Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 22, 2026, 6:01 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
241121 6.8 警告 now - Now SMS/MMS Gateway におけるスタックベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2008-0871 2012-09-25 16:59 2008-02-21 Show GitHub Exploit DB Packet Storm
241122 4.3 警告 IBM - IBM Lotus Quickplace の leg/Main.nsf におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2008-0861 2012-09-25 16:59 2008-02-20 Show GitHub Exploit DB Packet Storm
241123 10 危険 Kerio Technologies - Kerio MailServer の AVG プラグインにおける脆弱性 CWE-noinfo
情報不足 		CVE-2008-0860 2012-09-25 16:59 2008-02-20 Show GitHub Exploit DB Packet Storm
241124 5 警告 Kerio Technologies - Kerio MailServer におけるサービス運用妨害 (DoS) の脆弱性 CWE-399
リソース管理の問題 		CVE-2008-0859 2012-09-25 16:59 2008-02-20 Show GitHub Exploit DB Packet Storm
241125 7.5 危険 visnetic
Kerio Technologies		 - Kerio MailServer の Visnetic アンチウイルスプラグインにおけるバッファオーバーフローの脆弱性 CWE-94
コード・インジェクション 		CVE-2008-0858 2012-09-25 16:59 2008-02-20 Show GitHub Exploit DB Packet Storm
241126 7.5 危険 Mambo Foundation
Joomla!		 - Joomla! および Mambo 用の com_salesrep コンポーネントにおける SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-0854 2012-09-25 16:59 2008-02-20 Show GitHub Exploit DB Packet Storm
241127 7.5 危険 Mambo Foundation
Joomla!		 - Joomla! および Mambo 用の com_detail コンポーネントにおける SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-0853 2012-09-25 16:59 2008-02-20 Show GitHub Exploit DB Packet Storm
241128 7.5 危険 Mambo Foundation
Joomla!		 - Mambo および Joomla! 用の Downloads における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-0849 2012-09-25 16:59 2008-02-20 Show GitHub Exploit DB Packet Storm
241129 7.5 危険 Mambo Foundation
Joomla!		 - Joomla! 用の com_profile コンポーネントにおける SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-0846 2012-09-25 16:59 2008-02-20 Show GitHub Exploit DB Packet Storm
241130 7.5 危険 Joomla! - Joomla! 用の PccookBook における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-0844 2012-09-25 16:59 2008-02-20 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 22, 2026, 4 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
269641 6.1 MEDIUM
Network 		jqueryui
oracle
fedoraproject
netapp
redhat
juniper
debian 		jquery_ui
weblogic_server
business_intelligence
hospitality_cruise_fleet_management
application_express
primavera_unifier
siebel_ui_framework
oss_support_tools
fedora
snapc… 		Cross-site scripting (XSS) vulnerability in jQuery UI before 1.12.0 might allow remote attackers to inject arbitrary web script or HTML via the closeText parameter of the dialog function. CWE-79
Cross-site Scripting 		CVE-2016-7103 2024-11-21 11:57 2017-03-16 Show GitHub Exploit DB Packet Storm
269642 5.5 MEDIUM
Local 		libgd libgd The read_image_tga function in gd_tga.c in the GD Graphics Library (aka libgd) before 2.2.4 allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted TGA file, related t… CWE-125
Out-of-bounds Read 		CVE-2016-6906 2024-11-21 11:57 2017-03-15 Show GitHub Exploit DB Packet Storm
269643 6.1 MEDIUM
Network 		plone plone Multiple cross-site scripting (XSS) vulnerabilities in the ZMI page in Zope2 in Plone CMS 5.x through 5.0.6, 4.x through 4.3.11, and 3.3.x through 3.3.6 allow remote attackers to inject arbitrary web… CWE-79
Cross-site Scripting 		CVE-2016-7140 2024-11-21 11:57 2017-03-8 Show GitHub Exploit DB Packet Storm
269644 6.1 MEDIUM
Network 		plone plone Cross-site scripting (XSS) vulnerability in an unspecified page template in Plone CMS 5.x through 5.0.6, 4.x through 4.3.11, and 3.3.x through 3.3.6 allows remote attackers to inject arbitrary web sc… CWE-79
Cross-site Scripting 		CVE-2016-7139 2024-11-21 11:57 2017-03-8 Show GitHub Exploit DB Packet Storm
269645 6.1 MEDIUM
Network 		plone plone Cross-site scripting (XSS) vulnerability in the URL checking infrastructure in Plone CMS 5.x through 5.0.6, 4.x through 4.3.11, and 3.3.x through 3.3.6 allows remote attackers to inject arbitrary web… CWE-79
Cross-site Scripting 		CVE-2016-7138 2024-11-21 11:57 2017-03-8 Show GitHub Exploit DB Packet Storm
269646 6.1 MEDIUM
Network 		plone plone Multiple open redirect vulnerabilities in Plone CMS 5.x through 5.0.6, 4.x through 4.3.11, and 3.3.x through 3.3.6 allow remote attackers to redirect users to arbitrary web sites and conduct phishing… CWE-601
Open Redirect 		CVE-2016-7137 2024-11-21 11:57 2017-03-8 Show GitHub Exploit DB Packet Storm
269647 6.1 MEDIUM
Network 		plone plone z3c.form in Plone CMS 5.x through 5.0.6 and 4.x through 4.3.11 allows remote attackers to conduct cross-site scripting (XSS) attacks via a crafted GET request. CWE-79
Cross-site Scripting 		CVE-2016-7136 2024-11-21 11:57 2017-03-8 Show GitHub Exploit DB Packet Storm
269648 4.9 MEDIUM
Network 		plone plone Directory traversal vulnerability in Plone CMS 5.x through 5.0.6 and 4.2.x through 4.3.11 allows remote administrators to read arbitrary files via a .. (dot dot) in the path parameter in a getFile ac… CWE-22
Path Traversal 		CVE-2016-7135 2024-11-21 11:57 2017-03-8 Show GitHub Exploit DB Packet Storm
269649 9.8 CRITICAL
Network 		nefarious2_project nefarious2 The m_authenticate function in ircd/m_authenticate.c in nefarious2 allows remote attackers to spoof certificate fingerprints and consequently log in as another user via a crafted AUTHENTICATE paramet… CWE-287
Improper Authentication 		CVE-2016-7145 2024-11-21 11:57 2017-03-8 Show GitHub Exploit DB Packet Storm
269650 5.5 MEDIUM
Local 		dropbear_ssh_project dropbear_ssh The dbclient and server in Dropbear SSH before 2016.74, when compiled with DEBUG_TRACE, allows local users to read process memory via the -v argument, related to a failed remote ident. CWE-200
Information Exposure 		CVE-2016-7409 2024-11-21 11:57 2017-03-4 Show GitHub Exploit DB Packet Storm