Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Feb. 9, 2026, 12:59 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
240001 7.5 危険 Acidcat - Acidcat CMS における制限を回避される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2008-1992 2012-06-26 16:02 2008-04-27 Show GitHub Exploit DB Packet Storm
240002 4.3 警告 Acidcat - Acidcat CMS の admin_colors_swatch.asp におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2008-1991 2012-06-26 16:02 2008-04-27 Show GitHub Exploit DB Packet Storm
240003 7.5 危険 Acidcat - Acidcat CMS における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-1990 2012-06-26 16:02 2008-04-27 Show GitHub Exploit DB Packet Storm
240004 10 危険 e107.org
123flashchat		 - 123 Flash Chat の 123flashchat.php における PHP リモートファイルインクルージョンの脆弱性 CWE-94
コード・インジェクション 		CVE-2008-1989 2012-06-26 16:02 2008-04-27 Show GitHub Exploit DB Packet Storm
240005 9 危険 encaps - EncapsGallery の file_upload 関数における任意の PHP ファイルを実行される脆弱性 CWE-20
不適切な入力確認 		CVE-2008-1988 2012-06-26 16:02 2008-04-27 Show GitHub Exploit DB Packet Storm
240006 4.3 警告 encaps - EncapsGallery の search.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2008-1987 2012-06-26 16:02 2008-04-27 Show GitHub Exploit DB Packet Storm
240007 4.3 警告 digitalhive - DigitalHive の base.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2008-1985 2012-06-26 16:02 2008-04-27 Show GitHub Exploit DB Packet Storm
240008 4.3 警告 AEF Group - AEF におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2008-1983 2012-06-26 16:02 2008-04-27 Show GitHub Exploit DB Packet Storm
240009 7.5 危険 cogites - E-RESERV の index.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-1975 2012-06-26 16:02 2008-04-27 Show GitHub Exploit DB Packet Storm
240010 9.3 危険 artur sikora - SubEdit Player におけるヒープベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2008-1973 2012-06-26 16:02 2008-04-27 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:April 25, 2026, 4:08 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
292131 - apple mac_os_x
mac_os_x_server 		Multiple memory leaks in XNU 1228.3.13 and earlier on Apple Mac OS X 10.5.6 and earlier allow local users to cause a denial of service (kernel memory consumption) via a crafted (1) SYS_add_profil or … CWE-399
 Resource Management Errors 		CVE-2009-1237 2017-09-29 10:34 2009-04-3 Show GitHub Exploit DB Packet Storm
292132 - apple mac_os_x
mac_os_x_server 		Race condition in the HFS vfs sysctl interface in XNU 1228.8.20 and earlier on Apple Mac OS X 10.5.6 and earlier allows local users to cause a denial of service (kernel memory corruption) by simultan… CWE-362
Race Condition 		CVE-2009-1238 2017-09-29 10:34 2009-04-3 Show GitHub Exploit DB Packet Storm
292133 - blogplus blogplus Multiple directory traversal vulnerabilities in Blogplus 1.0 allow remote attackers to include and execute arbitrary local files via a .. (dot dot) in the (1) row_mysql_blocks_center_down[file] param… CWE-22
Path Traversal 		CVE-2009-1246 2017-09-29 10:34 2009-04-7 Show GitHub Exploit DB Packet Storm
292134 - acutecp.rediscussed acutecp SQL injection vulnerability in login.php in Acute Control Panel 1.0.0 allows remote attackers to execute arbitrary SQL commands via the username parameter. CWE-89
SQL Injection 		CVE-2009-1247 2017-09-29 10:34 2009-04-7 Show GitHub Exploit DB Packet Storm
292135 - acutecp acute_control_panel Multiple PHP remote file inclusion vulnerabilities in Acute Control Panel 1.0.0 allow remote attackers to execute arbitrary PHP code via a URL in the theme_directory parameter to (1) container.php an… CWE-94
Code Injection 		CVE-2009-1248 2017-09-29 10:34 2009-04-7 Show GitHub Exploit DB Packet Storm
292136 - flexcms flexcms SQL injection vulnerability in FlexCMS 2.5 allows remote attackers to execute arbitrary SQL commands via the ItemId parameter. NOTE: some of these details are obtained from third party information. CWE-89
SQL Injection 		CVE-2009-1256 2017-09-29 10:34 2009-04-8 Show GitHub Exploit DB Packet Storm
292137 - magic_iso_maker magic_iso_maker Heap-based buffer overflow in Magic ISO Maker 5.5 build 0274 allows remote attackers to cause a denial of service (crash) or execute arbitrary code via a crafted CCD file. CWE-119
Incorrect Access of Indexable Resource ('Range Error')  		CVE-2009-1257 2017-09-29 10:34 2009-04-8 Show GitHub Exploit DB Packet Storm
292138 - insanevisions adaptbb SQL injection vulnerability in inc/bb/topic.php in Insane Visions AdaptBB 1.0, when magic_quotes_gpc is disabled, allows remote attackers to execute arbitrary SQL commands via the topic_id parameter … CWE-89
SQL Injection 		CVE-2009-1259 2017-09-29 10:34 2009-04-8 Show GitHub Exploit DB Packet Storm
292139 - ezbsystems ultraiso Multiple stack-based buffer overflows in UltraISO 9.3.3.2685 and earlier allow remote attackers to cause a denial of service (crash) or execute arbitrary code via a crafted (1) CCD or (2) IMG file. CWE-119
Incorrect Access of Indexable Resource ('Range Error')  		CVE-2009-1260 2017-09-29 10:34 2009-04-8 Show GitHub Exploit DB Packet Storm
292140 - alikonweb com_bookjoomlas SQL injection vulnerability in sub_commententry.php in the BookJoomlas (com_bookjoomlas) component 0.1 for Joomla! allows remote attackers to execute arbitrary SQL commands via the gbid parameter in … CWE-89
SQL Injection 		CVE-2009-1263 2017-09-29 10:34 2009-04-8 Show GitHub Exploit DB Packet Storm