Vulnerability Search Top
Show Search Menu
|
You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database). |
JVN Vulnerability Information
Update Date":Feb. 9, 2026, 12:59 p.m.
| No | CVSS | Level Attach Vector |
Vendor Name | Project Name | Title | CWE | CVE | Update Date | Publication Date | Impact Show |
Exploit PoC Search |
|---|---|---|---|---|---|---|---|---|---|---|---|
| 232881 | 7.5 | 危険 | Invision Power Services, Inc | - | Invision Gallery における SQL インジェクションの脆弱性 |
CWE-89
SQLインジェクション |
CVE-2008-0421 | 2012-09-25 16:59 | 2008-01-23 | Show | GitHub Exploit DB Packet Storm |
| 232882 | 5 | 警告 | Rejetto | - | HFS における設定および利用状況を取得される脆弱性 |
CWE-287
不適切な認証 |
CVE-2008-0410 | 2012-09-25 16:59 | 2008-01-28 | Show | GitHub Exploit DB Packet Storm |
| 232883 | 4.3 | 警告 | Rejetto | - | HFS におけるクロスサイトスクリプティングの脆弱性 |
CWE-79
クロスサイト・スクリプティング（XSS） |
CVE-2008-0409 | 2012-09-25 16:59 | 2008-01-28 | Show | GitHub Exploit DB Packet Storm |
| 232884 | 6.4 | 警告 | Rejetto | - | HFS におけるログファイルに任意のテキストを追加される脆弱性 |
CWE-287
不適切な認証 |
CVE-2008-0408 | 2012-09-25 16:59 | 2008-01-28 | Show | GitHub Exploit DB Packet Storm |
| 232885 | 5 | 警告 | Rejetto | - | HFS におけるリモートリクエスト発行元の特定を困難にする脆弱性 |
CWE-287
不適切な認証 |
CVE-2008-0407 | 2012-09-25 16:59 | 2008-01-28 | Show | GitHub Exploit DB Packet Storm |
| 232886 | 5 | 警告 | Rejetto | - | HFS におけるサービス運用妨害 (DoS) の脆弱性 |
CWE-20
不適切な入力確認 |
CVE-2008-0406 | 2012-09-25 16:59 | 2008-01-28 | Show | GitHub Exploit DB Packet Storm |
| 232887 | 10 | 危険 | Rejetto | - | HFS におけるディレクトリトラバーサルの脆弱性 |
CWE-22
パス・トラバーサル |
CVE-2008-0405 | 2012-09-25 16:59 | 2008-01-28 | Show | GitHub Exploit DB Packet Storm |
| 232888 | 4.3 | 警告 | Mantis | - | Mantis におけるクロスサイトスクリプティングの脆弱性 |
CWE-79
クロスサイト・スクリプティング（XSS） |
CVE-2008-0404 | 2012-09-25 16:59 | 2008-01-23 | Show | GitHub Exploit DB Packet Storm |
| 232889 | 6 | 警告 | IBM | - | IBM WebSphere Business Modeler Basic and Advanced におけるリポジトリリソースを削除される脆弱性 |
CWE-264
認可・権限・アクセス制御 |
CVE-2008-0402 | 2012-09-25 16:59 | 2008-01-23 | Show | GitHub Exploit DB Packet Storm |
| 232890 | 10 | 危険 | IBM | - | IBM TPMfOSD の HTTP サーバにおけるバッファオーバーフローの脆弱性 |
CWE-119
バッファエラー |
CVE-2008-0401 | 2012-09-25 16:59 | 2008-01-23 | Show | GitHub Exploit DB Packet Storm |
NVD Vulnerability Information
Update Date:April 25, 2026, 4:08 a.m.
