Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Feb. 9, 2026, 12:59 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
223591 7.5 危険 yanick bourbeau - LNP における管理者権限を取得される脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2008-7172 2012-12-20 19:10 2009-09-8 Show GitHub Exploit DB Packet Storm
223592 4.3 警告 yanick bourbeau - LNP におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2008-7171 2012-12-20 19:10 2009-09-8 Show GitHub Exploit DB Packet Storm
223593 9.3 危険 uusee - UUSee UUUpgrade ActiveX コントロールにおける任意のファイルを強制的にダウンロードされる脆弱性 CWE-Other
その他
CVE-2008-7168 2012-12-20 19:10 2009-09-8 Show GitHub Exploit DB Packet Storm
223594 7.5 危険 sami ekblad - Page Manager の upload.php における任意のコードを実行される脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2008-7167 2012-12-20 19:10 2009-09-8 Show GitHub Exploit DB Packet Storm
223595 10 危険 ryo-oh-ki - Shareaza における脆弱性 CWE-noinfo
情報不足
CVE-2008-7164 2012-12-20 19:10 2009-09-4 Show GitHub Exploit DB Packet Storm
223596 6.8 警告 sinecms - SineCMS の mods/Integrated/index.php におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル
CVE-2008-7163 2012-12-20 19:10 2009-09-4 Show GitHub Exploit DB Packet Storm
223597 6.8 警告 Ruby on Rails project - Ruby on Rails におけるクロスサイトリクエストフォージェリ (CSRF) 保護を回避される脆弱性 CWE-20
不適切な入力確認
CVE-2008-7248 2012-12-20 19:10 2008-11-18 Show GitHub Exploit DB Packet Storm
223598 5.8 警告 silcnet - SILC Toolkit の silcd におけるスタック領域を上書きされる脆弱性 CWE-134
書式文字列の問題
CVE-2008-7160 2012-12-20 19:10 2009-09-10 Show GitHub Exploit DB Packet Storm
223599 5.8 警告 silcnet - SILC Toolkit の lib/silcasn1/silcasn1_encode.c におけるスタック領域を上書きされる脆弱性 CWE-134
書式文字列の問題
CVE-2008-7159 2012-12-20 19:10 2009-09-10 Show GitHub Exploit DB Packet Storm
223600 7.5 危険 phprisk - NetRisk における任意のユーザのパスワードを変更される脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2008-7155 2012-12-20 19:10 2009-09-2 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:April 26, 2026, 4:08 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
278021 - microsoft directx
windows_2000
windows_server_2003
windows_xp
The QuickTime Movie Parser Filter in quartz.dll in DirectShow in Microsoft DirectX 7.0 through 9.0c on Windows 2000 SP4, Windows XP SP2 and SP3, and Windows Server 2003 SP2 performs updates to pointe… CWE-20
 Improper Input Validation 
CVE-2009-1538 2019-02-26 23:04 2009-07-16 Show GitHub Exploit DB Packet Storm
278022 - microsoft directx
windows_2000
windows_server_2003
windows_xp
The QuickTime Movie Parser Filter in quartz.dll in DirectShow in Microsoft DirectX 7.0 through 9.0c on Windows 2000 SP4, Windows XP SP2 and SP3, and Windows Server 2003 SP2 does not properly validate… CWE-94
Code Injection
CVE-2009-1539 2019-02-26 23:04 2009-07-16 Show GitHub Exploit DB Packet Storm
278023 - microsoft windows_2000
windows_server_2003
windows_vista
windows_xp
The Message Queuing (aka MSMQ) service for Microsoft Windows 2000 SP4, XP SP2, Server 2003 SP2, and Vista Gold does not properly validate unspecified IOCTL request data from user mode before passing … CWE-264
Permissions, Privileges, and Access Controls
CVE-2009-1922 2019-02-26 23:04 2009-08-13 Show GitHub Exploit DB Packet Storm
278024 - microsoft windows_2000
windows_server_2003
windows_xp
office_converter_pack
office_word
wordpad
works
Integer overflow in the text converters in Microsoft Office Word 2002 SP3 and 2003 SP3; Works 8.5; Office Converter Pack; and WordPad in Windows 2000 SP4, XP SP2 and SP3, and Server 2003 SP2 allows r… CWE-189
Numeric Errors
CVE-2009-2506 2019-02-26 23:04 2009-12-10 Show GitHub Exploit DB Packet Storm
278025 - microsoft windows_server_2003
windows_server_2008
The single sign-on implementation in Active Directory Federation Services (ADFS) in Microsoft Windows Server 2003 SP2 and Server 2008 Gold and SP2 does not properly remove credentials at the end of a… CWE-255
Credentials Management
CVE-2009-2508 2019-02-26 23:04 2009-12-10 Show GitHub Exploit DB Packet Storm
278026 - microsoft windows_server_2003
windows_server_2008
Active Directory Federation Services (ADFS) in Microsoft Windows Server 2003 SP2 and Server 2008 Gold and SP2 does not properly validate headers in HTTP requests, which allows remote authenticated us… CWE-20
 Improper Input Validation 
CVE-2009-2509 2019-02-26 23:04 2009-12-10 Show GitHub Exploit DB Packet Storm
278027 - microsoft windows_2000
windows_server_2003
windows_xp
The DHTML Editing Component ActiveX control in Microsoft Windows 2000 SP4, XP SP2 and SP3, and Server 2003 SP2 does not properly format HTML markup, which allows remote attackers to execute arbitrary… CWE-94
Code Injection
CVE-2009-2519 2019-02-26 23:04 2009-09-9 Show GitHub Exploit DB Packet Storm
278028 - microsoft data_engine
sql_server
sql_server_desktop_engine
wmsde
wyukon
windows_server_2008
Integer underflow in SQL Server 7.0 SP4, 2000 SP4, 2005 SP1 and SP2, 2000 Desktop Engine (MSDE 2000) SP4, 2005 Express Edition SP1 and SP2, and 2000 Desktop Engine (WMSDE); Microsoft Data Engine (MSD… CWE-189
Numeric Errors
CVE-2008-0107 2019-02-26 23:04 2008-07-9 Show GitHub Exploit DB Packet Storm
278029 - microsoft windows-nt
windows_server_2003
windows_server_2008
windows_vista
windows_xp
Microsoft Windows XP Professional SP2, Vista, and Server 2003 and 2008 does not properly assign activities to the (1) NetworkService and (2) LocalService accounts, which might allow context-dependent… CWE-264
Permissions, Privileges, and Access Controls
CVE-2008-1436 2019-02-26 23:04 2008-04-22 Show GitHub Exploit DB Packet Storm
278030 - microsoft windows_2000
windows_server_2003
windows_server_2008
windows_xp
Unspecified vulnerability in Microsoft DNS in Windows 2000 SP4, Server 2003 SP1 and SP2, and Server 2008 allows remote attackers to conduct cache poisoning attacks via unknown vectors related to acce… NVD-CWE-noinfo
CVE-2008-1454 2019-02-26 23:04 2008-07-9 Show GitHub Exploit DB Packet Storm