Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 14, 2026, 4 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
227281 7.5 危険 WeBid Support - WeBid auction script の admin panel における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-7116 2012-12-20 19:10 2009-08-28 Show GitHub Exploit DB Packet Storm
227282 4.3 警告 phpcart - Carmosa phpCart におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2008-7108 2012-12-20 19:10 2009-08-28 Show GitHub Exploit DB Packet Storm
227283 5 警告 ソフォス - Microsoft Exchange 用の Sophos PureMessage におけるスキャン保護のリモート回避をされる脆弱性 CWE-Other
その他 		CVE-2008-7106 2012-12-20 19:10 2009-08-27 Show GitHub Exploit DB Packet Storm
227284 5 警告 ソフォス - Microsoft Exchange 用の Sophos PureMessage におけるサービス運用妨害 (DoS) の脆弱性 CWE-Other
その他 		CVE-2008-7105 2012-12-20 19:10 2009-08-27 Show GitHub Exploit DB Packet Storm
227285 5 警告 ソフォス - Microsoft Exchange 用の PureMessage におけるサービス運用妨害 (DoS) の脆弱性 CWE-Other
その他 		CVE-2008-7104 2012-12-20 19:10 2009-08-27 Show GitHub Exploit DB Packet Storm
227286 6.8 警告 qsoft-inc - Qsoft K-Rate Premium の Manage Templates 機能における任意の PHP コードを実行される脆弱性 CWE-noinfo
情報不足 		CVE-2008-7099 2012-12-20 19:10 2009-08-27 Show GitHub Exploit DB Packet Storm
227287 4.3 警告 qsoft-inc - Qsoft K-Rate Premium におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2008-7098 2012-12-20 19:10 2009-08-27 Show GitHub Exploit DB Packet Storm
227288 7.5 危険 qsoft-inc - Qsoft K-Rate Premium における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-7097 2012-12-20 19:10 2009-08-27 Show GitHub Exploit DB Packet Storm
227289 5 警告 unica - Unica Affinium Campaign のリスナーサーバにおけるサービス運用妨害 (DoS) の脆弱性 CWE-399
リソース管理の問題 		CVE-2008-7094 2012-12-20 19:10 2009-08-26 Show GitHub Exploit DB Packet Storm
227290 6.8 警告 unica - Unica Affinium Campaign におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2008-7093 2012-12-20 19:10 2009-08-26 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 14, 2026, 4 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
275061 - ibm websphere_portal IBM WebSphere Portal 7.0.0 through 7.0.0.2 CF29, 8.0.0 before 8.0.0.1 CF17, and 8.5.0 before CF06 allows remote attackers to obtain sensitive Java Content Repository (JCR) information via a crafted r… CWE-200
Information Exposure 		CVE-2015-1887 2024-11-21 11:26 2015-07-14 Show GitHub Exploit DB Packet Storm
275062 - ibm business_process_manager The REST API in IBM Business Process Manager (BPM) 7.5.x through 7.5.1.2, 8.0.x through 8.0.1.3, 8.5.0 through 8.5.0.1, 8.5.5 through 8.5.5.0, and 8.5.6 through 8.5.6.0 allows remote authenticated us… CWE-284
Improper Access Control 		CVE-2015-1961 2024-11-21 11:26 2015-07-14 Show GitHub Exploit DB Packet Storm
275063 6.5 MEDIUM
Network 		oracle
openssl 		supply_chain_products_suite
jd_edwards_enterpriseone_tools
openssl
opus_10g_ethernet_switch_family 		The X509_verify_cert function in crypto/x509/x509_vfy.c in OpenSSL 1.0.1n, 1.0.1o, 1.0.2b, and 1.0.2c does not properly process X.509 Basic Constraints cA values during identification of alternative … CWE-254
 7PK - Security Features 		CVE-2015-1793 2024-11-21 11:26 2015-07-10 Show GitHub Exploit DB Packet Storm
275064 - shibboleth identity_provider
opensaml_java 		The PKIX trust engines in Shibboleth Identity Provider before 2.4.4 and OpenSAML Java (OpenSAML-J) before 2.6.5 trust candidate X.509 credentials when no trusted names are available for the entityID,… CWE-254
 7PK - Security Features 		CVE-2015-1796 2024-11-21 11:26 2015-07-9 Show GitHub Exploit DB Packet Storm
275065 - hp hp-ux Unspecified vulnerability in pppoec in HP HP-UX 11iv2 and 11iv3 allows local users to gain privileges by leveraging setuid permissions. CWE-264
Permissions, Privileges, and Access Controls 		CVE-2015-2126 2024-11-21 11:26 2015-07-6 Show GitHub Exploit DB Packet Storm
275066 - ibm tivoli_federated_identity_manager Multiple cross-site scripting (XSS) vulnerabilities in IBM Tivoli Federated Identity Manager (TFIM) 6.2.0 before FP17, 6.2.1 before FP9, and 6.2.2 before FP15, as used in Security Access Manager for … CWE-79
Cross-site Scripting 		CVE-2015-1966 2024-11-21 11:26 2015-07-4 Show GitHub Exploit DB Packet Storm
275067 - ibm java Unspecified vulnerability in IBM Java 8 before SR1 allows remote attackers to cause a denial of service via unknown vectors related to SSL/TLS and the Secure Socket Extension provider. NVD-CWE-noinfo
CVE-2015-1916 2024-11-21 11:26 2015-07-3 Show GitHub Exploit DB Packet Storm
275068 - ibm java IBM Java 7 R1 before SR3, 7 before SR9, 6 R1 before SR8 FP4, 6 before SR16 FP4, and 5.0 before SR16 FP10 allows remote attackers to bypass "permission checks" and obtain sensitive information via vec… CWE-200
Information Exposure 		CVE-2015-1914 2024-11-21 11:26 2015-07-3 Show GitHub Exploit DB Packet Storm
275069 - cryptopp
opensuse 		crypto\+\+_library
opensuse 		The InvertibleRWFunction::CalculateInverse function in rw.cpp in libcrypt++ 5.6.2 does not properly blind private key operations for the Rabin-Williams digital signature algorithm, which allows remot… CWE-200
Information Exposure 		CVE-2015-2141 2024-11-21 11:26 2015-07-1 Show GitHub Exploit DB Packet Storm
275070 - ibm websphere_mq MQ Explorer in IBM WebSphere MQ before 8.0.0.3 does not recognize the absence of the compatibility-mode option, which allows remote attackers to obtain sensitive information by sniffing the network f… CWE-200
Information Exposure 		CVE-2015-1967 2024-11-21 11:26 2015-07-1 Show GitHub Exploit DB Packet Storm