Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Feb. 9, 2026, 12:59 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
232951 6.8 警告 ikiwiki - ikiwiki の Plugin/passwordauth.pm における認証を回避される脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2008-0169 2012-09-25 16:59 2008-06-3 Show GitHub Exploit DB Packet Storm
232952 4.3 警告 ikiwiki - Ikiwiki におけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反
CVE-2008-0165 2012-09-25 16:59 2008-04-21 Show GitHub Exploit DB Packet Storm
232953 4.4 警告 Linux - Linux kernel における vserver のリソースにアクセスされる脆弱性 CWE-59
リンク解釈の問題
CVE-2008-0163 2012-09-25 16:59 2008-02-12 Show GitHub Exploit DB Packet Storm
232954 5 警告 million dollar script - Million Dollar Script の index.php における絶対パストラバーサルの脆弱性 CWE-22
パス・トラバーサル
CVE-2008-0156 2012-09-25 16:59 2008-01-8 Show GitHub Exploit DB Packet Storm
232955 4.3 警告 hughes technologies - W3-mSQL のエラーページにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2008-0146 2012-09-25 16:59 2008-01-8 Show GitHub Exploit DB Packet Storm
232956 7.5 危険 The PHP Group - PHP の glob における脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2008-0145 2012-09-25 16:59 2008-01-8 Show GitHub Exploit DB Packet Storm
232957 6.8 警告 loudblog.de - Loudblog の loudblog/inc/parse_old.php における任意の PHP コードを実行される脆弱性 CWE-89
SQLインジェクション
CVE-2008-0139 2012-09-25 16:59 2008-01-8 Show GitHub Exploit DB Packet Storm
232958 4.3 警告 instantsoftwares - Instant Softwares Dating Site の login_form.asp におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2008-0131 2012-09-25 16:59 2008-01-8 Show GitHub Exploit DB Packet Storm
232959 7.5 危険 instantsoftwares - Instant Softwares Dating Site の login_form.asp における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2008-0130 2012-09-25 16:59 2008-01-8 Show GitHub Exploit DB Packet Storm
232960 8.8 危険 マカフィー - McAfee E-Business Server の管理インターフェースにおけるサービス運用妨害 (DoS) の脆弱性 CWE-119
バッファエラー
CVE-2008-0127 2012-09-25 16:59 2008-01-9 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:April 25, 2026, 4:08 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
299441 - xigla absolute_news_manager.net Multiple SQL injection vulnerabilities in xlaabsolutenm.aspx in Absolute News Manager.NET 5.1 allow remote attackers to execute arbitrary SQL commands via the (1) z, (2) pz, (3) ord, and (4) sort par… CWE-89
SQL Injection
CVE-2007-6269 2017-08-8 10:29 2007-12-7 Show GitHub Exploit DB Packet Storm
299442 - xigla absolute_news_manager.net Multiple cross-site scripting (XSS) vulnerabilities in Absolute News Manager.NET 5.1 allow remote attackers to inject arbitrary web script or HTML via the (1) rmore parameter to xlaabsolutenm.aspx an… CWE-79
Cross-site Scripting
CVE-2007-6270 2017-08-8 10:29 2007-12-7 Show GitHub Exploit DB Packet Storm
299443 - bcoos bcoos Multiple cross-site scripting (XSS) vulnerabilities in modules/ecal/display.php in the Event Calendar in bcoos 1.0.10 and earlier allow remote attackers to inject arbitrary web script or HTML via the… CWE-79
Cross-site Scripting
CVE-2007-6274 2017-08-8 10:29 2007-12-7 Show GitHub Exploit DB Packet Storm
299444 - stbernard open_file_manager Heap-based buffer overflow in Open File Manager service (ofmnt.exe) in St. Bernard Open File Manager 9.5 allows remote attackers to execute arbitrary code via a long request. CWE-119
Incorrect Access of Indexable Resource ('Range Error') 
CVE-2007-6281 2017-08-8 10:29 2007-12-20 Show GitHub Exploit DB Packet Storm
299445 - lxlabs hypervm Cross-site scripting (XSS) vulnerability in the login page in Lxlabs HyperVM 2.0 allows remote attackers to inject arbitrary web script or HTML via the frm_emessage parameter, a different vector than… CWE-79
Cross-site Scripting
CVE-2007-6287 2017-08-8 10:29 2007-12-11 Show GitHub Exploit DB Packet Storm
299446 - tecnick.com tcexam Multiple SQL injection vulnerabilities in TCExam before 5.1.000 allow remote attackers to execute arbitrary SQL commands via unspecified vectors. CWE-89
SQL Injection
CVE-2007-6288 2017-08-8 10:29 2007-12-11 Show GitHub Exploit DB Packet Storm
299447 - xigla absolute_banner_manager.net SQL injection vulnerability in abm.aspx in Xigla Absolute Banner Manager .NET 4.0 allows remote attackers to execute arbitrary SQL commands via the z parameter. CWE-89
SQL Injection
CVE-2007-6291 2017-08-8 10:29 2007-12-11 Show GitHub Exploit DB Packet Storm
299448 - ibm hardware_management_console Multiple unspecified vulnerabilities in IBM Hardware Management Console (HMC) 3 R3.7 allow attackers to gain privileges via "some HMC commands." NVD-CWE-noinfo
CWE-264
Permissions, Privileges, and Access Controls
CVE-2007-6294 2017-08-8 10:29 2007-12-11 Show GitHub Exploit DB Packet Storm
299449 - ibm lotus_sametime Cross-site scripting (XSS) vulnerability in the WebRunMenuFrame page in the online meeting center template in IBM Lotus Sametime before 8.0 allows remote attackers to inject arbitrary web script or H… CWE-79
Cross-site Scripting
CVE-2007-6295 2017-08-8 10:29 2007-12-11 Show GitHub Exploit DB Packet Storm
299450 - drupal shoutbox Cross-site scripting (XSS) vulnerability in the Shoutbox module for Drupal 5.x before Shoutbox 5.x-1.1 allows remote authenticated users to inject arbitrary web script or HTML via Shoutbox block mess… CWE-79
Cross-site Scripting
CVE-2007-6298 2017-08-8 10:29 2007-12-11 Show GitHub Exploit DB Packet Storm