Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Feb. 9, 2026, 12:59 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
240531 4.3 警告 gadu-gadu - Gadu-Gadu の GG Client の HandleEmotsConfig 関数におけるバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2007-6411 2012-06-26 15:54 2007-12-17 Show GitHub Exploit DB Packet Storm
240532 4.3 警告 gadu-gadu - Gadu-Gadu におけるクロスサイトリクエストフォージェリ攻撃の脆弱性 CWE-352
同一生成元ポリシー違反 		CVE-2007-6410 2012-06-26 15:54 2007-12-17 Show GitHub Exploit DB Packet Storm
240533 4.3 警告 gadu-gadu - Gadu-Gadu の gg プロトコルハンドラにおけるサービス運用妨害 (DoS) の脆弱性 CWE-16
環境設定 		CVE-2007-6409 2012-06-26 15:54 2007-12-17 Show GitHub Exploit DB Packet Storm
240534 4.3 警告 CA Technologies - CA eTrust Threat Management Console におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2007-6406 2012-06-26 15:54 2007-12-17 Show GitHub Exploit DB Packet Storm
240535 6.5 警告 ace image hosting script - Ace Image Hosting Script の albums.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2007-6393 2012-06-26 15:54 2007-12-17 Show GitHub Exploit DB Packet Storm
240536 7.5 危険 dominion web - DWdirectory における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2007-6392 2012-06-26 15:54 2007-12-17 Show GitHub Exploit DB Packet Storm
240537 2.1 注意 GNOME Project - GNOME screensaver の通知機能におけるクリップボードの内容などを読まれる脆弱性 CWE-DesignError
CVE-2007-6389 2012-06-26 15:54 2007-12-11 Show GitHub Exploit DB Packet Storm
240538 7.5 危険 BEAシステムズ - BEA WebLogic Mobility Server の Image Converter 機能におけるアプリケーションファイルおよびリソースアクセス権を取得される脆弱性 CWE-287
不適切な認証 		CVE-2007-6384 2012-06-26 15:54 2007-12-14 Show GitHub Exploit DB Packet Storm
240539 5.5 警告 chandler project - Cosmo のDAV コンポーネントにおける他ユーザのホームコレクションの任意のリソースを作成される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2007-6383 2012-06-26 15:54 2007-12-14 Show GitHub Exploit DB Packet Storm
240540 7.5 危険 e-xoops - exoops における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2007-6380 2012-06-26 15:54 2007-12-14 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:April 25, 2026, 4:08 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
292811 - cale_dunlap openinvoice auth.php in openInvoice 0.90 beta and earlier allows remote attackers to bypass authentication and gain privileges by setting the oiauth cookie. NOTE: this can be leveraged with a separate vulnerabi… CWE-287
Improper Authentication 		CVE-2008-6523 2017-09-29 10:33 2009-03-26 Show GitHub Exploit DB Packet Storm
292812 - cale_dunlap openinvoice resetpass.php in openInvoice 0.90 beta and earlier allows remote authenticated users to change the passwords of arbitrary users via a modified uid parameter. NOTE: this can be leveraged with a separ… CWE-255
Credentials Management 		CVE-2008-6524 2017-09-29 10:33 2009-03-26 Show GitHub Exploit DB Packet Storm
292813 - nicephpscripts nice_php_faq_script SQL injection vulnerability in the Admin Panel in Nice PHP FAQ Script (Knowledge base Script) allows remote attackers to execute arbitrary SQL commands via the Password parameter (aka the pass field). CWE-89
SQL Injection 		CVE-2008-6525 2017-09-29 10:33 2009-03-26 Show GitHub Exploit DB Packet Storm
292814 - bosdev bos_classifieds SQL injection vulnerability in index.php in BosDev BosClassifieds allows remote attackers to execute arbitrary SQL commands via the cat_id parameter, a different vector than CVE-2008-1838. CWE-89
SQL Injection 		CVE-2008-6526 2017-09-29 10:33 2009-03-26 Show GitHub Exploit DB Packet Storm
292815 - go4i go41.net_asp_forum SQL injection vulnerability in forum.asp in GO4I.NET ASP Forum 1.0 allows remote attackers to execute arbitrary SQL commands via the iFor parameter. CWE-89
SQL Injection 		CVE-2008-6527 2017-09-29 10:33 2009-03-26 Show GitHub Exploit DB Packet Storm
292816 - ezonescripts living_local Cross-site scripting (XSS) vulnerability in listtest.php in eZoneScripts Living Local 1.1 allows remote attackers to inject arbitrary web script or HTML via the r parameter. CWE-79
Cross-site Scripting 		CVE-2008-6529 2017-09-29 10:33 2009-03-27 Show GitHub Exploit DB Packet Storm
292817 - ezonescripts living_local Unrestricted file upload vulnerability in editimage.php in eZoneScripts Living Local 1.1 allows remote authenticated administrators to execute arbitrary PHP code by uploading a file with an executabl… NVD-CWE-Other
CVE-2008-6530 2017-09-29 10:33 2009-03-27 Show GitHub Exploit DB Packet Storm
292818 - paypalestores paypal_estores admin/settings.php in PayPal eStores allows remote attackers to bypass intended access restrictions and change the administrative password via a direct request with a modified NewAdmin parameter. CWE-264
Permissions, Privileges, and Access Controls 		CVE-2008-6535 2017-09-29 10:33 2009-03-27 Show GitHub Exploit DB Packet Storm
292819 - lightneasy lightneasy LightNEasy/lightneasy.php in LightNEasy No database version 1.2 allows remote attackers to obtain the hash of the administrator password via the setup "do" action to LightNEasy.php, which is cleared … CWE-200
Information Exposure 		CVE-2008-6537 2017-09-29 10:33 2009-03-30 Show GitHub Exploit DB Packet Storm
292820 - holger_schurig destar DeStar 0.2.2-5 allows remote attackers to add arbitrary users via a direct request to config/add/CfgOptUser. CWE-20
 Improper Input Validation  		CVE-2008-6538 2017-09-29 10:33 2009-03-30 Show GitHub Exploit DB Packet Storm