Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 7, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
225851 7.5 危険 pjhome - PJBlog3 の action.asp における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2009-1481 2012-12-20 19:10 2009-04-29 Show GitHub Exploit DB Packet Storm
225852 7.5 危険 Pragyan CMS Project - index.php Pragyan CMS における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2009-1480 2012-12-20 19:10 2009-04-29 Show GitHub Exploit DB Packet Storm
225853 7.5 危険 razorCMS - razorCMS における任意のページへ任意の PHP コードを挿入される脆弱性 CWE-94
コード・インジェクション 		CVE-2009-1463 2012-12-20 19:10 2009-04-20 Show GitHub Exploit DB Packet Storm
225854 7.2 危険 razorCMS - razorCMS の Security Manager における脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2009-1462 2012-12-20 19:10 2009-04-20 Show GitHub Exploit DB Packet Storm
225855 3.5 注意 razorCMS - razorCMS の Create New Page フォームにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2009-1461 2012-12-20 19:10 2009-04-20 Show GitHub Exploit DB Packet Storm
225856 4.6 警告 razorCMS - razorCMS における管理者のパスワードハッシュを取得される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2009-1460 2012-12-20 19:10 2009-04-20 Show GitHub Exploit DB Packet Storm
225857 6.8 警告 razorCMS - razorCMS におけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反 		CVE-2009-1459 2012-12-20 19:10 2009-04-20 Show GitHub Exploit DB Packet Storm
225858 4.3 警告 razorCMS - razorCMS の admin/index.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2009-1458 2012-12-20 19:10 2009-04-20 Show GitHub Exploit DB Packet Storm
225859 6.5 警告 stephane rajalu - Malleo の admin.php におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2009-1456 2012-12-20 19:10 2009-04-28 Show GitHub Exploit DB Packet Storm
225860 7.5 危険 webportal - WebPortal CMS の indexk.php における PHP リモートファイルインクルージョンの脆弱性 CWE-94
コード・インジェクション 		CVE-2009-1444 2012-12-20 19:10 2009-04-27 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 7, 2026, 4:22 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
314001 - - - Rejected reason: This is unused. - CVE-2023-38137 2024-02-15 03:15 2024-02-15 Show GitHub Exploit DB Packet Storm
314002 7.8 HIGH
Local 		microsoft windows_2000 Utility Manager in Windows 2000 launches winhlp32.exe while Utility Manager is running with raised privileges, which allows local users to gain system privileges via a "Shatter" style attack that sen… CWE-306
Missing Authentication for Critical Function 		CVE-2004-0213 2024-02-15 02:25 2004-08-6 Show GitHub Exploit DB Packet Storm
314003 7.5 HIGH
Network 		dlink dwl-900ap\+_firmware D-Link DWL-900AP+ Access Point 2.1 and 2.2 allows remote attackers to access the TFTP server without authentication and read the config.img file, which contains sensitive information such as the admi… CWE-306
Missing Authentication for Critical Function 		CVE-2002-1810 2024-02-15 02:25 2002-12-31 Show GitHub Exploit DB Packet Storm
314004 - andynorman gnuserv gnuserv before 3.12, as shipped with XEmacs, does not properly check the specified length of an X Windows MIT-MAGIC-COOKIE cookie, which allows remote attackers to execute arbitrary commands via a bu… CWE-120
Classic Buffer Overflow 		CVE-2001-0191 2024-02-15 02:25 2001-05-3 Show GitHub Exploit DB Packet Storm
314005 - awstats
canonical
debian 		awstats
ubuntu_linux
debian_linux 		Eval injection vulnerability in awstats.pl in AWStats 6.4 and earlier, when a URLPlugin is enabled, allows remote attackers to execute arbitrary Perl code via the HTTP Referrer, which is used in a $u… CWE-94
Code Injection 		CVE-2005-1527 2024-02-15 01:58 2005-08-15 Show GitHub Exploit DB Packet Storm
314006 7.5 HIGH
Network 		netsourcecommerce productcart EarlyImpact ProductCart uses a weak encryption scheme to encrypt passwords, which allows remote attackers to obtain the password via a chosen plaintext attack. CWE-326
Inadequate Encryption Strength 		CVE-2004-2172 2024-02-15 01:58 2004-12-31 Show GitHub Exploit DB Packet Storm
314007 - cgiscript csguestbook csGuestbook.cgi in CGISCRIPT.NET csGuestbook 1.0 allows remote attackers to execute arbitrary Perl code via the setup parameter, which is processed by the Perl eval function. CWE-94
Code Injection 		CVE-2002-1750 2024-02-15 01:57 2002-12-31 Show GitHub Exploit DB Packet Storm
314008 - cgiscript cschat-r-box csChatRBox.cgi in CGIScript.net csChat-R-Box allows remote attackers to execute arbitrary Perl code via the setup parameter, which is processed by the Perl eval function. CWE-94
Code Injection 		CVE-2002-1752 2024-02-15 01:57 2002-12-31 Show GitHub Exploit DB Packet Storm
314009 - cgiscript csnews_professional csNewsPro.cgi in CGIScript.net csNews Professional (csNewsPro) allows remote attackers to execute arbitrary Perl code via the setup parameter, which is processed by the Perl eval function. CWE-94
Code Injection 		CVE-2002-1753 2024-02-15 01:56 2002-12-31 Show GitHub Exploit DB Packet Storm
314010 5.5 MEDIUM
Local 		daansystems newsreactor NewsReactor 1.0 uses a weak encryption scheme, which could allow local users to decrypt the passwords and gain access to other users' newsgroup accounts. CWE-326
Inadequate Encryption Strength 		CVE-2002-1682 2024-02-15 01:55 2002-12-31 Show GitHub Exploit DB Packet Storm