Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Feb. 9, 2026, 12:59 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
239441 4.3 警告 goodlyrics - buymyscripts Lyrics Script の search_results.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2008-4672 2012-06-26 16:02 2008-10-22 Show GitHub Exploit DB Packet Storm
239442 4.3 警告 ed putal - Ed Pudol Clickbank Portal の search.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2008-4670 2012-06-26 16:02 2008-10-22 Show GitHub Exploit DB Packet Storm
239443 4.3 警告 dan fletcher - Dan Fletcher Recipe Script の search.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2008-4669 2012-06-26 16:02 2008-10-22 Show GitHub Exploit DB Packet Storm
239444 7.5 危険 arabcms - ArabCMS の rss.php におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2008-4667 2012-06-26 16:02 2008-10-22 Show GitHub Exploit DB Packet Storm
239445 6.8 警告 deeserver - Ultimate Webboard の webboard.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-4666 2012-06-26 16:02 2008-10-22 Show GitHub Exploit DB Packet Storm
239446 7.5 危険 datingpro - PG Matchmaking における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-4665 2012-06-26 16:02 2008-10-22 Show GitHub Exploit DB Packet Storm
239447 9.3 危険 Dart Communications - ActiveX 用の Dart Communications PowerTCP FTP の ActiveX コントロールにおけるバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2008-4652 2012-06-26 16:02 2008-10-21 Show GitHub Exploit DB Packet Storm
239448 7.5 危険 Elxis - Elxis CMS におけるセッションをハイジャックされる脆弱性 CWE-287
不適切な認証 		CVE-2008-4649 2012-06-26 16:02 2008-10-21 Show GitHub Exploit DB Packet Storm
239449 4.3 警告 Elxis - Elxis CMS の index.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2008-4648 2012-06-26 16:02 2008-10-21 Show GitHub Exploit DB Packet Storm
239450 7.5 危険 astrospaces - AstroSPACES の profile.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-4642 2012-06-26 16:02 2008-10-21 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:April 26, 2026, 4:08 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
313421 - sap saplpd
sapsprint 		Unspecified vulnerability in SAP SAPLPD and SAPSPRINT allows remote attackers to cause a denial of service (application crash) via a certain print job request. NOTE: the provenance of this informati… NVD-CWE-Other
CVE-2006-7220 2008-09-6 06:16 2007-07-10 Show GitHub Exploit DB Packet Storm
313422 - xwiki xwiki PreviewAction in XWiki 0.9.543 through 0.9.1252 does not set the Author field to the identity of the user who last modified a document, which allows remote authenticated users without programming rig… CWE-264
Permissions, Privileges, and Access Controls 		CVE-2006-7223 2008-09-6 06:16 2007-09-14 Show GitHub Exploit DB Packet Storm
313423 - scriptphp pronews admin/change.php in ProNews 1.5 does not check whether a user is permitted to change news items, which allows remote attackers to add or delete information within an item, and possibly have other imp… NVD-CWE-Other
CVE-2006-6580 2008-09-6 06:15 2006-12-16 Show GitHub Exploit DB Packet Storm
313424 - scriptmate user_manager ScriptMate User Manager 2.1 and earlier allow remote attackers to obtain sensitive information via unspecified vectors related to (1) the Logins box and (2) the Search box. NVD-CWE-Other
CVE-2006-6583 2008-09-6 06:15 2006-12-16 Show GitHub Exploit DB Packet Storm
313425 - torrentflux torrentflux Cross-site scripting (XSS) vulnerability in dir.php in TorrentFlux 2.2, when allows remote attackers to inject arbitrary web script or HTML via double URL-encoded strings in the dir parameter, a rela… NVD-CWE-Other
CVE-2006-6600 2008-09-6 06:15 2006-12-16 Show GitHub Exploit DB Packet Storm
313426 - moodle moodle Cross-site scripting (XSS) vulnerability in mod/forum/discuss.php in Moodle 1.6.1 allows remote attackers to inject arbitrary web script or HTML via the navtail parameter. NOTE: The provenance of th… NVD-CWE-Other
CVE-2006-6625 2008-09-6 06:15 2006-12-18 Show GitHub Exploit DB Packet Storm
313427 - moodle moodle Cross-site scripting (XSS) vulnerability in an unspecified component of Moodle 1.5 allows remote attackers to inject arbitrary web script or HTML via a javascript URI in the SRC attribute of an IMG e… NVD-CWE-Other
CVE-2006-6626 2008-09-6 06:15 2006-12-18 Show GitHub Exploit DB Packet Storm
313428 - ibm db2_universal_database IBM DB2 8.1 before FixPak 14 allows remote attackers to cause a denial of service via a crafted SQLJRA packet, which causes a NULL pointer dereference in the sqle_db2ra_as_recvrequest function in DB2… NVD-CWE-Other
CVE-2006-6638 2008-09-6 06:15 2006-12-20 Show GitHub Exploit DB Packet Storm
313429 - chetcpasswd chetcpasswd Multiple unspecified vulnerabilities in chetcpasswd 2.4.1 allow local users to gain privileges via unspecified vectors related to executing (1) the cp program, (2) the mail program, or (3) the progra… NVD-CWE-Other
CVE-2006-6639 2008-09-6 06:15 2006-12-20 Show GitHub Exploit DB Packet Storm
313430 - netbsd netbsd The sendmsg function in NetBSD-current before 20061023, NetBSD 3.0 and 3.0.1 before 20061024, and NetBSD 2.x before 20061029, when run on a 64-bit architecture, allows attackers to cause a denial of … NVD-CWE-Other
CVE-2006-6654 2008-09-6 06:15 2006-12-20 Show GitHub Exploit DB Packet Storm