Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Feb. 9, 2026, 12:59 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
240941 3.5 注意 Claroline Consortium - Claroline の admin/adminusers.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2007-4741 2012-06-26 15:54 2007-09-6 Show GitHub Exploit DB Packet Storm
240942 5 警告 Debian - reprepro における一見有効な Release.gpg ファイルを作成し配布される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2007-4739 2012-06-26 15:54 2007-09-2 Show GitHub Exploit DB Packet Storm
240943 7.5 危険 cartkeeper - CartKeeper CKGold Shopping Cart の category.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2007-4736 2012-06-26 15:54 2007-09-6 Show GitHub Exploit DB Packet Storm
240944 9.3 危険 Aztech Group Ltd - Aztech DSL600EU ルータにおける Web インターフェースに接続される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2007-4733 2012-06-26 15:54 2007-09-6 Show GitHub Exploit DB Packet Storm
240945 4.3 警告 Apache Software Foundation - Apache Tomcat の cal2.jsp における任意のユーザとしてイベントを追加される脆弱性 CWE-352
同一生成元ポリシー違反 		CVE-2007-4724 2012-06-26 15:54 2007-09-5 Show GitHub Exploit DB Packet Storm
240946 7.5 危険 jasio.net
Apache Software Foundation		 - Ragnarok Online Control Panel におけるディレクトリトラバーサルの脆弱性 CWE-22
CWE-287
CVE-2007-4723 2012-06-26 15:54 2007-09-5 Show GitHub Exploit DB Packet Storm
240947 7.5 危険 212cafe - 212cafeBoard の read.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2007-4719 2012-06-26 15:54 2007-09-5 Show GitHub Exploit DB Packet Storm
240948 5.1 警告 Claroline Consortium - Claroline の inc/lib/language.lib.php におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2007-4718 2012-06-26 15:54 2007-09-5 Show GitHub Exploit DB Packet Storm
240949 3.5 注意 Claroline Consortium - Claroline におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2007-4717 2012-06-26 15:54 2007-09-5 Show GitHub Exploit DB Packet Storm
240950 7.5 危険 enetman - eNetman の index.php における PHP リモートファイルインクルージョンの脆弱性 CWE-94
コード・インジェクション 		CVE-2007-4712 2012-06-26 15:54 2007-09-5 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:April 21, 2026, 4:10 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
293081 - lovecms lovecms LoveCMS 1.6.2 does not require administrative authentication for (1) addblock.php, (2) blocks.php, and (3) themes.php in system/admin/, which allows remote attackers to change the configuration or ex… CWE-94
Code Injection 		CVE-2008-3509 2017-09-29 10:31 2008-08-8 Show GitHub Exploit DB Packet Storm
293082 - jasper_project jasper Multiple integer overflows in JasPer 1.900.1 might allow context-dependent attackers to have an unknown impact via a crafted image file, related to integer multiplication for memory allocation. CWE-189
Numeric Errors 		CVE-2008-3520 2017-09-29 10:31 2008-10-3 Show GitHub Exploit DB Packet Storm
293083 - pidgin pidgin The NSS plugin in libpurple in Pidgin 2.4.3 does not verify SSL certificates, which makes it easier for remote attackers to trick a user into accepting an invalid server certificate for a spoofed ser… CWE-310
Cryptographic Issues 		CVE-2008-3532 2017-09-29 10:31 2008-08-9 Show GitHub Exploit DB Packet Storm
293084 - sun opensolaris
solaris 		Unspecified vulnerability in the pthread_mutex_reltimedlock_np API in Sun Solaris 10 and OpenSolaris before snv_90 allows local users to cause a denial of service (system hang or panic) via unknown v… NVD-CWE-noinfo
CWE-399
 Resource Management Errors 		CVE-2008-3549 2017-09-29 10:31 2008-08-8 Show GitHub Exploit DB Packet Storm
293085 - comsenz discuz SQL injection vulnerability in index.php in Discuz! 6.0.1 allows remote attackers to execute arbitrary SQL commands via the searchid parameter in a search action. CWE-89
SQL Injection 		CVE-2008-3554 2017-09-29 10:31 2008-08-9 Show GitHub Exploit DB Packet Storm
293086 - wsn forum
gallery
knowledge_base
links 		Directory traversal vulnerability in index.php in (1) WSN Forum 4.1.43 and earlier, (2) Gallery 4.1.30 and earlier, (3) Knowledge Base (WSNKB) 4.1.36 and earlier, (4) Links 4.1.44 and earlier, and po… CWE-22
Path Traversal 		CVE-2008-3555 2017-09-29 10:31 2008-08-9 Show GitHub Exploit DB Packet Storm
293087 - fhm-script free_hosting_manager Free Hosting Manager 1.2 and 2.0 allows remote attackers to bypass authentication and gain administrative access by setting both the adminuser and loggedin cookies. CWE-264
Permissions, Privileges, and Access Controls 		CVE-2008-3557 2017-09-29 10:31 2008-08-9 Show GitHub Exploit DB Packet Storm
293088 - cisco webex_meeting_manager Stack-based buffer overflow in the WebexUCFObject ActiveX control in atucfobj.dll in Cisco WebEx Meeting Manager before 20.2008.2606.4919 allows remote attackers to execute arbitrary code via a long … CWE-119
Incorrect Access of Indexable Resource ('Range Error')  		CVE-2008-3558 2017-09-29 10:31 2008-08-9 Show GitHub Exploit DB Packet Storm
293089 - dayfox_designs dayfox_blog Multiple directory traversal vulnerabilities in index.php in Dayfox Blog 4 allow remote attackers to include and execute arbitrary local files via a .. (dot dot) in the (1) p, (2) cat, and (3) archiv… CWE-22
Path Traversal 		CVE-2008-3564 2017-09-29 10:31 2008-08-11 Show GitHub Exploit DB Packet Storm
293090 - nullsoft winamp Cross-zone scripting vulnerability in the NowPlaying functionality in NullSoft Winamp before 5.541 allows remote attackers to conduct cross-site scripting (XSS) attacks via an MP3 file with JavaScrip… CWE-79
Cross-site Scripting 		CVE-2008-3567 2017-09-29 10:31 2008-08-11 Show GitHub Exploit DB Packet Storm