Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":April 30, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
233711 7.5 危険 nukedgallery - PHP-Nuke 用の Gallery モジュールにおける SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-4804 2012-09-25 17:17 2008-10-31 Show GitHub Exploit DB Packet Storm
233712 5 警告 マイクロソフト - Microsoft Debug Diagnostic Tool におけるサービス運用妨害 (DoS) の脆弱性 CWE-399
リソース管理の問題 		CVE-2008-4800 2012-09-25 17:17 2008-10-30 Show GitHub Exploit DB Packet Storm
233713 4.3 警告 Netpbm - Netpbm の pamperspective におけるサービス運用妨害 (クラッシュ) 状態となる脆弱性 CWE-189
数値処理の問題 		CVE-2008-4799 2012-09-25 17:17 2008-10-30 Show GitHub Exploit DB Packet Storm
233714 5 警告 マイクロソフト - Microsoft Internet Explorer 6 におけるアドレスバーを偽造される脆弱性 CWE-Other
その他 		CVE-2008-4788 2012-09-25 17:17 2008-10-29 Show GitHub Exploit DB Packet Storm
233715 5.8 警告 マイクロソフト - Microsoft Internet Explorer 6 におけるアドレスバーを偽造される脆弱性 CWE-Other
その他 		CVE-2008-4787 2012-09-25 17:17 2008-10-29 Show GitHub Exploit DB Packet Storm
233716 7.5 危険 Joomla! - Joomla! および Mambo 用の Showroom Joomlearn LMS コンポーネントにおける SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-4777 2012-09-25 17:17 2008-10-29 Show GitHub Exploit DB Packet Storm
233717 7.5 危険 o2php - Oxygen Bulletin Board の member.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-4766 2012-09-25 17:17 2008-10-27 Show GitHub Exploit DB Packet Storm
233718 7.5 危険 osCommerce - osCommerce Poll Booth アドオンの pollBooth.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-4765 2012-09-25 17:17 2008-10-27 Show GitHub Exploit DB Packet Storm
233719 5 警告 eXtplorer - Joomla! の eXtplorere モジュールにおけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2008-4764 2012-09-25 17:17 2008-10-27 Show GitHub Exploit DB Packet Storm
233720 4.3 警告 Kayako - Kayako eSupport の includes/htmlArea/plugins/HtmlTidy/html-tidy-logic.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2008-4761 2012-09-25 17:17 2008-10-27 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 1, 2026, 4:54 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
348141 - ids ids The getAlbumToDisplay function in idsShared.pm for Image Display System (IDS) 0.81 allows remote attackers to determine the existence of arbitrary directories via ".." sequences in the album paramete… NVD-CWE-Other
CVE-2002-1837 2008-09-6 05:31 2002-12-31 Show GitHub Exploit DB Packet Storm
348142 - steve_sachs charities.cron Charities.cron 1.0.2 through 1.6.0 allows local users to write to arbitrary files via a symlink attack on temporary files. NVD-CWE-Other
CVE-2002-1838 2008-09-6 05:31 2002-12-31 Show GitHub Exploit DB Packet Storm
348143 - trend_micro interscan_viruswall_for_windows_nt Trend Micro InterScan VirusWall for Windows NT 3.52 does not record the sender's IP address in the headers for a mail message when it is passed from VirusWall to the MTA, which allows remote attacker… NVD-CWE-Other
CVE-2002-1839 2008-09-6 05:31 2002-12-31 Show GitHub Exploit DB Packet Storm
348144 - irssi irssi irssi IRC client 0.8.4, when downloaded after 14-March-2002, could contain a backdoor in the configuration file, which allows remote attackers to access the system. NVD-CWE-Other
CVE-2002-1840 2008-09-6 05:31 2002-12-31 Show GitHub Exploit DB Packet Storm
348145 - perlbot perlbot Perlbot 1.0 beta allows remote attackers to execute arbitrary commands via shell metacharacters in (1) a word that is being spell checked or (2) an e-mail address. NVD-CWE-Other
CVE-2002-1842 2008-09-6 05:31 2002-12-31 Show GitHub Exploit DB Packet Storm
348146 - perlbot perlbot Perlbot 1.9.2 allows remote attackers to execute arbitrary commands via shell metacharacters in (1) the $text variable in SpelCheck.pm or (2) the $filename variable in HTMLPlog.pm. NVD-CWE-Other
CVE-2002-1843 2008-09-6 05:31 2002-12-31 Show GitHub Exploit DB Packet Storm
348147 - yabb yabb Cross-site scripting (XSS) vulnerability in index.php in Yet Another Bulletin Board (YaBB) 1.40 and 1.41 allows remote attackers to inject arbitrary web script or HTML via the password (passwrd) para… NVD-CWE-Other
CVE-2002-1845 2008-09-6 05:31 2002-12-31 Show GitHub Exploit DB Packet Storm
348148 - yabb yabb Yet Another Bulletin Board (YaBB) 1.40 and 1.41 does not require a user to submit the correct password before changing it to a new password, which allows remote attackers to modify passwords by steal… NVD-CWE-Other
CVE-2002-1846 2008-09-6 05:31 2002-12-31 Show GitHub Exploit DB Packet Storm
348149 - tightvnc tightvnc TightVNC before 1.2.4 running on Windows stores unencrypted passwords in the password text control of the WinVNC Properties dialog, which could allow local users to access passwords. NVD-CWE-Other
CVE-2002-1848 2008-09-6 05:31 2002-12-31 Show GitHub Exploit DB Packet Storm
348150 - parachat parachat_server ParaChat Server 4.0 does not log users off if the browser's back button is used, which allows remote attackers to cause a denial of service by repeatedly logging into a chat room, hitting the back bu… NVD-CWE-Other
CVE-2002-1849 2008-09-6 05:31 2002-12-31 Show GitHub Exploit DB Packet Storm