Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 4, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
227051 7.5 危険 Xine - xine-lib の src/demuxers/demux_nsf.c におけるスタックベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2008-1878 2012-12-20 18:52 2008-04-17 Show GitHub Exploit DB Packet Storm
227052 6.8 警告 snarky - VisualPic の index.php における PHP リモートファイルインクルージョンの脆弱性 CWE-94
コード・インジェクション 		CVE-2008-1876 2012-12-20 18:52 2008-04-17 Show GitHub Exploit DB Packet Storm
227053 7.5 危険 terong - Terong PHP Photo Gallery の index.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-1875 2012-12-20 18:52 2008-04-17 Show GitHub Exploit DB Packet Storm
227054 6.5 警告 xpoze - Xpoze Pro の account/user/mail.html における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-1874 2012-12-20 18:52 2008-04-17 Show GitHub Exploit DB Packet Storm
227055 4.3 警告 tru-zone - Nuke ET のプライベートメッセージ機能におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2008-1873 2012-12-20 18:52 2008-04-17 Show GitHub Exploit DB Packet Storm
227056 6.5 警告 scriptsagent - Scriptsagent.com Links Directory の links.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-1871 2012-12-20 18:52 2008-04-17 Show GitHub Exploit DB Packet Storm
227057 7.5 危険 site sift media - Site Sift Listings における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-1869 2012-12-20 18:52 2008-04-17 Show GitHub Exploit DB Packet Storm
227058 7.5 危険 pixel motion - Blog Pixel Motion の admin/sauvBase.php における重要な情報を含む blogPM.sql ファイルの結果を取得される脆弱性 CWE-287
不適切な認証 		CVE-2008-1868 2012-12-20 18:52 2008-04-17 Show GitHub Exploit DB Packet Storm
227059 7.5 危険 pixel motion - Blog Pixel Motion における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-1867 2012-12-20 18:52 2008-04-17 Show GitHub Exploit DB Packet Storm
227060 9 危険 pixel motion - Blog Pixel Motion の admin/modif_config.php における任意の PHP スクリプトをアップロードされる脆弱性 CWE-94
コード・インジェクション 		CVE-2008-1866 2012-12-20 18:52 2008-04-17 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 4, 2026, 4:06 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
313321 7.5 HIGH
Network 		microsoft sql_server Microsoft SQL Server 6.0 through 2000, with SQL Authentication enabled, uses weak password encryption (XOR), which allows remote attackers to sniff and decrypt the password. CWE-326
Inadequate Encryption Strength 		CVE-2002-1872 2024-02-15 00:50 2002-12-31 Show GitHub Exploit DB Packet Storm
313322 7.5 HIGH
Network 		click-2 ingenium_learning_management_system Click2Learn Ingenium Learning Management System 5.1 and 6.1 uses weak encryption for passwords (reversible algorithm), which allows attackers to obtain passwords. CWE-326
Inadequate Encryption Strength 		CVE-2002-1910 2024-02-15 00:50 2002-12-31 Show GitHub Exploit DB Packet Storm
313323 5.5 MEDIUM
Local 		tata integrated_dialer Videsh Sanchar Nigam Limited (VSNL) Integrated Dialer Software 1.2.000, when the "Save Password" option is used, stores the password with a weak encryption scheme (one-to-one mapping) in a registry k… CWE-326
Inadequate Encryption Strength 		CVE-2002-1946 2024-02-15 00:50 2002-12-31 Show GitHub Exploit DB Packet Storm
313324 5.5 MEDIUM
Local 		sharp zaurus_sl-5000d_firmware
zaurus_sl-5500_firmware 		Sharp Zaurus PDA SL-5000D and SL-5500 uses a salt of "A0" to encrypt the screen-locking password as stored in the Security.conf file, which makes it easier for local users to guess the password via b… CWE-326
Inadequate Encryption Strength 		CVE-2002-1975 2024-02-15 00:50 2002-12-31 Show GitHub Exploit DB Packet Storm
313325 - blender
debian 		blender
debian_linux 		Eval injection vulnerability in bvh_import.py in Blender 2.36 allows attackers to execute arbitrary Python code via a hierarchy element in a .bvh file, which is supplied to an eval function call. CWE-94
Code Injection 		CVE-2005-3302 2024-02-15 00:47 2005-10-24 Show GitHub Exploit DB Packet Storm
313326 - gggeek
debian 		phpxmlrpc
debian_linux 		Eval injection vulnerability in PHPXMLRPC 1.1.1 and earlier (PEAR XML-RPC for PHP), as used in multiple products including (1) Drupal, (2) phpAdsNew, (3) phpPgAds, and (4) phpgroupware, allows remote… CWE-94
Code Injection 		CVE-2005-2498 2024-02-15 00:47 2005-08-15 Show GitHub Exploit DB Packet Storm
313327 7.5 HIGH
Network 		juvare webeoc WebEOC before 6.0.2 uses a weak encryption scheme for passwords, which makes it easier for attackers to crack passwords. CWE-326
Inadequate Encryption Strength 		CVE-2005-2281 2024-02-15 00:47 2005-07-18 Show GitHub Exploit DB Packet Storm
313328 - php
gggeek
drupal
tiki
debian 		xml_rpc
phpxmlrpc
drupal
tikiwiki_cms\/groupware
debian_linux 		Eval injection vulnerability in PEAR XML_RPC 1.3.0 and earlier (aka XML-RPC or xmlrpc) and PHPXMLRPC (aka XML-RPC For PHP or php-xmlrpc) 1.1 and earlier, as used in products such as (1) WordPress, (2… CWE-94
Code Injection 		CVE-2005-1921 2024-02-15 00:41 2005-07-5 Show GitHub Exploit DB Packet Storm
313329 - nrl.navy one-time_passwords_in_everything One-Time Passwords In Everything (a.k.a OPIE) 2.32 and 2.4 allows remote attackers to determine the existence of user accounts by printing random passphrases if the user account does not exist and st… CWE-203
 Information Exposure Through Discrepancy 		CVE-2001-1483 2024-02-15 00:17 2001-12-31 Show GitHub Exploit DB Packet Storm
313330 - amtote homebet AmTote International homebet program returns different error messages when invalid account numbers and PIN codes are provided, which allows remote attackers to determine the existence of valid accoun… CWE-203
 Information Exposure Through Discrepancy 		CVE-2001-1528 2024-02-15 00:17 2001-12-31 Show GitHub Exploit DB Packet Storm