Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 1, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
226891 7.5 危険 YABSoft - YABSoft AIH Script の out.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-2536 2012-12-20 18:52 2008-06-3 Show GitHub Exploit DB Packet Storm
226892 7.5 危険 quickupcms - Concepts & Solutions QuickUpCMS における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-2530 2012-12-20 18:52 2008-06-3 Show GitHub Exploit DB Packet Storm
226893 4.3 警告 TYPO3 Association - TYPO3 用の WT Gallery エクステンションにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2008-2526 2012-12-20 18:52 2008-06-3 Show GitHub Exploit DB Packet Storm
226894 4.3 警告 TYPO3 Association - TYPO3 用の Event Database エクステンションにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2008-2525 2012-12-20 18:52 2008-06-3 Show GitHub Exploit DB Packet Storm
226895 7.5 危険 raknet - RakNet の Autopatcher サーバプラグインにおける SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-2523 2012-12-20 18:52 2008-06-3 Show GitHub Exploit DB Packet Storm
226896 6.5 警告 YABSoft - YABSoft Mega File Hosting Script の members.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-2521 2012-12-20 18:52 2008-06-3 Show GitHub Exploit DB Packet Storm
226897 2.1 注意 sarab - SaraB の sarab.sh スクリプトにおける重要な情報を取得される脆弱性 CWE-200
情報漏えい 		CVE-2008-2517 2012-12-20 18:52 2008-06-3 Show GitHub Exploit DB Packet Storm
226898 5 警告 シマンテック - Symantec Backup Exec System Recovery Manager におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2008-2512 2012-12-20 18:52 2008-05-28 Show GitHub Exploit DB Packet Storm
226899 7.5 危険 WordPress.org - WordPress 用 Upload File プラグインにおける SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-2510 2012-12-20 18:52 2008-05-29 Show GitHub Exploit DB Packet Storm
226900 4.3 警告 tr script news - Tr Script News の news.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2008-2508 2012-12-20 18:52 2008-05-29 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 2, 2026, 4:08 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
212071 9.8 CRITICAL
Network 		motorola m2_firmware
c1_firmware 		An issue was discovered on Motorola C1 and M2 devices with firmware 1.01 and 1.07 respectively. This issue is a Command Injection allowing a remote attacker to execute arbitrary code, and get a root … CWE-78
OS Command  		CVE-2019-9120 2024-11-21 13:51 2019-03-8 Show GitHub Exploit DB Packet Storm
212072 9.8 CRITICAL
Network 		motorola m2_firmware
c1_firmware 		An issue was discovered on Motorola C1 and M2 devices with firmware 1.01 and 1.07 respectively. This issue is a Command Injection allowing a remote attacker to execute arbitrary code, and get a root … CWE-78
OS Command  		CVE-2019-9119 2024-11-21 13:51 2019-03-8 Show GitHub Exploit DB Packet Storm
212073 9.8 CRITICAL
Network 		motorola m2_firmware
c1_firmware 		An issue was discovered on Motorola C1 and M2 devices with firmware 1.01 and 1.07 respectively. This issue is a Command Injection allowing a remote attacker to execute arbitrary code, and get a root … CWE-78
OS Command  		CVE-2019-9118 2024-11-21 13:51 2019-03-8 Show GitHub Exploit DB Packet Storm
212074 9.8 CRITICAL
Network 		motorola m2_firmware
c1_firmware 		An issue was discovered on Motorola C1 and M2 devices with firmware 1.01 and 1.07 respectively. This issue is a Command Injection allowing a remote attacker to execute arbitrary code, and get a root … CWE-78
OS Command  		CVE-2019-9117 2024-11-21 13:51 2019-03-8 Show GitHub Exploit DB Packet Storm
212075 9.8 CRITICAL
Network 		phpshe phpshe PHPSHE 1.7 allows module/index/cart.php pintuan_id SQL Injection to index.php. CWE-89
SQL Injection 		CVE-2019-9626 2024-11-21 13:51 2019-03-8 Show GitHub Exploit DB Packet Storm
212076 8.8 HIGH
Network 		directadmin directadmin JBMC DirectAdmin 1.55 allows CSRF via the /CMD_ACCOUNT_ADMIN URI to create a new admin account. CWE-352
 Origin Validation Error 		CVE-2019-9625 2024-11-21 13:51 2019-03-8 Show GitHub Exploit DB Packet Storm
212077 7.8 HIGH
Local 		webmin webmin Webmin 1.900 allows remote attackers to execute arbitrary code by leveraging the "Java file manager" and "Upload and Download" privileges to upload a crafted .cgi file via the /updown/upload.cgi URI. CWE-269
 Improper Privilege Management 		CVE-2019-9624 2024-11-21 13:51 2019-03-7 Show GitHub Exploit DB Packet Storm
212078 9.8 CRITICAL
Network 		fengoffice feng_office Feng Office 3.7.0.5 allows remote attackers to execute arbitrary code via "<!--#exec cmd=" in a .shtml file to ck_upload_handler.php. CWE-434
 Unrestricted Upload of File with Dangerous Type  		CVE-2019-9623 2024-11-21 13:51 2019-03-7 Show GitHub Exploit DB Packet Storm
212079 4.3 MEDIUM
Network 		ebrigade ebrigade eBrigade through 4.5 allows Arbitrary File Download via ../ directory traversal in the showfile.php file parameter, as demonstrated by reading the user-data/save/backup.sql file. CWE-22
Path Traversal 		CVE-2019-9622 2024-11-21 13:51 2019-03-7 Show GitHub Exploit DB Packet Storm
212080 8.8 HIGH
Network 		ofcms_project ofcms An issue was discovered in OFCMS before 1.1.3. Remote attackers can execute arbitrary code because blocking of .jsp and .jspx files does not consider (for example) file.jsp::$DATA to the admin/uedito… CWE-434
 Unrestricted Upload of File with Dangerous Type  		CVE-2019-9617 2024-11-21 13:51 2019-03-7 Show GitHub Exploit DB Packet Storm