Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Feb. 9, 2026, 12:59 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
239851 9.3 危険 black ice - Black Ice Barcode SDK の BITIFF.BITiffCtrl.1 ActiveX コントロールにおけるスタックベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2008-2693 2012-06-26 16:02 2008-06-13 Show GitHub Exploit DB Packet Storm
239852 9.3 危険 BrowserCRM - BrowserCRM における PHP リモートファイルインクルージョンの脆弱性 CWE-94
コード・インジェクション 		CVE-2008-2690 2012-06-26 16:02 2008-06-13 Show GitHub Exploit DB Packet Storm
239853 10 危険 BrowserCRM - BrowserCRM の pub/clients.php における PHP リモートファイルインクルージョンの脆弱性 CWE-94
コード・インジェクション 		CVE-2008-2689 2012-06-26 16:02 2008-06-13 Show GitHub Exploit DB Packet Storm
239854 7.5 危険 flux cms - Flux CMS の webinc/bxe/scripts/loadsave.php における任意のコードを実行される脆弱性 CWE-20
不適切な入力確認 		CVE-2008-2686 2012-06-26 16:02 2008-06-13 Show GitHub Exploit DB Packet Storm
239855 7.5 危険 battleblog - Battle Blog の article.asp における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-2685 2012-06-26 16:02 2008-06-12 Show GitHub Exploit DB Packet Storm
239856 9.3 危険 black ice - Black Ice Barcode SDK の BIDIB.BIDIBCtrl.1 ActiveX コントロールにおける任意のコードを実行される脆弱性 CWE-94
コード・インジェクション 		CVE-2008-2684 2012-06-26 16:02 2008-06-12 Show GitHub Exploit DB Packet Storm
239857 9.3 危険 black ice - Black Ice Barcode SDK の BIDIB.BIDIBCtrl.1 ActiveX コントロールにおける任意のファイルのダウンロードされる脆弱性 CWE-20
不適切な入力確認 		CVE-2008-2683 2012-06-26 16:02 2008-06-12 Show GitHub Exploit DB Packet Storm
239858 7.5 危険 erfurtwiki - ErfurtWiki におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2008-2672 2012-06-26 16:02 2008-06-11 Show GitHub Exploit DB Packet Storm
239859 7.5 危険 dcfm blog - DCFM Blog の comments.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-2671 2012-06-26 16:02 2008-06-11 Show GitHub Exploit DB Packet Storm
239860 5.1 警告 SUSE - SUSE openSUSE および他のプラットフォーム上の Courier Authentication Library における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-2667 2012-06-26 16:02 2008-07-7 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:April 20, 2026, 4:09 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
307201 - oracle database_11g Unspecified vulnerability in the Password Policy component in Oracle Database 11.1.0.6 allows remote authenticated users to affect confidentiality via unknown vectors. NVD-CWE-noinfo
CVE-2009-0988 2012-10-23 12:04 2009-04-15 Show GitHub Exploit DB Packet Storm
307202 - oracle e-business_suite
e-business_suite_12 		Unspecified vulnerability in the Oracle Applications Framework component in Oracle E-Business Suite 12.0.6 and 11i10CU2 allows remote attackers to affect integrity via unknown vectors. NVD-CWE-noinfo
CVE-2009-0995 2012-10-23 12:04 2009-04-15 Show GitHub Exploit DB Packet Storm
307203 - oracle database_server Unspecified vulnerability in the Database Vault component in Oracle Database 11.1.0.6 allows remote authenticated users to affect confidentiality, related to DBMS_SYS_SQL. NVD-CWE-noinfo
CVE-2009-0997 2012-10-23 12:04 2009-04-15 Show GitHub Exploit DB Packet Storm
307204 - oracle jd_edwards_enterpriseone
peoplesoft_enterprise 		Unspecified vulnerability in the PeopleSoft Enterprise HRMS - eBenefits component in Oracle PeopleSoft Enterprise and JD Edwards EnterpriseOne 8.9.18 and 9.0.8 allows remote authenticated users to af… NVD-CWE-noinfo
CVE-2009-0998 2012-10-23 12:04 2009-04-15 Show GitHub Exploit DB Packet Storm
307205 - oracle e-business_suite Unspecified vulnerability in the Oracle Application Object Library component in Oracle E-Business Suite 12.0.6 allows remote attackers to affect confidentiality, integrity, and availability via unkno… NVD-CWE-noinfo
CVE-2009-0999 2012-10-23 12:04 2009-04-15 Show GitHub Exploit DB Packet Storm
307206 - oracle e-business_suite The Oracle Applications Framework component in Oracle E-Business Suite 12.0.6 and 11i10CU2 uses default passwords for unspecified "FND Applications Users (not DB users)," which has unknown impact and… CWE-255
Credentials Management 		CVE-2009-1000 2012-10-23 12:04 2009-04-15 Show GitHub Exploit DB Packet Storm
307207 - oracle bea_product_suite Unspecified vulnerability in the WebLogic Server component in BEA Product Suite 10.3 allows remote attackers to affect confidentiality and integrity via unknown vectors. NVD-CWE-noinfo
CVE-2009-1004 2012-10-23 12:04 2009-04-15 Show GitHub Exploit DB Packet Storm
307208 - oracle bea_product_suite Unspecified vulnerability in the Oracle Data Service Integrator (AquaLogic Data Services Platform) component in BEA Product Suite 10.3.0, 3.2, 3.0.1, and 3.0 allows local users to affect confidential… NVD-CWE-noinfo
CVE-2009-1005 2012-10-23 12:04 2009-04-15 Show GitHub Exploit DB Packet Storm
307209 - oracle jrockit Unspecified vulnerability in the JRockit component in BEA Product Suite R27.6.2 and earlier, with SDK/JRE 1.4.2, JRE/JDK 5, and JRE/JDK 6, allows remote attackers to affect confidentiality, integrity… NVD-CWE-noinfo
CVE-2009-1006 2012-10-23 12:04 2009-04-15 Show GitHub Exploit DB Packet Storm
307210 - oracle database_server Unspecified vulnerability in the Data Mining component in Oracle Database 10.2.0.4 allows remote authenticated users to affect confidentiality, integrity, and availability, related to SYS.DMP_SYS. NVD-CWE-noinfo
CVE-2009-1007 2012-10-23 12:04 2009-10-23 Show GitHub Exploit DB Packet Storm