Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Feb. 9, 2026, 12:59 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
240531 4.3 警告 gadu-gadu - Gadu-Gadu の GG Client の HandleEmotsConfig 関数におけるバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2007-6411 2012-06-26 15:54 2007-12-17 Show GitHub Exploit DB Packet Storm
240532 4.3 警告 gadu-gadu - Gadu-Gadu におけるクロスサイトリクエストフォージェリ攻撃の脆弱性 CWE-352
同一生成元ポリシー違反 		CVE-2007-6410 2012-06-26 15:54 2007-12-17 Show GitHub Exploit DB Packet Storm
240533 4.3 警告 gadu-gadu - Gadu-Gadu の gg プロトコルハンドラにおけるサービス運用妨害 (DoS) の脆弱性 CWE-16
環境設定 		CVE-2007-6409 2012-06-26 15:54 2007-12-17 Show GitHub Exploit DB Packet Storm
240534 4.3 警告 CA Technologies - CA eTrust Threat Management Console におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2007-6406 2012-06-26 15:54 2007-12-17 Show GitHub Exploit DB Packet Storm
240535 6.5 警告 ace image hosting script - Ace Image Hosting Script の albums.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2007-6393 2012-06-26 15:54 2007-12-17 Show GitHub Exploit DB Packet Storm
240536 7.5 危険 dominion web - DWdirectory における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2007-6392 2012-06-26 15:54 2007-12-17 Show GitHub Exploit DB Packet Storm
240537 2.1 注意 GNOME Project - GNOME screensaver の通知機能におけるクリップボードの内容などを読まれる脆弱性 CWE-DesignError
CVE-2007-6389 2012-06-26 15:54 2007-12-11 Show GitHub Exploit DB Packet Storm
240538 7.5 危険 BEAシステムズ - BEA WebLogic Mobility Server の Image Converter 機能におけるアプリケーションファイルおよびリソースアクセス権を取得される脆弱性 CWE-287
不適切な認証 		CVE-2007-6384 2012-06-26 15:54 2007-12-14 Show GitHub Exploit DB Packet Storm
240539 5.5 警告 chandler project - Cosmo のDAV コンポーネントにおける他ユーザのホームコレクションの任意のリソースを作成される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2007-6383 2012-06-26 15:54 2007-12-14 Show GitHub Exploit DB Packet Storm
240540 7.5 危険 e-xoops - exoops における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2007-6380 2012-06-26 15:54 2007-12-14 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:April 19, 2026, 4:09 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
291841 - powie pforum SQL injection vulnerability in showprofil.php in Powie PSCRIPT Forum (aka PHP Forum or pForum) 1.30 and earlier allows remote attackers to execute arbitrary SQL commands via the id parameter. CWE-89
SQL Injection 		CVE-2008-4355 2017-09-29 10:32 2008-10-1 Show GitHub Exploit DB Packet Storm
291842 - powie pforum The vulnerability is reported in version 1.30. Other versions may also be affected but have not been proven. CWE-89
SQL Injection 		CVE-2008-4355 2017-09-29 10:32 2008-10-1 Show GitHub Exploit DB Packet Storm
291843 - kasseler-cms kasseler_cms Multiple SQL injection vulnerabilities in Kasseler CMS 1.1.0 and 1.2.0 allow remote attackers to execute arbitrary SQL commands via (1) the nid parameter to index.php in a View action to the News mod… CWE-89
SQL Injection 		CVE-2008-4356 2017-09-29 10:32 2008-10-1 Show GitHub Exploit DB Packet Storm
291844 - powie plink SQL injection vulnerability in linkto.php in Powie pLink 2.07 allows remote attackers to execute arbitrary SQL commands via the id parameter. CWE-89
SQL Injection 		CVE-2008-4357 2017-09-29 10:32 2008-10-1 Show GitHub Exploit DB Packet Storm
291845 - powerportal powerportal Directory traversal vulnerability in PowerPortal 2.0.13 allows remote attackers to list and possibly read arbitrary files via a .. (dot dot) in the path parameter to the default URI. CWE-22
Path Traversal 		CVE-2008-4361 2017-09-29 10:32 2008-10-1 Show GitHub Exploit DB Packet Storm
291846 - deslock deslock The Virtual Token driver (vdlptokn.sys) 1.0.2.43 in DESlock+ 3.2.7 allows local users to cause a denial of service (system crash) via a crafted IOCTL request to \Device\DLPTokenWalter0. CWE-399
 Resource Management Errors 		CVE-2008-4362 2017-09-29 10:32 2008-10-1 Show GitHub Exploit DB Packet Storm
291847 - deslock deslock DLMFENC.sys 1.0.0.28 in DESlock+ 3.2.7 allows local users to cause a denial of service (system crash) or potentially execute arbitrary code via a certain DLMFENC_IOCTL request to \\.\DLKPFSD_Device t… CWE-20
 Improper Input Validation  		CVE-2008-4363 2017-09-29 10:32 2008-10-1 Show GitHub Exploit DB Packet Storm
291848 - camera_life camera_life Unrestricted file upload vulnerability in the image upload component in Camera Life 2.6.2b4 allows remote authenticated users to execute arbitrary code by uploading a file with an executable extensio… CWE-20
 Improper Input Validation  		CVE-2008-4366 2017-09-29 10:32 2008-10-1 Show GitHub Exploit DB Packet Storm
291849 - availscript availscript_photo_album SQL injection vulnerability in pics.php in Availscript Photo Album allows remote attackers to execute arbitrary SQL commands via the sid parameter. CWE-89
SQL Injection 		CVE-2008-4369 2017-09-29 10:32 2008-10-2 Show GitHub Exploit DB Packet Storm
291850 - availscript availscript_photo_album Multiple cross-site scripting (XSS) vulnerabilities in Availscript Photo Album allow remote attackers to inject arbitrary web script or HTML via the (1) sid parameter to pics.php and the (2) a parame… CWE-79
Cross-site Scripting 		CVE-2008-4370 2017-09-29 10:32 2008-10-2 Show GitHub Exploit DB Packet Storm