Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Feb. 9, 2026, 12:59 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
210661 7.5 危険 Huawei - Huawei Honor Cube Wireless Router WS860s における任意のコードを実行される脆弱性 CWE-Other
その他 		CVE-2014-9134 2014-12-5 14:05 2014-11-14 Show GitHub Exploit DB Packet Storm
210662 7.5 危険 codezen.org - Canto Curses の canto_curses/guibase.py における任意のコマンドを実行される脆弱性 CWE-Other
その他 		CVE-2013-7416 2014-12-5 13:57 2013-12-7 Show GitHub Exploit DB Packet Storm
210663 5 警告 Icecast - Icecast における重要な情報を取得される脆弱性 CWE-200
情報漏えい 		CVE-2014-9018 2014-12-5 13:45 2014-11-19 Show GitHub Exploit DB Packet Storm
210664 5 警告 MODX - MODX Revolution における重要な情報を取得される脆弱性 CWE-200
情報漏えい 		CVE-2014-8775 2014-12-5 12:33 2014-07-15 Show GitHub Exploit DB Packet Storm
210665 4.3 警告 MODX - MODX Revolution の manager/index.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2014-8774 2014-12-5 12:32 2014-07-15 Show GitHub Exploit DB Packet Storm
210666 6.8 警告 MODX - MODX Revolution におけるクロスサイトリクエストフォージェリ保護メカニズムを回避される脆弱性 CWE-352
同一生成元ポリシー違反 		CVE-2014-8773 2014-12-5 12:32 2014-07-15 Show GitHub Exploit DB Packet Storm
210667 3.5 注意 X3CMS - X3 CMS の search_controller におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2014-8772 2014-12-5 11:52 2014-11-8 Show GitHub Exploit DB Packet Storm
210668 6.8 警告 X3CMS - X3 CMS の 管理者エリアにおけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反 		CVE-2014-8771 2014-12-5 11:51 2014-11-8 Show GitHub Exploit DB Packet Storm
210669 5 警告 infoware GmbH - Infoware MapSuite の MapAPI におけるサーバサイドのリクエストフォージェリの脆弱性 CWE-Other
その他 		CVE-2014-2233 2014-12-5 11:30 2014-03-24 Show GitHub Exploit DB Packet Storm
210670 4.3 警告 Open-Xchange - Open-Xchange AppSuite のドキュメントコンバータコンポーネントにおけるサーバサイドのリクエストフォージェリの脆弱性 CWE-Other
その他 		CVE-2014-5237 2014-12-5 11:01 2014-08-25 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:April 20, 2026, 4:09 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
293081 - uebimiau webmail Directory traversal vulnerability in error.php in Uebimiau Webmail 2.7.10 and 2.7.2 allows remote authenticated users to read arbitrary files via a .. (dot dot) in the selected_theme parameter, a dif… CWE-22
Path Traversal 		CVE-2008-0140 2017-09-29 10:30 2008-01-9 Show GitHub Exploit DB Packet Storm
293082 - webportal webportal_cms Multiple SQL injection vulnerabilities in WebPortal CMS 0.6-beta allow remote attackers to execute arbitrary SQL commands via the user_name parameter to actions.php, and unspecified other vectors. CWE-89
SQL Injection 		CVE-2008-0142 2017-09-29 10:30 2008-01-9 Show GitHub Exploit DB Packet Storm
293083 - spacial_audio_solutions sam_broadcaster
samphpweb 		PHP remote file inclusion vulnerability in common/db.php in samPHPweb, possibly 4.2.2 and others, as provided with SAM Broadcaster, allows remote attackers to execute arbitrary PHP code via a URL in … CWE-94
Code Injection 		CVE-2008-0143 2017-09-29 10:30 2008-01-9 Show GitHub Exploit DB Packet Storm
293084 - phprisk netrisk PHP remote file inclusion vulnerability in index.php in NetRisk 1.9.7 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the page parameter. NOTE: this can also be levera… CWE-89
SQL Injection 		CVE-2008-0144 2017-09-29 10:30 2008-01-9 Show GitHub Exploit DB Packet Storm
293085 - smallnuke smallnuke SQL injection vulnerability in index.php in SmallNuke 2.0.4 and earlier, when magic_quotes_gpc is disabled, allows remote attackers to execute arbitrary SQL commands via (1) the user_email parameter … CWE-89
SQL Injection 		CVE-2008-0147 2017-09-29 10:30 2008-01-9 Show GitHub Exploit DB Packet Storm
293086 - evilboard evilboard SQL injection vulnerability in index.php in EvilBoard 0.1a (Alpha) allows remote attackers to execute arbitrary SQL commands the c parameter. CWE-89
SQL Injection 		CVE-2008-0154 2017-09-29 10:30 2008-01-9 Show GitHub Exploit DB Packet Storm
293087 - evilboard evilboard Cross-site scripting (XSS) vulnerability in index.php in EvilBoard 0.1a (Alpha) allows remote attackers to inject arbitrary web script or HTML via the c parameter. CWE-79
Cross-site Scripting 		CVE-2008-0155 2017-09-29 10:30 2008-01-9 Show GitHub Exploit DB Packet Storm
293088 - flexbb flexbb SQL injection vulnerability in FlexBB 0.6.3 and earlier allows remote attackers to execute arbitrary SQL commands via the flexbb_temp_id parameter in a cookie. CWE-89
SQL Injection 		CVE-2008-0157 2017-09-29 10:30 2008-01-9 Show GitHub Exploit DB Packet Storm
293089 - shop-script shop-script Directory traversal vulnerability in index.php in Shop-Script 2.0 and possibly other versions allows remote attackers to read arbitrary files via a .. (dot dot) in the aux_page parameter. CWE-22
Path Traversal 		CVE-2008-0158 2017-09-29 10:30 2008-01-9 Show GitHub Exploit DB Packet Storm
293090 - eggblog eggblog SQL injection vulnerability in index.php in eggBlog 3.1.0 and earlier allows remote attackers to execute arbitrary SQL commands via the eggblogpassword parameter in a cookie. CWE-89
SQL Injection 		CVE-2008-0159 2017-09-29 10:30 2008-01-9 Show GitHub Exploit DB Packet Storm