Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Feb. 9, 2026, 12:59 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
214851 7.5 危険 SAP - SAP CCMS エージェントの不特定の RFC 機能における任意のコマンドを実行される脆弱性 CWE-94
コード・インジェクション 		CVE-2013-7362 2014-04-15 12:18 2013-02-21 Show GitHub Exploit DB Packet Storm
214852 5 警告 SAP - SAP CMS および CM Services におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2013-7361 2014-04-15 12:18 2013-05-11 Show GitHub Exploit DB Packet Storm
214853 7.5 危険 SAP - SAP adminadapter における任意のファイルを読まれる脆弱性 CWE-noinfo
情報不足 		CVE-2013-7360 2014-04-15 12:17 2013-03-27 Show GitHub Exploit DB Packet Storm
214854 5 警告 SAP - SAP モバイルインフラストラクチャにおける重要なポート情報を取得される脆弱性 CWE-noinfo
情報不足 		CVE-2013-7359 2014-04-15 12:16 2013-06-5 Show GitHub Exploit DB Packet Storm
214855 5 警告 SAP - SAP Guided Procedures Archive Monitor におけるユーザ名などの情報を取得される脆弱性 CWE-noinfo
情報不足 		CVE-2013-7358 2014-04-15 12:16 2013-07-2 Show GitHub Exploit DB Packet Storm
214856 5 警告 SAP - SAP J2EE Engine の設定サービスにおける認証情報を取得される脆弱性 CWE-noinfo
情報不足 		CVE-2013-7357 2014-04-15 12:15 2013-07-2 Show GitHub Exploit DB Packet Storm
214857 5 警告 SAP - Oracle 用 SAP CCMS / Database Monitors におけるデータベースパスワードを取得される脆弱性 CWE-noinfo
情報不足 		CVE-2013-7356 2014-04-15 12:15 2013-08-8 Show GitHub Exploit DB Packet Storm
214858 7.5 危険 SAP - SAP BI Universal Data Integration における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2013-7355 2014-04-15 12:14 2013-11-8 Show GitHub Exploit DB Packet Storm
214859 - - The Prosody Team - ** 削除 ** Prosody におけるサービス運用妨害 (DoS) の脆弱性 - CVE-2014-2750 2014-04-14 18:40 2014-04-2 Show GitHub Exploit DB Packet Storm
214860 5.8 警告 デル - Dell OpenManage Server Administrator におけるオープンリダイレクトの脆弱性 CWE-20
不適切な入力確認 		CVE-2013-0740 2014-04-14 18:36 2013-07-22 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:April 26, 2026, 4:08 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
290031 - hp hp-ux setrlimit in HP-UX 10.01, 10.10, 10.24, 10.20, 11.00, 11.04 and 11.11 does not properly enforce core file size on processes after setuid or setgid privileges are dropped, which could allow local user… NVD-CWE-Other
CVE-2001-1564 2017-10-12 10:29 2001-12-31 Show GitHub Exploit DB Packet Storm
290032 - hp hp-ux
advanced_server_9000 		RFC-NETBIOS in HP Advanced Server/9000 B.04.05 through B.04.09, when running HP-UX 11.00 or 11.11, allows remote attackers to cause a denial of service (panic) via a malformed UDP packet on port 139. NVD-CWE-Other
CVE-2002-2138 2017-10-12 10:29 2002-12-31 Show GitHub Exploit DB Packet Storm
290033 - phpwebquest phpwebquest PHP Webquest 2.6 allows remote attackers to retrieve database credentials via a direct request to admin/backup_phpwebquest.php, which leaks the credentials in an error message if a call to /usr/bin/m… CWE-200
Information Exposure 		CVE-2008-0249 2017-10-11 10:32 2008-01-12 Show GitHub Exploit DB Packet Storm
290034 - runcms photo_module
runcms 		SQL injection vulnerability in viewcat.php in the Photo 3.02 module for RunCMS allows remote attackers to execute arbitrary SQL commands via the cid parameter. CWE-89
SQL Injection 		CVE-2008-1551 2017-10-11 10:32 2008-04-1 Show GitHub Exploit DB Packet Storm
290035 - mymarket mymarket SQL injection vulnerability in shopping/index.php in MyMarket 1.72 allows remote attackers to execute arbitrary SQL commands via the id parameter. CWE-89
SQL Injection 		CVE-2008-2815 2017-10-11 10:32 2008-06-24 Show GitHub Exploit DB Packet Storm
290036 - alstrasoft forum_pay_per_post_exchange SQL injection vulnerability in index.php in AlstraSoft Forum Pay Per Post Exchange allows remote attackers to execute arbitrary SQL commands via the cat parameter in a showcat action. CWE-89
SQL Injection 		CVE-2008-3954 2017-10-11 10:32 2008-09-11 Show GitHub Exploit DB Packet Storm
290037 - vizzed acmlmboard SQL injection vulnerability in memberlist.php in Acmlmboard 1.A2 allows remote attackers to execute arbitrary SQL commands via the pow parameter. CWE-89
SQL Injection 		CVE-2008-5198 2017-10-11 10:32 2008-11-22 Show GitHub Exploit DB Packet Storm
290038 - pluck-cms pluck Directory traversal vulnerability in data/inc/lib/pcltar.lib.php in Pluck 4.5.3, when register_globals is enabled, allows remote attackers to include and execute arbitrary local files via directory t… CWE-22
Path Traversal 		CVE-2008-6253 2017-10-11 10:32 2009-02-25 Show GitHub Exploit DB Packet Storm
290039 - valvesoftware counter-strike Valve Software Half-Life Counter-Strike 1.6 allows remote attackers to cause a denial of service (crash) via multiple crafted login packets. CWE-399
 Resource Management Errors 		CVE-2008-7203 2017-10-11 10:32 2009-09-12 Show GitHub Exploit DB Packet Storm
290040 - bt-sondage bt-sondage PHP remote file inclusion vulnerability in utilitaires/gestion_sondage.php in BT-Sondage 112 allows remote attackers to execute arbitrary PHP code via a URL in the repertoire_visiteur parameter. NVD-CWE-Other
CVE-2007-1812 2017-10-11 10:32 2007-04-3 Show GitHub Exploit DB Packet Storm