Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Feb. 9, 2026, 12:59 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
194651 7.5 重要
Network 		サムスン - Samsung Note デバイスのソフトウェアにおける systemUI のクラッシュを引き起こされる脆弱性 CWE-388
エラー処理 		CVE-2017-5350 2017-01-24 13:54 2017-01-12 Show GitHub Exploit DB Packet Storm
194652 9.8 緊急
Network 		British Columbia Institute of Technology - CodeIgniter の system/libraries/Email.php における任意のコードを実行される脆弱性 CWE-74
インジェクション 		CVE-2016-10131 2017-01-24 13:53 2016-12-27 Show GitHub Exploit DB Packet Storm
194653 5.3 警告
Local 		Google - Telephony における権限昇格の脆弱性 CWE-284
不適切なアクセス制御 		CVE-2016-6771 2017-01-24 11:11 2016-12-5 Show GitHub Exploit DB Packet Storm
194654 5.5 警告
Local 		Google - メディアサーバにおけるサービス運用妨害 (DoS) の脆弱性 CWE-399
リソース管理の問題 		CVE-2016-6767 2017-01-24 11:11 2016-12-5 Show GitHub Exploit DB Packet Storm
194655 7 重要
Local 		Linux - MediaTek ドライバにおける権限を昇格される脆弱性 CWE-284
不適切なアクセス制御 		CVE-2016-6785 2017-01-24 10:09 2016-12-5 Show GitHub Exploit DB Packet Storm
194656 7 重要
Local 		Google - MediaTek ドライバにおける権限を昇格される脆弱性 CWE-284
不適切なアクセス制御 		CVE-2016-6784 2017-01-24 10:09 2016-12-5 Show GitHub Exploit DB Packet Storm
194657 7 重要
Local 		Google - MediaTek ドライバにおける権限を昇格される脆弱性 CWE-284
不適切なアクセス制御 		CVE-2016-6783 2017-01-24 10:09 2016-12-5 Show GitHub Exploit DB Packet Storm
194658 7 重要
Local 		Linux - MediaTek ドライバにおける権限を昇格される脆弱性 CWE-284
不適切なアクセス制御 		CVE-2016-6782 2017-01-24 10:09 2016-12-5 Show GitHub Exploit DB Packet Storm
194659 7 重要
Local 		Linux - MediaTek ドライバにおける権限を昇格される脆弱性 CWE-284
不適切なアクセス制御 		CVE-2016-6781 2017-01-24 10:09 2016-12-5 Show GitHub Exploit DB Packet Storm
194660 4.7 警告
Local 		Linux - 複数のカーネルコンポーネントにおける情報を開示される脆弱性 CWE-200
情報漏えい 		CVE-2016-8407 2017-01-23 19:04 2016-12-5 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:April 25, 2026, 4:08 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
293401 - smolinari mini_web_calendar Cross-site scripting (XSS) vulnerability in php/cal_default.php in Mini Web Calendar (mwcal) 1.2 allows remote attackers to inject arbitrary web script or HTML via the URL. CWE-79
Cross-site Scripting 		CVE-2008-5061 2017-09-29 10:32 2008-11-13 Show GitHub Exploit DB Packet Storm
293402 - smolinari mini_web_calendar Directory traversal vulnerability in php/cal_pdf.php in Mini Web Calendar (mwcal) 1.2 allows remote attackers to read arbitrary files via directory traversal sequences in the thefile parameter. CWE-22
Path Traversal 		CVE-2008-5062 2017-09-29 10:32 2008-11-13 Show GitHub Exploit DB Packet Storm
293403 - otmanager otmanager PHP remote file inclusion vulnerability in Admin/ADM_Pagina.php in OTManager 2.4 allows remote attackers to execute arbitrary PHP code via a URL in the Tipo parameter. CWE-94
Code Injection 		CVE-2008-5063 2017-09-29 10:32 2008-11-13 Show GitHub Exploit DB Packet Storm
293404 - easy-script tlguesbook TlGuestBook 1.2 allows remote attackers to bypass authentication and gain administrative access by setting the tlGuestBook_login cookie to admin. CWE-287
Improper Authentication 		CVE-2008-5065 2017-09-29 10:32 2008-11-14 Show GitHub Exploit DB Packet Storm
293405 - agaresmedia themesitescript PHP remote file inclusion vulnerability in upload/admin/frontpage_right.php in Agares Media ThemeSiteScript 1.0 allows remote attackers to execute arbitrary PHP code via a URL in the loadadminpage pa… CWE-94
Code Injection 		CVE-2008-5066 2017-09-29 10:32 2008-11-14 Show GitHub Exploit DB Packet Storm
293406 - pro_chat_rooms pro_chat_rooms SQL injection vulnerability in Pro Chat Rooms 3.0.3, when magic_quotes_gpc is disabled, allows remote attackers to execute arbitrary SQL commands via the gud parameter to (1) profiles/index.php and (… CWE-89
SQL Injection 		CVE-2008-5070 2017-09-29 10:32 2008-11-15 Show GitHub Exploit DB Packet Storm
293407 - pro_chat_rooms pro_chat_rooms Patch Information (login required) - http://prochatrooms.com/clients.php?cid=1 CWE-89
SQL Injection 		CVE-2008-5070 2017-09-29 10:32 2008-11-15 Show GitHub Exploit DB Packet Storm
293408 - yoxel yoxel Multiple eval injection vulnerabilities in itpm_estimate.php in Yoxel 1.23beta and earlier allow remote authenticated users to execute arbitrary PHP code via the proj_id parameter. CWE-94
Code Injection 		CVE-2008-5071 2017-09-29 10:32 2008-11-15 Show GitHub Exploit DB Packet Storm
293409 - k-lite mega_codec_pack vsfilter.dll in K-Lite Mega Codec Pack 3.5.7.0 allows remote attackers to cause a denial of service (application crash) via a malformed FLV file. NVD-CWE-noinfo
CVE-2008-5072 2017-09-29 10:32 2008-11-15 Show GitHub Exploit DB Packet Storm
293410 - php-fusion freshlinks_module SQL injection vulnerability in index.php in the Freshlinks 1.0 RC1 module for PHP-Fusion allows remote attackers to execute arbitrary SQL commands via the linkid parameter. CWE-89
SQL Injection 		CVE-2008-5074 2017-09-29 10:32 2008-11-15 Show GitHub Exploit DB Packet Storm