Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Feb. 9, 2026, 12:59 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
232821 7.5 危険 pedro santana codice - Pedro Santana Codice CMS の login.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2008-0651 2012-09-25 16:59 2008-02-7 Show GitHub Exploit DB Packet Storm
232822 6.8 警告 opensiteadmin - OpenSiteAdmin における PHP リモートファイルインクルージョンの脆弱性 CWE-94
コード・インジェクション
CVE-2008-0648 2012-09-25 16:59 2008-02-7 Show GitHub Exploit DB Packet Storm
232823 10 危険 ourgame.com - Ourgame GLWorld の HanGamePluginCn18.dll におけるスタックベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー
CVE-2008-0647 2012-09-25 16:59 2008-02-7 Show GitHub Exploit DB Packet Storm
232824 10 危険 Novell - Novell Client の EnumPrinters 関数におけるスタックベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー
CVE-2008-0639 2012-09-25 16:59 2008-02-13 Show GitHub Exploit DB Packet Storm
232825 5 警告 level platforms - Level Platforms, Inc. (LPI) Managed Workplace Service Center における重要な情報を取得される脆弱性 CWE-200
情報漏えい
CVE-2008-0636 2012-09-25 16:59 2008-02-12 Show GitHub Exploit DB Packet Storm
232826 7.5 危険 Openads - Openads の delivery engine における任意の PHP コードを実行される脆弱性 CWE-94
コード・インジェクション
CVE-2008-0635 2012-09-25 16:59 2008-02-6 Show GitHub Exploit DB Packet Storm
232827 9.3 危険 lightblog - LightBlog の cp_upload_image.php における任意のコードを実行される脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2008-0632 2012-09-25 16:59 2008-02-6 Show GitHub Exploit DB Packet Storm
232828 6.8 警告 MPlayer project - MPlayer および SVN の url.c におけるバッファオーバーフローの脆弱性 CWE-119
バッファエラー
CVE-2008-0630 2012-09-25 16:59 2008-02-6 Show GitHub Exploit DB Packet Storm
232829 4.3 警告 MPlayer project - MPlayer および SVN の stream_cddb.c におけるバッファオーバーフローの脆弱性 CWE-119
バッファエラー
CVE-2008-0629 2012-09-25 16:59 2008-02-6 Show GitHub Exploit DB Packet Storm
232830 9.3 危険 Nero - Nero Media Player の NeroMediaPlayer.exe におけるバッファオーバーフローの脆弱性 CWE-119
バッファエラー
CVE-2008-0619 2012-09-25 16:59 2008-02-6 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:April 26, 2026, 4:08 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
299221 - slashcode.com slash SQL injection vulnerability in Slashdot Like Automated Storytelling Homepage (Slash) (aka Slashcode) R_2_5_0_94 and earlier allows remote attackers to execute SQL commands and read table information … CWE-89
SQL Injection
CVE-2008-2231 2017-08-8 10:30 2008-06-6 Show GitHub Exploit DB Packet Storm
299222 - afuse afuse The expand_template function in afuse.c in afuse 0.2 allows local users to gain privileges via shell metacharacters in a pathname. CWE-264
Permissions, Privileges, and Access Controls
CVE-2008-2232 2017-08-8 10:30 2008-07-17 Show GitHub Exploit DB Packet Storm
299223 - opensc-project opensc OpenSC before 0.11.5 uses weak permissions (ADMIN file control information of 00) for the 5015 directory on smart cards and USB crypto tokens running Siemens CardOS M4, which allows physically proxim… CWE-310
Cryptographic Issues
CVE-2008-2235 2017-08-8 10:30 2008-08-1 Show GitHub Exploit DB Packet Storm
299224 - blosxom blosxom Cross-site scripting (XSS) vulnerability in blosxom.cgi in Blosxom before 2.1.2 allows remote attackers to inject arbitrary web script or HTML via the flav parameter (flavour variable). NOTE: some o… CWE-79
Cross-site Scripting
CVE-2008-2236 2017-08-8 10:30 2008-10-4 Show GitHub Exploit DB Packet Storm
299225 - ibm lotus_domino Stack-based buffer overflow in the Web Server service in IBM Lotus Domino before 7.0.3 FP1, and 8.x before 8.0.1, allows remote attackers to cause a denial of service (daemon crash) or possibly execu… CWE-119
Incorrect Access of Indexable Resource ('Range Error') 
CVE-2008-2240 2017-08-8 10:30 2008-05-22 Show GitHub Exploit DB Packet Storm
299226 - oued cyrixmed Cross-site scripting (XSS) vulnerability in index.php in CyrixMED 1.4 allows remote attackers to inject arbitrary web script or HTML via the msg_erreur parameter. NOTE: the provenance of this inform… CWE-79
Cross-site Scripting
CVE-2008-2264 2017-08-8 10:30 2008-05-16 Show GitHub Exploit DB Packet Storm
299227 - nzbget
uudeview
nzbget
uudeview
uulib/uunconc.c in UUDeview 0.5.20, as used in nzbget before 0.3.0 and possibly other products, allows local users to overwrite arbitrary files via a symlink attack on a temporary filename generated … CWE-59
Link Following
CVE-2008-2266 2017-08-8 10:30 2008-05-16 Show GitHub Exploit DB Packet Storm
299228 - typo3 sr_feuser_register_extension Cross-site scripting (XSS) vulnerability in the sr_feuser_register 1.4.0, 1.6.0, 2.2.1 to 2.2.7, 2.3.0 to 2.3.6, 2.4.0, and 2.5.0 to 2.5.9 extension for TYPO3 allows remote attackers to inject arbitr… CWE-79
Cross-site Scripting
CVE-2008-2274 2017-08-8 10:30 2008-05-16 Show GitHub Exploit DB Packet Storm
299229 - typo3 sr_feuser_register_extension Unspecified vulnerability in sr_feuser_register 1.4.0, 1.6.0, 2.2.1 to 2.2.7, 2.3.0 to 2.3.6, 2.4.0, and 2.5.0 to 2.5.9 extension for TYPO3 allows remote attackers to execute arbitrary code and delet… NVD-CWE-noinfo
CWE-94
Code Injection
CVE-2008-2275 2017-08-8 10:30 2008-05-16 Show GitHub Exploit DB Packet Storm
299230 - scriptphp picengine Cross-site scripting (XSS) vulnerability in admin/index.php in Script PHP PicEngine 1.0 allows remote attackers to inject arbitrary web script or HTML via the l parameter. NOTE: the provenance of th… CWE-79
Cross-site Scripting
CVE-2008-2280 2017-08-8 10:30 2008-05-16 Show GitHub Exploit DB Packet Storm