Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Feb. 9, 2026, 12:59 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
194381 6.5 警告
Network 		w3m project
openSUSE project		 - w3m の parsetagx.c におけるアプリケーションのクラッシュを引き起こされる脆弱性 CWE-20
不適切な入力確認 		CVE-2016-9436 2017-01-30 16:57 2016-08-20 Show GitHub Exploit DB Packet Storm
194382 6.5 警告
Network 		w3m project
openSUSE project		 - w3m の file.c の HTMLtagproc1 関数におけるアプリケーションのクラッシュを引き起こされる脆弱性 CWE-20
不適切な入力確認 		CVE-2016-9435 2017-01-30 16:57 2016-08-20 Show GitHub Exploit DB Packet Storm
194383 7 重要
Local 		Lenovo - Lenovo XClarity Administrator における権限を昇格される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2016-8221 2017-01-30 16:48 2016-10-13 Show GitHub Exploit DB Packet Storm
194384 6.1 警告
Network 		Exponent CMS project - Exponent CMS におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2015-8684 2017-01-30 16:46 2015-12-25 Show GitHub Exploit DB Packet Storm
194385 6.1 警告
Network 		Exponent CMS project - Exponent CMS の Reset Your Password モジュールにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2015-8667 2017-01-30 16:46 2015-12-24 Show GitHub Exploit DB Packet Storm
194386 7.8 重要
Local 		サムスン - Samsung Note デバイスの Telecom アプリケーションの SmartCall Activity コンポーネントにおけるサービス運用妨害 (DoS) の脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2016-6527 2017-01-30 16:45 2016-05-11 Show GitHub Exploit DB Packet Storm
194387 7.8 重要
Local 		サムスン - Samsung Note デバイスの Telecom アプリケーションの SpamCall Activity コンポーネントにおけるサービス運用妨害 (DoS) の脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2016-6526 2017-01-30 16:45 2016-05-11 Show GitHub Exploit DB Packet Storm
194388 5.5 警告
Local 		ImageMagick - ImageMagick の magick/attribute.c におけるサービス運用妨害 (DoS) の脆弱性 CWE-416
解放済みメモリの使用 		CVE-2016-7906 2017-01-30 15:58 2016-10-2 Show GitHub Exploit DB Packet Storm
194389 5.5 警告
Local 		ImageMagick - ImageMagick の MagickCore/profile.c におけるサービス運用妨害 (DoS) の脆弱性 CWE-125
境界外読み取り 		CVE-2016-7799 2017-01-30 15:58 2016-10-2 Show GitHub Exploit DB Packet Storm
194390 6.5 警告
Network 		ImageMagick - ImageMagick の SGI コーダにおけるサービス運用妨害 (DoS) の脆弱性 CWE-125
境界外読み取り 		CVE-2016-7101 2017-01-30 15:58 2016-08-19 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:April 26, 2026, 4:08 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
293081 - cms.maury91 maurycms SQL injection vulnerability in Rss.php in MauryCMS 0.53.2 and earlier allows remote attackers to execute arbitrary SQL commands via the c parameter. CWE-89
SQL Injection 		CVE-2008-6952 2017-09-29 10:33 2009-08-12 Show GitHub Exploit DB Packet Storm
293082 - infireal mxcamarchive mxCamArchive 2.2 stores sensitive information under the web root with insufficient access control, which allows remote attackers to obtain configuration details and passwords via a direct request for… CWE-200
Information Exposure 		CVE-2008-6955 2017-09-29 10:33 2009-08-12 Show GitHub Exploit DB Packet Storm
293083 - infireal mxcamarchive Static code injection vulnerability in admin/admin.php in mxCamArchive 2.2 allows remote authenticated administrators to inject arbitrary PHP code into an unspecified program via the description para… CWE-94
Code Injection 		CVE-2008-6956 2017-09-29 10:33 2009-08-12 Show GitHub Exploit DB Packet Storm
293084 - discuz discuz\! member.php in Crossday Discuz! Board allows remote attackers to reset passwords of arbitrary users via crafted (1) lostpasswd and (2) getpasswd actions, possibly involving predictable generation of t… CWE-264
Permissions, Privileges, and Access Controls 		CVE-2008-6957 2017-09-29 10:33 2009-08-12 Show GitHub Exploit DB Packet Storm
293085 - comsenz crossday_discuz\!_board wap/index.php in Crossday Discuz! Board 6.x and 7.x allows remote authenticated users to execute arbitrary PHP code via the creditsformula parameter. CWE-94
Code Injection 		CVE-2008-6958 2017-09-29 10:33 2009-08-12 Show GitHub Exploit DB Packet Storm
293086 - chilkatsoft chilkat_socket Insecure method vulnerability in the Chilkat Socket ActiveX control (ChilkatSocket.ChilkatSocket.1) in ChilkatSocket.dll 2.3.1.1 allows remote attackers to overwrite arbitrary files via the SaveLastE… NVD-CWE-Other
CVE-2008-6959 2017-09-29 10:33 2009-08-12 Show GitHub Exploit DB Packet Storm
293087 - x10media x10_automatic_mp3_script download.php in X10media x10 Automatic Mp3 Search Engine Script 1.5.5 through 1.6 allows remote attackers to read arbitrary files via an encoded url parameter, as demonstrated by obtaining database c… CWE-264
Permissions, Privileges, and Access Controls 		CVE-2008-6960 2017-09-29 10:33 2009-08-12 Show GitHub Exploit DB Packet Storm
293088 - turnkeyforms text_link_sales admin.php in TurnkeyForms Text Link Sales allows remote attackers to bypass authentication and gain administrative privileges via a direct request. CWE-264
Permissions, Privileges, and Access Controls 		CVE-2008-6963 2017-09-29 10:33 2009-08-14 Show GitHub Exploit DB Packet Storm
293089 - x7_group x7_chat SQL injection vulnerability in the login page in X7 Chat 2.0.5 allows remote attackers to execute arbitrary SQL commands via the password field. CWE-89
SQL Injection 		CVE-2008-6964 2017-09-29 10:33 2009-08-14 Show GitHub Exploit DB Packet Storm
293090 - aj_square aj_auction AJ Square AJ Auction OOPD, Pro Platinum Skin #1, Pro Platinum Skin #2, and Web 2.0 send a redirect but do not exit when certain scripts are called directly, which allows remote attackers to bypass au… CWE-287
Improper Authentication 		CVE-2008-6965 2017-09-29 10:33 2009-08-14 Show GitHub Exploit DB Packet Storm