Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Feb. 9, 2026, 12:59 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
231431 7.5 危険 phpaddedit - PhpAddEdit の login.php における管理アクセス権を取得される脆弱性 CWE-287
不適切な認証 		CVE-2008-6581 2012-09-25 17:27 2009-04-2 Show GitHub Exploit DB Packet Storm
231432 4.3 警告 LinPHA - LinPHA におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2008-6571 2012-09-25 17:27 2008-07-20 Show GitHub Exploit DB Packet Storm
231433 4.3 警告 Invision Power Services, Inc - Invision Power Board におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2008-6565 2012-09-25 17:27 2009-03-31 Show GitHub Exploit DB Packet Storm
231434 4.3 警告 jax scripts - Jack (tR) Jax LinkLists の jax_linklists.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2008-6562 2012-09-25 17:27 2009-03-31 Show GitHub Exploit DB Packet Storm
231435 7.5 危険 impliedbydesign - Implied by Design Micro-CMS における管理者パスワードを変更される脆弱性 CWE-287
不適切な認証 		CVE-2008-6553 2012-09-25 17:27 2009-03-30 Show GitHub Exploit DB Packet Storm
231436 6.5 警告 holger schurig - DeStar の user/settings/ における destar_cfg.py へ任意の Python コードを挿入される脆弱性 CWE-94
コード・インジェクション 		CVE-2008-6539 2012-09-25 17:27 2009-03-29 Show GitHub Exploit DB Packet Storm
231437 5 警告 holger schurig - DeStar における任意のユーザを追加される脆弱性 CWE-20
不適切な入力確認 		CVE-2008-6538 2012-09-25 17:27 2009-03-29 Show GitHub Exploit DB Packet Storm
231438 5 警告 LightNEasy - LightNEasy の LightNEasy/lightneasy.php における管理者のパスワードハッシュを取得される脆弱性 CWE-200
情報漏えい 		CVE-2008-6537 2012-09-25 17:27 2009-03-29 Show GitHub Exploit DB Packet Storm
231439 7.5 危険 paypalestores - Paypal eStores の admin/settings.php におけるアクセス制限を回避される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2008-6535 2012-09-25 17:27 2009-03-26 Show GitHub Exploit DB Packet Storm
231440 7.5 危険 NicePHPScripts.com - Nice PHP FAQ Script の Admin Panel における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-6525 2012-09-25 17:27 2009-03-25 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:April 19, 2026, 4:09 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
299051 - sienzo digital_music_mentor Buffer overflow in the UnlockSupport function in the LockModules subsystem in a certain ActiveX control in ltmm15.dll in Sienzo Digital Music Mentor (DMM) 2.6.0.4 allows remote attackers to execute a… NVD-CWE-Other
CVE-2007-2763 2017-07-29 10:31 2007-05-19 Show GitHub Exploit DB Packet Storm
299052 - ac_zoom blockhosts blockhosts.py in BlockHosts before 2.0.3 does not properly parse daemon log files, which allows remote attackers to add arbitrary deny entries to the /etc/hosts.allow file and cause a denial of servi… NVD-CWE-Other
CVE-2007-2765 2017-07-29 10:31 2007-05-19 Show GitHub Exploit DB Packet Storm
299053 - backup_manager backup_manager lib/backup-methods.sh in Backup Manager before 0.7.6 provides the MySQL password as a plaintext command line argument, which allows local users to obtain this password by listing the process and its … CWE-255
Credentials Management 		CVE-2007-2766 2017-07-29 10:31 2007-05-19 Show GitHub Exploit DB Packet Storm
299054 - opendap bes
hyrax 		Unspecified vulnerability in BES before 3.5.0 in OPeNDAP 4 (Hydrax) before 1.2.1 allows remote attackers to list filesystem contents and obtain sensitive information via unknown vectors. NVD-CWE-Other
CVE-2007-2767 2017-07-29 10:31 2007-05-22 Show GitHub Exploit DB Packet Storm
299055 - opendap bes
hyrax 		BES before 3.5.0 in OPeNDAP 4 (Hydrax) before 1.2.1 does not properly handle compressed files, which allows remote attackers to upload arbitrary files or execute arbitrary commands via a crafted comp… NVD-CWE-Other
CVE-2007-2769 2017-07-29 10:31 2007-05-22 Show GitHub Exploit DB Packet Storm
299056 - lead_technologies leadtools_jpeg_2000 Stack-based buffer overflow in the LEAD Technologies LeadTools JPEG 2000 LEADJ2K.LEADJ2K.140 ActiveX control (LTJ2K14.ocx) 14.5.0.35 allows remote attackers to execute arbitrary code via a long Bitma… NVD-CWE-Other
CVE-2007-2771 2017-07-29 10:31 2007-05-22 Show GitHub Exploit DB Packet Storm
299057 - psychostats psychostats PsychoStats 3.0.6b and earlier allows remote attackers to obtain sensitive information via a request for server.php with a missing or invalid newtheme parameter, which reveals a path in an error mess… CWE-200
Information Exposure 		CVE-2007-2780 2017-07-29 10:31 2007-05-22 Show GitHub Exploit DB Packet Storm
299058 - wikyblog wikyblog Cross-site scripting (XSS) vulnerability in include/sessionRegister.php in WikyBlog before 1.4.13 allows remote attackers to inject arbitrary web script or HTML, probably via vectors related to a cer… NVD-CWE-Other
CVE-2007-2781 2017-07-29 10:31 2007-05-22 Show GitHub Exploit DB Packet Storm
299059 - globus globus_toolkit Unspecified vulnerability in globus-job-manager in Globus Toolkit 4.1.1 and earlier (globus_nexus-6.6 and earlier) allows remote attackers to cause a denial of service (resource exhaustion and system… NVD-CWE-Other
CVE-2007-2784 2017-07-29 10:31 2007-05-22 Show GitHub Exploit DB Packet Storm
299060 - ircd-ratbox ircd-ratbox Ratbox IRC Daemon (aka ircd-ratbox) 2.2.5 and earlier allows remote attackers to cause a denial of service (resource exhaustion) by making many requests from a single client. NVD-CWE-Other
CVE-2007-2786 2017-07-29 10:31 2007-05-22 Show GitHub Exploit DB Packet Storm