Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Feb. 9, 2026, 12:59 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
193851 7.5 重要
Network 		MyBB Group - Windows 上で稼動する MyBB および Merge System における任意の CSS ファイルを上書きされる脆弱性 CWE-284
不適切なアクセス制御 		CVE-2016-9415 2017-02-13 15:32 2016-10-17 Show GitHub Exploit DB Packet Storm
193852 7.5 重要
Network 		MyBB Group - MyBB および Merge System における重要な情報を取得される脆弱性 CWE-200
情報漏えい 		CVE-2016-9414 2017-02-13 15:32 2016-03-11 Show GitHub Exploit DB Packet Storm
193853 6.5 警告
Network 		MyBB Group - MyBB および Merge System の Admin コントロールパネルにおけるクリックジャッキング攻撃を実行される脆弱性 CWE-284
不適切なアクセス制御 		CVE-2016-9413 2017-02-13 15:32 2016-03-11 Show GitHub Exploit DB Packet Storm
193854 9.8 緊急
Network 		MyBB Group - MyBB および Merge System における脆弱性 CWE-284
不適切なアクセス制御 		CVE-2016-9412 2017-02-13 15:32 2016-03-11 Show GitHub Exploit DB Packet Storm
193855 5.3 警告
Network 		MyBB Group - MyBB および Merge System の Admin コントロールパネルにおけるインストールパスを取得される脆弱性 CWE-200
情報漏えい 		CVE-2016-9411 2017-02-13 15:31 2016-03-11 Show GitHub Exploit DB Packet Storm
193856 7.5 重要
Network 		MyBB Group - MyBB および Merge System における重要なデータベース情報を取得される脆弱性 CWE-200
情報漏えい 		CVE-2016-9410 2017-02-13 15:31 2016-03-11 Show GitHub Exploit DB Packet Storm
193857 6.1 警告
Network 		MyBB Group - MyBB および Merge System の Admin コントロールパネルにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2016-9409 2017-02-13 15:31 2016-03-11 Show GitHub Exploit DB Packet Storm
193858 6.1 警告
Network 		MyBB Group - MyBB および Merge System の Mod コントロールパネルにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2016-9408 2017-02-13 15:31 2016-03-11 Show GitHub Exploit DB Packet Storm
193859 6.1 警告
Network 		MyBB Group - MyBB および Merge System におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2016-9407 2017-02-13 15:31 2016-03-11 Show GitHub Exploit DB Packet Storm
193860 6.1 警告
Network 		MyBB Group - MyBB および Merge System のユーザコントロールパネルにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2016-9406 2017-02-13 15:31 2016-03-11 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:April 26, 2026, 4:08 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
293041 - activewebsoftwares aspreferral SQL injection vulnerability in Merchantsadd.asp in ASPReferral 5.3 allows remote attackers to execute arbitrary SQL commands via the AccountID parameter. CWE-89
SQL Injection 		CVE-2008-6889 2017-09-29 10:33 2009-08-3 Show GitHub Exploit DB Packet Storm
293042 - peel peel SQL injection vulnerability in lire/index.php in Peel 3.1 allows remote attackers to execute arbitrary SQL commands via the rubid parameter. NOTE: this might be the same issue as CVE-2005-3572. CWE-89
SQL Injection 		CVE-2008-6892 2017-09-29 10:33 2009-08-4 Show GitHub Exploit DB Packet Storm
293043 - andres_garcia getleft Multiple buffer overflows in Getleft.exe in Andres Garcia Getleft 1.2 allow remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a long (1) "a" HTML tag; a lo… CWE-119
Incorrect Access of Indexable Resource ('Range Error')  		CVE-2008-6897 2017-09-29 10:33 2009-08-6 Show GitHub Exploit DB Packet Storm
293044 - saschart sascam_webcam_server Buffer overflow in the XHTTP Module 4.1.0.0 in the ActiveX control for SaschArt SasCam Webcam Server 2.6.5 allows remote attackers to cause a denial of service (crash) or execute arbitrary code via a… CWE-119
Incorrect Access of Indexable Resource ('Range Error')  		CVE-2008-6898 2017-09-29 10:33 2009-08-6 Show GitHub Exploit DB Packet Storm
293045 - availscript availscript_article_script Unrestricted file upload vulnerability in "Add Pen/Author Name" feature in addpen.php in AvailScript Article Script allows remote authenticated users to execute arbitrary code by uploading a file wit… CWE-94
Code Injection 		CVE-2008-6900 2017-09-29 10:33 2009-08-6 Show GitHub Exploit DB Packet Storm
293046 - 2532gigs 2532gigs Multiple directory traversal vulnerabilities in 2532designs 2532|Gigs 1.2.2 Stable, when register_globals is enabled and magic_quotes_gpc is disabled, allow remote attackers to include and execute ar… CWE-22
Path Traversal 		CVE-2008-6901 2017-09-29 10:33 2009-08-6 Show GitHub Exploit DB Packet Storm
293047 - 2532gigs 2532gigs Unrestricted file upload vulnerability in upload_flyer.php in 2532designs 2532|Gigs 1.2.2 Stable allows remote attackers to execute arbitrary code by uploading a file with an executable extension, th… CWE-94
Code Injection 		CVE-2008-6902 2017-09-29 10:33 2009-08-6 Show GitHub Exploit DB Packet Storm
293048 - babbleboard babbleboard Cross-site request forgery (CSRF) vulnerability in index.php in BabbleBoard 1.1.6 allows remote authenticated users to hijack the authentication of administrators for requests that delete (1) categor… CWE-352
 Origin Validation Error 		CVE-2008-6905 2017-09-29 10:33 2009-08-7 Show GitHub Exploit DB Packet Storm
293049 - babbleboard babbleboard Cross-site scripting (XSS) vulnerability in index.php in BabbleBoard 1.1.6 allows remote attackers to inject arbitrary web script or HTML via the username. CWE-79
Cross-site Scripting 		CVE-2008-6906 2017-09-29 10:33 2009-08-7 Show GitHub Exploit DB Packet Storm
293050 - 2532gigs 2532gigs Multiple SQL injection vulnerabilities in checkuser.php in 2532designs 2532|Gigs 1.2.2 Stable, when magic_quotes_gpc is disabled, allow remote attackers to execute arbitrary SQL commands via the (1) … CWE-89
SQL Injection 		CVE-2008-6907 2017-09-29 10:33 2009-08-7 Show GitHub Exploit DB Packet Storm