Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":July 1, 2026, 12:08 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
250031 4.3 警告 cruxsoftware - Crux Software CruxCMS の search.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2008-0700 2012-06-26 15:55 2008-02-11 Show GitHub Exploit DB Packet Storm
250032 7.5 危険 bookmarkx - BookmarkX スクリプト 2007 の index.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2008-0695 2012-06-26 15:55 2008-02-11 Show GitHub Exploit DB Packet Storm
250033 7.5 危険 Yegnold - A-Blog の blog.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2008-0677 2012-06-26 15:55 2008-02-11 Show GitHub Exploit DB Packet Storm
250034 4.3 警告 Yegnold - A-Blog の search.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2008-0676 2012-06-26 15:55 2008-02-11 Show GitHub Exploit DB Packet Storm
250035 7.2 危険 チェック・ポイント・ソフトウェア・テクノロジーズ - Check Point VPN-1 SecuRemote/SecureClient NGX における権限を取得される脆弱性 CWE-200
情報漏えい
CVE-2008-0662 2012-06-26 15:55 2008-02-7 Show GitHub Exploit DB Packet Storm
250036 9.3 危険 aurigma
Facebook
- Facebook PhotoUploader で使用される Aurigma Image Uploader ActiveX コントロール (ImageUploader4.ocx) におけるスタックベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー
CVE-2008-0660 2012-06-26 15:55 2008-02-7 Show GitHub Exploit DB Packet Storm
250037 10 危険 aurigma
myspace
- MySpace MySpaceUploader.ocx で使用される Aurigma Image Uploader ActiveX コントロール (ImageUploader4.ocx) におけるスタックベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー
CVE-2008-0659 2012-06-26 15:55 2008-02-7 Show GitHub Exploit DB Packet Storm
250038 10 危険 DELL EMC (旧 EMC Corporation) - EMC Documentum Administrator の dmclTrace.jsp における任意のファイルを上書きされる脆弱性 CWE-20
不適切な入力確認
CVE-2008-0656 2012-06-26 15:55 2008-02-7 Show GitHub Exploit DB Packet Storm
250039 7.5 危険 azucar cms - Azucar CMS におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル
CVE-2008-0654 2012-06-26 15:55 2008-02-7 Show GitHub Exploit DB Packet Storm
250040 7.5 危険 adp - ADP の detail.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2008-0649 2012-06-26 15:55 2008-02-7 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:July 1, 2026, 4:27 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
358531 - johnmccollum com_advertising Directory traversal vulnerability in the Advertising (com_advertising) component 0.25 for Joomla! allows remote attackers to read arbitrary files and possibly have unspecified other impact via a .. (… CWE-22
Path Traversal
CVE-2010-1473 2010-06-11 13:00 2010-04-20 Show GitHub Exploit DB Packet Storm
358532 - alphaplug com_alphauserpoints Directory traversal vulnerability in the AlphaUserPoints (com_alphauserpoints) component 1.5.5 for Joomla! allows remote attackers to read arbitrary files and possibly have unspecified other impact v… CWE-22
Path Traversal
CVE-2010-1476 2010-06-11 13:00 2010-04-20 Show GitHub Exploit DB Packet Storm
358533 - martin_hess com_sermonspeaker SQL injection vulnerability in the SermonSpeaker (com_sermonspeaker) component before 3.2.1 for Joomla! allows remote attackers to execute arbitrary SQL commands via the id parameter in a latest_serm… CWE-89
SQL Injection
CVE-2010-1477 2010-06-11 13:00 2010-04-20 Show GitHub Exploit DB Packet Storm
358534 - ternaria com_jfeedback Directory traversal vulnerability in the Ternaria Informatica Jfeedback! (com_jfeedback) component 1.2 for Joomla! allows remote attackers to read arbitrary files and possibly have unspecified other … CWE-22
Path Traversal
CVE-2010-1478 2010-06-11 13:00 2010-04-20 Show GitHub Exploit DB Packet Storm
358535 - rockettheme com_rokmodule SQL injection vulnerability in the RokModule (com_rokmodule) component 1.1 for Joomla! allows remote attackers to execute arbitrary SQL commands via the moduleid parameter in a raw action to index.ph… CWE-89
SQL Injection
CVE-2010-1479 2010-06-11 13:00 2010-04-20 Show GitHub Exploit DB Packet Storm
358536 - pligg pligg_cms Multiple cross-site request forgery (CSRF) vulnerabilities in Pligg before 1.0.3 allow remote attackers to hijack the authentication of administrators for requests that create user accounts or have u… CWE-352
 Origin Validation Error
CVE-2009-4787 2010-06-11 13:00 2010-04-21 Show GitHub Exploit DB Packet Storm
358537 - shape5 bridge_of_hope_template SQL injection vulnerability in the Shape5 Bridge of Hope template for Joomla! allows remote attackers to execute arbitrary SQL commands via the id parameter in an article action to index.php. CWE-89
SQL Injection
CVE-2010-2254 2010-06-10 13:00 2010-06-10 Show GitHub Exploit DB Packet Storm
358538 - tamlyncreative com_bfsurvey_profree
com_bfsurvey_pro
com_bfsurvey_basic
SQL injection vulnerability in the BF Survey Pro (com_bfsurvey_pro) component before 1.3.1, BF Survey Pro Free (com_bfsurvey_profree) component 1.2.6, and BF Survey Basic component before 1.2 for Joo… CWE-89
SQL Injection
CVE-2010-2255 2010-06-10 13:00 2010-06-10 Show GitHub Exploit DB Packet Storm
358539 - payperviewvideosoftware pay_per_minute_video_chat_script Multiple cross-site scripting (XSS) vulnerabilities in Pay Per Minute Video Chat Script 2.0 and 2.1 allow remote attackers to inject arbitrary web script or HTML via the (1) id parameter to admin/mem… CWE-79
Cross-site Scripting
CVE-2010-2256 2010-06-10 13:00 2010-06-10 Show GitHub Exploit DB Packet Storm
358540 - payperviewvideosoftware pay_per_minute_video_chat_script SQL injection vulnerability in index_ie.php in Pay Per Minute Video Chat Script 2.0 and 2.1 allows remote attackers to execute arbitrary SQL commands via the page parameter. CWE-89
SQL Injection
CVE-2010-2257 2010-06-10 13:00 2010-06-10 Show GitHub Exploit DB Packet Storm