Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 8, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
238271 9.3 危険 Hummingbird - Hummingbird の Deployment Wizard の DeployRun.dll における任意のプログラムを実行される脆弱性 CWE-Other
その他 		CVE-2008-4728 2012-09-25 17:17 2008-10-23 Show GitHub Exploit DB Packet Storm
238272 4.3 警告 Mozilla Foundation - Mozilla Firefox におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2008-4723 2012-09-25 17:17 2008-10-23 Show GitHub Exploit DB Packet Storm
238273 7.5 危険 PHPJabbers - PHP Jabbers Post Comment における管理アクセス権を取得される脆弱性 CWE-200
CWE-287
CWE-noinfo
CVE-2008-4721 2012-09-25 17:17 2008-10-23 Show GitHub Exploit DB Packet Storm
238274 9.3 危険 openengine - openEngine の cms/classes/openengine/filepool.php における PHP リモートファイルインクルージョンの脆弱性 CWE-94
コード・インジェクション 		CVE-2008-4719 2012-09-25 17:17 2008-10-23 Show GitHub Exploit DB Packet Storm
238275 7.5 危険 myjoomla - Joomla! 用の Jpad コンポーネントにおける SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-4715 2012-09-25 17:17 2008-10-23 Show GitHub Exploit DB Packet Storm
238276 6.8 警告 lnblog - LnBlog の pages/showblog.php におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2008-4712 2012-09-25 17:17 2008-10-23 Show GitHub Exploit DB Packet Storm
238277 6.8 警告 joovili - Joovili における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-4711 2012-09-25 17:17 2008-10-23 Show GitHub Exploit DB Packet Storm
238278 10 危険 mitre - SezHoo の SezHooTabsAndActions.php における PHP リモートファイルインクルージョンの脆弱性 CWE-94
コード・インジェクション 		CVE-2008-4704 2012-09-25 17:17 2008-10-23 Show GitHub Exploit DB Packet Storm
238279 6.8 警告 liberiacms - Libera CMS の admin.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-4701 2012-09-25 17:17 2008-10-22 Show GitHub Exploit DB Packet Storm
238280 6.8 警告 liberiacms - Libera CMS の admin.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-4700 2012-09-25 17:17 2008-10-22 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 9, 2026, 4:16 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
346001 - hp tru64 Unspecified vulnerability in HP Tru64 UNIX 5.1B PK2(BL22) and PK3(BL24), and 5.1A PK6(BL24), when using IPsec/IKE (Internet Key Exchange) with Certificates, allows remote attackers to gain privileges… NVD-CWE-Other
CVE-2004-2678 2017-07-29 10:29 2004-12-31 Show GitHub Exploit DB Packet Storm
346002 - checkpoint firewall-1 Check Point Firewall-1 4.1 up to NG AI R55 allows remote attackers to obtain potentially sensitive information by sending an Internet Key Exchange (IKE) with a certain Vendor ID payload that causes F… NVD-CWE-Other
CVE-2004-2679 2017-07-29 10:29 2004-12-31 Show GitHub Exploit DB Packet Storm
346003 - peersec_networks matrixssl PeerSec MatrixSSL before 1.1 caches session keys for an indefinitely long time, which might make it easier for remote attackers to hijack a session. NVD-CWE-Other
CVE-2004-2681 2017-07-29 10:29 2004-12-31 Show GitHub Exploit DB Packet Storm
346004 - newsphp newsphp Cross-site scripting (XSS) vulnerability in index.php in NewsPHP allows remote attackers to inject arbitrary web script or HTML via the cat_id parameter. NOTE: this issue might overlap vector 3 in C… CWE-79
Cross-site Scripting 		CVE-2004-2688 2017-07-29 10:29 2004-12-31 Show GitHub Exploit DB Packet Storm
346005 - newsphp newsphp NewsPHP allows remote attackers to gain unauthorized administrative access by setting a cookie to the "autorized=admin; root=admin" value. CWE-264
Permissions, Privileges, and Access Controls 		CVE-2004-2689 2017-07-29 10:29 2004-12-31 Show GitHub Exploit DB Packet Storm
346006 - newsphp newsphp Unrestricted file upload vulnerability in the Administration Panel for NewsPHP allows remote authenticated administrators to upload and execute arbitrary code instead of video files. NVD-CWE-Other
CVE-2004-2690 2017-07-29 10:29 2004-12-31 Show GitHub Exploit DB Packet Storm
346007 - 3com 3c17205-us
3c17210-us
superstack_3_switch 		Unspecified vulnerability in 3Com SuperStack 3 4400 switches with firmware version before 3.31 allows remote attackers to cause a denial of service (device reset) via a crafted request to the web man… NVD-CWE-Other
CVE-2004-2691 2017-07-29 10:29 2004-12-31 Show GitHub Exploit DB Packet Storm
346008 - kyberdigi_labs php-exec-dir The exec_dir PHP patch (php-exec-dir) 4.3.2 through 4.3.7 with safe mode disabled allows remote attackers to bypass restrictions and execute arbitrary commands via a backtick operator, which is not h… CWE-16
CWE-264
Configuration
Permissions, Privileges, and Access Controls 		CVE-2004-2692 2017-07-29 10:29 2004-12-31 Show GitHub Exploit DB Packet Storm
346009 - bea weblogic_server BEA WebLogic Server and WebLogic Express 6.1, 7.0, and 8.1, when using Remote Method Invocation (RMI) over Internet Inter-ORB Protocol (IIOP), does not properly handle when multiple logins for differ… CWE-255
Credentials Management 		CVE-2004-2696 2017-07-29 10:29 2004-12-31 Show GitHub Exploit DB Packet Storm
346010 - ibm aix The Inventory Scout daemon (invscoutd) 1.3.0.0 and 2.0.2 for AIX 4.3.3 and 5.1 allows local users to gain privileges via a symlink attack on a command line argument (log file). NOTE: this might be r… CWE-362
Race Condition 		CVE-2004-2697 2017-07-29 10:29 2004-12-31 Show GitHub Exploit DB Packet Storm