Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 11, 2026, 6:13 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
230541 7.5 危険 tony iha kazungu - taifajobs の jobdetails.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2009-0727 2012-12-20 19:10 2009-02-24 Show GitHub Exploit DB Packet Storm
230542 7.5 危険 potato-scripts - Potato News の admin.php におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2009-0722 2012-12-20 19:10 2009-02-24 Show GitHub Exploit DB Packet Storm
230543 5 警告 vlad alexa mancini - PHPFootball の filter.php におけるパスワードハッシュを取得される脆弱性 CWE-200
情報漏えい 		CVE-2009-0711 2012-12-20 19:10 2009-02-23 Show GitHub Exploit DB Packet Storm
230544 4.3 警告 vlad alexa mancini - PHPFootball におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2009-0710 2012-12-20 19:10 2009-02-23 Show GitHub Exploit DB Packet Storm
230545 7.5 危険 vlad alexa mancini - PHPFootball の login.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2009-0709 2012-12-20 19:10 2009-02-23 Show GitHub Exploit DB Packet Storm
230546 6.8 警告 SemanticScuttle - SemanticScuttle におけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反 		CVE-2009-0708 2012-12-20 19:10 2009-02-23 Show GitHub Exploit DB Packet Storm
230547 7.5 危険 powerscripts - PowerClan の admin/index.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2009-0707 2012-12-20 19:10 2009-02-23 Show GitHub Exploit DB Packet Storm
230548 7.5 危険 simple-review - Joomla! および Mambo 用の simple_review コンポーネントにおける SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2009-0706 2012-12-20 19:10 2009-02-23 Show GitHub Exploit DB Packet Storm
230549 6.8 警告 powerscripts - PowerScripts PowerNews の news.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2009-0705 2012-12-20 19:10 2009-02-23 Show GitHub Exploit DB Packet Storm
230550 7.5 危険 webmastersite - WSN Guest の search.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2009-0704 2012-12-20 19:10 2009-02-23 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 11, 2026, 5:13 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
196001 7.1 HIGH
Local 		videolan vlc_media_player A buffer overflow vulnerability in the AVI_ExtractSubtitle component of VideoLAN VLC Media Player 3.0.11 allows attackers to cause an out-of-bounds read via a crafted .avi file. CWE-125
Out-of-bounds Read 		CVE-2021-25802 2024-11-21 14:55 2021-07-27 Show GitHub Exploit DB Packet Storm
196002 7.1 HIGH
Local 		videolan vlc_media_player A buffer overflow vulnerability in the __Parse_indx component of VideoLAN VLC Media Player 3.0.11 allows attackers to cause an out-of-bounds read via a crafted .avi file. CWE-125
Out-of-bounds Read 		CVE-2021-25801 2024-11-21 14:55 2021-07-27 Show GitHub Exploit DB Packet Storm
196003 5.3 MEDIUM
Network 		ucms_project ucms UCMS 1.5.0 was discovered to contain a physical path leakage via an error message returned by the adminchannelscache() function in top.php. CWE-209
Information Exposure Through an Error Message 		CVE-2021-25809 2024-11-21 14:55 2021-07-24 Show GitHub Exploit DB Packet Storm
196004 7.8 HIGH
Local 		bludit bludit A code injection vulnerability in backup/plugin.php of Bludit 3.13.1 allows attackers to execute arbitrary code via a crafted ZIP file. CWE-94
Code Injection 		CVE-2021-25808 2024-11-21 14:55 2021-07-24 Show GitHub Exploit DB Packet Storm
196005 5.4 MEDIUM
Network 		online_doctor_appointment_system_php_full_source_code_project online_doctor_appointment_system_php_full_source_code Multiple stored cross site scripting (XSS) vulnerabilities in the "Update Profile" module of Online Doctor Appointment System 1.0 allows authenticated attackers to execute arbitrary web scripts or HT… CWE-79
Cross-site Scripting 		CVE-2021-25791 2024-11-21 14:55 2021-07-24 Show GitHub Exploit DB Packet Storm
196006 5.4 MEDIUM
Network 		house_rental_and_property_listing_php_project house_rental_and_property_listing_php Multiple stored cross site scripting (XSS) vulnerabilities in the "Register" module of House Rental and Property Listing 1.0 allows authenticated attackers to execute arbitrary web scripts or HTML vi… CWE-79
Cross-site Scripting 		CVE-2021-25790 2024-11-21 14:55 2021-07-24 Show GitHub Exploit DB Packet Storm
196007 6.1 MEDIUM
Network 		fantastic_blog_project fantastic_blog Cross-site scripting (XSS) vulnerability in SourceCodester Fantastic-Blog-CMS V 1.0 allows remote attackers to inject arbitrary web script or HTML via the search field to search.php. CWE-79
Cross-site Scripting 		CVE-2021-26224 2024-11-21 14:55 2021-07-23 Show GitHub Exploit DB Packet Storm
196008 9.8 CRITICAL
Network 		casap_automated_enrollment_system_project casap_automated_enrollment_system SQL injection vulnerability in SourceCodester CASAP Automated Enrollment System v 1.0 allows remote attackers to execute arbitrary SQL statements, via the id parameter to view_pay.php. CWE-89
SQL Injection 		CVE-2021-26223 2024-11-21 14:55 2021-07-23 Show GitHub Exploit DB Packet Storm
196009 9.8 CRITICAL
Network 		casap_automated_enrollment_system_project casap_automated_enrollment_system SQL injection vulnerability in SourceCodester CASAP Automated Enrollment System v 1.0 allows remote attackers to execute arbitrary SQL statements, via the id parameter to edit_user.php. CWE-89
SQL Injection 		CVE-2021-26226 2024-11-21 14:55 2021-07-23 Show GitHub Exploit DB Packet Storm
196010 9.8 CRITICAL
Network 		simple_college_website_project simple_college_website SQL injection vulnerability in SourceCodester Simple College Website v 1.0 allows remote attackers to execute arbitrary SQL statements via the id parameter to news.php. CWE-89
SQL Injection 		CVE-2021-26232 2024-11-21 14:55 2021-07-23 Show GitHub Exploit DB Packet Storm