Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 1, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
239661 4.3 警告 jex-treme - JEx-Treme Einfacher Passworschutz の index.php におけるクロスサイトスクリプティングの脆弱性 - CVE-2007-2013 2012-09-25 16:47 2007-04-12 Show GitHub Exploit DB Packet Storm
239662 5.8 警告 mimarsinan - MimarSinan CompreXX におけるディレクトリトラバーサルの脆弱性 - CVE-2007-2012 2012-09-25 16:47 2007-04-12 Show GitHub Exploit DB Packet Storm
239663 6.8 警告 Mambo Foundation
Joomla!		 - Mambo および Joomla! 用の Takhopper コンポーネントにおける PHP リモートファイルインクルージョンの脆弱性 CWE-94
コード・インジェクション 		CVE-2007-2005 2012-09-25 16:47 2007-04-12 Show GitHub Exploit DB Packet Storm
239664 7.5 危険 inoutmailinglistmanager - InoutMailingListManager における SQL インジェクションの脆弱性 - CVE-2007-2004 2012-09-25 16:47 2007-04-12 Show GitHub Exploit DB Packet Storm
239665 6.8 警告 inoutmailinglistmanager - InoutMailingListManager における任意の PHP コードを実行される脆弱性 - CVE-2007-2003 2012-09-25 16:47 2007-04-12 Show GitHub Exploit DB Packet Storm
239666 6.8 警告 inoutmailinglistmanager - InoutMailingListManager における任意の PHP コードを実行される脆弱性 - CVE-2007-2002 2012-09-25 16:47 2007-04-12 Show GitHub Exploit DB Packet Storm
239667 7.5 危険 nazarkin.name - Weatimages の index.php における PHP リモートファイルインクルージョンの脆弱性 - CVE-2007-1999 2012-09-25 16:47 2007-04-12 Show GitHub Exploit DB Packet Storm
239668 7.5 危険 hiox india - HGB における任意の PHP コードを挿入される脆弱性 - CVE-2007-1998 2012-09-25 16:47 2007-04-12 Show GitHub Exploit DB Packet Storm
239669 7.5 危険 mamboxchange - Mambo 用の com_zoom モジュールにおける PHP リモートファイルインクルージョンの脆弱性 - CVE-2007-1992 2012-09-25 16:47 2007-04-12 Show GitHub Exploit DB Packet Storm
239670 7.5 危険 lite-cms - lite-cms の index.php における PHP リモートファイルインクルージョンの脆弱性 - CVE-2007-1984 2012-09-25 16:47 2007-04-11 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 1, 2026, 4:12 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
354701 - wihphoto wihphoto Directory traversal vulnerability in sendphoto.php in WihPhoto 0.86 allows remote attackers to read arbitrary files via .. specifiers in the album parameter, and the target filename in the pic parame… NVD-CWE-Other
CVE-2003-1239 2008-09-6 05:36 2003-12-31 Show GitHub Exploit DB Packet Storm
354702 - cutephp cutenews PHP remote file inclusion vulnerability in CuteNews 0.88 allows remote attackers to execute arbitrary PHP code via a URL in the cutepath parameter in (1) shownews.php, (2) search.php, or (3) comments… CWE-94
Code Injection 		CVE-2003-1240 2008-09-6 05:36 2003-12-31 Show GitHub Exploit DB Packet Storm
354703 - levcgi.com myguestbook Cross-site scripting vulnerability (XSS) in (1) admin_index.php, (2) admin_pass.php, (3) admin_modif.php, and (4) admin_suppr.php in MyGuestbook 3.0 allows remote attackers to execute arbitrary PHP c… NVD-CWE-Other
CVE-2003-1241 2008-09-6 05:36 2003-12-31 Show GitHub Exploit DB Packet Storm
354704 - - - Sage 1.0 b3 allows remote attackers to obtain the root web server path via a URL request for a non-existent module, which returns the path in an error message. NVD-CWE-Other
CVE-2003-1242 2008-09-6 05:36 2003-12-31 Show GitHub Exploit DB Packet Storm
354705 - phpbb_group phpbb SQL injection vulnerability in page_header.php in phpBB 2.0, 2.0.1 and 2.0.2 allows remote attackers to brute force user passwords and possibly gain unauthorized access to forums via the forum_id par… CWE-89
SQL Injection 		CVE-2003-1244 2008-09-6 05:36 2003-12-31 Show GitHub Exploit DB Packet Storm
354706 - pedestal_software integrity_protection_driver NtCreateSymbolicLinkObject in ntdll.dll in Integrity Protection Driver (IPD) 1.2 and 1.3 allows local users to create and overwrite arbitrary files via a symlink attack on \winnt\system32\drivers usi… NVD-CWE-Other
CVE-2003-1246 2008-09-6 05:36 2003-12-31 Show GitHub Exploit DB Packet Storm
354707 - positive_software h-sphere Multiple buffer overflows in H-Sphere WebShell 2.3 allow remote attackers to execute arbitrary code via (1) a long URL content type in CGI::readFile, (2) a long path in diskusage, and (3) a long fnam… NVD-CWE-Other
CVE-2003-1247 2008-09-6 05:36 2003-12-31 Show GitHub Exploit DB Packet Storm
354708 - positive_software h-sphere H-Sphere WebShell 2.3 allows remote attackers to execute arbitrary commands via shell metacharacters in the (1) mode and (2) zipfile parameters in a URL request. NVD-CWE-Other
CVE-2003-1248 2008-09-6 05:36 2003-12-31 Show GitHub Exploit DB Packet Storm
354709 - businessobjects webintelligence WebIntelligence 2.7.1 uses guessable user session cookies, which allows remote attackers to hijack sessions. NVD-CWE-Other
CVE-2003-1249 2008-09-6 05:36 2003-12-31 Show GitHub Exploit DB Packet Storm
354710 - efficient_networks 5861_dsl_router Efficient Networks 5861 DSL router, when running firmware 5.3.80 configured to block incoming TCP SYN, packets allows remote attackers to cause a denial of service (crash) via a flood of TCP SYN pack… NVD-CWE-Other
CVE-2003-1250 2008-09-6 05:36 2003-12-31 Show GitHub Exploit DB Packet Storm