Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 8, 2026, noon

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
241411 6.8 警告 a-link - A-LINK のWL54AP3 および WL54AP2 の管理インタフェースにおけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反 		CVE-2008-6823 2012-06-26 16:10 2009-06-4 Show GitHub Exploit DB Packet Storm
241412 10 危険 Eaton - Eaton MGEOPS Network Shutdown Module における任意のコードを実行される脆弱性 CWE-287
不適切な認証 		CVE-2008-6816 2012-06-26 16:10 2009-05-28 Show GitHub Exploit DB Packet Storm
241413 4 警告 シトリックス・システムズ - Citrix Web Interface for Java Application Servers のセッション切断機能におけるユーザの Web インターフェースセッションへのアクセス権を取得される脆弱性 CWE-Other
その他 		CVE-2008-6830 2012-06-26 16:10 2008-10-24 Show GitHub Exploit DB Packet Storm
241414 7.5 危険 bookingcentre - Venalsur Booking Centre Booking System の admin/checklogin.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-6810 2012-06-26 16:10 2009-05-18 Show GitHub Exploit DB Packet Storm
241415 7.5 危険 bookingcentre - Hotels Group の Venalsur Booking Centre Booking System の hotel_habitaciones.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-6809 2012-06-26 16:10 2009-05-18 Show GitHub Exploit DB Packet Storm
241416 6.8 警告 7-shop - 7Shop の includes/imageupload.php における任意のファイルを実行される脆弱性 CWE-20
不適切な入力確認 		CVE-2008-6806 2012-06-26 16:10 2009-05-12 Show GitHub Exploit DB Packet Storm
241417 6.8 警告 DFLabs - DFLabs PTK の lib/file_content.php の get_file_type 関数における任意のコマンドを実行される脆弱性 CWE-20
不適切な入力確認 		CVE-2008-6793 2012-06-26 16:10 2009-05-7 Show GitHub Exploit DB Packet Storm
241418 5 警告 codewiz - GeekiGeeki の geekigeeki.py におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2008-6786 2012-06-26 16:10 2009-05-1 Show GitHub Exploit DB Packet Storm
241419 6.8 警告 galaxyscripts - Mini File Host における任意のコードを実行される脆弱性 CWE-94
コード・インジェクション 		CVE-2008-6785 2012-06-26 16:10 2009-05-1 Show GitHub Exploit DB Packet Storm
241420 10 危険 china-on-site - Flexcustomer の admin/install.php における任意の PHP コードが挿入される脆弱性 CWE-94
コード・インジェクション 		CVE-2008-6761 2012-06-26 16:10 2009-04-28 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 8, 2026, 4:54 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
267251 7.8 HIGH
Local 		microsoft windows_server_2012
windows_10
windows_8.1
windows_server_2008
windows_7
windows_rt_8.1
windows_vista 		The kernel-mode driver in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, and Windows 10 Gold and 1511 al… CWE-264
Permissions, Privileges, and Access Controls 		CVE-2016-0096 2024-11-21 11:41 2016-03-9 Show GitHub Exploit DB Packet Storm
267252 7.8 HIGH
Local 		microsoft windows_server_2012
windows_10
windows_8.1
windows_server_2008
windows_7
windows_rt_8.1
windows_vista 		The kernel-mode driver in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, and Windows 10 Gold and 1511 al… CWE-264
Permissions, Privileges, and Access Controls 		CVE-2016-0095 2024-11-21 11:41 2016-03-9 Show GitHub Exploit DB Packet Storm
267253 7.8 HIGH
Local 		microsoft windows_server_2012
windows_10
windows_8.1
windows_server_2008
windows_7
windows_rt_8.1
windows_vista 		OLE in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, and Windows 10 Gold and 1511 allows remote attacke… CWE-20
 Improper Input Validation  		CVE-2016-0092 2024-11-21 11:41 2016-03-9 Show GitHub Exploit DB Packet Storm
267254 7.8 HIGH
Local 		microsoft windows_server_2012
windows_10
windows_8.1
windows_server_2008
windows_7
windows_rt_8.1
windows_vista 		OLE in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, and Windows 10 Gold and 1511 allows remote attacke… CWE-20
 Improper Input Validation  		CVE-2016-0091 2024-11-21 11:41 2016-03-9 Show GitHub Exploit DB Packet Storm
267255 7.8 HIGH
Local 		microsoft windows_server_2008
windows_7
windows_vista 		Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, and Windows 7 SP1 do not properly validate handles, which allows local users to gain privileges via a crafted application, aka "Window… CWE-264
Permissions, Privileges, and Access Controls 		CVE-2016-0087 2024-11-21 11:41 2016-03-9 Show GitHub Exploit DB Packet Storm
267256 7.8 HIGH
Local 		microsoft windows_server_2012
windows_10
windows_8.1
windows_server_2008
windows_7
windows_rt_8.1
windows_vista 		The kernel-mode driver in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, and Windows 10 Gold and 1511 al… CWE-264
Permissions, Privileges, and Access Controls 		CVE-2016-0094 2024-11-21 11:41 2016-03-9 Show GitHub Exploit DB Packet Storm
267257 7.8 HIGH
Local 		microsoft windows_server_2012
windows_10
windows_8.1
windows_server_2008
windows_7
windows_rt_8.1
windows_vista 		The kernel-mode driver in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, and Windows 10 Gold and 1511 al… CWE-264
Permissions, Privileges, and Access Controls 		CVE-2016-0093 2024-11-21 11:41 2016-03-9 Show GitHub Exploit DB Packet Storm
267258 7.8 HIGH
Local 		microsoft office Microsoft Office 2007 SP3, 2010 SP2, 2013 SP1, and 2016 does not properly sign an unspecified binary file, which allows local users to gain privileges via a Trojan horse file with a crafted signature… CWE-264
Permissions, Privileges, and Access Controls 		CVE-2016-0057 2024-11-21 11:41 2016-03-9 Show GitHub Exploit DB Packet Storm
267259 5.4 MEDIUM
Network 		ibm business_process_manager Cross-site scripting (XSS) vulnerability in the document-list control implementation in IBM Business Process Manager (BPM) 8.0 through 8.0.1.3, 8.5.0 through 8.5.0.2, and 8.5.5 and 8.5.6 through 8.5.… CWE-79
Cross-site Scripting 		CVE-2016-0227 2024-11-21 11:41 2016-03-4 Show GitHub Exploit DB Packet Storm
267260 5.4 MEDIUM
Network 		ibm websphere_portal The XML parser in IBM WebSphere Portal 8.0.x before 8.0.0.1 CF20 and 8.5.x before 8.5.0.0 CF10 allows remote authenticated users to read arbitrary files or cause a denial of service via an external e… NVD-CWE-Other
CVE-2016-0245 2024-11-21 11:41 2016-02-29 Show GitHub Exploit DB Packet Storm