Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":July 1, 2026, 4:01 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
256141 7.5 危険 Joomla! - Joomla! の Weblinks コンポーネントにおける SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2010-4938 2012-02-28 16:04 2011-10-9 Show GitHub Exploit DB Packet Storm
256142 7.5 危険 RoBIT - Joomla! 用の Amblog コンポーネントにおける SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2010-4937 2012-02-28 15:56 2011-10-9 Show GitHub Exploit DB Packet Storm
256143 7.5 危険 Webmaster-Tips - Joomla! 用の Slide Show コンポーネントにおける SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2010-4936 2012-02-28 15:54 2011-10-9 Show GitHub Exploit DB Packet Storm
256144 7.5 危険 Khader Abbeb - Entrans の poll.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2010-4935 2012-02-28 15:53 2011-10-9 Show GitHub Exploit DB Packet Storm
256145 7.5 危険 SV Creation - Get Tube の video.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2010-4934 2012-02-28 15:50 2011-10-9 Show GitHub Exploit DB Packet Storm
256146 7.5 危険 Geeklog - Geeklog の filemgmt/singlefile.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2010-4933 2012-02-28 15:48 2011-10-9 Show GitHub Exploit DB Packet Storm
256147 4.3 警告 Khader Abbeb - Entrans の search.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2010-4932 2012-02-28 15:47 2011-10-9 Show GitHub Exploit DB Packet Storm
256148 4.3 警告 atmail pty ltd - Atmail Webmail の index.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2010-4930 2012-02-28 14:27 2011-10-9 Show GitHub Exploit DB Packet Storm
256149 7.5 危険 Joostina CMS - Joomla! 用 Joostina コンポーネントにおける SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2010-4929 2012-02-28 14:09 2011-10-9 Show GitHub Exploit DB Packet Storm
256150 4.3 警告 PhotoIndochina - Joomla! 用 Restaurant Guide コンポーネントにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2010-4928 2012-02-28 14:07 2011-10-9 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:July 1, 2026, 4:27 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
248541 9.8 CRITICAL
Network 		thinkphp thinkphp ThinkPHP 5.1.25 has SQL Injection via the count parameter because the library/think/db/Query.php aggregate function mishandles the aggregate variable. NOTE: a backquote character is required in the a… CWE-89
SQL Injection 		CVE-2018-18530 2024-11-21 12:56 2018-10-20 Show GitHub Exploit DB Packet Storm
248542 9.8 CRITICAL
Network 		thinkphp thinkphp ThinkPHP 3.2.4 has SQL Injection via the count parameter because the Library/Think/Db/Driver/Mysql.class.php parseKey function mishandles the key variable. NOTE: a backquote character is not required… CWE-89
SQL Injection 		CVE-2018-18529 2024-11-21 12:56 2018-10-20 Show GitHub Exploit DB Packet Storm
248543 9.8 CRITICAL
Network 		owndms ownticket OwnTicket 2018-05-23 allows SQL Injection via the showTicketId or editTicketStatusId parameter. CWE-89
SQL Injection 		CVE-2018-18527 2024-11-21 12:56 2018-10-20 Show GitHub Exploit DB Packet Storm
248544 5.5 MEDIUM
Local 		elfutils_project
debian
redhat
opensuse
canonical 		elfutils
debian_linux
enterprise_linux_desktop
enterprise_linux_workstation
enterprise_linux_server
leap
ubuntu_linux 		Divide-by-zero vulnerabilities in the function arlib_add_symbols() in arlib.c in elfutils 0.174 allow remote attackers to cause a denial of service (application crash) with a crafted ELF file, as dem… CWE-369
 Divide By Zero 		CVE-2018-18521 2024-11-21 12:56 2018-10-20 Show GitHub Exploit DB Packet Storm
248545 6.5 MEDIUM
Network 		elfutils_project
debian
canonical
opensuse
redhat 		elfutils
debian_linux
ubuntu_linux
leap
enterprise_linux_desktop
enterprise_linux_workstation
enterprise_linux_server 		An Invalid Memory Address Dereference exists in the function elf_end in libelf in elfutils through v0.174. Although eu-size is intended to support ar files inside ar files, handle_ar in size.c closes… CWE-119
Incorrect Access of Indexable Resource ('Range Error')  		CVE-2018-18520 2024-11-21 12:56 2018-10-20 Show GitHub Exploit DB Packet Storm
248546 9.8 CRITICAL
Network 		gxlcms gxlcms In \lib\admin\action\dataaction.class.php in Gxlcms v2.0, SQL Injection exists via the ids[] parameter. CWE-89
SQL Injection 		CVE-2018-18488 2024-11-21 12:56 2018-10-19 Show GitHub Exploit DB Packet Storm
248547 7.5 HIGH
Network 		gxlcms gxlcms In \lib\admin\action\dataaction.class.php in Gxlcms v2.0, the database backup filename generation uses mt_rand() unsafely, resulting in predictable database backup file locations. CWE-200
Information Exposure 		CVE-2018-18487 2024-11-21 12:56 2018-10-19 Show GitHub Exploit DB Packet Storm
248548 9.8 CRITICAL
Network 		phpshe phpshe An issue was discovered in PHPSHE 1.7. SQL injection exists via the admin.php?mod=user&act=del user_id[] parameter. CWE-89
SQL Injection 		CVE-2018-18486 2024-11-21 12:56 2018-10-19 Show GitHub Exploit DB Packet Storm
248549 7.5 HIGH
Network 		phpshe phpshe An issue was discovered in PHPSHE 1.7. admin.php?mod=db&act=del allows remote attackers to delete arbitrary files via directory traversal sequences in the dbname parameter. This can be leveraged to r… CWE-22
Path Traversal 		CVE-2018-18485 2024-11-21 12:56 2018-10-19 Show GitHub Exploit DB Packet Storm
248550 5.5 MEDIUM
Local 		gnu binutils An issue was discovered in cp-demangle.c in GNU libiberty, as distributed in GNU Binutils 2.31. Stack Exhaustion occurs in the C++ demangling functions provided by libiberty, and there is a stack con… CWE-674
 Uncontrolled Recursion 		CVE-2018-18484 2024-11-21 12:56 2018-10-19 Show GitHub Exploit DB Packet Storm