Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 17, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
228321 7.5 危険 vblogix - vbLOGIX Tutorial Script の main.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-4350 2012-12-20 18:52 2008-09-30 Show GitHub Exploit DB Packet Storm
228322 4.3 警告 s0nic - s0nic Paranews の news.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2008-4349 2012-12-20 18:52 2008-09-30 Show GitHub Exploit DB Packet Storm
228323 7.5 危険 Powie - Powie pNews の newskom.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-4347 2012-12-20 18:52 2008-09-30 Show GitHub Exploit DB Packet Storm
228324 7.5 危険 talkback - TalkBack におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2008-4346 2012-12-20 18:52 2008-09-30 Show GitHub Exploit DB Packet Storm
228325 7.5 危険 webportal - WebPortal CMS の download.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-4345 2012-12-20 18:52 2008-09-30 Show GitHub Exploit DB Packet Storm
228326 6 警告 vacilanda - Drupal 用の Brilliant Gallery モジュールにおける SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-4338 2012-12-20 18:52 2008-09-30 Show GitHub Exploit DB Packet Storm
228327 7.5 危険 phpocs - phpOCS の library/pagefunctions.inc.php におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2008-4331 2012-12-20 18:52 2008-09-30 Show GitHub Exploit DB Packet Storm
228328 5.8 警告 ViewVC - ViewVC の lib/viewvc.py におけるブラウザにコンテンツを誤って解釈させる脆弱性 CWE-noinfo
情報不足 		CVE-2008-4325 2012-12-20 18:52 2008-06-4 Show GitHub Exploit DB Packet Storm
228329 10 危険 project-observer - Observer における任意のコマンドを実行される脆弱性 CWE-20
不適切な入力確認 		CVE-2008-4318 2012-12-20 18:52 2008-09-29 Show GitHub Exploit DB Packet Storm
228330 9 危険 phpCollab - phpCollab の installation/setup.php における include/settings.php に任意の PHP コードを挿入される脆弱性 CWE-94
コード・インジェクション 		CVE-2008-4305 2012-12-20 18:52 2008-12-23 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 17, 2026, 4:15 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
311491 8.8 HIGH
Network 		emiloimagtolis online_discussion_forum File Upload vulnerability in Itsourcecode Online Discussion Forum Project v.1.0 allows a remote attacker to execute arbitrary code via the "sendreply.php" file, and the uploaded file was received usi… CWE-434
 Unrestricted Upload of File with Dangerous Type  		CVE-2024-37868 2024-10-9 03:16 2024-10-5 Show GitHub Exploit DB Packet Storm
311492 8.8 HIGH
Network 		emiloimagtolis online_discussion_forum File Upload vulnerability in Itsourcecode Online Discussion Forum Project v.1.0 allows a remote attacker to execute arbitrary code via the "poster.php" file, and the uploaded file was received using … CWE-434
 Unrestricted Upload of File with Dangerous Type  		CVE-2024-37869 2024-10-9 03:15 2024-10-5 Show GitHub Exploit DB Packet Storm
311493 5.5 MEDIUM
Local 		linux linux_kernel In the Linux kernel, the following vulnerability has been resolved: btrfs: clean up our handling of refs == 0 in snapshot delete In reada we BUG_ON(refs == 0), which could be unkind since we aren't… NVD-CWE-noinfo
CVE-2024-46840 2024-10-9 03:15 2024-09-27 Show GitHub Exploit DB Packet Storm
311494 5.4 MEDIUM
Network 		kraftplugins demo_importer_plus The Demo Importer Plus plugin for WordPress is vulnerable to Stored Cross-Site Scripting via SVG File uploads in all versions up to, and including, 2.0.1 due to insufficient input sanitization and ou… CWE-79
Cross-site Scripting 		CVE-2024-9172 2024-10-9 03:05 2024-10-2 Show GitHub Exploit DB Packet Storm
311495 7.5 HIGH
Network 		cisco meraki_z4c_firmware
meraki_z4_firmware
meraki_z3c_firmware
meraki_z3_firmware
meraki_vmx_firmware
meraki_mx600_firmware
meraki_mx450_firmware
meraki_mx400_firmware
meraki_mx25… 		Multiple vulnerabilities in the Cisco AnyConnect VPN server of Cisco Meraki MX and Cisco Meraki Z Series Teleworker Gateway devices could allow an unauthenticated, remote attacker to cause a DoS cond… CWE-787
 Out-of-bounds Write 		CVE-2024-20499 2024-10-9 02:45 2024-10-3 Show GitHub Exploit DB Packet Storm
311496 7.5 HIGH
Network 		cisco meraki_z4c_firmware
meraki_z4_firmware
meraki_z3c_firmware
meraki_z3_firmware
meraki_vmx_firmware
meraki_mx600_firmware
meraki_mx450_firmware
meraki_mx400_firmware
meraki_mx25… 		A vulnerability in the Cisco AnyConnect VPN server of Cisco Meraki MX and Cisco Meraki Z Series Teleworker Gateway devices could allow an unauthenticated, remote attacker to cause a DoS condition in … CWE-400
 Uncontrolled Resource Consumption 		CVE-2024-20500 2024-10-9 02:37 2024-10-3 Show GitHub Exploit DB Packet Storm
311497 - - - An issue in Shanghai Zhouma Network Technology CO., Ltd IMS Intelligent Manufacturing Collaborative Internet of Things System v.1.9.1 allows a remote attacker to escalate privileges via the open port. - CVE-2024-44439 2024-10-9 01:35 2024-10-5 Show GitHub Exploit DB Packet Storm
311498 5.4 MEDIUM
Network 		memberful memberful The Memberful – Membership Plugin plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'memberful_buy_subscription_link' and 'memberful_podcasts_link' shortcodes in all … CWE-79
Cross-site Scripting 		CVE-2024-9242 2024-10-9 01:26 2024-10-4 Show GitHub Exploit DB Packet Storm
311499 4.8 MEDIUM
Network 		wpbookingcalendar wp_booking_calendar The WP Booking Calendar plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in all versions up to, and including, 10.6 due to insufficient input sanitization and outp… CWE-79
Cross-site Scripting 		CVE-2024-9306 2024-10-9 01:25 2024-10-4 Show GitHub Exploit DB Packet Storm
311500 6.1 MEDIUM
Network 		plainware shiftcontroller The ShiftController Employee Shift Scheduling plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via URL keys in all versions up to, and including, 4.9.66 due to insufficient input … CWE-79
Cross-site Scripting 		CVE-2024-9435 2024-10-9 01:22 2024-10-4 Show GitHub Exploit DB Packet Storm