Vulnerability Search Top

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

Vulnerability Information Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":Feb. 9, 2026, 12:59 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
214711	4.3	警告	OpenStack	-	OpenStack Dashboard の Horizon Orchestration ダッシュボードにおけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2014-0157	2014-04-18 15:20	2014-04-8	Show	GitHub Exploit DB Packet Storm

214712	6	警告	OpenStack	-	Keystone 用 OpenStack Python クライアントライブラリの auth_token ミドルウェアにおける権限を取得される脆弱性	CWE-255 証明書・パスワード管理	CVE-2014-0105	2014-04-18 15:20	2014-03-26	Show	GitHub Exploit DB Packet Storm

214713	6.3	警告	Novell Kbd-project	-	Kbd の init スクリプトにおける任意のファイルを上書きされる脆弱性	CWE-59 リンク解釈の問題	CVE-2011-0460	2014-04-18 15:02	2011-04-18	Show	GitHub Exploit DB Packet Storm

214714	7.5	危険	オラクル	-	Oracle Fusion Middleware の Oracle WebLogic Server における WLS Security に関する脆弱性	CWE-noinfo 情報不足	CVE-2014-2470	2014-04-18 14:54	2014-04-15	Show	GitHub Exploit DB Packet Storm

214715	4	警告	オラクル	-	Oracle Fusion Middleware の Oracle Access Manager における Webserver Plugin に関する脆弱性	CWE-noinfo 情報不足	CVE-2014-2452	2014-04-18 14:54	2014-04-15	Show	GitHub Exploit DB Packet Storm

214716	4.9	警告	オラクル	-	Oracle Fusion Middleware の Oracle OpenSSO における Admin Console に関する脆弱性	CWE-noinfo 情報不足	CVE-2014-2426	2014-04-18 14:54	2014-04-15	Show	GitHub Exploit DB Packet Storm

214717	4	警告	オラクル	-	Oracle Fusion Middleware の Oracle OpenSSO における Other に関する脆弱性	CWE-noinfo 情報不足	CVE-2014-2425	2014-04-18 14:54	2014-04-15	Show	GitHub Exploit DB Packet Storm

214718	4	警告	オラクル	-	Oracle Fusion Middleware の Oracle Event Processing における CEP システムに関する脆弱性	CWE-noinfo 情報不足	CVE-2014-2424	2014-04-18 14:54	2014-04-15	Show	GitHub Exploit DB Packet Storm

214719	5	警告	オラクル	-	Oracle Fusion Middleware の Oracle Data Integrator における Data Quality に関する脆弱性	CWE-noinfo 情報不足	CVE-2014-2418	2014-04-18 14:54	2014-04-15	Show	GitHub Exploit DB Packet Storm

214720	5	警告	オラクル	-	Oracle Fusion Middleware の Oracle Data Integrator における Data Quality に関する脆弱性	CWE-noinfo 情報不足	CVE-2014-2417	2014-04-18 14:54	2014-04-15	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:April 24, 2026, 4 a.m.

No	CVSS	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
297631	-	xoops	xoops	Directory traversal vulnerability in modules/system/admin.php in XOOPS 2.0.18 1 allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the fct parameter. NOTE: th…	CWE-22 Path Traversal	CVE-2008-3296	2017-08-8 10:31	2008-07-25	Show	GitHub Exploit DB Packet Storm

297632	-	esyndicat	esyndicat	eSyndiCat 1.6 allows remote attackers to bypass authentication and gain administrative access by setting the admin_lng cookie value to 1. NOTE: the provenance of this information is unknown; the deta…	CWE-287 Improper Authentication	CVE-2008-3299	2017-08-8 10:31	2008-07-25	Show	GitHub Exploit DB Packet Storm

297633	-	alphadmin	alphadmin_cms	AlphAdmin CMS 1.0.5/03 allows remote attackers to bypass authentication and gain administrative access by setting the aa_login cookie value to 1. NOTE: the provenance of this information is unknown;…	CWE-264 Permissions, Privileges, and Access Controls	CVE-2008-3300	2017-08-8 10:31	2008-07-25	Show	GitHub Exploit DB Packet Storm

297634	-	youtube_blog	youtube_blog	SQL injection vulnerability in info.php in C. Desseno YouTube Blog (ytb) 0.1 allows remote attackers to execute arbitrary SQL commands via the id parameter, a different vector than CVE-2008-3307. NO…	CWE-89 SQL Injection	CVE-2008-3306	2017-08-8 10:31	2008-07-26	Show	GitHub Exploit DB Packet Storm

297635	-	lemoncms	lemon_cms	Directory traversal vulnerability in lemon_includes/FCKeditor/editor/filemanager/browser/browser.php in Lemon CMS 1.10 allows remote attackers to include and execute arbitrary local files via a .. (d…	CWE-22 Path Traversal	CVE-2008-3312	2017-08-8 10:31	2008-07-26	Show	GitHub Exploit DB Packet Storm

297636	-	creacms	creacms	Multiple PHP remote file inclusion vulnerabilities in CreaCMS 1.0 allow remote attackers to execute arbitrary PHP code via a URL in the (1) cfg[document_uri] parameter to _administration/edition_arti…	CWE-94 Code Injection	CVE-2008-3313	2017-08-8 10:31	2008-07-26	Show	GitHub Exploit DB Packet Storm

297637	-	portalparts	forum_plugin	Cross-site scripting (XSS) vulnerability in the search feature in the Forum plugin before 2.7.1 for Geeklog allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, pro…	CWE-79 Cross-site Scripting	CVE-2008-3316	2017-08-8 10:31	2008-07-26	Show	GitHub Exploit DB Packet Storm

297638	-	edgewall_software	trac	Cross-site scripting (XSS) vulnerability in the wiki engine in Trac before 0.10.5 allows remote attackers to inject arbitrary web script or HTML via unknown vectors.	CWE-79 Cross-site Scripting	CVE-2008-3328	2017-08-8 10:31	2008-07-28	Show	GitHub Exploit DB Packet Storm

297639	-	twibright	links	Unspecified vulnerability in Links before 2.1, when "only proxies" is enabled, has unknown impact and attack vectors related to providing "URLs to external programs."	CWE-59 NVD-CWE-noinfo Link Following	CVE-2008-3329	2017-08-8 10:31	2008-07-28	Show	GitHub Exploit DB Packet Storm

297640	-	debian	horde turba	Cross-site scripting (XSS) vulnerability in services/obrowser/index.php in Horde 3.2 and Turba 2.2 allows remote attackers to inject arbitrary web script or HTML via the contact name.	CWE-79 Cross-site Scripting	CVE-2008-3330	2017-08-8 10:31	2008-07-28	Show	GitHub Exploit DB Packet Storm