Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Feb. 9, 2026, 12:59 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
229271 7.5 危険 k5n.us - Craig Knudsen WebCalendar における settings.php を変更される脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2012-5385 2012-10-15 15:46 2012-02-29 Show GitHub Exploit DB Packet Storm
229272 4.3 警告 k5n.us - Craig Knudsen WebCalendar におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2012-5384 2012-10-15 15:44 2012-10-11 Show GitHub Exploit DB Packet Storm
229273 4.3 警告 html2ps Project - html2ps におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル
CVE-2009-5067 2012-10-15 15:41 2012-10-10 Show GitHub Exploit DB Packet Storm
229274 6 警告 ActiveState Software - ActiveTcl のインストレーション機能における権限を取得される脆弱性 CWE-Other
その他
CVE-2012-5378 2012-10-15 15:06 2012-10-11 Show GitHub Exploit DB Packet Storm
229275 6 警告 ActiveState Software - ActivePerl のインストレーション機能における権限を取得される脆弱性 CWE-Other
その他
CVE-2012-5377 2012-10-15 15:03 2012-10-11 Show GitHub Exploit DB Packet Storm
229276 5.8 警告 Canonical - Ubuntu Software Properties における任意のパッケージリポジトリ GPG キーをインストールされる脆弱性 CWE-20
不適切な入力確認
CVE-2012-5356 2012-10-15 15:00 2012-10-1 Show GitHub Exploit DB Packet Storm
229277 4.3 警告 w1.fi - hostapd の EAP authentication server におけるヒープベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー
CVE-2012-4445 2012-10-15 14:57 2012-10-7 Show GitHub Exploit DB Packet Storm
229278 4 警告 Bacula.org - Bacula の dird/dird_conf.c におけるリソースのダンプ情報を取得される脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2012-4430 2012-10-15 14:56 2012-08-18 Show GitHub Exploit DB Packet Storm
229279 3.6 注意 Fedora Project - crypto-utils の genkey.pl における任意のファイルを上書きされる脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2012-3504 2012-10-15 14:54 2012-10-10 Show GitHub Exploit DB Packet Storm
229280 4.3 警告 シーメンス - Siemens SIMATIC S7-1200 PLC 上の Web サーバにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2012-3040 2012-10-15 14:34 2012-10-8 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:April 23, 2026, 4 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
285051 - modxcms modxcms Cross-site request forgery (CSRF) vulnerability in page 34 in MODx CMS 0.9.6.1 and 0.9.6.1p1 allows remote attackers to hijack the authentication of other users for requests that modify passwords via… CWE-352
 Origin Validation Error
CVE-2008-7243 2018-10-12 05:58 2009-09-18 Show GitHub Exploit DB Packet Storm
285052 - mozilla firefox Mozilla Firefox 3.0.1 and earlier allows remote attackers to cause a denial of service (browser hang) by calling the window.print function in a loop, aka a "printing DoS attack," possibly a related i… CWE-399
 Resource Management Errors
CVE-2008-7244 2018-10-12 05:58 2009-09-19 Show GitHub Exploit DB Packet Storm
285053 - opera opera_browser Opera 9.52 and earlier allows remote attackers to cause a denial of service (unusable browser) by calling the window.print function in a loop, aka a "printing DoS attack," possibly a related issue to… CWE-399
 Resource Management Errors
CVE-2008-7245 2018-10-12 05:58 2009-09-19 Show GitHub Exploit DB Packet Storm
285054 - google chrome Google Chrome 0.2.149.29 and earlier allows remote attackers to cause a denial of service (unusable browser) by calling the window.print function in a loop, aka a "printing DoS attack," possibly a re… CWE-399
 Resource Management Errors
CVE-2008-7246 2018-10-12 05:58 2009-09-19 Show GitHub Exploit DB Packet Storm
285055 - pedro_lineu_orso sarg Buffer overflow in Squid Analysis Report Generator (Sarg) 2.2.3.1, and probably later, allows user-assisted remote attackers to execute arbitrary code via a long HTTP request method in a crafted acce… CWE-119
Incorrect Access of Indexable Resource ('Range Error') 
CVE-2008-7249 2018-10-12 05:58 2009-12-31 Show GitHub Exploit DB Packet Storm
285056 - hans_oesterholt cmme Content Management Made Easy (CMME) 1.19 allows remote attackers to obtain system information via a direct request to info.php, which invokes the phpinfo function. CWE-200
Information Exposure
CVE-2008-6159 2018-10-12 05:57 2009-02-19 Show GitHub Exploit DB Packet Storm
285057 - dreamcost hostadmin Cross-site scripting (XSS) vulnerability in index.php in DreamCost HostAdmin 3.1.1 allows remote attackers to inject arbitrary web script or HTML via the page parameter. CWE-79
Cross-site Scripting
CVE-2008-6164 2018-10-12 05:57 2009-02-20 Show GitHub Exploit DB Packet Storm
285058 - newlife_blogger newlife_blogger SQL injection vulnerability in system/nlb_user.class.php in NewLife Blogger 3.0 and earlier, and possibly 3.3.1, allows remote attackers to execute arbitrary SQL commands via the nlb3 cookie. CWE-89
SQL Injection
CVE-2008-6180 2018-10-12 05:57 2009-02-20 Show GitHub Exploit DB Packet Storm
285059 - microsoft windows Memory leak in the DNS server in Microsoft Windows allows remote attackers to cause a denial of service (memory consumption) via DNS packets. NOTE: this issue reportedly exists because of an incorre… CWE-399
 Resource Management Errors
CVE-2008-6194 2018-10-12 05:57 2009-02-20 Show GitHub Exploit DB Packet Storm
285060 - landesk landesk_management_suite Directory traversal vulnerability in the PXE TFTP Service (PXEMTFTP.exe) in LANDesk Management Suite (LDMS) 8.80.1.1 and earlier allows remote attackers to read arbitrary files via a subdirectory nam… CWE-22
Path Traversal
CVE-2008-6195 2018-10-12 05:57 2009-02-20 Show GitHub Exploit DB Packet Storm