Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 1, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
229301 7.5 危険 webbdomain - WEBBDOMAIN Petition の getin.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-6624 2012-12-20 19:10 2009-04-6 Show GitHub Exploit DB Packet Storm
229302 7.5 危険 webbdomain - WEBBDOMAIN Post Card の getin.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-6623 2012-12-20 19:10 2009-04-6 Show GitHub Exploit DB Packet Storm
229303 7.5 危険 webbdomian - WEBBDOMAIN Post Card の choosecard.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-6622 2012-12-20 19:10 2009-04-6 Show GitHub Exploit DB Packet Storm
229304 6.8 警告 sitexs cms - SiteXS CMS の adm/visual/upload.php における任意のコードを実行される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2008-6617 2012-12-20 19:10 2009-04-6 Show GitHub Exploit DB Packet Storm
229305 4.3 警告 Zen Cart - Zen Software Zen Cart の index.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2008-6616 2012-12-20 19:10 2009-04-6 Show GitHub Exploit DB Packet Storm
229306 7.5 危険 Zen Cart - Zen Software Zen Cart の index.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-6615 2012-12-20 19:10 2009-04-6 Show GitHub Exploit DB Packet Storm
229307 10 危険 picoflat - PicoFlat CMS の index.php におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2008-6604 2012-12-20 19:10 2009-04-4 Show GitHub Exploit DB Packet Storm
229308 10 危険 stadtaus - Download Center Lite における脆弱性 CWE-noinfo
情報不足 		CVE-2008-6602 2012-12-20 19:10 2009-04-3 Show GitHub Exploit DB Packet Storm
229309 4.3 警告 xmlportal - XMLPortal の検索機能におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2008-6600 2012-12-20 19:10 2009-04-3 Show GitHub Exploit DB Packet Storm
229310 10 危険 Sangoma - WANPIPE における脆弱性 CWE-362
競合状態 		CVE-2008-6598 2012-12-20 19:10 2009-04-3 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 1, 2026, 4:12 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
311291 5.5 MEDIUM
Local 		linux linux_kernel In the Linux kernel, the following vulnerability has been resolved: net: ipv6: ensure we call ipv6_mc_down() at most once There are two reasons for addrconf_notify() to be called with NETDEV_DOWN: … NVD-CWE-noinfo
CVE-2022-48910 2024-11-9 01:15 2024-08-22 Show GitHub Exploit DB Packet Storm
311292 8.0 HIGH
Adjacent 		enelx waybox_pro_firmware A heap buffer overflow could be triggered by sending a specific packet to TCP port 7700. CWE-787
 Out-of-bounds Write 		CVE-2023-29125 2024-11-9 01:10 2024-11-6 Show GitHub Exploit DB Packet Storm
311293 8.8 HIGH
Adjacent 		enelx waybox_pro_firmware Waybox Enel TCF Agent service could be used to get administrator’s privileges over the Waybox system. NVD-CWE-Other
CVE-2023-29121 2024-11-9 01:09 2024-11-6 Show GitHub Exploit DB Packet Storm
311294 8.8 HIGH
Adjacent 		enelx waybox_pro_firmware Waybox Enel X web management application could be used to execute arbitrary OS commands and provide administrator’s privileges over the Waybox system. CWE-78
OS Command  		CVE-2023-29120 2024-11-9 01:09 2024-11-6 Show GitHub Exploit DB Packet Storm
311295 8.8 HIGH
Adjacent 		enelx waybox_pro_firmware Waybox Enel X web management application could execute arbitrary requests on the internal database via /admin/dbstore.php. CWE-89
SQL Injection 		CVE-2023-29119 2024-11-9 01:09 2024-11-6 Show GitHub Exploit DB Packet Storm
311296 8.8 HIGH
Adjacent 		enelx waybox_pro_firmware Waybox Enel X web management application could execute arbitrary requests on the internal database via /admin/versions.php. CWE-89
SQL Injection 		CVE-2023-29118 2024-11-9 01:08 2024-11-6 Show GitHub Exploit DB Packet Storm
311297 8.8 HIGH
Adjacent 		enelx waybox_pro_firmware Waybox Enel X web management API authentication could be bypassed and provide administrator’s privileges over the Waybox system. CWE-287
Improper Authentication 		CVE-2023-29117 2024-11-9 01:08 2024-11-6 Show GitHub Exploit DB Packet Storm
311298 4.3 MEDIUM
Adjacent 		enelx waybox_pro_firmware Under certain conditions, through a request directed to the Waybox Enel X web management application, information like Waybox OS version or service configuration details could be obtained. NVD-CWE-noinfo
CVE-2023-29116 2024-11-9 01:08 2024-11-6 Show GitHub Exploit DB Packet Storm
311299 6.5 MEDIUM
Adjacent 		enelx waybox_pro_firmware In certain conditions a request directed to the Waybox Enel X Web management application could cause a denial-of-service (e.g. reboot). NVD-CWE-noinfo
CVE-2023-29115 2024-11-9 01:08 2024-11-6 Show GitHub Exploit DB Packet Storm
311300 5.4 MEDIUM
Network 		xplodedthemes xt_floating_cart_for_woocommerce The XT Floating Cart for WooCommerce plugin for WordPress is vulnerable to Stored Cross-Site Scripting via SVG File uploads in all versions up to, and including, 2.8.2 due to insufficient input sanit… CWE-79
Cross-site Scripting 		CVE-2024-9178 2024-11-9 01:03 2024-11-5 Show GitHub Exploit DB Packet Storm