Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 18, 2026, 6 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
240041 4.3 警告 Mono Project - Mono の ASP.net クラスライブラリにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2008-3422 2012-09-25 17:17 2008-07-31 Show GitHub Exploit DB Packet Storm
240042 7.5 危険 icebb - IceBB の modules/members.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2008-3416 2012-09-25 17:17 2008-07-31 Show GitHub Exploit DB Packet Storm
240043 6.8 警告 nazgulled - Ricardo Amaral nzFotolog の index.php におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル
CVE-2008-3405 2012-09-25 17:17 2008-07-31 Show GitHub Exploit DB Packet Storm
240044 4.3 警告 mdsjack - MJGuest の guestbook.js.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2008-3404 2012-09-25 17:17 2008-07-31 Show GitHub Exploit DB Packet Storm
240045 7.5 危険 mojoscripts - MojoPersonals の mojoClassified.cgi における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2008-3403 2012-09-25 17:17 2008-07-31 Show GitHub Exploit DB Packet Storm
240046 7.5 危険 Hscripts - HBS における PHP リモートファイルインクルージョンの脆弱性 CWE-94
コード・インジェクション
CVE-2008-3402 2012-09-25 17:17 2008-07-31 Show GitHub Exploit DB Packet Storm
240047 7.5 危険 Hscripts - HRA の hioxRandomAd.php における PHP リモートファイルインクルージョンの脆弱性 CWE-94
コード・インジェクション
CVE-2008-3401 2012-09-25 17:17 2008-07-31 Show GitHub Exploit DB Packet Storm
240048 4.3 警告 infomining - BookMine の search.cfm におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2008-3394 2012-09-25 17:17 2008-07-31 Show GitHub Exploit DB Packet Storm
240049 7.5 危険 infomining - BookMine の events.cfm における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2008-3393 2012-09-25 17:17 2008-07-31 Show GitHub Exploit DB Packet Storm
240050 6.8 警告 minishowcase - Minishowcase Image Gallery におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル
CVE-2008-3390 2012-09-25 17:17 2008-07-31 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 18, 2026, 4 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
269131 6.1 MEDIUM
Network
yandex yandex_browser XSS in Yandex Browser Translator in Yandex browser for desktop for versions from 15.12 to 16.2 could be used by remote attacker for evaluation arbitrary javascript code. CWE-79
Cross-site Scripting
CVE-2016-8506 2024-11-21 11:59 2016-10-27 Show GitHub Exploit DB Packet Storm
269132 6.1 MEDIUM
Network
yandex yandex.browser XSS in Yandex Browser BookReader in Yandex browser for desktop for versions before 16.6. could be used by remote attacker for evaluation arbitrary javascript code. CWE-79
Cross-site Scripting
CVE-2016-8505 2024-11-21 11:59 2016-10-27 Show GitHub Exploit DB Packet Storm
269133 4.3 MEDIUM
Network
yandex yandex_browser CSRF of synchronization form in Yandex Browser for desktop before version 16.6 could be used by remote attacker to steal saved data in browser profile. CWE-352
 Origin Validation Error
CVE-2016-8504 2024-11-21 11:59 2016-10-27 Show GitHub Exploit DB Packet Storm
269134 7.3 HIGH
Network
yandex yandex_browser Yandex Protect Anti-phishing warning in Yandex Browser for desktop from version 16.7 to 16.9 could be used by remote attacker for brute-forcing passwords from important web-resource with special Java… CWE-254
 7PK - Security Features
CVE-2016-8503 2024-11-21 11:59 2016-10-27 Show GitHub Exploit DB Packet Storm
269135 7.3 HIGH
Network
yandex yandex_browser Yandex Protect Anti-phishing warning in Yandex Browser for desktop from version 15.12.0 to 16.2 could be used by remote attacker for brute-forcing passwords from important web-resource with special J… CWE-254
 7PK - Security Features
CVE-2016-8502 2024-11-21 11:59 2016-10-27 Show GitHub Exploit DB Packet Storm
269136 5.3 MEDIUM
Network
yandex yandex_browser Security WiFi bypass in Yandex Browser from version 15.10 to 15.12 allows remote attacker to sniff traffic in open or WEP-protected wi-fi networks despite of special security mechanism is enabled. CWE-264
Permissions, Privileges, and Access Controls
CVE-2016-8501 2024-11-21 11:59 2016-10-27 Show GitHub Exploit DB Packet Storm
269137 7.6 HIGH
Network
oracle peoplesoft_enterprise_peopletools Unspecified vulnerability in the PeopleSoft Enterprise PeopleTools component in Oracle PeopleSoft Products 8.54 and 8.55 allows remote authenticated users to affect confidentiality and integrity via … CWE-284
Improper Access Control
CVE-2016-8296 2024-11-21 11:59 2016-10-25 Show GitHub Exploit DB Packet Storm
269138 4.3 MEDIUM
Network
oracle peoplesoft_enterprise_human_capital_management_time_and_labor Unspecified vulnerability in the PeopleSoft Enterprise HCM component in Oracle PeopleSoft Products 9.2 allows remote authenticated users to affect confidentiality via unknown vectors. CWE-200
Information Exposure
CVE-2016-8295 2024-11-21 11:59 2016-10-25 Show GitHub Exploit DB Packet Storm
269139 4.3 MEDIUM
Network
oracle peoplesoft_enterprise_peopletools Unspecified vulnerability in the PeopleSoft Enterprise PeopleTools component in Oracle PeopleSoft Products 8.54 and 8.55 allows remote authenticated users to affect confidentiality via unknown vector… CWE-200
Information Exposure
CVE-2016-8294 2024-11-21 11:59 2016-10-25 Show GitHub Exploit DB Packet Storm
269140 8.2 HIGH
Network
oracle peoplesoft_enterprise_peopletools Unspecified vulnerability in the PeopleSoft Enterprise PeopleTools component in Oracle PeopleSoft Products 8.54 and 8.55 allows remote attackers to affect confidentiality and integrity via vectors re… CWE-284
Improper Access Control
CVE-2016-8293 2024-11-21 11:59 2016-10-25 Show GitHub Exploit DB Packet Storm