Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Feb. 9, 2026, 12:59 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
239591 7.5 危険 editeurscripts - EsFaq の questions.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-3952 2012-06-26 16:02 2008-09-10 Show GitHub Exploit DB Packet Storm
239592 5 警告 アップル - Apple iPhone の _web_drawInRect:withFont:ellipsis:alignment:measureOnly 関数におけるサービス運用妨害 (DoS) の脆弱性 CWE-189
数値処理の問題 		CVE-2008-3950 2012-06-26 16:02 2008-09-16 Show GitHub Exploit DB Packet Storm
239593 7.5 危険 discountedscripts - ACG-PTP の index.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-3944 2012-06-26 16:02 2008-09-5 Show GitHub Exploit DB Packet Storm
239594 7.5 危険 ezonescripts - eZoneScripts Living Local の listtest.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-3943 2012-06-26 16:02 2008-09-5 Show GitHub Exploit DB Packet Storm
239595 4.3 警告 bizdirectory - BizDirectory におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2008-3941 2012-06-26 16:02 2008-09-5 Show GitHub Exploit DB Packet Storm
239596 5 警告 AVTECH - AVTECH PageR Enterprise の Web インターフェースにおけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2008-3939 2012-06-26 16:02 2008-09-5 Show GitHub Exploit DB Packet Storm
239597 7.8 危険 DreamBox - Dreambox DM500C の Web インターフェースにおけるサービス運用妨害 (DoS) の脆弱性 CWE-20
不適切な入力確認 		CVE-2008-3936 2012-06-26 16:02 2008-09-5 Show GitHub Exploit DB Packet Storm
239598 9.3 危険 EZB Systems - UltraISO におけるフォーマットストリングの脆弱性 CWE-134
書式文字列の問題 		CVE-2008-3871 2012-06-26 16:02 2009-04-1 Show GitHub Exploit DB Packet Storm
239599 6.9 警告 Debian - Citadel Server の migrate_aliases.sh における任意のファイルを上書きされる脆弱性 CWE-59
リンク解釈の問題 		CVE-2008-3930 2012-06-26 16:02 2008-08-24 Show GitHub Exploit DB Packet Storm
239600 7.2 危険 Ampache.org - Ampache の gather-messages.sh における任意のファイルを上書きされる脆弱性 CWE-59
リンク解釈の問題 		CVE-2008-3929 2012-06-26 16:02 2008-09-4 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:April 26, 2026, 4:08 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
313411 - mambo mambo_open_source The dofreePDF function in includes/pdf.php in Mambo 4.6.1 does not properly check access rights for database content, which allows remote attackers to read certain content via unspecified vectors. NVD-CWE-Other
CVE-2006-7202 2008-09-6 06:16 2007-05-10 Show GitHub Exploit DB Packet Storm
313412 - php_group php The array_fill function in ext/standard/array.c in PHP 4.4.2 and 5.1.2 allows context-dependent attackers to cause a denial of service (memory consumption) via a large num value. NVD-CWE-Other
CVE-2006-7205 2008-09-6 06:16 2007-05-24 Show GitHub Exploit DB Packet Storm
313413 - ageet agephone Buffer overflow in ageet AGEphone before 1.4.0 might allow remote attackers to have an unknown impact via unspecified vectors. NVD-CWE-Other
CVE-2006-7207 2008-09-6 06:16 2007-06-23 Show GitHub Exploit DB Packet Storm
313414 - firebirdsql firebird fb_lock_mgr in Firebird 1.5 uses weak permissions (0666) for the semaphore array, which allows local users to cause a denial of service (blocked query processing) by locking semaphores. NVD-CWE-Other
CVE-2006-7211 2008-09-6 06:16 2007-06-30 Show GitHub Exploit DB Packet Storm
313415 - firebirdsql firebird Multiple buffer overflows in Firebird 1.5, one of which affects WNET, have unknown impact and attack vectors. NOTE: this issue might overlap CVE-2006-1240. NVD-CWE-Other
CVE-2006-7212 2008-09-6 06:16 2007-06-30 Show GitHub Exploit DB Packet Storm
313416 - firebirdsql firebird Firebird 1.5 allows remote authenticated users without SYSDBA and owner permissions to overwrite a database by creating a database. NVD-CWE-Other
CVE-2006-7213 2008-09-6 06:16 2007-06-30 Show GitHub Exploit DB Packet Storm
313417 - firebirdsql firebird Multiple unspecified vulnerabilities in Firebird 1.5 allow remote attackers to (1) cause a denial of service (application crash) by sending many remote protocol versions; and (2) cause a denial of se… NVD-CWE-Other
CVE-2006-7214 2008-09-6 06:16 2007-06-30 Show GitHub Exploit DB Packet Storm
313418 - intel core_2_duo_e4000
core_2_duo_e6000
core_2_extreme_x6800 		The Intel Core 2 Extreme processor X6800 and Core 2 Duo desktop processor E6000 and E4000 incorrectly set the memory page Access (A) bit for a page in certain circumstances involving proximity of the… NVD-CWE-Other
CVE-2006-7215 2008-09-6 06:16 2007-07-4 Show GitHub Exploit DB Packet Storm
313419 - apache derby Apache Derby before 10.2.1.6 does not determine privilege requirements for lock table statements at compilation time, and consequently does not enforce privilege requirements at execution time, which… NVD-CWE-Other
CVE-2006-7216 2008-09-6 06:16 2007-07-6 Show GitHub Exploit DB Packet Storm
313420 - apache derby Apache Derby before 10.2.1.6 does not determine schema privilege requirements during the DropSchemaNode bind phase, which allows remote authenticated users to execute arbitrary drop schema statements… NVD-CWE-Other
CVE-2006-7217 2008-09-6 06:16 2007-07-6 Show GitHub Exploit DB Packet Storm