Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Feb. 9, 2026, 12:59 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
240031 7.5 危険 chadha software technologies - PHPKB の comment.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-1909 2012-06-26 16:02 2008-04-22 Show GitHub Exploit DB Packet Storm
240032 7.5 危険 cpcommerce - cpCommerce におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2008-1908 2012-06-26 16:02 2008-04-22 Show GitHub Exploit DB Packet Storm
240033 7.5 危険 cpcommerce - cpCommerce の functions/display_page.func.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-1907 2012-06-26 16:02 2008-04-22 Show GitHub Exploit DB Packet Storm
240034 4.3 警告 cpcommerce - cpCommerce の calendar.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2008-1906 2012-06-26 16:02 2008-04-22 Show GitHub Exploit DB Packet Storm
240035 7.5 危険 easy-scripts - Tr Script News の news.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-1957 2012-06-26 16:02 2008-04-25 Show GitHub Exploit DB Packet Storm
240036 7.5 危険 cicoandcico - Cicoandcico CcMail における "admin エリア" へのアクセス権を取得される脆弱性 CWE-287
不適切な認証 		CVE-2008-1904 2012-06-26 16:02 2008-04-22 Show GitHub Exploit DB Packet Storm
240037 5 警告 Debian - aptlinex の GUI におけるパッケージを削除される脆弱性 CWE-DesignError
CVE-2008-1902 2012-06-26 16:02 2008-04-17 Show GitHub Exploit DB Packet Storm
240038 7.2 危険 Debian - aptlinex における任意のファイルを上書きされる脆弱性 CWE-59
リンク解釈の問題 		CVE-2008-1901 2012-06-26 16:02 2008-04-17 Show GitHub Exploit DB Packet Storm
240039 7.5 危険 carboncommunities - Carbon Communities の option_Update.asp における任意のメンバ情報を編集される脆弱性 CWE-DesignError
CVE-2008-1900 2012-06-26 16:02 2008-04-22 Show GitHub Exploit DB Packet Storm
240040 4.3 警告 Digium - Asterisk Open Source の IAX2 チャネルドライバにおけるサービス運用妨害 (DoS) の脆弱性 CWE-287
不適切な認証 		CVE-2008-1897 2012-06-26 16:02 2008-04-22 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:April 25, 2026, 4:08 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
291551 - apache
suse 		http_server
suse_linux 		The default configuration of Apache 1.3.12 in SuSE Linux 6.4 allows remote attackers to read source code for CGI scripts by replacing the /cgi-bin/ in the requested URL with /cgi-bin-sdb/. NVD-CWE-Other
CVE-2000-0868 2017-10-10 10:29 2000-11-14 Show GitHub Exploit DB Packet Storm
291552 - apache
suse 		http_server
suse_linux 		The default configuration of Apache 1.3.12 in SuSE Linux 6.4 enables WebDAV, which allows remote attackers to list arbitrary directories via the PROPFIND HTTP request method. NVD-CWE-Other
CVE-2000-0869 2017-10-10 10:29 2000-11-14 Show GitHub Exploit DB Packet Storm
291553 - khamil_landross_and_zack_jones eftp Buffer overflow in EFTP allows remote attackers to cause a denial of service via a long string. NVD-CWE-Other
CVE-2000-0870 2017-10-10 10:29 2000-11-14 Show GitHub Exploit DB Packet Storm
291554 - khamil_landross_and_zack_jones eftp Buffer overflow in EFTP allows remote attackers to cause a denial of service by sending a string that does not contain a newline, then disconnecting from the server. NVD-CWE-Other
CVE-2000-0871 2017-10-10 10:29 2000-11-14 Show GitHub Exploit DB Packet Storm
291555 - ibm aix netstat in AIX 4.x.x does not properly restrict access to the -Zi option, which allows local users to clear network interface statistics and possibly hide evidence of unusual network activities. NVD-CWE-Other
CVE-2000-0873 2017-10-10 10:29 2000-11-14 Show GitHub Exploit DB Packet Storm
291556 - qualcomm eudora Eudora mail client includes the absolute path of the sender's host within a virtual card (VCF). NVD-CWE-Other
CVE-2000-0874 2017-10-10 10:29 2000-11-14 Show GitHub Exploit DB Packet Storm
291557 - texas_imperial_software wftpd
wftpd_pro 		WFTPD and WFTPD Pro 2.41 RC12 allows remote attackers to cause a denial of service by sending a long string of unprintable characters. NVD-CWE-Other
CVE-2000-0875 2017-10-10 10:29 2000-11-14 Show GitHub Exploit DB Packet Storm
291558 - texas_imperial_software wftpd
wftpd_pro 		WFTPD and WFTPD Pro 2.41 RC12 allows remote attackers to obtain the full pathname of the server via a "%C" command, which generates an error message that includes the pathname. CWE-200
Information Exposure 		CVE-2000-0876 2017-10-10 10:29 2000-11-14 Show GitHub Exploit DB Packet Storm
291559 - ranson_johnson mailform mailform.pl CGI script in MailForm 2.0 allows remote attackers to read arbitrary files by specifying the file name in the XX-attach_file parameter, which MailForm then sends to the attacker. NVD-CWE-Other
CVE-2000-0877 2017-10-10 10:29 2000-11-14 Show GitHub Exploit DB Packet Storm
291560 - ranson_johnson mailto_cgi_script The mailto CGI script allows remote attacker to execute arbitrary commands via shell metacharacters in the emailadd form field. NVD-CWE-Other
CVE-2000-0878 2017-10-10 10:29 2000-11-14 Show GitHub Exploit DB Packet Storm