Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Feb. 9, 2026, 12:59 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
239321 7.5 危険 clanlite - ClanLite の service/profil.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-5215 2012-06-26 16:03 2008-11-24 Show GitHub Exploit DB Packet Storm
239322 4.3 警告 clanlite - ClanLite の service/calendrier.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2008-5214 2012-06-26 16:03 2008-11-24 Show GitHub Exploit DB Packet Storm
239323 7.5 危険 aj square - AJ Article の featured_article.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-5213 2012-06-26 16:03 2008-11-24 Show GitHub Exploit DB Packet Storm
239324 7.5 危険 aj square - AJ Auction の classifide_ad.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-5212 2012-06-26 16:03 2008-11-24 Show GitHub Exploit DB Packet Storm
239325 5 警告 Admidio - Admidio の modules/download/get_file.php におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2008-5209 2012-06-26 16:03 2008-11-24 Show GitHub Exploit DB Packet Storm
239326 7.5 危険 eshop100 - eSHOP100 の index.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-5190 2012-06-26 16:03 2008-11-21 Show GitHub Exploit DB Packet Storm
239327 7.5 危険 Enlightenment - imlib2 用 XPM ローダの load 関数におけるサービス運用妨害 (DoS) の脆弱性 CWE-119
バッファエラー 		CVE-2008-5187 2012-06-26 16:03 2008-11-20 Show GitHub Exploit DB Packet Storm
239328 5 警告 Nigel McNie - GeSHi の geshi.php の highlighting 機能におけるサービス運用妨害 (DoS) の脆弱性 CWE-399
リソース管理の問題 		CVE-2008-5185 2012-06-26 16:03 2008-11-20 Show GitHub Exploit DB Packet Storm
239329 10 危険 アップル - CUPS の Web インターフェースにおけるクロスサイトリクエストフォージェリ攻撃を実行される脆弱性 CWE-255
証明書・パスワード管理 		CVE-2008-5184 2012-06-26 16:03 2008-11-20 Show GitHub Exploit DB Packet Storm
239330 9.3 危険 clientsoftware - Client Software WinCom LPD Total におけるバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2008-5176 2012-06-26 16:03 2008-11-20 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:April 19, 2026, 4:09 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
307041 - hp service_manager Unspecified vulnerability in HP Service Manager (HPSM) before 7.01.71 allows remote authenticated users to execute arbitrary code via unknown vectors. CWE-264
Permissions, Privileges, and Access Controls 		CVE-2008-4415 2012-10-31 12:04 2008-11-18 Show GitHub Exploit DB Packet Storm
307042 - apple safari Apple Safari before 3.2 does not properly prevent caching of form data for form fields that have autocomplete disabled, which allows local users to obtain sensitive information by reading the browser… CWE-200
Information Exposure 		CVE-2008-3644 2012-10-31 12:01 2008-11-18 Show GitHub Exploit DB Packet Storm
307043 - gnome screensaver The notify feature in GNOME screensaver (gnome-screensaver) 2.20.0 might allow local users to read the clipboard contents and X selection data for a locked session by using ctrl-V. NVD-CWE-Other
CVE-2007-6389 2012-10-31 11:48 2007-12-18 Show GitHub Exploit DB Packet Storm
307044 - ssl-explorer ssl-explorer Directory traversal vulnerability in fileSystem.do in SSL-Explorer before 0.2.14 allows remote attackers to access arbitrary files via directory traversal sequences in the path parameter. NOTE: some… CWE-22
Path Traversal 		CVE-2007-5831 2012-10-31 11:46 2007-11-6 Show GitHub Exploit DB Packet Storm
307045 - ibm db2_universal_database IBM DB2 UDB 9.1 before Fixpak 4 assigns incorrect privileges to the (1) DB2ADMNS and (2) DB2USERS alternative groups, which has unknown impact. NOTE: the vendor description of this issue is too vagu… CWE-264
Permissions, Privileges, and Access Controls 		CVE-2007-6051 2012-10-31 11:46 2007-11-21 Show GitHub Exploit DB Packet Storm
307046 - david_hansson ruby_on_rails Rails before 1.2.4, as used for Ruby on Rails, allows remote attackers and ActiveResource servers to determine the existence of arbitrary files and read arbitrary XML files via the Hash.from_xml (Has… CWE-200
Information Exposure 		CVE-2007-5379 2012-10-31 11:44 2007-10-20 Show GitHub Exploit DB Packet Storm
307047 - ibm websphere_application_server Unspecified vulnerability in the PD tools component in IBM WebSphere Application Server (WAS) 6.1 before Fix Pack 11 (6.1.0.11) has unknown impact and attack vectors, aka PK33803. NVD-CWE-noinfo
CVE-2007-4839 2012-10-31 11:43 2007-09-13 Show GitHub Exploit DB Packet Storm
307048 - fail2ban fail2ban fail2ban 0.8 and earlier does not properly parse sshd log files, which allows remote attackers to add arbitrary hosts to the /etc/hosts.deny file and cause a denial of service by adding arbitrary IP … NVD-CWE-Other
CVE-2007-4321 2012-10-31 11:41 2007-08-14 Show GitHub Exploit DB Packet Storm
307049 - ac_zoom blockhosts BlockHosts before 2.0.4 does not properly parse (1) sshd and (2) vsftpd log files, which allows remote attackers to add arbitrary deny entries to the /etc/hosts.allow file and cause a denial of servi… NVD-CWE-Other
CVE-2007-4322 2012-10-31 11:41 2007-08-14 Show GitHub Exploit DB Packet Storm
307050 - 8e6 r3000_enterprise_filter Cross-site scripting (XSS) vulnerability in the 8e6 R3000 Enterprise Filter before 2.0.05 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. NOTE: this may be th… NVD-CWE-Other
CVE-2007-3842 2012-10-31 11:40 2007-07-18 Show GitHub Exploit DB Packet Storm