Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Feb. 9, 2026, 12:59 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
229661 4.3 警告 IBM - IBM WSRR におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2010-2985 2012-09-25 17:38 2010-08-5 Show GitHub Exploit DB Packet Storm
229662 9.3 危険 Invensys - Wonderware Archestra IDE などにおけるスタックベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー
CVE-2010-2974 2012-09-25 17:38 2010-08-5 Show GitHub Exploit DB Packet Storm
229663 4.3 警告 MoinMoin - MoinMoin におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2010-2970 2012-09-25 17:38 2010-06-7 Show GitHub Exploit DB Packet Storm
229664 4.3 警告 MoinMoin - MoinMoin におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2010-2969 2012-09-25 17:38 2010-06-7 Show GitHub Exploit DB Packet Storm
229665 4.9 警告 Linux - Linux kernel の net/irda/af_irda.c におけるサービス運用妨害 (DoS) の脆弱性 CWE-399
リソース管理の問題
CVE-2010-2954 2012-09-25 17:38 2010-08-30 Show GitHub Exploit DB Packet Storm
229666 10 危険 jan engelhardt - libHX の string.c の HX_split 関数におけるヒープベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー
CVE-2010-2947 2012-09-25 17:38 2010-08-16 Show GitHub Exploit DB Packet Storm
229667 7.5 危険 jens vagelpohl - zope-ldapuserfolder の authenticate 関数における権限を取得される脆弱性 CWE-287
不適切な認証
CVE-2010-2944 2012-09-25 17:38 2010-08-20 Show GitHub Exploit DB Packet Storm
229668 7.2 危険 pharscape - hsolink の hsolinkcontrol におけるスタックベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー
CVE-2010-2930 2012-09-25 17:38 2010-07-28 Show GitHub Exploit DB Packet Storm
229669 7.2 危険 pharscape - hsolink の hsolinkcontrol における権限を取得される脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2010-2929 2012-09-25 17:38 2010-07-28 Show GitHub Exploit DB Packet Storm
229670 5 警告 IBM - ITDS の slapi_printmessage 関数におけるサービス運用妨害 (DoS) の脆弱性 CWE-287
不適切な認証
CVE-2010-2927 2012-09-25 17:38 2010-08-2 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:April 19, 2026, 4:09 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
284921 - e107coders macguru_blog_engine_plugin SQL injection vulnerability in macgurublog_menu/macgurublog.php in the MacGuru BLOG Engine plugin 2.2 for e107 allows remote attackers to execute arbitrary SQL commands via the uid parameter, a diffe… CWE-89
SQL Injection
CVE-2008-6438 2018-10-12 05:57 2009-03-7 Show GitHub Exploit DB Packet Storm
284922 - abledating abledating Cross-site scripting (XSS) vulnerability in search_results.php in ABK-Soft AbleDating 2.4 allows remote attackers to inject arbitrary web script or HTML via the keyword parameter. CWE-79
Cross-site Scripting
CVE-2008-6439 2018-10-12 05:57 2009-03-7 Show GitHub Exploit DB Packet Storm
284923 - epicgames unreal_engine Format string vulnerability in the Epic Games Unreal engine client, as used in multiple games, allows remote servers to execute arbitrary code via (1) the CLASS parameter in a DLMGR command, (2) a ma… CWE-134
Use of Externally-Controlled Format String
CVE-2008-6441 2018-10-12 05:57 2009-03-9 Show GitHub Exploit DB Packet Storm
284924 - baidu baidu_hi Stack-based buffer overflow in CSTransfer.dll in Baidu Hi IM might allow remote attackers to execute arbitrary code via a crafted packet, probably related to an improper length value. CWE-119
Incorrect Access of Indexable Resource ('Range Error') 
CVE-2008-6444 2018-10-12 05:57 2009-03-9 Show GitHub Exploit DB Packet Storm
284925 - blogator-script blogator-script _blogadata/include/init_pass2.php in Blogator-script 0.95 allows remote attackers to change the password for arbitrary users via a modified "a" parameter with a "%" wildcard symbol in the b parameter. CWE-255
Credentials Management
CVE-2008-6473 2018-10-12 05:57 2009-03-17 Show GitHub Exploit DB Packet Storm
284926 - parallels virtuozzo_containers Cross-site request forgery (CSRF) vulnerability in the file manager in the VZPP web interface for Parallels Virtuozzo 365.6.swsoft (build 4.0.0-365.6.swsoft) and 25.4.swsoft (build 3.0.0-25.4.swsoft)… CWE-352
 Origin Validation Error
CVE-2008-6478 2018-10-12 05:57 2009-03-17 Show GitHub Exploit DB Packet Storm
284927 - parallels parallels_virtuozzo Cross-site request forgery (CSRF) vulnerability in the "change password" feature in the VZPP web interface for Parallels Virtuozzo 25.4.swsoft (build 3.0.0-25.4.swsoft) allows remote attackers to mod… CWE-352
 Origin Validation Error
CVE-2008-6479 2018-10-12 05:57 2009-03-17 Show GitHub Exploit DB Packet Storm
284928 - softnews_media_group datalife_engine Cross-site request forgery (CSRF) vulnerability in engine/modules/imagepreview.php in Datalife Engine 6.7 allows remote attackers to hijack the authentication of arbitrary users for requests that use… CWE-352
 Origin Validation Error
CVE-2008-6480 2018-10-12 05:57 2009-03-17 Show GitHub Exploit DB Packet Storm
284929 - shatm sharedlog PHP remote file inclusion vulnerability in slideshow_uploadvideo.content.php in SharedLog, when register_globals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the GLO… CWE-94
Code Injection
CVE-2008-6486 2018-10-12 05:57 2009-03-19 Show GitHub Exploit DB Packet Storm
284930 - tp neostrada_livebox_adsl_router The Neostrada Livebox ADSL Router allows remote attackers to cause a denial of service (network outage) via multiple HTTP requests for the /- URI. CWE-20
 Improper Input Validation 
CVE-2008-6497 2018-10-12 05:57 2009-03-20 Show GitHub Exploit DB Packet Storm