Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 27, 2026, 2:01 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
229041	7.5	危険	simplecustomer	-	Simple Customer の login.php における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2008-6332	2012-12-20 19:10	2009-02-27	Show	GitHub Exploit DB Packet Storm

229042	6	警告	streber-pm	-	Streber におけるクロスサイトリクエストフォージェリの脆弱性	CWE-352 同一生成元ポリシー違反	CVE-2008-6331	2012-12-20 19:10	2009-02-27	Show	GitHub Exploit DB Packet Storm

229043	7.5	危険	PreProject.com	-	Pre ASP Job Board の Employee/login.asp における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2008-6329	2012-12-20 19:10	2009-02-27	Show	GitHub Exploit DB Packet Storm

229044	7.5	危険	simplecustomer	-	Simple Customer の login.php における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2008-6326	2012-12-20 19:10	2009-02-27	Show	GitHub Exploit DB Packet Storm

229045	4.3	警告	SoftbizScripts	-	Softbiz Classifieds Script におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2008-6325	2012-12-20 19:10	2009-02-27	Show	GitHub Exploit DB Packet Storm

229046	7.5	危険	phpmygallery	-	PHPmyGallery の _conf/_php-core/common-tpl-vars.php における PHP リモートファイルインクルージョンの脆弱性	CWE-94 コード・インジェクション	CVE-2008-6318	2012-12-20 19:10	2009-02-27	Show	GitHub Exploit DB Packet Storm

229047	6.8	警告	phpmygallery	-	PHPmyGallery の _conf/_php-core/common-tpl-vars.php におけるディレクトリトラバーサルの脆弱性	CWE-22 パス・トラバーサル	CVE-2008-6317	2012-12-20 19:10	2009-02-27	Show	GitHub Exploit DB Packet Storm

229048	6.8	警告	phpmygallery	-	PHPmyGallery の _conf/core/common-tpl-vars.php におけるディレクトリトラバーサルの脆弱性	CWE-22 パス・トラバーサル	CVE-2008-6316	2012-12-20 19:10	2009-02-27	Show	GitHub Exploit DB Packet Storm

229049	7.5	危険	phpmygallery	-	PHPmyGallery の _conf/core/common-tpl-vars.php における PHP リモートファイルインクルージョンの脆弱性	CWE-94 コード・インジェクション	CVE-2008-6315	2012-12-20 19:10	2009-02-27	Show	GitHub Exploit DB Packet Storm

229050	7.5	危険	phpBB	-	phpBB 用の Tag Board モジュールの tag_board.php における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2008-6314	2012-12-20 19:10	2009-02-27	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 27, 2026, 4:52 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
318211	-		-	-	Rejected reason: This is unused.	-	CVE-2023-42665	2024-02-15 03:15	2024-02-15	Show	GitHub Exploit DB Packet Storm

318212	-		-	-	Rejected reason: This is unused.	-	CVE-2023-42437	2024-02-15 03:15	2024-02-15	Show	GitHub Exploit DB Packet Storm

318213	-		-	-	Rejected reason: This is unused.	-	CVE-2023-39450	2024-02-15 03:15	2024-02-15	Show	GitHub Exploit DB Packet Storm

318214	-		-	-	Rejected reason: This is unused.	-	CVE-2023-38262	2024-02-15 03:15	2024-02-15	Show	GitHub Exploit DB Packet Storm

318215	-		-	-	Rejected reason: This is unused.	-	CVE-2023-38137	2024-02-15 03:15	2024-02-15	Show	GitHub Exploit DB Packet Storm

318216	7.8	HIGH Local	microsoft	windows_2000	Utility Manager in Windows 2000 launches winhlp32.exe while Utility Manager is running with raised privileges, which allows local users to gain system privileges via a "Shatter" style attack that sen…	CWE-306 Missing Authentication for Critical Function	CVE-2004-0213	2024-02-15 02:25	2004-08-6	Show	GitHub Exploit DB Packet Storm

318217	7.5	HIGH Network	dlink	dwl-900ap\+_firmware	D-Link DWL-900AP+ Access Point 2.1 and 2.2 allows remote attackers to access the TFTP server without authentication and read the config.img file, which contains sensitive information such as the admi…	CWE-306 Missing Authentication for Critical Function	CVE-2002-1810	2024-02-15 02:25	2002-12-31	Show	GitHub Exploit DB Packet Storm

318218	-		andynorman	gnuserv	gnuserv before 3.12, as shipped with XEmacs, does not properly check the specified length of an X Windows MIT-MAGIC-COOKIE cookie, which allows remote attackers to execute arbitrary commands via a bu…	CWE-120 Classic Buffer Overflow	CVE-2001-0191	2024-02-15 02:25	2001-05-3	Show	GitHub Exploit DB Packet Storm

318219	-		awstats canonical debian	awstats ubuntu_linux debian_linux	Eval injection vulnerability in awstats.pl in AWStats 6.4 and earlier, when a URLPlugin is enabled, allows remote attackers to execute arbitrary Perl code via the HTTP Referrer, which is used in a $u…	CWE-94 Code Injection	CVE-2005-1527	2024-02-15 01:58	2005-08-15	Show	GitHub Exploit DB Packet Storm

318220	7.5	HIGH Network	netsourcecommerce	productcart	EarlyImpact ProductCart uses a weak encryption scheme to encrypt passwords, which allows remote attackers to obtain the password via a chosen plaintext attack.	CWE-326 Inadequate Encryption Strength	CVE-2004-2172	2024-02-15 01:58	2004-12-31	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed