Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Feb. 9, 2026, 12:59 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
239981 4.3 警告 ASP indir - Angelo-Emlak の hpz/admin/Default.asp におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2008-2048 2012-06-26 16:02 2008-05-1 Show GitHub Exploit DB Packet Storm
239982 7.5 危険 ASP indir - Angelo-Emlak における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-2047 2012-06-26 16:02 2008-05-1 Show GitHub Exploit DB Packet Storm
239983 4.3 警告 cPanel - cPanel におけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反 		CVE-2008-2043 2012-06-26 16:02 2008-05-1 Show GitHub Exploit DB Packet Storm
239984 10 危険 EGroupware - eGroupWare における詳細不明な脆弱性 CWE-94
コード・インジェクション 		CVE-2008-2041 2012-06-26 16:02 2008-04-30 Show GitHub Exploit DB Packet Storm
239985 3.5 注意 editeurscripts - EditeurScripts EsContacts におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2008-2037 2012-06-26 16:02 2008-04-30 Show GitHub Exploit DB Packet Storm
239986 7.5 危険 dream4 - dream4 Koobi Pro の index.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-2036 2012-06-26 16:02 2008-04-30 Show GitHub Exploit DB Packet Storm
239987 5 警告 acritum - Acritum Femitter Server の FTP サービスにおけるサービス運用妨害 (DoS) の脆弱性 CWE-20
不適切な入力確認 		CVE-2008-2032 2012-06-26 16:02 2008-04-30 Show GitHub Exploit DB Packet Storm
239988 4.3 警告 F5 Networks - F5 FirePass 4100 SSL VPN の installControl.php3 におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2008-2030 2012-06-26 16:02 2008-04-30 Show GitHub Exploit DB Packet Storm
239989 6.8 警告 e107.org
webze
opendb
labgab
TorrentFlux
PHPNUKE
my123tkshop
phpmybittorrent		 - Francisco Burzi PHP-Nuke などの製品で使用される CAPTCHA における CAPTCHA 検証を通過する脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2008-2020 2012-06-26 16:02 2008-04-29 Show GitHub Exploit DB Packet Storm
239990 7.5 危険 chilkat software - Chilek Content Management System におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2008-2017 2012-06-26 16:02 2008-04-29 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:April 24, 2026, 4 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
306641 - aol aol_server AOL AOLserver 3.4.2 Win32 allows remote attackers to bypass authentication and read password-protected files via a URL that directly references the file. NVD-CWE-Other
CVE-2002-0100 2016-10-18 11:16 2002-03-25 Show GitHub Exploit DB Packet Storm
306642 - oracle application_server_web_cache An installer program for Oracle9iAS Web Cache 2.0.0.x creates executable and configuration files with insecure permissions, which allows local users to gain privileges by (1) running webcached or (2)… NVD-CWE-Other
CVE-2002-0103 2016-10-18 11:16 2002-03-25 Show GitHub Exploit DB Packet Storm
306643 - aftpd aftpd AFTPD 5.4.4 allows remote attackers to gain sensitive information via a CD (CWD) ~ (tilde) command, which causes a core dump. NVD-CWE-Other
CVE-2002-0104 2016-10-18 11:16 2002-03-25 Show GitHub Exploit DB Packet Storm
306644 - caldera unixware CDE dtlogin in Caldera UnixWare 7.1.0, and possibly other operating systems, allows local users to gain privileges via a symlink attack on /var/dt/Xerrors since /var/dt is world-writable. NVD-CWE-Other
CVE-2002-0105 2016-10-18 11:16 2002-03-25 Show GitHub Exploit DB Packet Storm
306645 - bea weblogic_server BEA Systems Weblogic Server 6.1 allows remote attackers to cause a denial of service via a series of requests to .JSP files that contain an MS-DOS device name. NVD-CWE-Other
CVE-2002-0106 2016-10-18 11:16 2002-03-25 Show GitHub Exploit DB Packet Storm
306646 - cacheflow cacheos Web administration interface in CacheFlow CacheOS 4.0.13 and earlier allows remote attackers to obtain sensitive information via a series of GET requests that do not end in with HTTP/1.0 or another v… NVD-CWE-Other
CVE-2002-0107 2016-10-18 11:16 2002-03-25 Show GitHub Exploit DB Packet Storm
306647 - linksys befn2ps4
befsr41
befsr81 		Linksys EtherFast BEFN2PS4, BEFSR41, and BEFSR81 Routers, and possibly other products, allow remote attackers to gain sensitive information and cause a denial of service via an SNMP query for the def… NVD-CWE-Other
CVE-2002-0109 2016-10-18 11:16 2002-03-25 Show GitHub Exploit DB Packet Storm
306648 - nevrona_designs miramail Nevrona Designs MiraMail 1.04 and earlier stores authentication information such as POP usernames and passwords in plaintext in a .ini file, which allows an attacker to gain privileges by reading the… NVD-CWE-Other
CVE-2002-0110 2016-10-18 11:16 2002-03-25 Show GitHub Exploit DB Packet Storm
306649 - funsoft dinos_webserver Directory traversal vulnerability in Funsoft Dino's Webserver 1.2 and earlier allows remote attackers to read files or execute arbitrary commands via a .. (dot dot) in the URL. NVD-CWE-Other
CVE-2002-0111 2016-10-18 11:16 2002-03-25 Show GitHub Exploit DB Packet Storm
306650 - etype eserv Etype Eserv 2.97 allows remote attackers to view password protected files via /./ in the URL. NVD-CWE-Other
CVE-2002-0112 2016-10-18 11:16 2002-03-25 Show GitHub Exploit DB Packet Storm