| No | CVSS | Level Attach Vector |
Vendor Name | Project Name | Title | CWE | CVE | Update Date | Publication Date | Show Affected | Exploit PoC Search |
|---|---|---|---|---|---|---|---|---|---|---|---|
| 299291 | - | sqlite_manager | sqlite_manager | PHP remote file inclusion vulnerability in spaw/dialogs/confirm.php in SQLiteManager 1.2.0 allows remote attackers to execute arbitrary PHP code via a URL in the spaw_root parameter. NOTE: the prove… |
CWE-94
Code Injection |
CVE-2008-0516 | 2017-08-8 10:29 | 2008-02-1 | Show | GitHub Exploit DB Packet Storm | |
| 299292 | - | softcart | softcart | Multiple cross-site scripting (XSS) vulnerabilities in SoftCart.exe in SoftCart 5.1.2.2 allow remote attackers to inject arbitrary web script or HTML via the (1) License_Plate, (2) License_State, (3)… |
CWE-79
Cross-site Scripting |
CVE-2008-0523 | 2017-08-8 10:29 | 2008-02-1 | Show | GitHub Exploit DB Packet Storm | |
| 299293 | - | yamaha |
rt107e rt52pro rt56v rt57i rt58i rt60w rt80i rta50i rta52i rta54i rta55i rtv700 rtw65b rtw65i rtx1000 rtx1100 rtx1500 srt100 |
Cross-site request forgery (CSRF) vulnerability in the management interface in multiple Yamaha RT series routers allows remote attackers to change password settings and probably other configuration s… |
CWE-352
Origin Validation Error |
CVE-2008-0524 | 2017-08-8 10:29 | 2008-02-1 | Show | GitHub Exploit DB Packet Storm | |
| 299294 | - | cisco |
skinny_client_control_protocol_\(sccp\)_firmware session_initiation_protocol_\(sip\)_firmware |
Cisco Unified IP Phone 7940, 7940G, 7960, and 7960G running SCCP firmware allows remote attackers to cause a denial of service (reboot) via a long ICMP echo request (ping) packet. |
CWE-20
Improper Input Validation |
CVE-2008-0526 | 2017-08-8 10:29 | 2008-02-15 | Show | GitHub Exploit DB Packet Storm | |
| 299295 | - | cisco |
skinny_client_control_protocol_\(sccp\)_firmware session_initiation_protocol_\(sip\)_firmware |
In order to download the patch, login is required |
CWE-20
Improper Input Validation |
CVE-2008-0526 | 2017-08-8 10:29 | 2008-02-15 | Show | GitHub Exploit DB Packet Storm | |
| 299296 | - | cisco |
skinny_client_control_protocol_\(sccp\)_firmware session_initiation_protocol_\(sip\)_firmware |
The HTTP server in Cisco Unified IP Phone 7935 and 7936 running SCCP firmware allows remote attackers to cause a denial of service (reboot) via a crafted HTTP request. |
CWE-20
Improper Input Validation |
CVE-2008-0527 | 2017-08-8 10:29 | 2008-02-15 | Show | GitHub Exploit DB Packet Storm | |
| 299297 | - | cisco |
skinny_client_control_protocol_\(sccp\)_firmware session_initiation_protocol_\(sip\)_firmware |
Patch download requires login |
CWE-20
Improper Input Validation |
CVE-2008-0527 | 2017-08-8 10:29 | 2008-02-15 | Show | GitHub Exploit DB Packet Storm | |
| 299298 | - | cisco |
skinny_client_control_protocol_\(sccp\)_firmware session_initiation_protocol_\(sip\)_firmware |
Buffer overflow in Cisco Unified IP Phone 7940, 7940G, 7960, and 7960G running SIP firmware might allow remote attackers to execute arbitrary code via a SIP message with crafted MIME data. |
CWE-119
Incorrect Access of Indexable Resource ('Range Error') |
CVE-2008-0528 | 2017-08-8 10:29 | 2008-02-15 | Show | GitHub Exploit DB Packet Storm | |
| 299299 | - | cisco |
skinny_client_control_protocol_\(sccp\)_firmware session_initiation_protocol_\(sip\)_firmware |
Patch requires login |
CWE-119
Incorrect Access of Indexable Resource ('Range Error') |
CVE-2008-0528 | 2017-08-8 10:29 | 2008-02-15 | Show | GitHub Exploit DB Packet Storm | |
| 299300 | - | cisco |
skinny_client_control_protocol_\(sccp\)_firmware session_initiation_protocol_\(sip\)_firmware |
Buffer overflow in the telnet server in Cisco Unified IP Phone 7906G, 7911G, 7941G, 7961G, 7970G, and 7971G running SCCP firmware might allow remote authenticated users to execute arbitrary code via … |
CWE-119
Incorrect Access of Indexable Resource ('Range Error') |
CVE-2008-0529 | 2017-08-8 10:29 | 2008-02-15 | Show | GitHub Exploit DB Packet Storm |