Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 2, 2026, 6 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
244201 7.5 危険 bazaarbuilder
Joomla!
- Joomla! の BazaarBuilder Ecommerce Shopping Cart コンポーネントにおける SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2009-0381 2012-06-26 16:10 2009-02-2 Show GitHub Exploit DB Packet Storm
244202 7.5 危険 Joomla!
elearningforce
- Joomla! の ElearningForce flashmagazinedeluxe コンポーネントにおける SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2009-0373 2012-06-26 16:10 2009-01-30 Show GitHub Exploit DB Packet Storm
244203 7.5 危険 citadel - Citadel.org WebCit の mini_calendar コンポーネントにおける任意のコードを実行される脆弱性 CWE-134
書式文字列の問題
CVE-2009-0364 2012-06-26 16:10 2009-03-26 Show GitHub Exploit DB Packet Storm
244204 7.5 危険 Ktools.net LLC. - BarnOwl および owl におけるバッファオーバーフローの脆弱性 CWE-119
バッファエラー
CVE-2009-0363 2012-06-26 16:10 2009-02-17 Show GitHub Exploit DB Packet Storm
244205 4 警告 Fail2ban - Fail2ban の filter.d/wuftpd.conf におけるサービス運用妨害 (DoS) の脆弱性 CWE-287
不適切な認証
CVE-2009-0362 2012-06-26 16:10 2009-02-12 Show GitHub Exploit DB Packet Storm
244206 9.3 危険 FTPShell - FTPShell Server におけるスタックベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー
CVE-2009-0349 2012-06-26 16:10 2009-01-29 Show GitHub Exploit DB Packet Storm
244207 5.8 警告 Autonomy - Autonomy Ultraseek の cs.html におけるオープンリダイレクトの脆弱性 CWE-59
リンク解釈の問題
CVE-2009-0347 2012-06-26 16:10 2009-01-29 Show GitHub Exploit DB Packet Storm
244208 7.5 危険 DMXReady - DMXReady Blog Manager の inc_webblogmanager.asp における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2009-0339 2012-06-26 16:10 2009-01-29 Show GitHub Exploit DB Packet Storm
244209 4.3 警告 DMXReady - DMXReady Blog Manager の inc_webblogmanager.asp におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2009-0338 2012-06-26 16:10 2009-01-29 Show GitHub Exploit DB Packet Storm
244210 7.5 危険 avbooklibrary - AV Book Library における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2009-0332 2012-06-26 16:10 2009-01-29 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 2, 2026, 4:18 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
351251 - phpbb_group phpbb db.php in phpBB 2.0 (aka phpBB2) RC-3 and earlier allows remote attackers to execute arbitrary code from remote servers via the phpbb_root_path parameter. NVD-CWE-Other
CVE-2002-0473 2016-09-17 10:59 2002-08-12 Show GitHub Exploit DB Packet Storm
351252 - pablo_software_solutions pablo_ftp_server Directory traversal vulnerability in Pablo FTP server 1.0 build 9 and earlier allows remote authenticated users to list arbitrary directories via "..\" (dot-dot backslash) sequences in a LIST command. NVD-CWE-Other
CVE-2002-1054 2016-09-17 10:59 2002-10-4 Show GitHub Exploit DB Packet Storm
351253 - sun java Unspecified vulnerability in the New Java Plug-in component in Oracle Java SE and Java for Business JDK and JRE 6 Update 18 and 19 allows remote attackers to affect confidentiality, integrity, and av… NVD-CWE-noinfo
CVE-2010-0887 2016-08-23 11:01 2010-04-21 Show GitHub Exploit DB Packet Storm
351254 - php php The html_entity_decode function in PHP 5.2 through 5.2.13 and 5.3 through 5.3.2 allows context-dependent attackers to obtain sensitive information (memory contents) or trigger memory corruption by ca… CWE-200
Information Exposure
CVE-2010-1860 2016-08-23 11:01 2010-05-8 Show GitHub Exploit DB Packet Storm
351255 - php php The chunk_split function in PHP 5.2 through 5.2.13 and 5.3 through 5.3.2 allows context-dependent attackers to obtain sensitive information (memory contents) by causing a userspace interruption of an… CWE-200
Information Exposure
CVE-2010-1862 2016-08-23 11:01 2010-05-8 Show GitHub Exploit DB Packet Storm
351256 - php php The addcslashes function in PHP 5.2 through 5.2.13 and 5.3 through 5.3.2 allows context-dependent attackers to obtain sensitive information (memory contents) by causing a userspace interruption of an… CWE-200
Information Exposure
CVE-2010-1864 2016-08-23 11:01 2010-05-8 Show GitHub Exploit DB Packet Storm
351257 - php php The (1) iconv_mime_decode, (2) iconv_substr, and (3) iconv_mime_encode functions in PHP 5.2 through 5.2.13 and 5.3 through 5.3.2 allow context-dependent attackers to obtain sensitive information (mem… CWE-200
Information Exposure
CVE-2010-2097 2016-08-23 11:01 2010-05-28 Show GitHub Exploit DB Packet Storm
351258 - php php The (1) htmlentities, (2) htmlspecialchars, (3) str_getcsv, (4) http_build_query, (5) strpbrk, and (6) strtr functions in PHP 5.2 through 5.2.13 and 5.3 through 5.3.2 allow context-dependent attacker… CWE-200
Information Exposure
CVE-2010-2100 2016-08-23 11:01 2010-05-28 Show GitHub Exploit DB Packet Storm
351259 - php php The (1) strip_tags, (2) setcookie, (3) strtok, (4) wordwrap, (5) str_word_count, and (6) str_pad functions in PHP 5.2 through 5.2.13 and 5.3 through 5.3.2 allow context-dependent attackers to obtain … CWE-200
Information Exposure
CVE-2010-2101 2016-08-23 11:01 2010-05-28 Show GitHub Exploit DB Packet Storm
351260 - multitheftauto multitheftauto MultiTheftAuto 0.5 patch 1 and earlier allows remote attackers to cause a denial of service (application crash) via a crafted command 40 that causes a -1 length to be used and triggers an out-of-boun… CWE-119
Incorrect Access of Indexable Resource ('Range Error') 
CVE-2005-3065 2016-05-28 00:46 2005-09-28 Show GitHub Exploit DB Packet Storm