Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 18, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
228411 4.3 警告 ソフトバンク・テクノロジー株式会社 - Online Service Gate におけるパスワード管理不備の問題 CWE-noinfo
情報不足 		CVE-2013-2308 2013-05-8 14:01 2013-05-8 Show GitHub Exploit DB Packet Storm
228412 5 警告 Zend Technologies Ltd. - Zend Framework の Zend_Feed における任意のファイルを読まれる脆弱性 CWE-200
情報漏えい 		CVE-2012-5657 2013-05-8 12:12 2013-05-2 Show GitHub Exploit DB Packet Storm
228413 6.8 警告 GNU Project - glibc の stdio-common/vfprintf.c における整数オーバーフローの脆弱性 CWE-189
数値処理の問題 		CVE-2012-0864 2013-05-8 12:11 2012-02-17 Show GitHub Exploit DB Packet Storm
228414 5 警告 GNU Project - glibc の RPC の実装におけるサービス運用妨害 (DoS) の脆弱性 CWE-399
リソース管理の問題 		CVE-2011-4609 2013-05-8 12:09 2011-12-13 Show GitHub Exploit DB Packet Storm
228415 6.8 警告 GNU Project - glibc の __tzfile_read 関数における整数オーバーフローの脆弱性 CWE-189
数値処理の問題 		CVE-2009-5029 2013-05-8 12:08 2009-06-1 Show GitHub Exploit DB Packet Storm
228416 5 警告 NextApp, Inc. - Echo の Java XML パーサにおける任意のファイルを読まれる脆弱性 CWE-20
不適切な入力確認 		CVE-2009-5135 2013-05-8 10:51 2009-02-24 Show GitHub Exploit DB Packet Storm
228417 4.3 警告 IBM - IBM Tivoli Federated Identity Manager および Tivoli Federated Identity Manager Business Gateway におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2013-0582 2013-05-7 21:19 2013-04-23 Show GitHub Exploit DB Packet Storm
228418 3.5 注意 IBM - IBM Sametime の Classic Meeting Server におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2013-0535 2013-05-7 21:18 2013-04-29 Show GitHub Exploit DB Packet Storm
228419 4.6 警告 シスコシステムズ - Cisco Unified Communications Manager における任意のファイルを読まれる脆弱性 CWE-20
不適切な入力確認 		CVE-2013-1240 2013-05-7 19:51 2013-05-6 Show GitHub Exploit DB Packet Storm
228420 5 警告 シスコシステムズ - Cisco Wireless LAN Controller デバイスにおけるサービス運用妨害 (DoS) の脆弱性 CWE-Other
その他 		CVE-2013-1235 2013-05-7 19:51 2013-05-6 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 19, 2026, 4:01 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
309871 - kanich com_searchlog SQL injection vulnerability in models/log.php in the Search Log (com_searchlog) component 3.1.0 for Joomla! allows remote authenticated users, with Public Back-end privileges, to execute arbitrary SQ… CWE-89
SQL Injection 		CVE-2010-5044 2024-11-21 10:22 2011-11-3 Show GitHub Exploit DB Packet Storm
309872 - blueconstantmedia com_djartgallery SQL injection vulnerability in the DJ-ArtGallery (com_djartgallery) component 0.9.1 for Joomla! allows remote authenticated users to execute arbitrary SQL commands via the cid[] parameter in an editI… CWE-89
SQL Injection 		CVE-2010-5043 2024-11-21 10:22 2011-11-3 Show GitHub Exploit DB Packet Storm
309873 - blueconstantmedia com_djartgallery Cross-site scripting (XSS) vulnerability in the DJ-ArtGallery (com_djartgallery) component 0.9.1 for Joomla! allows remote attackers to inject arbitrary web script or HTML via the cid[] parameter in … CWE-79
Cross-site Scripting 		CVE-2010-5042 2024-11-21 10:22 2011-11-3 Show GitHub Exploit DB Packet Storm
309874 - john_bradshaw np_gallery_plugin SQL injection vulnerability in index.php in the NP_Gallery plugin 0.94 for Nucleus allows remote attackers to execute arbitrary SQL commands via the id parameter in a plugin action. CWE-89
SQL Injection 		CVE-2010-5041 2024-11-21 10:22 2011-11-3 Show GitHub Exploit DB Packet Storm
309875 - john_bradshaw np_gallery_plugin PHP remote file inclusion vulnerability in nucleus/plugins/NP_gallery.php in the NP_Gallery plugin 0.94 for Nucleus allows remote attackers to execute arbitrary PHP code via a URL in the DIR_NUCLEUS … CWE-94
Code Injection 		CVE-2010-5040 2024-11-21 10:22 2011-11-3 Show GitHub Exploit DB Packet Storm
309876 - scriptsfeed recipes_listing_portal SQL injection vulnerability in control/admin_login.php in ScriptsFeed Recipes Listing Portal 1.0 allows remote attackers to execute arbitrary SQL commands via the loginid parameter (aka the UserName … CWE-89
SQL Injection 		CVE-2010-5039 2024-11-21 10:22 2011-11-3 Show GitHub Exploit DB Packet Storm
309877 - groonesworld simple_contact_form PHP remote file inclusion vulnerability in contact/contact.php in Groone's Simple Contact Form allows remote attackers to execute arbitrary PHP code via a URL in the abspath parameter. CWE-94
Code Injection 		CVE-2010-5038 2024-11-21 10:22 2011-11-3 Show GitHub Exploit DB Packet Storm
309878 - michau_enterprises sensesites_commonsense_cms SQL injection vulnerability in article.php in SenseSites CommonSense CMS allows remote attackers to execute arbitrary SQL commands via the article_id parameter. CWE-89
SQL Injection 		CVE-2010-5037 2024-11-21 10:22 2011-11-3 Show GitHub Exploit DB Packet Storm
309879 - iscripts eswap SQL injection vulnerability in addsale.php in iScripts eSwap 2.0 allows remote attackers to execute arbitrary SQL commands via the type parameter. CWE-89
SQL Injection 		CVE-2010-5036 2024-11-21 10:22 2011-11-3 Show GitHub Exploit DB Packet Storm
309880 - iscripts eswap Cross-site scripting (XSS) vulnerability in search.php in iScripts eSwap 2.0 allows remote attackers to inject arbitrary web script or HTML via the txtHomeSearch parameter (aka the search field). NO… CWE-79
Cross-site Scripting 		CVE-2010-5035 2024-11-21 10:22 2011-11-3 Show GitHub Exploit DB Packet Storm