Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 10, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
242021 7.5 危険 china-on-site - FlexPHPNews の admin/usercheck.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-5927 2012-06-26 16:10 2009-01-21 Show GitHub Exploit DB Packet Storm
242022 7.5 危険 ASP-DEV - ASP-DEv Internal E-Mail System の login.asp における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-5926 2012-06-26 16:10 2009-01-21 Show GitHub Exploit DB Packet Storm
242023 5 警告 ASP-DEV - ASP-DEv XM Events Diary におけるデータベースをダウンロードされる脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2008-5925 2012-06-26 16:10 2009-01-21 Show GitHub Exploit DB Packet Storm
242024 7.5 危険 ASP-DEV - ASP-DEv XM Events Diary の diary_viewC.asp における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-5924 2012-06-26 16:10 2009-01-21 Show GitHub Exploit DB Packet Storm
242025 7.5 危険 ASP-DEV - ASP-DEv XM Events Diary の default.asp における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-5923 2012-06-26 16:10 2009-01-21 Show GitHub Exploit DB Packet Storm
242026 7.5 危険 cfagcms - CFAGCMS の themes/default/index.php における PHP リモートファイルインクルージョンの脆弱性 CWE-94
コード・インジェクション 		CVE-2008-5922 2012-06-26 16:10 2009-01-21 Show GitHub Exploit DB Packet Storm
242027 7.5 危険 codeavalanche - CodeAvalanche Articles における管理者パスワードを含むデータベースファイルをダウンロードされる脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2008-5900 2012-06-26 16:10 2009-01-12 Show GitHub Exploit DB Packet Storm
242028 7.5 危険 codeavalanche - CodeAvalanche FreeForAll における管理者パスワードを含むデータベースファイルをダウンロードされる脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2008-5899 2012-06-26 16:10 2009-01-12 Show GitHub Exploit DB Packet Storm
242029 7.5 危険 codeavalanche - CodeAvalanche Directory における管理者パスワードを含むデータベースファイルをダウンロードされる脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2008-5898 2012-06-26 16:10 2009-01-12 Show GitHub Exploit DB Packet Storm
242030 7.5 危険 codeavalanche - CodeAvalanche FreeWallpaper における管理者パスワードを含むデータベースファイルをダウンロードされる脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2008-5897 2012-06-26 16:10 2009-01-12 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 11, 2026, 4:09 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
267221 8.8 HIGH
Network 		apache
opensuse 		mod_fcgid
leap
opensuse 		A security Bypass vulnerability exists in the FcgidPassHeader Proxy in mod_fcgid through 2016-07-07. CWE-20
 Improper Input Validation  		CVE-2016-1000104 2024-11-21 11:42 2019-12-4 Show GitHub Exploit DB Packet Storm
267222 6.1 MEDIUM
Network 		python
debian
fedoraproject 		python
debian_linux
fedora 		The CGIHandler class in Python before 2.7.12 does not protect against the HTTP_PROXY variable name clash in a CGI script, which could allow a remote attacker to redirect HTTP requests. CWE-601
Open Redirect 		CVE-2016-1000110 2024-11-21 11:42 2019-11-28 Show GitHub Exploit DB Packet Storm
267223 9.8 CRITICAL
Network 		facebook hhvm hhvm before 3.12.11 has a use-after-free in the serialize_memoize_param() and ResourceBundle::__construct() functions. CWE-416
 Use After Free 		CVE-2016-1000006 2024-11-21 11:42 2019-11-20 Show GitHub Exploit DB Packet Storm
267224 6.1 MEDIUM
Network 		redhat
fedoraproject 		pagure
fedora
enterprise_linux 		Pagure: XSS possible in file attachment endpoint CWE-79
Cross-site Scripting 		CVE-2016-1000037 2024-11-21 11:42 2019-11-7 Show GitHub Exploit DB Packet Storm
267225 2.4 LOW
Physics 		gnome
redhat
debian
opensuse 		gnome_display_manager
enterprise_linux
debian_linux
leap 		gdm3 3.14.2 and possibly later has an information leak before screen lock CWE-200
Information Exposure 		CVE-2016-1000002 2024-11-21 11:42 2019-11-5 Show GitHub Exploit DB Packet Storm
267226 5.9 MEDIUM
Network 		pivotal_software cloud_foundry_elastic_runtime Pivotal Cloud Foundry Elastic Runtime version 1.4.0 through 1.4.5, 1.5.0 through 1.5.11 and 1.6.0 through 1.6.11 is vulnerable to a remote information disclosure. It was found that original mitigatio… CWE-200
Information Exposure 		CVE-2016-0715 2024-11-21 11:42 2018-09-12 Show GitHub Exploit DB Packet Storm
267227 8.8 HIGH
Network 		infinispan infinispan The hotrod java client in infinispan before 9.1.0.Final automatically deserializes bytearray message contents in certain events. A malicious user could exploit this flaw by injecting a specially-craf… CWE-502
 Deserialization of Untrusted Data 		CVE-2016-0750 2024-11-21 11:42 2018-09-11 Show GitHub Exploit DB Packet Storm
267228 9.8 CRITICAL
Network 		suse
pidgin 		linux_enterprise_server
pidgin 		Pidgin version <2.11.0 contains a vulnerability in X.509 Certificates imports specifically due to improper check of return values from gnutls_x509_crt_init() and gnutls_x509_crt_import() that can res… CWE-295
Improper Certificate Validation  		CVE-2016-1000030 2024-11-21 11:42 2018-09-6 Show GitHub Exploit DB Packet Storm
267229 5.9 MEDIUM
Network 		cloudfoundry java_buildpack
cf-release 		Applications deployed to Cloud Foundry, versions v166 through v227, may be vulnerable to a remote disclosure of information, including, but not limited to environment variables and bound service deta… CWE-200
Information Exposure 		CVE-2016-0708 2024-11-21 11:42 2018-07-12 Show GitHub Exploit DB Packet Storm
267230 10.0 CRITICAL
Network 		vmware pivotal_software_mysql MySQL for PCF tiles 1.7.x before 1.7.10 were discovered to log the AWS access key in plaintext. These credentials were logged to the Service Backup component logs, and not the system log, thus were n… CWE-255
CWE-532
Credentials Management
 Inclusion of Sensitive Information in Log Files 		CVE-2016-0898 2024-11-21 11:42 2018-03-30 Show GitHub Exploit DB Packet Storm