Vulnerability Search Top

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

Vulnerability Information Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":June 11, 2026, 6:13 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
239421	7.5	危険	mebiblio	-	meBiblio の admin/journal_change_mask.inc.php における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2008-2647	2012-09-25 17:17	2008-06-10	Show	GitHub Exploit DB Packet Storm

239422	4.3	警告	mebiblio	-	meBiblio におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2008-2646	2012-09-25 17:17	2008-06-10	Show	GitHub Exploit DB Packet Storm

239423	7.5	危険	kmrg-itb	-	OtomiGenX の login.php における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2008-2642	2012-09-25 17:17	2008-06-10	Show	GitHub Exploit DB Packet Storm

239424	7.5	危険	Joomla!	-	Joomla! 用の JooBlog コンポーネントにおける SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2008-2630	2012-09-25 17:17	2008-06-9	Show	GitHub Exploit DB Packet Storm

239425	6.5	警告	オラクル	-	Oracle PeopleSoft Enterprise などの製品の PeopleSoft PeopleTools コンポーネントにおける脆弱性	CWE-noinfo 情報不足	CVE-2008-2622	2012-09-25 17:17	2008-07-15	Show	GitHub Exploit DB Packet Storm

239426	4	警告	オラクル	-	Oracle PeopleSoft Enterprise および JD Edwards EnterpriseOne の PeopleSoft PeopleTools コンポーネントにおける脆弱性	CWE-noinfo 情報不足	CVE-2008-2621	2012-09-25 17:17	2008-07-15	Show	GitHub Exploit DB Packet Storm

239427	6.5	警告	オラクル	-	Oracle PeopleSoft Enterprise および JD Edwards EnterpriseOne の PeopleSoft PeopleTools コンポーネントにおける脆弱性	CWE-noinfo 情報不足	CVE-2008-2620	2012-09-25 17:17	2008-07-15	Show	GitHub Exploit DB Packet Storm

239428	6.5	警告	オラクル	-	Oracle PeopleSoft Enterprise および JD Edwards EnterpriseOne の PeopleSoft PeopleTools コンポーネントにおける脆弱性	CWE-noinfo 情報不足	CVE-2008-2618	2012-09-25 17:17	2008-07-15	Show	GitHub Exploit DB Packet Storm

239429	6.5	警告	オラクル	-	Oracle PeopleSoft Enterprise および JD Edwards EnterpriseOne の PeopleSoft PeopleTools コンポーネントにおける脆弱性	CWE-noinfo 情報不足	CVE-2008-2617	2012-09-25 17:17	2008-07-15	Show	GitHub Exploit DB Packet Storm

239430	6.5	警告	オラクル	-	Oracle PeopleSoft Enterprise および JD Edwards EnterpriseOne の PeopleSoft PeopleTools コンポーネントにおける脆弱性	CWE-noinfo 情報不足	CVE-2008-2616	2012-09-25 17:17	2008-07-15	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:June 11, 2026, 5:13 a.m.

No	CVSS	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
285471	-	arubanetworks	clearpass_policy_manager	SQL injection vulnerability in Aruba Networks ClearPass Policy Manager (CPPM) 6.2.x, 6.3.x before 6.3.6, and 6.4.x before 6.4.2 allows remote attackers to execute arbitrary SQL commands via unspecifi…	CWE-89 SQL Injection	CVE-2014-8367	2024-11-21 11:18	2014-11-26	Show	GitHub Exploit DB Packet Storm

285472	-	redhat	resteasy	DocumentProvider in RESTEasy 2.3.7 and 3.0.9 does not configure the (1) external-general-entities or (2) external-parameter-entities features, which allows remote attackers to conduct XML external en…	CWE-20 Improper Input Validation	CVE-2014-7839	2024-11-21 11:18	2014-11-26	Show	GitHub Exploit DB Packet Storm

285473	-	liferay	liferay_portal	Cross-site scripting (XSS) vulnerability in Liferay Portal Enterprise Edition (EE) 6.2 SP8 and earlier allows remote authenticated users to inject arbitrary web script or HTML via the _20_body parame…	CWE-79 Cross-site Scripting	CVE-2014-8349	2024-11-21 11:18	2014-11-25	Show	GitHub Exploit DB Packet Storm

285474	-	openstack fedoraproject redhat	neutron fedora openstack	OpenStack Neutron before 2014.1.4 and 2014.2.x before 2014.2.1 allows remote authenticated users to cause a denial of service (crash) via a crafted dns_nameservers value in the DNS configuration.	CWE-20 CWE-399 Improper Input Validation Resource Management Errors	CVE-2014-7821	2024-11-21 11:18	2014-11-25	Show	GitHub Exploit DB Packet Storm

285475	-	canonical debian gnu opensuse	ubuntu_linux debian_linux glibc opensuse	The wordexp function in GNU C Library (aka glibc) 2.21 does not enforce the WRDE_NOCMD flag, which allows context-dependent attackers to execute arbitrary commands, as demonstrated by input containin…	CWE-20 Improper Input Validation	CVE-2014-7817	2024-11-21 11:18	2014-11-25	Show	GitHub Exploit DB Packet Storm

285476	-	moodle	moodle	lib/phpunit/bootstrap.php in Moodle 2.6.x before 2.6.6 and 2.7.x before 2.7.3 allows remote attackers to obtain sensitive information via a direct request, which reveals the full path in an error mes…	CWE-200 Information Exposure	CVE-2014-7848	2024-11-21 11:18	2014-11-24	Show	GitHub Exploit DB Packet Storm

285477	-	moodle	moodle	iplookup/index.php in Moodle through 2.4.11, 2.5.x before 2.5.9, 2.6.x before 2.6.6, and 2.7.x before 2.7.3 allows remote attackers to cause a denial of service (resource consumption) by triggering t…	CWE-399 Resource Management Errors	CVE-2014-7847	2024-11-21 11:18	2014-11-24	Show	GitHub Exploit DB Packet Storm

285478	-	moodle	moodle	tag/tag_autocomplete.php in Moodle through 2.4.11, 2.5.x before 2.5.9, 2.6.x before 2.6.6, and 2.7.x before 2.7.3 does not consider the moodle/tag:edit capability before adding a tag, which allows re…	CWE-264 Permissions, Privileges, and Access Controls	CVE-2014-7846	2024-11-21 11:18	2014-11-24	Show	GitHub Exploit DB Packet Storm

285479	-	moodle	moodle	The generate_password function in Moodle through 2.4.11, 2.5.x before 2.5.9, 2.6.x before 2.6.6, and 2.7.x before 2.7.3 does not provide a sufficient number of possible temporary passwords, which all…	CWE-255 Credentials Management	CVE-2014-7845	2024-11-21 11:18	2014-11-24	Show	GitHub Exploit DB Packet Storm

285480	-	moodle	moodle	Multiple cross-site request forgery (CSRF) vulnerabilities in the Forum module in Moodle through 2.4.11, 2.5.x before 2.5.9, 2.6.x before 2.6.6, and 2.7.x before 2.7.3 allow remote attackers to hijac…	CWE-352 Origin Validation Error	CVE-2014-7838	2024-11-21 11:18	2014-11-24	Show	GitHub Exploit DB Packet Storm