Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 2, 2026, 6 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
243031 5 警告 cookex
Joomla!
- Joomla! の Cookex Agency ckforms コンポーネントにおけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル
CVE-2010-1345 2012-06-26 16:19 2010-04-9 Show GitHub Exploit DB Packet Storm
243032 7.5 危険 cookex
Joomla!
- Joomla! の Cookex Agency ckforms コンポーネントにおける SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2010-1344 2012-06-26 16:19 2010-04-9 Show GitHub Exploit DB Packet Storm
243033 7.5 危険 bjsintay - SiteX における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2010-1343 2012-06-26 16:19 2010-04-9 Show GitHub Exploit DB Packet Storm
243034 6.8 警告 directnews - Direct News における PHP リモートファイルインクルージョンの脆弱性 CWE-94
コード・インジェクション
CVE-2010-1342 2012-06-26 16:19 2010-04-9 Show GitHub Exploit DB Packet Storm
243035 5 警告 ermenegildo fiorito - Irmin CMS におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル
CVE-2010-1309 2012-06-26 16:19 2010-04-8 Show GitHub Exploit DB Packet Storm
243036 5 警告 decryptweb
Joomla!
- Joomla! の dwgraphs コンポーネントの dwgraphs.php におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル
CVE-2010-1302 2012-06-26 16:19 2010-04-7 Show GitHub Exploit DB Packet Storm
243037 7.5 危険 The Cacti Group - Cacti の templates_export.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2010-1431 2012-06-26 16:19 2009-06-28 Show GitHub Exploit DB Packet Storm
243038 5.1 警告 dynpg - DynPG CMS における PHP リモートファイルインクルージョンの脆弱性 CWE-94
コード・インジェクション
CVE-2010-1299 2012-06-26 16:19 2010-04-7 Show GitHub Exploit DB Packet Storm
243039 4.3 警告 bbsxp - BBSXP 2008 SP2 におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2010-1276 2012-06-26 16:19 2010-04-6 Show GitHub Exploit DB Packet Storm
243040 4.3 警告 bbsxp - BBSXP 2008 の ShowPost.asp におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2010-1275 2012-06-26 16:19 2010-04-6 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 3, 2026, 4:18 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
266801 6.5 MEDIUM
Network
phpmyadmin phpmyadmin An issue was discovered in phpMyAdmin. An authenticated user can trigger a denial-of-service (DoS) attack by entering a very long password at the change password dialog. All 4.6.x versions (prior to … CWE-20
 Improper Input Validation 
CVE-2016-6630 2024-11-21 11:56 2016-12-11 Show GitHub Exploit DB Packet Storm
266802 9.8 CRITICAL
Network
phpmyadmin phpmyadmin An issue was discovered in phpMyAdmin involving the $cfg['ArbitraryServerRegexp'] configuration directive. An attacker could reuse certain cookie values in a way of bypassing the servers defined by A… CWE-254
 7PK - Security Features
CVE-2016-6629 2024-11-21 11:56 2016-12-11 Show GitHub Exploit DB Packet Storm
266803 6.3 MEDIUM
Network
phpmyadmin phpmyadmin An issue was discovered in phpMyAdmin. An attacker may be able to trigger a user to download a specially crafted malicious SVG file. All 4.6.x versions (prior to 4.6.4), 4.4.x versions (prior to 4.4.… CWE-254
 7PK - Security Features
CVE-2016-6628 2024-11-21 11:56 2016-12-11 Show GitHub Exploit DB Packet Storm
266804 5.3 MEDIUM
Network
phpmyadmin phpmyadmin An issue was discovered in phpMyAdmin. An attacker can determine the phpMyAdmin host location through the file url.php. All 4.6.x versions (prior to 4.6.4), 4.4.x versions (prior to 4.4.15.8), and 4.… CWE-200
Information Exposure
CVE-2016-6627 2024-11-21 11:56 2016-12-11 Show GitHub Exploit DB Packet Storm
266805 5.4 MEDIUM
Network
phpmyadmin phpmyadmin An issue was discovered in phpMyAdmin. An attacker could redirect a user to a malicious web page. All 4.6.x versions (prior to 4.6.4), 4.4.x versions (prior to 4.4.15.8), and 4.0.x versions (prior to… CWE-254
 7PK - Security Features
CVE-2016-6626 2024-11-21 11:56 2016-12-11 Show GitHub Exploit DB Packet Storm
266806 4.3 MEDIUM
Network
phpmyadmin phpmyadmin An issue was discovered in phpMyAdmin. An attacker can determine whether a user is logged in to phpMyAdmin. The user's session, username, and password are not compromised by this vulnerability. All 4… CWE-200
Information Exposure
CVE-2016-6625 2024-11-21 11:56 2016-12-11 Show GitHub Exploit DB Packet Storm
266807 5.9 MEDIUM
Network
phpmyadmin phpmyadmin An issue was discovered in phpMyAdmin involving improper enforcement of the IP-based authentication rules. When phpMyAdmin is used with IPv6 in a proxy server environment, and the proxy server is in … CWE-254
 7PK - Security Features
CVE-2016-6624 2024-11-21 11:56 2016-12-11 Show GitHub Exploit DB Packet Storm
266808 6.5 MEDIUM
Network
phpmyadmin phpmyadmin An issue was discovered in phpMyAdmin. An authorized user can cause a denial-of-service (DoS) attack on a server by passing large values to a loop. All 4.6.x versions (prior to 4.6.4), 4.4.x versions… CWE-20
 Improper Input Validation 
CVE-2016-6623 2024-11-21 11:56 2016-12-11 Show GitHub Exploit DB Packet Storm
266809 5.9 MEDIUM
Network
phpmyadmin phpmyadmin An issue was discovered in phpMyAdmin. An unauthenticated user is able to execute a denial-of-service (DoS) attack by forcing persistent connections when phpMyAdmin is running with $cfg['AllowArbitra… CWE-399
 Resource Management Errors
CVE-2016-6622 2024-11-21 11:56 2016-12-11 Show GitHub Exploit DB Packet Storm
266810 9.8 CRITICAL
Network
phpmyadmin phpmyadmin An issue was discovered in phpMyAdmin. Some data is passed to the PHP unserialize() function without verification that it's valid serialized data. The unserialization can result in code execution bec… CWE-502
 Deserialization of Untrusted Data
CVE-2016-6620 2024-11-21 11:56 2016-12-11 Show GitHub Exploit DB Packet Storm