Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 9, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
226791 7.5 危険 sepcity - SepCity Shopping Mall の shpdetails.asp における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-6151 2012-12-20 19:10 2009-02-16 Show GitHub Exploit DB Packet Storm
226792 7.5 危険 sepcity - SepCity Classified Ads の classdis.asp における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-6150 2012-12-20 19:10 2009-02-16 Show GitHub Exploit DB Packet Storm
226793 7.5 危険 raven-worx - Joomla! 用の liveticker モジュールにおける SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-6148 2012-12-20 19:10 2009-02-16 Show GitHub Exploit DB Packet Storm
226794 7.5 危険 Web-Empowered Church Team - TYPO3 用の WEC Discussion Forum エクステンションにおける SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-6145 2012-12-20 19:10 2009-02-16 Show GitHub Exploit DB Packet Storm
226795 4.3 警告 Web-Empowered Church Team - TYPO3 用の WEC Discussion Forum エクステンションにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2008-6144 2012-12-20 19:10 2009-02-16 Show GitHub Exploit DB Packet Storm
226796 5 警告 webbiscuits - WebBiscuits Modules Controller の faqsupport/wce.download.php におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2008-6139 2012-12-20 19:10 2009-02-13 Show GitHub Exploit DB Packet Storm
226797 7.5 危険 webbiscuits - WebBiscuits Modules Controller の adminhead.php における PHP リモートファイルインクルージョンの脆弱性 CWE-94
コード・インジェクション 		CVE-2008-6138 2012-12-20 19:10 2009-02-13 Show GitHub Exploit DB Packet Storm
226798 7.5 危険 socialengine - SocialEngine における CRLF インジェクションの脆弱性 CWE-20
不適切な入力確認 		CVE-2008-6121 2012-12-20 19:10 2009-02-11 Show GitHub Exploit DB Packet Storm
226799 7.5 危険 socialengine - SocialEngine の profile_comments.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-6120 2012-12-20 19:10 2009-02-11 Show GitHub Exploit DB Packet Storm
226800 7.5 危険 pilotgroup - PG Job Site Pro の homepage.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-6117 2012-12-20 19:10 2009-02-11 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 9, 2026, 5:07 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
312931 - - - A vulnerability was found in SourceCodester QR Code Bookmark System 1.0. It has been declared as problematic. This vulnerability affects unknown code of the file /endpoint/add-bookmark.php of the com… CWE-79
Cross-site Scripting 		CVE-2024-8152 2024-08-26 21:47 2024-08-26 Show GitHub Exploit DB Packet Storm
312932 - - - A vulnerability was found in SourceCodester Interactive Map with Marker 1.0. It has been classified as problematic. This affects an unknown part of the file /endpoint/delete-mark.php. The manipulatio… CWE-79
Cross-site Scripting 		CVE-2024-8151 2024-08-26 21:47 2024-08-26 Show GitHub Exploit DB Packet Storm
312933 - - - A vulnerability was found in SourceCodester Daily Calories Monitoring Tool 1.0. It has been declared as problematic. This vulnerability affects unknown code of the file /endpoint/delete-calorie.php. … CWE-79
Cross-site Scripting 		CVE-2024-8142 2024-08-26 21:47 2024-08-25 Show GitHub Exploit DB Packet Storm
312934 - - - A vulnerability was found in SourceCodester Daily Calories Monitoring Tool 1.0. It has been classified as problematic. This affects an unknown part of the file /endpoint/add-calorie.php. The manipula… CWE-79
Cross-site Scripting 		CVE-2024-8141 2024-08-26 21:47 2024-08-25 Show GitHub Exploit DB Packet Storm
312935 - - - A vulnerability was found in SourceCodester Task Progress Tracker 1.0 and classified as problematic. Affected by this issue is some unknown functionality of the file update-task.php. The manipulation… CWE-79
Cross-site Scripting 		CVE-2024-8140 2024-08-26 21:47 2024-08-25 Show GitHub Exploit DB Packet Storm
312936 8.8 HIGH
Network 		- - The Image Hotspot by DevVN plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 1.2.5 via deserialization of untrusted input in the 'devvn_ihotspot_shortco… - CVE-2024-7656 2024-08-26 21:47 2024-08-24 Show GitHub Exploit DB Packet Storm
312937 - - - SQL injection vulnerability in ATISolutions CIGES affecting versions lower than 2.15.5. This vulnerability allows a remote attacker to send a specially crafted SQL query to the /modules/ajaxServicios… - CVE-2024-8161 2024-08-26 18:15 2024-08-26 Show GitHub Exploit DB Packet Storm
312938 - - - Passwords of agents and customers are displayed in plain text in the OTRS admin log module if certain configurations regarding the authentication sources match and debugging for the authentication ba… - CVE-2024-43444 2024-08-26 18:15 2024-08-26 Show GitHub Exploit DB Packet Storm
312939 - - - Improper Neutralization of Input done by an attacker with admin privileges ('Cross-site Scripting') in Process Management modules of OTRS and ((OTRS)) Community Edition allows Cross-Site Scripting (X… - CVE-2024-43443 2024-08-26 18:15 2024-08-26 Show GitHub Exploit DB Packet Storm
312940 - - - Improper Neutralization of Input done by an attacker with admin privileges ('Cross-site Scripting') in  OTRS (System Configuration modules) and ((OTRS)) Community Edition allows Cross-Site Scripting … - CVE-2024-43442 2024-08-26 18:15 2024-08-26 Show GitHub Exploit DB Packet Storm