Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Feb. 9, 2026, 12:59 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
239441 4.3 警告 goodlyrics - buymyscripts Lyrics Script の search_results.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2008-4672 2012-06-26 16:02 2008-10-22 Show GitHub Exploit DB Packet Storm
239442 4.3 警告 ed putal - Ed Pudol Clickbank Portal の search.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2008-4670 2012-06-26 16:02 2008-10-22 Show GitHub Exploit DB Packet Storm
239443 4.3 警告 dan fletcher - Dan Fletcher Recipe Script の search.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2008-4669 2012-06-26 16:02 2008-10-22 Show GitHub Exploit DB Packet Storm
239444 7.5 危険 arabcms - ArabCMS の rss.php におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2008-4667 2012-06-26 16:02 2008-10-22 Show GitHub Exploit DB Packet Storm
239445 6.8 警告 deeserver - Ultimate Webboard の webboard.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-4666 2012-06-26 16:02 2008-10-22 Show GitHub Exploit DB Packet Storm
239446 7.5 危険 datingpro - PG Matchmaking における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-4665 2012-06-26 16:02 2008-10-22 Show GitHub Exploit DB Packet Storm
239447 9.3 危険 Dart Communications - ActiveX 用の Dart Communications PowerTCP FTP の ActiveX コントロールにおけるバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2008-4652 2012-06-26 16:02 2008-10-21 Show GitHub Exploit DB Packet Storm
239448 7.5 危険 Elxis - Elxis CMS におけるセッションをハイジャックされる脆弱性 CWE-287
不適切な認証 		CVE-2008-4649 2012-06-26 16:02 2008-10-21 Show GitHub Exploit DB Packet Storm
239449 4.3 警告 Elxis - Elxis CMS の index.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2008-4648 2012-06-26 16:02 2008-10-21 Show GitHub Exploit DB Packet Storm
239450 7.5 危険 astrospaces - AstroSPACES の profile.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-4642 2012-06-26 16:02 2008-10-21 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:April 17, 2026, 4:13 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
256491 - mozilla firefox Mozilla Firefox 1.5.0.1, and possibly other versions, preserves some records of user activity even after uninstalling, which allows local users who share a Windows profile to view the records after a… NVD-CWE-Other
CVE-2004-2657 2024-08-8 11:15 2004-12-31 Show GitHub Exploit DB Packet Storm
256492 - zonelabs zonealarm Zone Alarm Pro 1.0 through 5.1 gives full access to %windir%\Internet Logs\* to the EVERYONE group, which allows local users to cause a denial of service by modifying the folder contents or permissio… CWE-264
Permissions, Privileges, and Access Controls 		CVE-2004-2713 2024-08-8 11:15 2004-12-31 Show GitHub Exploit DB Packet Storm
256493 - nessus nessus Nessus 2.0.10a stores account passwords in plaintext in .nessusrc files, which allows local users to obtain passwords. NOTE: the original researcher reports that the vendor has disputed this issue CWE-255
Credentials Management 		CVE-2004-2722 2024-08-8 11:15 2004-12-31 Show GitHub Exploit DB Packet Storm
256494 - php php PHP treats unknown methods such as "PoSt" as a GET request, which could allow attackers to intended access restrictions if PHP is running on a server that passes on all methods, such as Apache httpd … NVD-CWE-Other
CVE-2003-0249 2024-08-8 11:15 2003-12-31 Show GitHub Exploit DB Packet Storm
256495 - ibm lotus_domino NOTE: this issue has been disputed by the vendor. Cross-site scripting (XSS) vulnerability in IBM Lotus Notes R6 and Domino R6, and possibly earlier versions, allows remote attackers to execute arbi… NVD-CWE-Other
CVE-2004-1621 2024-08-8 10:15 2004-10-18 Show GitHub Exploit DB Packet Storm
256496 - khaled_mardam-bey mirc Buffer overflow in mIRC 5.91, 6.03, 6.12, and 6.16 allows local users to execute arbitrary code via a long string that is entered after reaching the DCC Get Folder Dialog. NOTE: this issue has been … NVD-CWE-Other
CVE-2005-4681 2024-08-8 09:15 2005-12-31 Show GitHub Exploit DB Packet Storm
256497 - - - Cross-site scripting (XSS) vulnerability in Fidra Lighthouse CMS 1.1.0 and earlier allows remote attackers to inject arbitrary web script or HTML via the search parameter in a query_string to the hom… NVD-CWE-Other
CVE-2005-4780 2024-08-8 09:15 2005-12-31 Show GitHub Exploit DB Packet Storm
256498 - turnkey_solutions sunshop_shopping_cart Turnkey Web Tools SunShop Shopping Cart allows remote attackers to obtain sensitive information via a phpinfo action to (1) index.php, (2) admin/index.php, and (3) admin/adminindex.php, which execute… NVD-CWE-Other
CVE-2005-4787 2024-08-8 09:15 2005-12-31 Show GitHub Exploit DB Packet Storm
256499 - webwasher csm_appliance_suite The encapsulation script mechanism in Webwasher CSM Appliance Suite 5.x uses case-sensitive detection of malicious tokens, which allows attackers to bypass script detection by using tokens that can b… NVD-CWE-Other
CVE-2005-4514 2024-08-8 09:15 2005-12-23 Show GitHub Exploit DB Packet Storm
256500 - polopoly polopoly Cross-site scripting (XSS) vulnerability in Polopoly 9 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified search parameters. NOTE: the vendor has disputed this… NVD-CWE-Other
CVE-2005-4481 2024-08-8 09:15 2005-12-22 Show GitHub Exploit DB Packet Storm