Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Feb. 9, 2026, 12:59 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
223731 7.5 危険 PHPNUKE - PHP-Nuke 用の Sarkilar モジュールにおける SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2008-6779 2012-12-20 19:10 2009-05-1 Show GitHub Exploit DB Packet Storm
223732 7.5 危険 scripts-for-sites - SFS EZ Auction の viewfaqs.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2008-6778 2012-12-20 19:10 2009-05-1 Show GitHub Exploit DB Packet Storm
223733 7.5 危険 scripts-for-sites - SFS EZ Hot or Not の viewcomments.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2008-6776 2012-12-20 19:10 2009-05-1 Show GitHub Exploit DB Packet Storm
223734 6.8 警告 shopsystem-forum - K&S Shopsoftware の admin/editor/images.php における任意の PHP コードを実行される脆弱性 CWE-Other
その他
CVE-2008-6768 2012-12-20 19:10 2009-04-29 Show GitHub Exploit DB Packet Storm
223735 10 危険 WordPress.org - WordPress の wp-admin/upgrade.php におけるアプリケーションをアップグレードされる脆弱性 CWE-noinfo
情報不足
CVE-2008-6767 2012-12-20 19:10 2009-04-28 Show GitHub Exploit DB Packet Storm
223736 5 警告 viart - ViArt Shop の cart_save.php におけるサービス運用妨害 (DoS) の脆弱性 CWE-noinfo
情報不足
CVE-2008-6766 2012-12-20 19:10 2009-04-28 Show GitHub Exploit DB Packet Storm
223737 5 警告 viart - ViArt Shop における任意のショッピングカートの中身にアクセスされる脆弱性 CWE-noinfo
情報不足
CVE-2008-6765 2012-12-20 19:10 2009-04-28 Show GitHub Exploit DB Packet Storm
223738 4.3 警告 WordPress.org - WordPress の wp-admin/upgrade.php におけるオープンリダイレクトの脆弱性 CWE-59
リンク解釈の問題
CVE-2008-6762 2012-12-20 19:10 2009-04-28 Show GitHub Exploit DB Packet Storm
223739 4.3 警告 viart - ViArt Shop における重要な情報を取得される脆弱性 CWE-59
リンク解釈の問題
CVE-2008-6760 2012-12-20 19:10 2009-04-28 Show GitHub Exploit DB Packet Storm
223740 4.3 警告 viart - ViArt Shop における重要な情報を取得される脆弱性 CWE-59
リンク解釈の問題
CVE-2008-6759 2012-12-20 19:10 2009-04-28 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:April 26, 2026, 4:08 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
278091 - mozilla firefox
seamonkey
thunderbird
The AppendAttributeValue function in the JavaScript engine in Mozilla Firefox 2.x before 2.0.0.18, Thunderbird 2.x before 2.0.0.18, and SeaMonkey 1.x before 1.1.13 allows remote attackers to cause a … CWE-399
 Resource Management Errors
CVE-2008-5052 2018-11-2 22:50 2008-11-13 Show GitHub Exploit DB Packet Storm
278092 - mozilla
debian
canonical
firefox
seamonkey
thunderbird
debian_linux
ubuntu_linux
The nsXMLHttpRequest::NotifyEventListeners method in Firefox 3.x before 3.0.4, Firefox 2.x before 2.0.0.18, Thunderbird 2.x before 2.0.0.18, and SeaMonkey 1.x before 1.1.13 allows remote attackers to… CWE-287
Improper Authentication
CVE-2008-5022 2018-11-2 22:49 2008-11-13 Show GitHub Exploit DB Packet Storm
278093 - mozilla
debian
canonical
firefox
seamonkey
debian_linux
ubuntu_linux
Firefox 3.x before 3.0.4, Firefox 2.x before 2.0.0.18, and SeaMonkey 1.x before 1.1.13 allows remote attackers to bypass the protection mechanism for codebase principals and execute arbitrary script … CWE-20
 Improper Input Validation 
CVE-2008-5023 2018-11-2 22:49 2008-11-13 Show GitHub Exploit DB Packet Storm
278094 - mozilla
debian
canonical
firefox
seamonkey
thunderbird
debian_linux
ubuntu_linux
Integer overflow in xpcom/io/nsEscape.cpp in the browser engine in Mozilla Firefox 3.x before 3.0.4, Firefox 2.x before 2.0.0.18, Thunderbird 2.x before 2.0.0.18, and SeaMonkey 1.x before 1.1.13 allo… CWE-189
Numeric Errors
CVE-2008-5017 2018-11-2 22:48 2008-11-13 Show GitHub Exploit DB Packet Storm
278095 - mozilla
debian
canonical
firefox
seamonkey
thunderbird
debian_linux
ubuntu_linux
The JavaScript engine in Mozilla Firefox 3.x before 3.0.4, Firefox 2.x before 2.0.0.18, Thunderbird 2.x before 2.0.0.18, and SeaMonkey 1.x before 1.1.13 allows remote attackers to cause a denial of s… CWE-399
 Resource Management Errors
CVE-2008-5018 2018-11-2 22:48 2008-11-13 Show GitHub Exploit DB Packet Storm
278096 - mozilla
debian
canonical
firefox
seamonkey
thunderbird
debian_linux
ubuntu_linux
jslock.cpp in Mozilla Firefox 3.x before 3.0.2, Firefox 2.x before 2.0.0.18, Thunderbird 2.x before 2.0.0.18, and SeaMonkey 1.x before 1.1.13 allows remote attackers to cause a denial of service (cra… CWE-20
 Improper Input Validation 
CVE-2008-5014 2018-11-2 22:47 2008-11-13 Show GitHub Exploit DB Packet Storm
278097 - vmware esx
esxi
player
server
workstation
Unspecified vulnerability in VMware Workstation 5.5.8 and earlier, and 6.0.5 and earlier 6.x versions; VMware Player 1.0.8 and earlier, and 2.0.5 and earlier 2.x versions; VMware Server 1.0.9 and ear… CWE-399
 Resource Management Errors
CVE-2008-4917 2018-11-2 22:44 2008-12-9 Show GitHub Exploit DB Packet Storm
278098 - adobe flash_player Multiple unspecified vulnerabilities in Adobe Flash Player 10.x before 10.0.12.36 and 9.x before 9.0.151.0 allow remote attackers to execute arbitrary code via unknown vectors related to "input valid… CWE-20
 Improper Input Validation 
CVE-2008-4824 2018-11-2 22:43 2008-11-18 Show GitHub Exploit DB Packet Storm
278099 - vmware ace
esx
esxi
player
server
workstation
The CPU hardware emulation in VMware Workstation 6.0.5 and earlier and 5.5.8 and earlier; Player 2.0.x through 2.0.5 and 1.0.x through 1.0.8; ACE 2.0.x through 2.0.5 and earlier, and 1.0.x through 1.… CWE-264
Permissions, Privileges, and Access Controls
CVE-2008-4915 2018-11-2 22:43 2008-11-10 Show GitHub Exploit DB Packet Storm
278100 - ibm tivoli_storage_manager_client
tivoli_storage_manager_express
Heap-based buffer overflow in the Data Protection for SQL CAD service (aka dsmcat.exe) in the Client Acceptor Daemon (CAD) and the scheduler in the Backup-Archive client 5.1.0.0 through 5.1.8.1, 5.2.… CWE-119
Incorrect Access of Indexable Resource ('Range Error') 
CVE-2008-4801 2018-11-2 22:36 2008-10-31 Show GitHub Exploit DB Packet Storm