Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Feb. 9, 2026, 12:59 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
193151 7.5 重要
Network
Mobile App Native project - WordPress 用 Mobile App Native プラグインにおけるリモートでファイルをアップロードされる脆弱性 CWE-254
セキュリティ機能
CVE-2017-6104 2017-03-8 14:30 2017-02-27 Show GitHub Exploit DB Packet Storm
193152 6.1 警告
Network
AnyVar project - WordPress 用 AnyVar プラグインにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2017-6103 2017-03-8 14:30 2017-02-21 Show GitHub Exploit DB Packet Storm
193153 6.1 警告
Network
Blair Jordan - WordPress 用 Rockhoist Badges プラグインにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2017-6102 2017-03-8 14:30 2017-02-20 Show GitHub Exploit DB Packet Storm
193154 7.8 重要
Local
IBM - IBM AIX における root 権限を取得される脆弱性 CWE-20
不適切な入力確認
CVE-2016-8972 2017-03-8 14:20 2016-12-15 Show GitHub Exploit DB Packet Storm
193155 5.5 警告
Local
IBM - IBM AIX におけるシステムクラッシュを引き起こされる脆弱性 CWE-20
不適切な入力確認
CVE-2016-8944 2017-03-8 14:20 2016-10-25 Show GitHub Exploit DB Packet Storm
193156 9.1 緊急
Network
IBM - IBM Integration Bus および WebSphere Message Broker の SOAP フローにおけるサービス運用妨害 (DoS) の脆弱性 CWE-611
XML 外部エンティティ参照の不適切な制限
CVE-2016-9706 2017-03-8 14:19 2016-12-1 Show GitHub Exploit DB Packet Storm
193157 6.1 警告
Network
IBM - IBM WebSphere Message Broker におけるクリックアクションをハイジャックされる脆弱性 CWE-254
セキュリティ機能
CVE-2016-9010 2017-03-8 14:19 2016-10-25 Show GitHub Exploit DB Packet Storm
193158 9.8 緊急
Network
IBM - IBM System Storage TS3100/TS3200 テープライブラリにおけるユーザのパスワードを変更される脆弱性 CWE-284
不適切なアクセス制御
CVE-2016-9005 2017-03-8 14:19 2016-10-25 Show GitHub Exploit DB Packet Storm
193159 5.4 警告
Network
IBM - IBM Jazz Foundation におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2016-8968 2017-03-8 14:19 2016-10-25 Show GitHub Exploit DB Packet Storm
193160 5.3 警告
Local
IBM - IBM Cognos Disclosure Management における低い権限で任意のコマンドを実行される脆弱性 CWE-284
不適切なアクセス制御
CVE-2016-6077 2017-03-8 14:19 2016-10-20 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:April 25, 2026, 4:08 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
293871 - idautomation aztec_barcode
datamatrix_barcode
linear_barcode
pdf417_barcode
IDAutomation allows remote attackers to overwrite arbitrary files via the argument to the (1) SaveBarCode and (2) SaveEnhWMF methods in (a) the IDAuto.BarCode.1 ActiveX control in IDAutomationLinear6… CWE-20
 Improper Input Validation 
CVE-2008-2283 2017-09-29 10:31 2008-05-18 Show GitHub Exploit DB Packet Storm
293872 - net-snmp net-snmp Buffer overflow in the __snprint_value function in snmp_get in Net-SNMP 5.1.4, 5.2.4, and 5.4.1, as used in SNMP.xs for Perl, allows remote attackers to cause a denial of service (crash) and possibly… CWE-119
Incorrect Access of Indexable Resource ('Range Error') 
CVE-2008-2292 2017-09-29 10:31 2008-05-18 Show GitHub Exploit DB Packet Storm
293873 - tpvgames mpcs admin.php in Multi-Page Comment System (MPCS) 1.0 and 1.1 allows remote attackers to bypass authentication and gain privileges by setting the CommentSystemAdmin cookie to 1. CWE-264
Permissions, Privileges, and Access Controls
CVE-2008-2293 2017-09-29 10:31 2008-05-18 Show GitHub Exploit DB Packet Storm
293874 - mreaves pet_grooming_management_system Pet Grooming Management System 2.0 allows remote attackers to gain privileges via a direct request to useradded.php with a modified user name for "admin." CWE-264
Permissions, Privileges, and Access Controls
CVE-2008-2294 2017-09-29 10:31 2008-05-18 Show GitHub Exploit DB Packet Storm
293875 - rgboard rgboard Cross-site scripting (XSS) vulnerability in rg_search.php in Rgboard 3.0.12, and possibly earlier versions, allows remote attackers to inject arbitrary web script or HTML via the s_text parameter and… CWE-79
Cross-site Scripting
CVE-2008-2295 2017-09-29 10:31 2008-05-18 Show GitHub Exploit DB Packet Storm
293876 - rgboard rgboard PHP remote file inclusion vulnerability in include/bbs.lib.inc.php in Rgboard 3.0.12 allows remote attackers to execute arbitrary PHP code via a URL in the site_path parameter. CWE-94
Code Injection
CVE-2008-2296 2017-09-29 10:31 2008-05-18 Show GitHub Exploit DB Packet Storm
293877 - roticv rantx The admin.php file in Rantx allows remote attackers to bypass authentication and gain privileges by setting the logininfo cookie to "<?php" or "?>", which is present in the password file and probably… CWE-264
Permissions, Privileges, and Access Controls
CVE-2008-2297 2017-09-29 10:31 2008-05-18 Show GitHub Exploit DB Packet Storm
293878 - sourceforge web_slider Admin.php in Web Slider 0.6 allows remote attackers to bypass authentication and gain privileges by setting the admin cookie to 1. CWE-287
Improper Authentication
CVE-2008-2298 2017-09-29 10:31 2008-05-18 Show GitHub Exploit DB Packet Storm
293879 - vastal phpvid Cross-site scripting (XSS) vulnerability in search_results.php in Vastal I-Tech phpVID 1.1 and 1.2 allows remote attackers to inject arbitrary web script or HTML via the query parameter. NOTE: some … CWE-79
Cross-site Scripting
CVE-2008-2335 2017-09-29 10:31 2008-05-19 Show GitHub Exploit DB Packet Storm
293880 - 68_classifieds 68_classifieds SQL injection vulnerability in category.php in 68 Classifieds 4.0.1 allows remote attackers to execute arbitrary SQL commands via the cat parameter. CWE-89
SQL Injection
CVE-2008-2336 2017-09-29 10:31 2008-05-19 Show GitHub Exploit DB Packet Storm