Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
Urgent
Important
Warning
Warning
CVE
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
脅威度ソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Jan. 12, 2025, 10 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
188651 7.5 危険 オラクル - TimesTen Client/Server の Oracle Times Ten In-Memory Database コンポーネントにおける脆弱性 CWE-noinfo
情報不足 		CVE-2008-2597 2012-09-25 17:17 2008-07-15 Show GitHub Exploit DB Packet Storm
188652 6.8 警告 Joomla! - Joomla! 用の GameQ コンポーネントにおける SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-2701 2012-09-25 17:17 2008-06-13 Show GitHub Exploit DB Packet Storm
188653 7.5 危険 gwm - Galatolo WebManager の view.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-2700 2012-09-25 17:17 2008-06-13 Show GitHub Exploit DB Packet Storm
188654 7.5 危険 gwm - GWM におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2008-2699 2012-09-25 17:17 2008-06-13 Show GitHub Exploit DB Packet Storm
188655 7.5 危険 jiro - JiRo's FAQ Manager eXperience の read.asp における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-2691 2012-09-25 17:17 2008-06-13 Show GitHub Exploit DB Packet Storm
188656 7.5 危険 insanelysimple2 - Insanely Simple Blog の index.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-2670 2012-09-25 17:17 2008-06-11 Show GitHub Exploit DB Packet Storm
188657 10 危険 lavrsen - Motion の webhttpd.c の read_client 関数における任意のコードを実行される脆弱性 CWE-189
数値処理の問題 		CVE-2008-2654 2012-09-25 17:17 2008-06-10 Show GitHub Exploit DB Packet Storm
188658 6.8 警告 mebiblio - meBiblio の upload/uploader.html における任意のコードを実行される脆弱性 CWE-20
不適切な入力確認 		CVE-2008-2648 2012-09-25 17:17 2008-06-10 Show GitHub Exploit DB Packet Storm
188659 7.5 危険 mebiblio - meBiblio の admin/journal_change_mask.inc.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-2647 2012-09-25 17:17 2008-06-10 Show GitHub Exploit DB Packet Storm
188660 4.3 警告 mebiblio - meBiblio におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2008-2646 2012-09-25 17:17 2008-06-10 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:Jan. 12, 2025, 4:59 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
271241 - php php_script_index Cross-site scripting (XSS) vulnerability in search.php in PHP Script Index allows remote attackers to inject arbitrary web script or HTML via the search parameter. NVD-CWE-Other
CVE-2006-1558 2011-03-8 11:33 2006-03-31 Show GitHub Exploit DB Packet Storm
271242 - php php_script_index SQL injection vulnerability in PHP Script Index allows remote attackers to execute arbitrary SQL commands via the search parameter. NOTE: the provenance of this information is unknown; the details ar… NVD-CWE-Other
CVE-2006-1559 2011-03-8 11:33 2006-03-31 Show GitHub Exploit DB Packet Storm
271243 - exponent exponent_cms Unspecified vulnerability in Exponent CMS before 0.96.5 RC 1 has unknown impact and remote attack vectors related to variables that are not "typecasted." NVD-CWE-Other
CVE-2006-1604 2011-03-8 11:33 2006-04-4 Show GitHub Exploit DB Packet Storm
271244 - exponent exponent_cms Unspecified vulnerability in the image module in Exponent CMS before 0.96.5 RC 1 allows remote attackers to execute arbitrary code via unknown vectors involving "parsed PHP." NVD-CWE-Other
CVE-2006-1605 2011-03-8 11:33 2006-04-4 Show GitHub Exploit DB Packet Storm
271245 - exponent exponent_cms Unspecified vulnerability in the image module in Exponent CMS before 0.96.5 RC 1 allows "directory disclosure" with unknown attack vectors. NVD-CWE-Other
CVE-2006-1606 2011-03-8 11:33 2006-04-4 Show GitHub Exploit DB Packet Storm
271246 - softbiz image_gallery Cross-site scripting (XSS) vulnerability in image_desc.php in Softbiz Image Gallery allows remote attackers to inject arbitrary web script or HTML via msg parameter. NOTE: the provenance of this inf… NVD-CWE-Other
CVE-2006-1660 2011-03-8 11:33 2006-04-7 Show GitHub Exploit DB Packet Storm
271247 - softbiz image_gallery This vulnerability most likely affects all versions of Softbiz, Image Gallery. NVD-CWE-Other
CVE-2006-1660 2011-03-8 11:33 2006-04-7 Show GitHub Exploit DB Packet Storm
271248 - apt apt-webshop-system Cross-site scripting (XSS) vulnerability in APT-webshop-system 4.0 PRO, 3.0 BASIC, and 3.0 LIGHT allows remote attackers to inject arbitrary web script or HTML via the message parameter, probably inv… NVD-CWE-Other
CVE-2006-1687 2011-03-8 11:33 2006-04-11 Show GitHub Exploit DB Packet Storm
271249 - manic_web mwnewsletter Multiple SQL injection vulnerabilities in MWNewsletter 1.0.0b allow remote attackers to execute arbitrary SQL commands via the (1) user_email parameter to (a) unsubscribe.php or (b) subscribe.php; or… NVD-CWE-Other
CVE-2006-1692 2011-03-8 11:33 2006-04-11 Show GitHub Exploit DB Packet Storm
271250 - bitweaver bitweaver Cross-site scripting (XSS) vulnerability in login.php in Bitweaver 1.3 allows remote attackers to inject arbitrary web script or HTML via the error parameter. NOTE: the provenance of this informatio… NVD-CWE-Other
CVE-2006-1745 2011-03-8 11:33 2006-04-13 Show GitHub Exploit DB Packet Storm