Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 10, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
227511 7.5 危険 phpmotion - PHPmotion の play.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-3118 2012-12-20 18:52 2008-07-10 Show GitHub Exploit DB Packet Storm
227512 6.5 警告 phpmotion - PHPmotion の update_profile.php における任意のコードを実行される脆弱性 CWE-20
不適切な入力確認 		CVE-2008-3117 2012-12-20 18:52 2008-07-10 Show GitHub Exploit DB Packet Storm
227513 4.3 警告 v-webmail - V-webmail の redirect.php におけるオープンリダイレクトの脆弱性 CWE-Other
その他 		CVE-2008-3061 2012-12-20 18:52 2008-10-7 Show GitHub Exploit DB Packet Storm
227514 5 警告 v-webmail - V-webmail における重要な情報を取得される脆弱性 CWE-200
情報漏えい 		CVE-2008-3060 2012-12-20 18:52 2008-10-7 Show GitHub Exploit DB Packet Storm
227515 7.5 危険 TYPO3 Association - TYPO3 用の Codeon Petition エクステンションにおける SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-3056 2012-12-20 18:52 2008-07-7 Show GitHub Exploit DB Packet Storm
227516 7.5 危険 TYPO3 Association - TYPO3 用の Support view エクステンションにおける SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-3055 2012-12-20 18:52 2008-07-7 Show GitHub Exploit DB Packet Storm
227517 7.5 危険 TYPO3 Association - TYPO3 用の Branchenbuch エクステンションにおける SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-3054 2012-12-20 18:52 2008-07-7 Show GitHub Exploit DB Packet Storm
227518 7.5 危険 TYPO3 Association - TYPO3 用の SQL Frontend エクステンションにおける SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-3053 2012-12-20 18:52 2008-07-7 Show GitHub Exploit DB Packet Storm
227519 7.5 危険 TYPO3 Association - TYPO3 用の SQL Frontend エクステンションにおけるサービス運用妨害 (DoS) の脆弱性 CWE-399
リソース管理の問題 		CVE-2008-3052 2012-12-20 18:52 2008-07-7 Show GitHub Exploit DB Packet Storm
227520 7.5 危険 TYPO3 Association - TYPO3 用の Pinboard エクステンションにおける SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-3051 2012-12-20 18:52 2008-07-7 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 10, 2026, 4:58 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
222221 6.1 MEDIUM
Network 		dolibarr dolibarr_erp\/crm There is HTML Injection in the Note field in Dolibarr ERP/CRM 10.0.2 via user/note.php. CWE-79
Cross-site Scripting 		CVE-2019-17223 2024-11-21 13:31 2019-10-15 Show GitHub Exploit DB Packet Storm
222222 7.8 HIGH
Local 		bmc patrol_agent An issue was discovered in BMC Patrol Agent 9.0.10i. Weak execution permissions on the PatrolAgent SUID binary could allow an attacker with "patrol" privileges to elevate his/her privileges to the on… CWE-276
Incorrect Default Permissions  		CVE-2019-17044 2024-11-21 13:31 2019-10-15 Show GitHub Exploit DB Packet Storm
222223 7.8 HIGH
Local 		bmc patrol_agent An issue was discovered in BMC Patrol Agent 9.0.10i. Weak execution permissions on the best1collect.exe SUID binary could allow an attacker to elevate his/her privileges to the ones of the "patrol" u… CWE-276
Incorrect Default Permissions  		CVE-2019-17043 2024-11-21 13:31 2019-10-15 Show GitHub Exploit DB Packet Storm
222224 6.1 MEDIUM
Network 		genesys eservices_chat Genesys PureEngage Digital (eServices) 8.1.x allows XSS via HtmlChatPanel.jsp or HtmlChatFrameSet.jsp (ActionColor, ClientNickNameColor, Email, email, or email_address parameter). CWE-79
Cross-site Scripting 		CVE-2019-17176 2024-11-21 13:31 2019-10-12 Show GitHub Exploit DB Packet Storm
222225 9.8 CRITICAL
Network 		connect2id
apache
oracle 		nimbus_jose\+jwt
hadoop
solaris_cluster
weblogic_server
peoplesoft_enterprise_peopletools
enterprise_manager_base_platform
primavera_gateway
data_integrator
communications_pri… 		Connect2id Nimbus JOSE+JWT before v7.9 can throw various uncaught exceptions while parsing a JWT, which could result in an application crash (potential information disclosure) or a potential authenti… CWE-755
 Improper Handling of Exceptional Conditions 		CVE-2019-17195 2024-11-21 13:31 2019-10-15 Show GitHub Exploit DB Packet Storm
222226 9.8 CRITICAL
Network 		sophos cyberoamos A shell injection vulnerability on the Sophos Cyberoam firewall appliance with CyberoamOS before 10.6.6 MR-6 allows remote attackers to execute arbitrary commands via the Web Admin and SSL VPN consol… CWE-78
OS Command  		CVE-2019-17059 2024-11-21 13:31 2019-10-12 Show GitHub Exploit DB Packet Storm
222227 9.8 CRITICAL
Network 		awplife contact_form_widget The new-contact-form-widget (aka Contact Form Widget - Contact Query, Form Maker) plugin 1.0.9 for WordPress has SQL Injection via all-query-page.php. CWE-89
SQL Injection 		CVE-2019-17072 2024-11-21 13:31 2019-10-10 Show GitHub Exploit DB Packet Storm
222228 6.1 MEDIUM
Network 		realbigplugins client_dash The client-dash (aka Client Dash) plugin 2.1.4 for WordPress allows XSS. CWE-79
Cross-site Scripting 		CVE-2019-17071 2024-11-21 13:31 2019-10-10 Show GitHub Exploit DB Packet Storm
222229 6.1 MEDIUM
Network 		lqd liquid_speech_balloon The liquid-speech-balloon (aka LIQUID SPEECH BALLOON) plugin before 1.0.7 for WordPress allows XSS with Internet Explorer. CWE-79
Cross-site Scripting 		CVE-2019-17070 2024-11-21 13:31 2019-10-10 Show GitHub Exploit DB Packet Storm
222230 6.5 MEDIUM
Network 		koji_project koji Koji through 1.18.0 allows remote Directory Traversal, with resultant Privilege Escalation. CWE-22
Path Traversal 		CVE-2019-17109 2024-11-21 13:31 2019-10-10 Show GitHub Exploit DB Packet Storm