Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 3, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
227071 9.3 危険 Rdesktop - rdesktop の process_redirect_pdu 関数におけるバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2008-1802 2012-12-20 18:52 2008-05-12 Show GitHub Exploit DB Packet Storm
227072 5 警告 sabros.us - sabros.us の thumbnails.php におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2008-1799 2012-12-20 18:52 2008-04-15 Show GitHub Exploit DB Packet Storm
227073 7.1 危険 securecomputing - Secure Computing Webwasher におけるサービス運用妨害 (DoS) の脆弱性 CWE-noinfo
情報不足 		CVE-2008-1797 2012-12-20 18:52 2008-04-15 Show GitHub Exploit DB Packet Storm
227074 6.8 警告 prozilla - Prozilla Forum の forum.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-1789 2012-12-20 18:52 2008-04-15 Show GitHub Exploit DB Packet Storm
227075 7.5 危険 prozilla - Prozilla Entertainers の directory.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-1788 2012-12-20 18:52 2008-04-15 Show GitHub Exploit DB Packet Storm
227076 4.3 警告 poplar gedcom viewer - Poplar Gedcom Viewer の index.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2008-1787 2012-12-20 18:52 2008-04-15 Show GitHub Exploit DB Packet Storm
227077 5.5 警告 prozilla - Prozilla Top 100 の delete.php における統計情報を削除される脆弱性 CWE-20
不適切な入力確認 		CVE-2008-1785 2012-12-20 18:52 2008-04-15 Show GitHub Exploit DB Packet Storm
227078 7.5 危険 prozilla - Prozilla Topsites における管理操作を実行される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2008-1784 2012-12-20 18:52 2008-04-15 Show GitHub Exploit DB Packet Storm
227079 6.4 警告 prozilla - Prozilla Reviews における任意のユーザを削除される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2008-1783 2012-12-20 18:52 2008-04-15 Show GitHub Exploit DB Packet Storm
227080 6.8 警告 phpblock - PhpBlock の modules/basicfog/basicfogfactory.class.php における PHP リモートファイルインクルージョンの脆弱性 CWE-94
コード・インジェクション 		CVE-2008-1776 2012-12-20 18:52 2008-04-14 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 3, 2026, 4:06 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
313421 - phpx phpx SQL injection vulnerability in auth.inc.php in PHPX 3.5.9 and earlier allows remote attackers to execute arbitrary SQL commands, bypass authentication, and upload arbitrary PHP code via the username … NVD-CWE-Other
CVE-2005-3968 2024-02-14 10:17 2005-12-4 Show GitHub Exploit DB Packet Storm
313422 - - - Directory traversal vulnerability in index.php in PHP Upload Center allows remote attackers to read arbitrary files via "../" sequences in the filename parameter. NVD-CWE-Other
CVE-2005-3947 2024-02-14 10:17 2005-12-1 Show GitHub Exploit DB Packet Storm
313423 - randshop randshop SQL injection vulnerability in themes/kategorie/index.php in Randshop allows remote attackers to execute arbitrary SQL commands via the (1) kategorieid and (2) katid parameters. NVD-CWE-Other
CVE-2005-3924 2024-02-14 10:17 2005-11-30 Show GitHub Exploit DB Packet Storm
313424 - orbitscripts smartppc_pro Multiple cross-site scripting (XSS) vulnerabilities in SmartPPC Pro allow remote attackers to inject arbitrary web script or HTML via the username parameter in (1) directory.php, (2) frames.php, and … NVD-CWE-Other
CVE-2005-3814 2024-02-14 10:17 2005-11-26 Show GitHub Exploit DB Packet Storm
313425 - phppost phppost Multiple cross-site scripting (XSS) vulnerabilities in PHP-Post (PHPp) 1.0 allow remote attackers to inject arbitrary web script or HTML via (1) the subject in a post, or the user parameter to (2) pr… CWE-79
Cross-site Scripting 		CVE-2005-3770 2024-02-14 10:17 2005-11-23 Show GitHub Exploit DB Packet Storm
313426 - xmb_forum xmb Cross-site scripting (XSS) vulnerability in members.php in XMB 1.9.3 and earlier allows remote attackers to inject arbitrary web script or HTML via the "Your Current Mood" field in the registration p… NVD-CWE-Other
CVE-2005-3688 2024-02-14 10:17 2005-11-19 Show GitHub Exploit DB Packet Storm
313427 - xmb_forum xmb post.php in XMB 1.9.2 allows remote attackers to obtain the installation path via an invalid fid parameter in a newthread action. NVD-CWE-Other
CVE-2005-3689 2024-02-14 10:17 2005-11-19 Show GitHub Exploit DB Packet Storm
313428 - ekinboard ekinboard Cross-site scripting (XSS) vulnerabilities in Ekinboard 1.0.3 allow remote attackers to inject arbitrary web script or HTML via the (1) id parameter in profile.php and (2) titles of posts. NVD-CWE-Other
CVE-2005-3638 2024-02-14 10:17 2005-11-17 Show GitHub Exploit DB Packet Storm
313429 - ibproarcade ibproarcade SQL injection vulnerability in index.php of the report module in ibProArcade 2.5.2 and earlier allows remote attackers to execute arbitrary SQL commands via the user parameter. NVD-CWE-Other
CVE-2005-3545 2024-02-14 10:17 2005-11-16 Show GitHub Exploit DB Packet Storm
313430 - mambo mambo content.php in Mambo 4.5.2 through 4.5.2.3 allows remote attackers to obtain the installation path of the application via a URL that causes the application to return an error. NVD-CWE-Other
CVE-2005-3586 2024-02-14 10:17 2005-11-16 Show GitHub Exploit DB Packet Storm