Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 14, 2026, noon

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
253351 7.5 危険 boka - SiteEngine における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-7267 2012-03-27 18:42 2010-12-1 Show GitHub Exploit DB Packet Storm
253352 4.3 警告 RSAセキュリティ - RSA Adaptive Authentication の Shockwave Flash におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2008-7266 2012-03-27 18:42 2010-11-26 Show GitHub Exploit DB Packet Storm
253353 4 警告 ProFTPD Project - ProFTPD の pr_data_xfer 関数におけるサービス運用妨害 (DoS) の脆弱性 CWE-399
リソース管理の問題 		CVE-2008-7265 2012-03-27 18:42 2010-11-9 Show GitHub Exploit DB Packet Storm
253354 2.1 注意 IBM - IBM FileNet P8AE の Workplace コンポーネントにおける重要な情報を取得される脆弱性 CWE-255
証明書・パスワード管理 		CVE-2008-7261 2012-03-27 18:42 2010-09-20 Show GitHub Exploit DB Packet Storm
253355 5 警告 g.rodola - pyftpdlib における実行中のデータ接続数の情報を取得される脆弱性 CWE-DesignError
CVE-2007-6738 2012-03-27 18:42 2010-10-19 Show GitHub Exploit DB Packet Storm
253356 4 警告 g.rodola - pyftpdlib の ftp_QUIT 関数におけるサービス運用妨害 (DoS) の脆弱性 CWE-20
不適切な入力確認 		CVE-2008-7264 2012-03-27 18:42 2008-06-26 Show GitHub Exploit DB Packet Storm
253357 7.5 危険 g.rodola - pyftpdlib の ftpserver.py におけるアクセスを取得される脆弱性 CWE-287
不適切な認証 		CVE-2008-7263 2012-03-27 18:42 2008-07-14 Show GitHub Exploit DB Packet Storm
253358 6.5 警告 g.rodola - pyftpdlib の FTPServer.py におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2008-7262 2012-03-27 18:42 2007-11-26 Show GitHub Exploit DB Packet Storm
253359 6.5 警告 g.rodola - pyftpdlib の ftp_PORT 関数における FTP バウンス攻撃を誘発する脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2007-6741 2012-03-27 18:42 2007-06-18 Show GitHub Exploit DB Packet Storm
253360 4 警告 g.rodola - pyftpdlib の ftp_STOU 関数におけるサービス運用妨害 (DoS) の脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2007-6740 2012-03-27 18:42 2007-07-18 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 14, 2026, 4:12 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
246061 9.8 CRITICAL
Network 		super_cms_blog_pro_project super_cms_blog_pro SQL Injection exists in authors_post.php in Super Cms Blog Pro 1.0 via the author parameter. CWE-89
SQL Injection 		CVE-2018-17391 2024-11-21 12:54 2018-09-28 Show GitHub Exploit DB Packet Storm
246062 9.8 CRITICAL
Network 		thephpfactory social_factory SQL Injection exists in the Social Factory 3.8.3 component for Joomla! via the radius[lat], radius[lng], or radius[radius] parameter. CWE-89
SQL Injection 		CVE-2018-17385 2024-11-21 12:54 2018-09-28 Show GitHub Exploit DB Packet Storm
246063 9.8 CRITICAL
Network 		thephpfactory swap_factory SQL Injection exists in the Swap Factory 2.2.1 component for Joomla! via the filter_order_Dir or filter_order parameter. CWE-89
SQL Injection 		CVE-2018-17384 2024-11-21 12:54 2018-09-28 Show GitHub Exploit DB Packet Storm
246064 9.8 CRITICAL
Network 		thephpfactory collection_factory SQL Injection exists in the Collection Factory 4.1.9 component for Joomla! via the filter_order or filter_order_Dir parameter. CWE-89
SQL Injection 		CVE-2018-17383 2024-11-21 12:54 2018-09-28 Show GitHub Exploit DB Packet Storm
246065 9.8 CRITICAL
Network 		thephpfactory jobs_factory SQL Injection exists in the Jobs Factory 2.0.4 component for Joomla! via the filter_letter parameter. CWE-89
SQL Injection 		CVE-2018-17382 2024-11-21 12:54 2018-09-28 Show GitHub Exploit DB Packet Storm
246066 9.8 CRITICAL
Network 		thephpfactory article_factory_manager SQL Injection exists in the Article Factory Manager 4.3.9 component for Joomla! via the start_date, m_start_date, or m_end_date parameter. CWE-89
SQL Injection 		CVE-2018-17380 2024-11-21 12:54 2018-09-28 Show GitHub Exploit DB Packet Storm
246067 9.8 CRITICAL
Network 		thephpfactory raffle_factory SQL Injection exists in the Raffle Factory 3.5.2 component for Joomla! via the filter_order_Dir or filter_order parameter. CWE-89
SQL Injection 		CVE-2018-17379 2024-11-21 12:54 2018-09-28 Show GitHub Exploit DB Packet Storm
246068 9.8 CRITICAL
Network 		thephpfactory penny_auction_factory SQL Injection exists in the Penny Auction Factory 2.0.4 component for Joomla! via the filter_order_Dir or filter_order parameter. CWE-89
SQL Injection 		CVE-2018-17378 2024-11-21 12:54 2018-09-28 Show GitHub Exploit DB Packet Storm
246069 9.8 CRITICAL
Network 		extensiondeveloper questions SQL Injection exists in the Questions 1.4.3 component for Joomla! via the term, userid, users, or groups parameter. CWE-89
SQL Injection 		CVE-2018-17377 2024-11-21 12:54 2018-09-28 Show GitHub Exploit DB Packet Storm
246070 9.8 CRITICAL
Network 		thephpfactory reverse_auction_factory SQL Injection exists in the Reverse Auction Factory 4.3.8 component for Joomla! via the filter_order_Dir, cat, or filter_letter parameter. CWE-89
SQL Injection 		CVE-2018-17376 2024-11-21 12:54 2018-09-28 Show GitHub Exploit DB Packet Storm