Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Feb. 9, 2026, 12:59 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
240251 7.2 危険 freshmeat
Debian		 - Debian GNU/Linux の XWine の w_editeur.c における任意のファイルを上書きされる脆弱性 CWE-59
リンク解釈の問題 		CVE-2008-0930 2012-06-26 15:55 2008-02-26 Show GitHub Exploit DB Packet Storm
240252 7.5 危険 becontent - beContent の news.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-0921 2012-06-26 15:55 2008-02-22 Show GitHub Exploit DB Packet Storm
240253 7.5 危険 astats
Joomla!		 - Joomla! の astatspro コンポーネントの includes/count_dl_or_link.inc.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-0918 2012-06-26 15:55 2008-02-22 Show GitHub Exploit DB Packet Storm
240254 7.5 危険 エフ・セキュア - 複数の F-Secure アンチウイルス製品におけるマルウェアを回避される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2008-0910 2012-06-26 15:55 2008-02-22 Show GitHub Exploit DB Packet Storm
240255 7.8 危険 bea systems - BEA Plumtree Collaboration SP2 における任意のファイルを読まれる脆弱性 CWE-200
情報漏えい 		CVE-2008-0904 2012-06-26 15:55 2008-02-22 Show GitHub Exploit DB Packet Storm
240256 4.9 警告 bea systems - BEA WebLogic Portal MP1 におけるアクセス制限を回避される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2008-0896 2012-06-26 15:55 2008-02-22 Show GitHub Exploit DB Packet Storm
240257 6.8 警告 アップル - Apple Safari における重要なメモリコンテンツを取得される脆弱性 CWE-DesignError
CVE-2008-0894 2012-06-26 15:55 2008-02-21 Show GitHub Exploit DB Packet Storm
240258 7.5 危険 BEAシステムズ - BEA WebLogic Portal Maintenance Pack 2 におけるセッションを傍受される脆弱性 CWE-59
リンク解釈の問題 		CVE-2008-0870 2012-06-26 15:55 2008-02-20 Show GitHub Exploit DB Packet Storm
240259 4.3 警告 BEAシステムズ - BEA WebLogic Workshop におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2008-0869 2012-06-26 15:55 2008-02-20 Show GitHub Exploit DB Packet Storm
240260 4.3 警告 BEAシステムズ - BEA WebLogic Portal Maintenance Pack 1 の Groupspace におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2008-0868 2012-06-26 15:55 2008-02-20 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:April 23, 2026, 4 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
291631 - cale_dunlap openinvoice resetpass.php in openInvoice 0.90 beta and earlier allows remote authenticated users to change the passwords of arbitrary users via a modified uid parameter. NOTE: this can be leveraged with a separ… CWE-255
Credentials Management 		CVE-2008-6524 2017-09-29 10:33 2009-03-26 Show GitHub Exploit DB Packet Storm
291632 - nicephpscripts nice_php_faq_script SQL injection vulnerability in the Admin Panel in Nice PHP FAQ Script (Knowledge base Script) allows remote attackers to execute arbitrary SQL commands via the Password parameter (aka the pass field). CWE-89
SQL Injection 		CVE-2008-6525 2017-09-29 10:33 2009-03-26 Show GitHub Exploit DB Packet Storm
291633 - bosdev bos_classifieds SQL injection vulnerability in index.php in BosDev BosClassifieds allows remote attackers to execute arbitrary SQL commands via the cat_id parameter, a different vector than CVE-2008-1838. CWE-89
SQL Injection 		CVE-2008-6526 2017-09-29 10:33 2009-03-26 Show GitHub Exploit DB Packet Storm
291634 - go4i go41.net_asp_forum SQL injection vulnerability in forum.asp in GO4I.NET ASP Forum 1.0 allows remote attackers to execute arbitrary SQL commands via the iFor parameter. CWE-89
SQL Injection 		CVE-2008-6527 2017-09-29 10:33 2009-03-26 Show GitHub Exploit DB Packet Storm
291635 - ezonescripts living_local Cross-site scripting (XSS) vulnerability in listtest.php in eZoneScripts Living Local 1.1 allows remote attackers to inject arbitrary web script or HTML via the r parameter. CWE-79
Cross-site Scripting 		CVE-2008-6529 2017-09-29 10:33 2009-03-27 Show GitHub Exploit DB Packet Storm
291636 - ezonescripts living_local Unrestricted file upload vulnerability in editimage.php in eZoneScripts Living Local 1.1 allows remote authenticated administrators to execute arbitrary PHP code by uploading a file with an executabl… NVD-CWE-Other
CVE-2008-6530 2017-09-29 10:33 2009-03-27 Show GitHub Exploit DB Packet Storm
291637 - paypalestores paypal_estores admin/settings.php in PayPal eStores allows remote attackers to bypass intended access restrictions and change the administrative password via a direct request with a modified NewAdmin parameter. CWE-264
Permissions, Privileges, and Access Controls 		CVE-2008-6535 2017-09-29 10:33 2009-03-27 Show GitHub Exploit DB Packet Storm
291638 - lightneasy lightneasy LightNEasy/lightneasy.php in LightNEasy No database version 1.2 allows remote attackers to obtain the hash of the administrator password via the setup "do" action to LightNEasy.php, which is cleared … CWE-200
Information Exposure 		CVE-2008-6537 2017-09-29 10:33 2009-03-30 Show GitHub Exploit DB Packet Storm
291639 - holger_schurig destar DeStar 0.2.2-5 allows remote attackers to add arbitrary users via a direct request to config/add/CfgOptUser. CWE-20
 Improper Input Validation  		CVE-2008-6538 2017-09-29 10:33 2009-03-30 Show GitHub Exploit DB Packet Storm
291640 - holger_schurig destar Static code injection vulnerability in user/settings/ in DeStar 0.2.2-5 allows remote authenticated users to add arbitrary administrators and inject arbitrary Python code into destar_cfg.py via a cra… CWE-94
Code Injection 		CVE-2008-6539 2017-09-29 10:33 2009-03-30 Show GitHub Exploit DB Packet Storm