Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Feb. 9, 2026, 12:59 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
232751 4.3 警告 ikiwiki - Ikiwiki の htmlscrubber におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2008-0809 2012-09-25 16:59 2008-02-18 Show GitHub Exploit DB Packet Storm
232752 4.3 警告 ikiwiki - Ikiwiki の meta プラグインにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2008-0808 2012-09-25 16:59 2008-02-18 Show GitHub Exploit DB Packet Storm
232753 4.9 警告 Horde - Horde Groupware などの turba2 Contact Manager におけるアドレスデータを変更される脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2008-0807 2012-09-25 16:59 2008-02-15 Show GitHub Exploit DB Packet Storm
232754 3.6 注意 paul pelzl - wyred における任意のファイルを上書きされる脆弱性 CWE-59
リンク解釈の問題
CVE-2008-0806 2012-09-25 16:59 2008-02-18 Show GitHub Exploit DB Packet Storm
232755 7.5 危険 lookstrike - LookStrike Lan Manager における PHP リモートファイルインクルージョンの脆弱性 CWE-94
コード・インジェクション
CVE-2008-0803 2012-09-25 16:59 2008-02-15 Show GitHub Exploit DB Packet Storm
232756 7.5 危険 mediaslide
Joomla!
- Joomla! 用の MediaSlide コンポーネントにおける SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2008-0802 2012-09-25 16:59 2008-02-15 Show GitHub Exploit DB Packet Storm
232757 7.5 危険 paxxgallery - Mambo および Joomla! 用の PAXXGallery コンポーネントにおける SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2008-0801 2012-09-25 16:59 2008-02-15 Show GitHub Exploit DB Packet Storm
232758 7.5 危険 Joomla! - Joolma! 用の McQuiz コンポーネントにおける SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2008-0800 2012-09-25 16:59 2008-02-15 Show GitHub Exploit DB Packet Storm
232759 7.5 危険 Mambo Foundation
Joomla!
- Mambo および Joomla! 用の Quiz における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2008-0799 2012-09-25 16:59 2008-02-15 Show GitHub Exploit DB Packet Storm
232760 5 警告 itheora - iTheora の lib/download.php におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル
CVE-2008-0797 2012-09-25 16:59 2008-02-15 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:April 25, 2026, 4:08 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
299231 - pragma_systems pragma_telnetserver telnetd.exe in Pragma TelnetServer 7.0.4.589 allows remote attackers to cause a denial of service (process crash and resource exhaustion) via a crafted TELOPT PRAGMA LOGON telnet option, which trigge… CWE-399
 Resource Management Errors
CVE-2008-0153 2017-08-8 10:29 2008-01-9 Show GitHub Exploit DB Packet Storm
299232 - linux linux_kernel Linux kernel 2.6, when using vservers, allows local users to access resources of other vservers via a symlink attack in /proc. CWE-59
Link Following
CVE-2008-0163 2017-08-8 10:29 2008-02-13 Show GitHub Exploit DB Packet Storm
299233 - ikiwiki ikiwiki Cross-site request forgery (CSRF) vulnerability in Ikiwiki before 2.42 allows remote attackers to modify user preferences, including passwords, via the (1) preferences and (2) edit forms. CWE-352
 Origin Validation Error
CVE-2008-0165 2017-08-8 10:29 2008-04-21 Show GitHub Exploit DB Packet Storm
299234 - gforge gforge The write_array_file function in utils/include.pl in GForge 4.5.14 updates configuration files by truncating them to zero length and then writing new data, which might allow attackers to bypass inten… CWE-59
Link Following
CVE-2008-0167 2017-08-8 10:29 2008-05-18 Show GitHub Exploit DB Packet Storm
299235 - ikiwiki ikiwiki Plugin/passwordauth.pm (aka the passwordauth plugin) in ikiwiki 1.34 through 2.47 allows remote attackers to bypass authentication, and login to any account for which an OpenID identity is configured… CWE-264
Permissions, Privileges, and Access Controls
CVE-2008-0169 2017-08-8 10:29 2008-06-4 Show GitHub Exploit DB Packet Storm
299236 - gforge gforge SQL injection vulnerability in Gforge 4.6.99 and earlier allows remote attackers to execute arbitrary SQL commands via unspecified parameters, related to RSS exports. CWE-89
SQL Injection
CVE-2008-0173 2017-08-8 10:29 2008-01-16 Show GitHub Exploit DB Packet Storm
299237 - compaq 2210_series_bios
2510_series_bios
2710_series_bios
6510_series_bios
6515_series_bios
6520_series_bios
6710_series_bios
6715_series_bios
6720_series_bios
6820_series_bios
Unspecified vulnerability in the BIOS F.04 through F.11 for the HP Compaq Business Notebook PC allows local users to cause a denial of service via unspecified vectors. NVD-CWE-noinfo
CVE-2008-0211 2017-08-8 10:29 2008-04-1 Show GitHub Exploit DB Packet Storm
299238 - freebsd freebsd The ptsname function in FreeBSD 6.0 through 7.0-PRERELEASE does not properly verify that a certain portion of a device name is associated with a pty of a user who is calling the pt_chown function, wh… CWE-264
Permissions, Privileges, and Access Controls
CVE-2008-0216 2017-08-8 10:29 2008-01-16 Show GitHub Exploit DB Packet Storm
299239 - freebsd freebsd The script program in FreeBSD 5.0 through 7.0-PRERELEASE invokes openpty, which creates a pseudo-terminal with world-readable and world-writable permissions when it is not run as root, which allows l… CWE-264
Permissions, Privileges, and Access Controls
CVE-2008-0217 2017-08-8 10:29 2008-01-16 Show GitHub Exploit DB Packet Storm
299240 - merak icewarp_mail_server Cross-site scripting (XSS) vulnerability in admin/index.html in Merak IceWarp Mail Server allows remote attackers to inject arbitrary web script or HTML via the message parameter. NOTE: the provenan… CWE-79
Cross-site Scripting
CVE-2008-0218 2017-08-8 10:29 2008-01-11 Show GitHub Exploit DB Packet Storm