Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 1, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
226761 7.5 危険 TYPO3 Association - TYPO3 用の Codeon Petition エクステンションにおける SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-3056 2012-12-20 18:52 2008-07-7 Show GitHub Exploit DB Packet Storm
226762 7.5 危険 TYPO3 Association - TYPO3 用の Support view エクステンションにおける SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-3055 2012-12-20 18:52 2008-07-7 Show GitHub Exploit DB Packet Storm
226763 7.5 危険 TYPO3 Association - TYPO3 用の Branchenbuch エクステンションにおける SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-3054 2012-12-20 18:52 2008-07-7 Show GitHub Exploit DB Packet Storm
226764 7.5 危険 TYPO3 Association - TYPO3 用の SQL Frontend エクステンションにおける SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-3053 2012-12-20 18:52 2008-07-7 Show GitHub Exploit DB Packet Storm
226765 7.5 危険 TYPO3 Association - TYPO3 用の SQL Frontend エクステンションにおけるサービス運用妨害 (DoS) の脆弱性 CWE-399
リソース管理の問題 		CVE-2008-3052 2012-12-20 18:52 2008-07-7 Show GitHub Exploit DB Packet Storm
226766 7.5 危険 TYPO3 Association - TYPO3 用の Pinboard エクステンションにおける SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-3051 2012-12-20 18:52 2008-07-7 Show GitHub Exploit DB Packet Storm
226767 5 警告 TYPO3 Association - TYPO3 用の PDF Generator 2 エクステンションにおけるサービス運用妨害 (DoS) の脆弱性 CWE-399
リソース管理の問題 		CVE-2008-3050 2012-12-20 18:52 2008-07-7 Show GitHub Exploit DB Packet Storm
226768 5 警告 TYPO3 Association - TYPO3 用の PDF Generator 2 エクステンションにおける重要な情報を取得される脆弱性 CWE-200
情報漏えい 		CVE-2008-3049 2012-12-20 18:52 2008-07-7 Show GitHub Exploit DB Packet Storm
226769 7.5 危険 TYPO3 Association - TYPO3 用の PDF Generator 2 エクステンションにおける脆弱性 CWE-noinfo
情報不足 		CVE-2008-3048 2012-12-20 18:52 2008-07-7 Show GitHub Exploit DB Packet Storm
226770 7.5 危険 TYPO3 Association - TYPO3 用の KB Unpack エクステンションにおける脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2008-3047 2012-12-20 18:52 2008-07-7 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 1, 2026, 4:54 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
601 4.7 MEDIUM
Network 		- - A security flaw has been discovered in SourceCodester Pharmacy Sales and Inventory System 1.0. This impacts the function save_expired of the file /ajax.php?action=save_expired. The manipulation of th… New CWE-74
CWE-89
Injection
SQL Injection 		CVE-2026-7283 2026-04-29 10:00 2026-04-29 Show GitHub Exploit DB Packet Storm
602 6.3 MEDIUM
Network 		- - A vulnerability was determined in JeecgBoot up to 3.9.1. Impacted is the function SqlInjectionUtil of the file jeecg-boot/jeecg-boot-base-core/src/main/java/org/jeecg/common/util/SqlInjectionUtil.jav… New CWE-74
CWE-89
Injection
SQL Injection 		CVE-2026-7290 2026-04-29 10:00 2026-04-29 Show GitHub Exploit DB Packet Storm
603 6.3 MEDIUM
Network 		- - A weakness has been identified in o2oa up to 10.0. This affects the function FileAction of the file FileAction.java of the component URL Fetching. Executing a manipulation of the argument fileUrl can… New CWE-918
Server-Side Request Forgery (SSRF)  		CVE-2026-7291 2026-04-29 10:00 2026-04-29 Show GitHub Exploit DB Packet Storm
604 5.6 MEDIUM
Network 		- - A security vulnerability has been detected in o2oa up to 10.0. This impacts the function syncFile of the file NodeAgent.java of the component NodeAgent. The manipulation leads to improper authorizati… New CWE-266
CWE-285
 Incorrect Privilege Assignment
Improper Authorization 		CVE-2026-7292 2026-04-29 10:00 2026-04-29 Show GitHub Exploit DB Packet Storm
605 4.7 MEDIUM
Network 		- - A vulnerability was detected in SourceCodester Pizzafy Ecommerce System 1.0. Affected is the function delete_category of the file /admin/ajax.php?action=delete_category. The manipulation of the argum… New CWE-74
CWE-89
Injection
SQL Injection 		CVE-2026-7293 2026-04-29 10:00 2026-04-29 Show GitHub Exploit DB Packet Storm
606 2.4 LOW
Network 		- - A flaw has been found in SourceCodester Pizzafy Ecommerce System 1.0. Affected by this vulnerability is the function save_settings of the file /admin/index.php?page=save_settings. This manipulation o… New CWE-79
CWE-94
Cross-site Scripting
Code Injection 		CVE-2026-7294 2026-04-29 10:00 2026-04-29 Show GitHub Exploit DB Packet Storm
607 2.4 LOW
Network 		- - A vulnerability has been found in SourceCodester Pizzafy Ecommerce System 1.0. Affected by this issue is the function save_menu of the file /admin/ajax.php?action=save_menu. Such manipulation of the … New CWE-79
CWE-94
Cross-site Scripting
Code Injection 		CVE-2026-7295 2026-04-29 10:00 2026-04-29 Show GitHub Exploit DB Packet Storm
608 2.4 LOW
Network 		- - A vulnerability was found in SourceCodester Pizzafy Ecommerce System 1.0. This affects the function save_order of the file /admin/ajax.php?action=save_order. Performing a manipulation of the argument… New CWE-79
CWE-94
Cross-site Scripting
Code Injection 		CVE-2026-7296 2026-04-29 10:00 2026-04-29 Show GitHub Exploit DB Packet Storm
609 2.4 LOW
Network 		- - A vulnerability was determined in SourceCodester Pizzafy Ecommerce System 1.0. This vulnerability affects the function save_user of the file /admin/ajax.php?action=save_user. Executing a manipulation… New CWE-79
CWE-94
Cross-site Scripting
Code Injection 		CVE-2026-7297 2026-04-29 10:00 2026-04-29 Show GitHub Exploit DB Packet Storm
610 3.7 LOW
Network 		- - A security flaw has been discovered in Xuxueli xxl-job up to 3.3.2. Impacted is the function logDetailCat of the file xxl-job-admin/src/main/java/com/xxl/job/admin/controller/biz/JobLogController.jav… New CWE-99
Resource Injection 		CVE-2026-7303 2026-04-29 10:00 2026-04-29 Show GitHub Exploit DB Packet Storm