 11:28 2005-12-20 Show GitHub Exploit DB Packet Storm
308544 - magnolia content_management_suite Cross-site scripting (XSS) vulnerability in search.html in Magnolia Content Management Suite 2.1 allows remote attackers to inject arbitrary web script or HTML via the query parameter. NVD-CWE-Other
CVE-2005-4361 2011-03-8 11:28 2005-12-20 Show GitHub Exploit DB Packet Storm
308545 - komodo komodo_cms SQL injection vulnerability in page.php in Komodo CMS 2.1 allows remote attackers to execute arbitrary SQL commands via the page parameter. NVD-CWE-Other
CVE-2005-4362 2011-03-8 11:28 2005-12-20 Show GitHub Exploit DB Packet Storm
308546 - komodo komodo_cms Cross-site scripting (XSS) vulnerability in the search engine in Komodo CMS 2.1 allows remote attackers to inject arbitrary web script or HTML via unspecified search parameters. NVD-CWE-Other
CVE-2005-4363 2011-03-8 11:28 2005-12-20 Show GitHub Exploit DB Packet Storm
308547 - hot_banana web_content_management_suite Cross-site scripting (XSS) vulnerability in index.cfm in Hot Banana Web Content Management Suite 5.3 allows remote attackers to inject arbitrary web script or HTML via the keywords parameter. NVD-CWE-Other
CVE-2005-4364 2011-03-8 11:28 2005-12-20 Show GitHub Exploit DB Packet Storm
308548 - flip flip Multiple cross-site scripting (XSS) vulnerabilities in FLIP 0.9.0.1029 allow remote attackers to inject arbitrary web script or HTML via the (1) name parameter in text.php and (2) frame parameter in … NVD-CWE-Other
CVE-2005-4365 2011-03-8 11:28 2005-12-20 Show GitHub Exploit DB Packet Storm
308549 - the_collective acuity_cms Cross-site scripting (XSS) vulnerability in Acuity CMS 2.6.2 allows remote attackers to inject arbitrary web script or HTML via unspecified search parameters, possibly strSearchKeywords to browse.asp. NVD-CWE-Other
CVE-2005-4369 2011-03-8 11:28 2005-12-20 Show GitHub Exploit DB Packet Storm
308550 - liquid_bytes_technologies adaptive_website_framework Cross-site scripting (XSS) vulnerability in account.html in Adaptive Website Framework (AWF) 2.10 and earlier allows remote attackers to inject arbitrary web script or HTML via the page parameter. NVD-CWE-Other
CVE-2005-4372 2011-03-8 11:28 2005-12-20 Show GitHub Exploit DB Packet Storm