Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Feb. 9, 2026, 12:59 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
239921 4.3 警告 dotCMS - dotCMS の search-results.dot におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2008-2397 2012-06-26 16:02 2008-05-21 Show GitHub Exploit DB Packet Storm
239922 7.5 危険 alkalinephp - AlkalinePHP の thread.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-2395 2012-06-26 16:02 2008-05-21 Show GitHub Exploit DB Packet Storm
239923 7.5 危険 entertainmentscript - EntertainmentScript の play.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-2393 2012-06-26 16:02 2008-05-21 Show GitHub Exploit DB Packet Storm
239924 7.8 危険 Subsonic AS - SubSonic におけるサービス運用妨害 (DoS) の脆弱性 CWE-20
不適切な入力確認 		CVE-2008-2391 2012-06-26 16:02 2008-05-21 Show GitHub Exploit DB Packet Storm
239925 5.1 警告 courier-mta - Courier-Authlib の authpgsqllib.c における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-2380 2012-06-26 16:02 2008-12-22 Show GitHub Exploit DB Packet Storm
239926 7.6 危険 GNU Project - GnuTLS の libgnutls におけるサービス運用妨害 (DoS) の脆弱性 CWE-119
バッファエラー 		CVE-2008-2377 2012-06-26 16:02 2008-08-8 Show GitHub Exploit DB Packet Storm
239927 7.2 危険 fedora 8
レッドハット		 - system-config-network の consolehelper デフォルト設定におけるネットワーク設定を変更される脆弱性 CWE-16
環境設定 		CVE-2008-2359 2012-06-26 16:02 2008-05-28 Show GitHub Exploit DB Packet Storm
239928 7.5 危険 archangelmgt - Archangel Weblog の index.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-2356 2012-06-26 16:02 2008-05-20 Show GitHub Exploit DB Packet Storm
239929 7.5 危険 gnugallery - GNU/Gallery の admin.php におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2008-2353 2012-06-26 16:02 2008-05-20 Show GitHub Exploit DB Packet Storm
239930 5 警告 bcoos - bcoos の highlight.php におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2008-2350 2012-06-26 16:02 2008-05-20 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:April 22, 2026, 4 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
256881 - microsoft windows_2000
windows_2003_server
windows_xp 		Microsoft Windows 2000, XP, and possibly 2003 allows local users with the SeDebugPrivilege privilege to execute arbitrary code as kernel and read or write kernel memory via the NtSystemDebugControl f… NVD-CWE-Other
CVE-2004-2339 2024-08-8 11:15 2004-12-31 Show GitHub Exploit DB Packet Storm
256882 - apache http_server Apache HTTP Server 2.0.47 and earlier allows local users to bypass .htaccess file restrictions, as specified in httpd.conf with directives such as Deny From All, by using an ErrorDocument directive. … NVD-CWE-Other
CVE-2004-2343 2024-08-8 11:15 2004-12-31 Show GitHub Exploit DB Packet Storm
256883 - mozilla firefox Mozilla Firefox 1.5.0.1, and possibly other versions, preserves some records of user activity even after uninstalling, which allows local users who share a Windows profile to view the records after a… NVD-CWE-Other
CVE-2004-2657 2024-08-8 11:15 2004-12-31 Show GitHub Exploit DB Packet Storm
256884 - zonelabs zonealarm Zone Alarm Pro 1.0 through 5.1 gives full access to %windir%\Internet Logs\* to the EVERYONE group, which allows local users to cause a denial of service by modifying the folder contents or permissio… CWE-264
Permissions, Privileges, and Access Controls 		CVE-2004-2713 2024-08-8 11:15 2004-12-31 Show GitHub Exploit DB Packet Storm
256885 - nessus nessus Nessus 2.0.10a stores account passwords in plaintext in .nessusrc files, which allows local users to obtain passwords. NOTE: the original researcher reports that the vendor has disputed this issue CWE-255
Credentials Management 		CVE-2004-2722 2024-08-8 11:15 2004-12-31 Show GitHub Exploit DB Packet Storm
256886 - php php PHP treats unknown methods such as "PoSt" as a GET request, which could allow attackers to intended access restrictions if PHP is running on a server that passes on all methods, such as Apache httpd … NVD-CWE-Other
CVE-2003-0249 2024-08-8 11:15 2003-12-31 Show GitHub Exploit DB Packet Storm
256887 - ibm lotus_domino NOTE: this issue has been disputed by the vendor. Cross-site scripting (XSS) vulnerability in IBM Lotus Notes R6 and Domino R6, and possibly earlier versions, allows remote attackers to execute arbi… NVD-CWE-Other
CVE-2004-1621 2024-08-8 10:15 2004-10-18 Show GitHub Exploit DB Packet Storm
256888 - khaled_mardam-bey mirc Buffer overflow in mIRC 5.91, 6.03, 6.12, and 6.16 allows local users to execute arbitrary code via a long string that is entered after reaching the DCC Get Folder Dialog. NOTE: this issue has been … NVD-CWE-Other
CVE-2005-4681 2024-08-8 09:15 2005-12-31 Show GitHub Exploit DB Packet Storm
256889 - - - Cross-site scripting (XSS) vulnerability in Fidra Lighthouse CMS 1.1.0 and earlier allows remote attackers to inject arbitrary web script or HTML via the search parameter in a query_string to the hom… NVD-CWE-Other
CVE-2005-4780 2024-08-8 09:15 2005-12-31 Show GitHub Exploit DB Packet Storm
256890 - turnkey_solutions sunshop_shopping_cart Turnkey Web Tools SunShop Shopping Cart allows remote attackers to obtain sensitive information via a phpinfo action to (1) index.php, (2) admin/index.php, and (3) admin/adminindex.php, which execute… NVD-CWE-Other
CVE-2005-4787 2024-08-8 09:15 2005-12-31 Show GitHub Exploit DB Packet Storm