Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":June 18, 2026, 12:01 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
240061	7.5	危険	Owl Intranet Engine	-	Steve Bourgeois and Chris Vincent Owl Intranet Knowledgebase における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2008-3359	2012-09-25 17:17	2008-07-29	Show	GitHub Exploit DB Packet Storm

240062	7.2	危険	ingres	-	Linux 上などの Ingres の ingvalidpw における権限を取得される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2008-3357	2012-09-25 17:17	2008-08-1	Show	GitHub Exploit DB Packet Storm

240063	4.6	警告	ingres	-	Linux 上などで Ingres の verifydb における任意のファイルを上書きされる脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2008-3356	2012-09-25 17:17	2008-08-1	Show	GitHub Exploit DB Packet Storm

240064	7.5	危険	nersoft	-	Live Music Plus の index.php における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2008-3352	2012-09-25 17:17	2008-07-28	Show	GitHub Exploit DB Packet Storm

240065	4.3	警告	myiosoft	-	MyioSoft EasyDynamicPages におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2008-3348	2012-09-25 17:17	2008-07-28	Show	GitHub Exploit DB Packet Storm

240066	7.5	危険	myiosoft	-	MyioSoft EasyDynamicPages における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2008-3347	2012-09-25 17:17	2008-07-28	Show	GitHub Exploit DB Packet Storm

240067	6.8	警告	myiosoft	-	MyioSoft EasyE-Cards の staticpages/easyecards/index.php における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2008-3345	2012-09-25 17:17	2008-07-28	Show	GitHub Exploit DB Packet Storm

240068	4.3	警告	myiosoft	-	MyioSoft EasyE-Cards trial edition (tr) の staticpages/easyecards/index.php におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2008-3344	2012-09-25 17:17	2008-07-28	Show	GitHub Exploit DB Packet Storm

240069	7.5	危険	myiosoft	-	MyioSoft EasyPublish の staticpages/easypublish/index.php における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2008-3343	2012-09-25 17:17	2008-07-28	Show	GitHub Exploit DB Packet Storm

240070	4.3	警告	myiosoft	-	MyioSoft EasyPublish におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2008-3342	2012-09-25 17:17	2008-07-28	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:June 18, 2026, 4 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
269001	6.3	MEDIUM Network	oracle	flexcube_universal_banking	Vulnerability in the Oracle FLEXCUBE Universal Banking component of Oracle Financial Services Applications (subcomponent: Core). Supported versions that are affected are 11.3.0, 11.4.0, 12.0.1, 12.0.…	CWE-284 Improper Access Control	CVE-2016-8299	2024-11-21 11:59	2017-01-28	Show	GitHub Exploit DB Packet Storm

269002	8.1	HIGH Network	oracle	flexcube_private_banking	Vulnerability in the Oracle FLEXCUBE Private Banking component of Oracle Financial Services Applications (subcomponent: Product / Instrument Search). Supported versions that are affected are 2.0.1, 2…	CWE-284 Improper Access Control	CVE-2016-8298	2024-11-21 11:59	2017-01-28	Show	GitHub Exploit DB Packet Storm

269003	8.1	HIGH Network	oracle	flexcube_universal_banking	Vulnerability in the Oracle FLEXCUBE Universal Banking component of Oracle Financial Services Applications (subcomponent: Core). Supported versions that are affected are 11.3.0, 11.4.0, 12.0.1, 12.0.…	CWE-284 Improper Access Control	CVE-2016-8297	2024-11-21 11:59	2017-01-28	Show	GitHub Exploit DB Packet Storm

269004	6.1	MEDIUM Network	oracle	flexcube_private_banking	Vulnerability in the Oracle FLEXCUBE Private Banking component of Oracle Financial Services Applications (subcomponent: Product / Instrument Search). Supported versions that are affected are 2.0.1, 2…	CWE-284 Improper Access Control	CVE-2016-8282	2024-11-21 11:59	2017-01-28	Show	GitHub Exploit DB Packet Storm

269005	5.3	MEDIUM Network	moodle	moodle	In Moodle 2.x and 3.x, the capability to view course notes is checked in the wrong context.	CWE-264 Permissions, Privileges, and Access Controls	CVE-2016-8644	2024-11-21 11:59	2017-01-20	Show	GitHub Exploit DB Packet Storm

269006	4.3	MEDIUM Network	moodle	moodle	In Moodle 2.x and 3.x, non-admin site managers may accidentally edit admins via web services.	CWE-284 Improper Access Control	CVE-2016-8643	2024-11-21 11:59	2017-01-20	Show	GitHub Exploit DB Packet Storm

269007	5.3	MEDIUM Network	moodle	moodle	In Moodle 2.x and 3.x, the question engine allows access to files that should not be available.	CWE-284 Improper Access Control	CVE-2016-8642	2024-11-21 11:59	2017-01-20	Show	GitHub Exploit DB Packet Storm

269008	5.9	MEDIUM Network	matrixssl	matrixssl	The pstm_exptmod function in MatrixSSL 3.8.6 and earlier does not properly perform modular exponentiation, which might allow remote attackers to predict the secret key via unspecified vectors. NOTE: …	CWE-200 Information Exposure	CVE-2016-8671	2024-11-21 11:59	2017-01-14	Show	GitHub Exploit DB Packet Storm

269009	5.5	MEDIUM Local	google	android	An elevation of privilege vulnerability in the bootloader could enable a local attacker to execute arbitrary modem commands on the device. This issue is rated as High because it is a local permanent …	CWE-264 Permissions, Privileges, and Access Controls	CVE-2016-8467	2024-11-21 11:59	2017-01-14	Show	GitHub Exploit DB Packet Storm

269010	9.8	CRITICAL Network	gnu fedoraproject	guile fedora	The REPL server (--listen) in GNU Guile 2.0.12 allows an attacker to execute arbitrary code via an HTTP inter-protocol attack.	CWE-284 Improper Access Control	CVE-2016-8606	2024-11-21 11:59	2017-01-13	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed