Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Feb. 9, 2026, 12:59 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
216021 2.1 注意 IBM
オラクル		 - Oracle Fusion Middleware の Oracle Outside In Technology における脆弱性 CWE-noinfo
情報不足 		CVE-2012-1744 2014-02-21 18:30 2012-07-17 Show GitHub Exploit DB Packet Storm
216022 1.5 注意 マイクロソフト
IBM
オラクル		 - Oracle Fusion Middleware の Oracle Outside In Technology における Outside In Filters の処理に関する脆弱性 CWE-noinfo
情報不足 		CVE-2013-2393 2014-02-21 18:30 2013-04-16 Show GitHub Exploit DB Packet Storm
216023 6.8 警告 マイクロソフト
IBM
オラクル		 - Oracle Fusion Middleware の Oracle Outside In Technology における Outside In Filters の処理に関する脆弱性 CWE-noinfo
情報不足 		CVE-2013-0418 2014-02-21 18:28 2013-01-15 Show GitHub Exploit DB Packet Storm
216024 6.8 警告 マイクロソフト
IBM
オラクル		 - Oracle Fusion Middleware の Oracle Outside In Technology における Outside In Filters の処理に関する脆弱性 CWE-noinfo
情報不足 		CVE-2013-0393 2014-02-21 18:27 2013-01-15 Show GitHub Exploit DB Packet Storm
216025 7.5 危険 IBM
オラクル		 - Oracle Outside In Technology における Outside In Image Export SDK の処理に関する脆弱性 CWE-noinfo
情報不足 		CVE-2012-0557 2014-02-21 18:27 2012-04-17 Show GitHub Exploit DB Packet Storm
216026 2.1 注意 マイクロソフト
IBM
オラクル		 - Oracle Fusion Middleware の Oracle Outside In Technology における Outside In HTML Export SDK の処理に関する脆弱性 CWE-noinfo
情報不足 		CVE-2012-3217 2014-02-21 18:26 2012-10-16 Show GitHub Exploit DB Packet Storm
216027 7.5 危険 IBM
オラクル		 - Oracle Outside In Technology における Outside In Image Export SDK の処理に関する脆弱性 CWE-noinfo
情報不足 		CVE-2012-0556 2014-02-21 18:25 2012-04-17 Show GitHub Exploit DB Packet Storm
216028 7.5 危険 IBM
オラクル		 - Oracle Outside In Technology における Outside In Image Export SDK の処理に関する脆弱性 CWE-noinfo
情報不足 		CVE-2012-0555 2014-02-21 18:23 2012-04-17 Show GitHub Exploit DB Packet Storm
216029 2.1 注意 マイクロソフト
IBM
オラクル		 - Oracle Fusion Middleware の Oracle Outside In Technology における Outside In Filters の処理に関する脆弱性 CWE-noinfo
情報不足 		CVE-2012-3214 2014-02-21 18:22 2012-10-16 Show GitHub Exploit DB Packet Storm
216030 7.5 危険 IBM
オラクル		 - Oracle Outside In Technology における Outside In Image Export SDK の処理に関する脆弱性 CWE-noinfo
情報不足 		CVE-2012-0554 2014-02-21 18:21 2012-04-17 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:April 25, 2026, 4:08 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
298601 - blogphp blogphp BlogPHP 2.0 allows remote attackers to bypass authentication, and post (1) messages or (2) comments as an arbitrary user, via a modified blogphp_username field in a cookie. CWE-287
Improper Authentication 		CVE-2008-2524 2017-08-8 10:31 2008-06-4 Show GitHub Exploit DB Packet Storm
298602 - typo3 rlmp_eventdb Cross-site scripting (XSS) vulnerability in the Event Database (aka rlmp_eventdb) extension before 1.1.2 for TYPO3 allows remote attackers to inject arbitrary web script or HTML via unspecified vecto… CWE-79
Cross-site Scripting 		CVE-2008-2525 2017-08-8 10:31 2008-06-4 Show GitHub Exploit DB Packet Storm
298603 - typo3 wt_gallery Cross-site scripting (XSS) vulnerability in the WT Gallery (aka wt_gallery) extension 2.6.2 and earlier for TYPO3 allows remote attackers to inject arbitrary web script or HTML via unspecified vector… CWE-79
Cross-site Scripting 		CVE-2008-2526 2017-08-8 10:31 2008-06-4 Show GitHub Exploit DB Packet Storm
298604 - citrix access_gateway Unspecified vulnerability in Citrix Access Gateway Standard Edition 4.5.7 and earlier and Advanced Edition 4.5 HF2 and earlier allows attackers to bypass authentication and gain "access to network re… NVD-CWE-noinfo
CWE-287
Improper Authentication 		CVE-2008-2528 2017-08-8 10:31 2008-06-4 Show GitHub Exploit DB Packet Storm
298605 - buildanichestore3 bans Cross-site scripting (XSS) vulnerability in the search script in Build A Niche Store (BANS) 3.0 allows remote attackers to inject arbitrary web script or HTML via the q parameter. CWE-352
 Origin Validation Error 		CVE-2008-2531 2017-08-8 10:31 2008-06-4 Show GitHub Exploit DB Packet Storm
298606 - sun cluster The Sun Cluster Global File System in Sun Cluster 3.1 on Sun Solaris 8 through 10, when an underlying ufs filesystem is used, might allow local users to read data from arbitrary deleted files, or cor… CWE-264
Permissions, Privileges, and Access Controls 		CVE-2008-2539 2017-08-8 10:31 2008-06-4 Show GitHub Exploit DB Packet Storm
298607 - skype_technologies skype Skype 3.6.0.248, and other versions before 3.8.0.139, uses a case-sensitive comparison when checking for dangerous extensions, which allows user-assisted remote attackers to bypass warning dialogs an… CWE-20
 Improper Input Validation  		CVE-2008-2545 2017-08-8 10:31 2008-06-7 Show GitHub Exploit DB Packet Storm
298608 - ibm websphere_application_server Unspecified vulnerability in the Web Services Security component in IBM WebSphere Application Server (WAS) 6.1 before 6.1.0.17 has unknown impact and attack vectors related to an attribute in the SOA… NVD-CWE-noinfo
CVE-2008-2550 2017-08-8 10:31 2008-06-5 Show GitHub Exploit DB Packet Storm
298609 - slashcode.com slash Cross-site scripting (XSS) vulnerability in Slashdot Like Automated Storytelling Homepage (Slash) (aka Slashcode) R_2_5_0_94 and earlier allows remote attackers to inject arbitrary web script or HTML… CWE-79
Cross-site Scripting 		CVE-2008-2553 2017-08-8 10:31 2008-06-6 Show GitHub Exploit DB Packet Storm
298610 - damian_frizza borland_interbase Integer overflow in Borland Interbase 2007 SP2 (8.1.0.256) allows remote attackers to execute arbitrary code via a malformed packet to TCP port 3050, which triggers a stack-based buffer overflow. NO… CWE-189
Numeric Errors 		CVE-2008-2559 2017-08-8 10:31 2008-06-6 Show GitHub Exploit DB Packet Storm