Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 26, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
251601 7.5 危険 Discuz - UCenter Home の shop.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2010-4912 2012-02-28 10:40 2011-10-8 Show GitHub Exploit DB Packet Storm
251602 7.5 危険 Sell@Site - PHP Classifieds Ads の classi/detail.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2010-4911 2012-02-28 10:39 2011-10-8 Show GitHub Exploit DB Packet Storm
251603 7.5 危険 ColdGen - ColdGen ColdCalendar の index.cfm におけるSQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2010-4910 2012-02-28 10:37 2011-10-8 Show GitHub Exploit DB Packet Storm
251604 4.3 警告 Mechbunny - PaysiteReviewCMS におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2010-4909 2012-02-28 10:36 2011-10-8 Show GitHub Exploit DB Packet Storm
251605 7.5 危険 Virtue Netz - Virtue Shopping Mall の detail.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2010-4908 2012-02-28 10:35 2011-10-8 Show GitHub Exploit DB Packet Storm
251606 4.3 警告 Powie - Powie pFile の pfile/kommentar.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2012-1211 2012-02-27 17:12 2012-02-24 Show GitHub Exploit DB Packet Storm
251607 4.3 警告 Apache Software Foundation - Apache HTTP Server の mod_proxy モジュールにおけるイントラネットサーバにリクエストを送信される脆弱性 CWE-20
不適切な入力確認 		CVE-2011-3639 2012-02-27 17:01 2011-10-25 Show GitHub Exploit DB Packet Storm
251608 4.3 警告 Zimbra - Zimbra Web Client の zimbra/h/calendar におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2012-1213 2012-02-27 16:48 2012-02-24 Show GitHub Exploit DB Packet Storm
251609 4.3 警告 SMW+ - Semantic Enterprise Wiki の smwfOnSfSetTargetName 関数におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2012-1212 2012-02-27 16:47 2012-02-24 Show GitHub Exploit DB Packet Storm
251610 7.5 危険 Powie - Powie pFile の pfile/file.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2012-1210 2012-02-27 15:51 2012-02-24 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 26, 2026, 4:05 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
247511 6.1 MEDIUM
Network 		epesi epesi Cross-site scripting (XSS) vulnerability in modules/Base/Lang/Administrator/update_translation.php in EPESI in Telaxus/EPESI 1.8.2 and earlier allows remote attackers to inject arbitrary web script o… CWE-79
Cross-site Scripting 		CVE-2017-9621 2024-11-21 12:36 2017-06-15 Show GitHub Exploit DB Packet Storm
247512 5.5 MEDIUM
Local 		wireshark wireshark In Wireshark 2.2.7, deeply nested DAAP data may cause stack exhaustion (uncontrolled recursion) in the dissect_daap_one_tag function in epan/dissectors/packet-daap.c in the DAAP dissector. CWE-674
 Uncontrolled Recursion 		CVE-2017-9617 2024-11-21 12:36 2017-06-15 Show GitHub Exploit DB Packet Storm
247513 5.5 MEDIUM
Local 		wireshark wireshark In Wireshark 2.2.7, overly deep mp4 chunks may cause stack exhaustion (uncontrolled recursion) in the dissect_mp4_box function in epan/dissectors/file-mp4.c. CWE-674
 Uncontrolled Recursion 		CVE-2017-9616 2024-11-21 12:36 2017-06-15 Show GitHub Exploit DB Packet Storm
247514 6.1 MEDIUM
Network 		piwigo piwigo An open redirect vulnerability is present in Piwigo 2.9 and probably prior versions, allowing remote attackers to redirect users to arbitrary web sites and conduct phishing attacks. The identificatio… CWE-601
Open Redirect 		CVE-2017-9464 2024-11-21 12:36 2017-06-15 Show GitHub Exploit DB Packet Storm
247515 6.5 MEDIUM
Network 		piwigo piwigo The application Piwigo is affected by a SQL injection vulnerability in version 2.9.0 and possibly prior. This vulnerability allows remote authenticated attackers to obtain information in the context … CWE-89
SQL Injection 		CVE-2017-9463 2024-11-21 12:36 2017-06-15 Show GitHub Exploit DB Packet Storm
247516 5.3 MEDIUM
Network 		haxx curl In curl before 7.54.1 on Windows and DOS, libcurl's default protocol function, which is the logic that allows an application to set which protocol libcurl should attempt to use when given a URL witho… CWE-119
Incorrect Access of Indexable Resource ('Range Error')  		CVE-2017-9502 2024-11-21 12:36 2017-06-14 Show GitHub Exploit DB Packet Storm
247517 5.5 MEDIUM
Local 		linux linux_kernel The vmw_gb_surface_define_ioctl function (accessible via DRM_IOCTL_VMW_GB_SURFACE_CREATE) in drivers/gpu/drm/vmwgfx/vmwgfx_surface.c in the Linux kernel through 4.11.4 defines a backup_handle variabl… CWE-200
Information Exposure 		CVE-2017-9605 2024-11-21 12:36 2017-06-14 Show GitHub Exploit DB Packet Storm
247518 8.8 HIGH
Network 		intensewp wp_jobs SQL injection vulnerability in the WP Jobs plugin before 1.5 for WordPress allows authenticated users to execute arbitrary SQL commands via the jobid parameter to wp-admin/edit.php. CWE-89
SQL Injection 		CVE-2017-9603 2024-11-21 12:36 2017-06-14 Show GitHub Exploit DB Packet Storm
247519 8.8 HIGH
Network 		event_list_project event_list SQL injection vulnerability in the Event List plugin 0.7.8 for WordPress allows an authenticated user to execute arbitrary SQL commands via the id parameter to wp-admin/admin.php. CWE-89
SQL Injection 		CVE-2017-9429 2024-11-21 12:36 2017-06-14 Show GitHub Exploit DB Packet Storm
247520 7.5 HIGH
Network 		kde kmail
messagelib 		KDE kmail before 5.5.2 and messagelib before 5.5.2, as distributed in KDE Applications before 17.04.2, do not ensure that a plugin's sign/encrypt action occurs during use of the Send Later feature, w… CWE-311
Missing Encryption of Sensitive Data 		CVE-2017-9604 2024-11-21 12:36 2017-06-13 Show GitHub Exploit DB Packet Storm