Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Feb. 9, 2026, 12:59 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
239681 4.3 警告 common-solutions - common solutions csphonebook の index.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2008-3448 2012-06-26 16:02 2008-08-4 Show GitHub Exploit DB Packet Storm
239682 5 警告 FRISK Software International - F-Prot Antivirus のスキャンエンジンにおけるサービス運用妨害 (DoS) の脆弱性 CWE-399
リソース管理の問題 		CVE-2008-3447 2012-06-26 16:02 2008-08-4 Show GitHub Exploit DB Packet Storm
239683 7.5 危険 アップル - Apple Mac OS X における任意のコードを実行される脆弱性 CWE-94
コード・インジェクション 		CVE-2008-3438 2012-06-26 16:02 2008-08-1 Show GitHub Exploit DB Packet Storm
239684 9.3 危険 eyeball networks - Eyeball MessengerSDK の CoVideoWindow.ocx ActiveX コントロールにおけるバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2008-3430 2012-06-26 16:02 2008-07-31 Show GitHub Exploit DB Packet Storm
239685 7.5 危険 Condor Project - Condor におけるアクセス制限を回避される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2008-3424 2012-06-26 16:02 2008-07-31 Show GitHub Exploit DB Packet Storm
239686 4.3 警告 Blackboard, Inc. - Blackboard Academic Suite におけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反 		CVE-2008-3421 2012-06-26 16:02 2008-07-31 Show GitHub Exploit DB Packet Storm
239687 7.5 危険 greatclone - Youtuber Clone の ugroups.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-3419 2012-06-26 16:02 2008-07-31 Show GitHub Exploit DB Packet Storm
239688 7.5 危険 fipsasp - fipsCMS light の home/index.asp における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-3417 2012-06-26 16:02 2008-07-31 Show GitHub Exploit DB Packet Storm
239689 7.5 危険 CMScout - CMScout の common.php におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2008-3415 2012-06-26 16:02 2008-07-31 Show GitHub Exploit DB Packet Storm
239690 7.5 危険 greatclone - Greatclone GC Auction Platinum の category.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-3413 2012-06-26 16:02 2008-07-31 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:April 21, 2026, 4:10 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
306851 - microsoft internet_information_server Buffer overflow in FTP server in Microsoft IIS 3.0 and 4.0 allows local and sometimes remote attackers to cause a denial of service via a long NLST (ls) command. NVD-CWE-Other
CVE-1999-1544 2016-10-18 11:05 1999-01-24 Show GitHub Exploit DB Packet Storm
306852 - joes_own_editor joe Joe's Own Editor (joe) 2.8 sets the world-readable permission on its crash-save file, DEADJOE, which could allow local users to read files that were being edited by other users. NVD-CWE-Other
CVE-1999-1545 2016-10-18 11:05 1999-07-14 Show GitHub Exploit DB Packet Storm
306853 - oracle web_listener Oracle Web Listener 2.1 allows remote attackers to bypass access restrictions by replacing a character in the URL with its HTTP-encoded (hex) equivalent. CWE-20
 Improper Input Validation  		CVE-1999-1547 2016-10-18 11:05 1999-11-25 Show GitHub Exploit DB Packet Storm
306854 - microsoft index_server Index Server 2.0 on IIS 4.0 stores physical path information in the ContentIndex\Catalogs subkey of the AllowedPaths registry key, whose permissions allows local and remote users to obtain the physic… NVD-CWE-Other
CVE-1999-1397 2016-10-18 11:04 1999-03-23 Show GitHub Exploit DB Packet Storm
306855 - sgi irix Vulnerability in xfsdump in SGI IRIX may allow local users to obtain root privileges via the bck.log log file, possibly via a symlink attack. NVD-CWE-Other
CVE-1999-1398 2016-10-18 11:04 1997-05-7 Show GitHub Exploit DB Packet Storm
306856 - sgi irix spaceball program in SpaceWare 7.3 v1.0 in IRIX 6.2 allows local users to gain root privileges by setting the HOSTNAME environmental variable to contain the commands to be executed. NVD-CWE-Other
CVE-1999-1399 2016-10-18 11:04 1997-08-20 Show GitHub Exploit DB Packet Storm
306857 - the_economist the_economist_1999_screen_saver The Economist screen saver 1999 with the "Password Protected" option enabled allows users with physical access to the machine to bypass the screen saver and read files by running Internet Explorer wh… NVD-CWE-Other
CVE-1999-1400 2016-10-18 11:04 1999-06-3 Show GitHub Exploit DB Packet Storm
306858 - ibm aix snap command in AIX before 4.3.2 creates the /tmp/ibmsupt directory with world-readable permissions and does not remove or clear the directory when snap -a is executed, which could allow local users … NVD-CWE-Other
CVE-1999-1405 2016-10-18 11:04 1999-02-17 Show GitHub Exploit DB Packet Storm
306859 - ibm aix Fixed in AIX 4.3 and 4.3.2 AIX 4.3.x APAR: IX88263 AIX 4.2.x APAR: IX88261 NVD-CWE-Other
CVE-1999-1405 2016-10-18 11:04 1999-02-17 Show GitHub Exploit DB Packet Storm
306860 - redhat linux dumpreg in Red Hat Linux 5.1 opens /dev/mem with O_RDWR access, which allows local users to cause a denial of service (crash) by redirecting fd 1 (stdout) to the kernel. NVD-CWE-Other
CVE-1999-1406 2016-10-18 11:04 1998-07-29 Show GitHub Exploit DB Packet Storm