Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Feb. 9, 2026, 12:59 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
194351 5.3 警告
Network 		Moodle - Moodle におけるフォーラムの属性が不正にサニタイズされる脆弱性 CWE-20
不適切な入力確認 		CVE-2017-2576 2017-01-31 14:29 2017-01-17 Show GitHub Exploit DB Packet Storm
194352 5.3 警告
Network 		Moodle - Moodle におけるコースのノートを閲覧される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2016-8644 2017-01-31 14:28 2016-11-21 Show GitHub Exploit DB Packet Storm
194353 4.3 警告
Network 		Moodle - Moodle における管理者情報を編集される脆弱性 CWE-284
不適切なアクセス制御 		CVE-2016-8643 2017-01-31 14:28 2016-11-21 Show GitHub Exploit DB Packet Storm
194354 5.3 警告
Network 		Moodle - Moodle の question エンジンにおけるファイルにアクセスされる脆弱性 CWE-284
不適切なアクセス制御 		CVE-2016-8642 2017-01-31 14:28 2016-11-21 Show GitHub Exploit DB Packet Storm
194355 7.3 重要
Network 		Moodle - Moodle のウェブサービストークンにおける脆弱性 CWE-640
パスワードを忘れた場合の脆弱なパスワードリカバリの仕組み 		CVE-2016-7038 2017-01-31 14:27 2016-09-12 Show GitHub Exploit DB Packet Storm
194356 5.4 警告
Network 		Moodle - Moodle の event monitor における未登録のユーザに通知が送信される脆弱性 CWE-200
情報漏えい 		CVE-2016-5014 2017-01-31 14:27 2016-07-19 Show GitHub Exploit DB Packet Storm
194357 5.4 警告
Network 		Moodle - Moodle における電子メールのヘッダにテキストを挿入される脆弱性 CWE-74
インジェクション 		CVE-2016-5013 2017-01-31 14:27 2016-07-19 Show GitHub Exploit DB Packet Storm
194358 5.3 警告
Network 		Moodle - Moodle の用語集の検索におけるエントリを表示される脆弱性 CWE-200
情報漏えい 		CVE-2016-5012 2017-01-31 14:27 2016-07-19 Show GitHub Exploit DB Packet Storm
194359 7.5 重要
Network 		HexChat - HexChat の common/inbound.c の inbound_cap_ls 関数におけるスタックベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2016-2233 2017-01-31 14:18 2016-02-7 Show GitHub Exploit DB Packet Storm
194360 7.4 重要
Network 		HexChat - HexChat のクライアントにおけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2016-2087 2017-01-31 14:18 2016-01-26 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:April 24, 2026, 4 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
293231 - shop-script shop-script Directory traversal vulnerability in index.php in Shop-Script 2.0 and possibly other versions allows remote attackers to read arbitrary files via a .. (dot dot) in the aux_page parameter. CWE-22
Path Traversal 		CVE-2008-0158 2017-09-29 10:30 2008-01-9 Show GitHub Exploit DB Packet Storm
293232 - eggblog eggblog SQL injection vulnerability in index.php in eggBlog 3.1.0 and earlier allows remote attackers to execute arbitrary SQL commands via the eggblogpassword parameter in a cookie. CWE-89
SQL Injection 		CVE-2008-0159 2017-09-29 10:30 2008-01-9 Show GitHub Exploit DB Packet Storm
293233 - spacial_audio_solutions samphpweb SQL injection vulnerability in songinfo.php in SAM Broadcaster samPHPweb, possibly 4.2.2 and earlier, allows remote attackers to execute arbitrary SQL commands via the songid parameter. CWE-89
SQL Injection 		CVE-2008-0187 2017-09-29 10:30 2008-01-10 Show GitHub Exploit DB Packet Storm
293234 - uebimiau webmail Uebimiau Webmail 2.7.10 and 2.7.2 does not protect authentication state variables from being set through HTTP requests, which allows remote attackers to bypass authentication via a sess[auth]=1 param… CWE-287
Improper Authentication 		CVE-2008-0210 2017-09-29 10:30 2008-01-10 Show GitHub Exploit DB Packet Storm
293235 - php_webquest php_webquest SQL injection vulnerability in soporte_horizontal_w.php in PHP Webquest 2.6 allows remote attackers to execute arbitrary SQL commands via the id_actividad parameter, a different vector than CVE-2007-… CWE-89
SQL Injection 		CVE-2008-0219 2017-09-29 10:30 2008-01-11 Show GitHub Exploit DB Packet Storm
293236 - gateway cweblaunchctl_activex_control
weblaunch 		Multiple stack-based buffer overflows in the WebLaunch.WeblaunchCtl.1 (aka CWebLaunchCtl) ActiveX control in weblaunch.ocx 1.0.0.1 in Gateway Weblaunch allow remote attackers to execute arbitrary cod… CWE-119
Incorrect Access of Indexable Resource ('Range Error')  		CVE-2008-0220 2017-09-29 10:30 2008-01-11 Show GitHub Exploit DB Packet Storm
293237 - gateway weblaunch Directory traversal vulnerability in the WebLaunch.WeblaunchCtl.1 (aka CWebLaunchCtl) ActiveX control in weblaunch.ocx 1.0.0.1 in Gateway Weblaunch allows remote attackers to execute arbitrary progra… CWE-22
Path Traversal 		CVE-2008-0221 2017-09-29 10:30 2008-01-11 Show GitHub Exploit DB Packet Storm
293238 - wordpress filemanager Unrestricted file upload vulnerability in ajaxfilemanager.php in the Wp-FileManager 1.2 plugin for WordPress allows remote attackers to upload and execute arbitrary PHP code via unspecified vectors. CWE-94
Code Injection 		CVE-2008-0222 2017-09-29 10:30 2008-01-11 Show GitHub Exploit DB Packet Storm
293239 - osdate osdate PHP remote file inclusion vulnerability in php121db.php in osDate 2.0.8 and possibly earlier versions allows remote attackers to execute arbitrary PHP code via a URL in the php121dir parameter. CWE-94
Code Injection 		CVE-2008-0230 2017-09-29 10:30 2008-01-11 Show GitHub Exploit DB Packet Storm
293240 - zero_cms zero_cms Multiple SQL injection vulnerabilities in Zero CMS 1.0 Alpha allow remote attackers to execute arbitrary SQL commands via (1) the id parameter to index.php, or the (2) f or t parameters to forums/ind… CWE-89
SQL Injection 		CVE-2008-0232 2017-09-29 10:30 2008-01-11 Show GitHub Exploit DB Packet Storm