Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 19, 2026, 2 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
236701 4.3 警告 Zoho Corporation - ManageEngine OpUtils の MainLayout.do におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2008-2797 2012-09-25 17:17 2008-06-20 Show GitHub Exploit DB Packet Storm
236702 4.3 警告 idm computer solutions inc - IDM Computer Solutions Inc の UltraEdit の FTP クライアントにおけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2008-2795 2012-09-25 17:17 2008-06-20 Show GitHub Exploit DB Packet Storm
236703 7.5 危険 kalptaru infotech - Kalptaru Infotech Comparison Engine Power Script における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-2791 2012-09-25 17:17 2008-06-20 Show GitHub Exploit DB Packet Storm
236704 7.5 危険 mountaingrafix - MountainGrafix easyTrade の detail.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-2790 2012-09-25 17:17 2008-06-20 Show GitHub Exploit DB Packet Storm
236705 4.3 警告 Free Document Management Software - OpenDocMan の index.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2008-2788 2012-09-25 17:17 2008-06-20 Show GitHub Exploit DB Packet Storm
236706 4.3 警告 Free Document Management Software - OpenDocMan の out.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2008-2787 2012-09-25 17:17 2008-06-20 Show GitHub Exploit DB Packet Storm
236707 10 危険 Mozilla Foundation - Firefox におけるバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2008-2786 2012-09-25 17:17 2008-06-19 Show GitHub Exploit DB Packet Storm
236708 4.3 警告 Horde - Horde Groupware などの製品におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2008-2783 2012-09-25 17:17 2008-06-19 Show GitHub Exploit DB Packet Storm
236709 7.5 危険 otomigenx - OtomiGenX におけるディレクトリトラバーサルの脆弱性 CWE-200
CWE-22
CVE-2008-2782 2012-09-25 17:17 2008-06-19 Show GitHub Exploit DB Packet Storm
236710 4.3 警告 luca corbo - Ortro におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2008-2777 2012-09-25 17:17 2008-06-19 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 19, 2026, 4:16 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
348171 - mybb mybb Multiple unspecified vulnerabilities in MyBulletinBoard (MyBB) before 1.0.2 have unspecified impact and attack vectors, related to (1) admin/moderate.php, (2) admin/themes.php, (3) inc/functions.php,… NVD-CWE-noinfo
CVE-2006-0218 2013-01-3 14:00 2006-01-17 Show GitHub Exploit DB Packet Storm
348172 - invisionpower invision_power_board The make_password function in ipsclass.php in Invision Power Board (IPB) 2.1.4 uses random data generated from partially predictable seeds to create the authentication code that is sent by e-mail to … CWE-287
Improper Authentication 		CVE-2006-0633 2013-01-3 14:00 2006-02-10 Show GitHub Exploit DB Packet Storm
348173 - zen-cart zen_cart Zen Cart before 1.2.7 does not protect the admin/includes directory, which allows remote attackers to cause unknown impact via unspecified vectors, probably direct requests. CWE-264
Permissions, Privileges, and Access Controls 		CVE-2006-0697 2013-01-3 14:00 2006-02-15 Show GitHub Exploit DB Packet Storm
348174 - e107 e107 Incomplete blacklist vulnerability in usersettings.php in e107 0.7.20 and earlier allows remote attackers to conduct SQL injection attacks via the loginname parameter. NVD-CWE-Other
CVE-2010-2098 2012-12-13 13:00 2010-05-28 Show GitHub Exploit DB Packet Storm
348175 - e107 e107 Per: http://cwe.mitre.org/data/definitions/184.html 'CWE-184: Incomplete Blacklist' NVD-CWE-Other
CVE-2010-2098 2012-12-13 13:00 2010-05-28 Show GitHub Exploit DB Packet Storm
348176 - kerio personal_firewall
serverfirewall 		The FWDRV driver in Kerio Personal Firewall 4.2 and Server Firewall 1.1.1 allows local users to cause a denial of service (crash) by setting the PAGE_NOACCESS or PAGE_GUARD protection on the Page Env… NVD-CWE-Other
CVE-2005-3286 2012-12-13 11:43 2005-10-23 Show GitHub Exploit DB Packet Storm
348177 - freebsd freebsd sys/nfsclient/nfs_vfsops.c in the NFS client in the kernel in FreeBSD 7.2 through 8.1-PRERELEASE, when vfs.usermount is enabled, does not validate the length of a certain fhsize parameter, which allo… CWE-20
 Improper Input Validation  		CVE-2010-2020 2012-11-6 13:41 2010-05-29 Show GitHub Exploit DB Packet Storm
348178 - tiki tikiwiki_cms\/groupware TikiWiki before 1.8.5 does not properly validate files that have been uploaded to the temp directory, which could allow remote attackers to upload and execute arbitrary PHP scripts, a different vulne… CWE-20
 Improper Input Validation  		CVE-2005-0200 2012-10-24 13:00 2005-05-2 Show GitHub Exploit DB Packet Storm
348179 - tiki tikiwiki_cms\/groupware Cross-site scripting (XSS) vulnerability in TikiWiki before 1.9.1.1 allows remote attackers to inject arbitrary web script or HTML via unknown vectors. CWE-79
Cross-site Scripting 		CVE-2005-3283 2012-10-24 13:00 2005-10-23 Show GitHub Exploit DB Packet Storm
348180 - oracle database_server Unspecified vulnerability in the XML DB component in Oracle Database 9.2.0.8, 9.2.0.8DV, 10.1.0.5, and 10.2.0.3 allows remote authenticated users to affect confidentiality via unknown vectors. NVD-CWE-noinfo
CVE-2010-0851 2012-10-23 12:20 2010-04-14 Show GitHub Exploit DB Packet Storm