Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Feb. 9, 2026, 12:59 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
241751 4.3 警告 drake team - Drake CMS の admin/classes/ui.dta.php におけるクロスサイトスクリプティングの脆弱性 - CVE-2007-1848 2012-06-26 15:46 2007-04-3 Show GitHub Exploit DB Packet Storm
241752 7.5 危険 avatic - Aardvark Topsites PHP における PHP リモートファイルインクルージョンの脆弱性 - CVE-2007-1844 2012-06-26 15:46 2007-04-3 Show GitHub Exploit DB Packet Storm
241753 7.5 危険 codebb - CodeBB における PHP リモートファイルインクルージョンの脆弱性 - CVE-2007-1839 2012-06-26 15:46 2007-04-2 Show GitHub Exploit DB Packet Storm
241754 9 危険 data domain - Data Domain OS のコマンドライン管理インターフェースにおける任意のコマンドを実行される脆弱性 - CVE-2007-1836 2012-06-26 15:46 2007-04-2 Show GitHub Exploit DB Packet Storm
241755 7.8 危険 シスコシステムズ - CUCM におけるサービス運用妨害 (DoS) の脆弱性 - CVE-2007-1834 2012-06-26 15:46 2007-03-28 Show GitHub Exploit DB Packet Storm
241756 5 警告 シスコシステムズ - CUCM の SCCP 実装におけるサービス運用妨害 (DoS) の脆弱性 - CVE-2007-1833 2012-06-26 15:46 2007-03-28 Show GitHub Exploit DB Packet Storm
241757 7.8 危険 シスコシステムズ - CUCM の IPSec Manager Service におけるサービス運用妨害 (DoS) の脆弱性 - CVE-2007-1826 2012-06-26 15:46 2007-03-28 Show GitHub Exploit DB Packet Storm
241758 10 危険 Alcatel-Lucent - Alcatel-Lucent Lucent Technologies ボイスメールシステムにおけるメールボックスを再設定される脆弱性 - CVE-2007-1822 2012-06-26 15:46 2007-04-2 Show GitHub Exploit DB Packet Storm
241759 10 危険 dproxy - dproxy-nexgen の dns_decode_reverse_name 関数におけるスタックベースのバッファオーバーフローの脆弱性 - CVE-2007-1866 2012-06-26 15:46 2004-06-24 Show GitHub Exploit DB Packet Storm
241760 7.5 危険 forum picture and meta tags - phpBB の Forum ピクチャなどの MOD_forum_fields_parse.php における PHP リモートファイルインクルージョンの脆弱性 - CVE-2007-1818 2012-06-26 15:46 2007-04-2 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:April 22, 2026, 4 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
293491 - phpcomasy phpcomasy SQL injection vulnerability in index.php in phpComasy 0.8 allows remote attackers to execute arbitrary SQL commands via the mod_project_id parameter in a project_detail action. CWE-89
SQL Injection 		CVE-2008-1164 2017-09-29 10:30 2008-03-6 Show GitHub Exploit DB Packet Storm
293492 - affiliate_market affiliate_market Cross-site scripting (XSS) vulnerability in function/sideblock.php in Affiliate Market (affmarket) 0.1 BETA allows remote attackers to inject arbitrary web script or HTML via the sideblock4 parameter. CWE-79
Cross-site Scripting 		CVE-2008-1176 2017-09-29 10:30 2008-03-6 Show GitHub Exploit DB Packet Storm
293493 - affiliate_market affiliate_market SQL injection vulnerability in shop/detail.php in Affiliate Market (affmarket) 0.1 BETA allows remote attackers to execute arbitrary SQL commands via the id parameter. CWE-89
SQL Injection 		CVE-2008-1177 2017-09-29 10:30 2008-03-6 Show GitHub Exploit DB Packet Storm
293494 - sun jdk
jre
sdk 		Unspecified vulnerability in Sun Java Runtime Environment (JRE) and JDK 6 Update 4 and earlier, 5.0 Update 14 and earlier, and SDK/JRE 1.4.2_16 and earlier allows remote attackers to cause a denial o… NVD-CWE-noinfo
CWE-264
Permissions, Privileges, and Access Controls 		CVE-2008-1187 2017-09-29 10:30 2008-03-7 Show GitHub Exploit DB Packet Storm
293495 - sun jdk
jre 		Unspecified vulnerability in Java Web Start in Sun JDK and JRE 6 Update 4 and earlier allows remote attackers to create arbitrary files via an untrusted application, a different issue than CVE-2008-1… NVD-CWE-noinfo
CVE-2008-1191 2017-09-29 10:30 2008-03-7 Show GitHub Exploit DB Packet Storm
293496 - jspwiki jspwiki Cross-site scripting (XSS) vulnerability in Edit.jsp in JSPWiki 2.4.104 and 2.5.139 allows remote attackers to inject arbitrary web script or HTML via the editor parameter, a different vector than CV… CWE-79
Cross-site Scripting 		CVE-2008-1229 2017-09-29 10:30 2008-03-11 Show GitHub Exploit DB Packet Storm
293497 - jspwiki jspwiki Reference links suggest possible solution upgrade to latest version (2.6.1) at: http://www.jspwiki.org/wiki/JSPWikiDownload CWE-79
Cross-site Scripting 		CVE-2008-1229 2017-09-29 10:30 2008-03-11 Show GitHub Exploit DB Packet Storm
293498 - jspwiki jspwiki Unrestricted file upload vulnerability in JSPWiki 2.4.104 and 2.5.139 allows remote attackers to upload and execute arbitrary .jsp files via an unspecified manipulation that attaches a .jsp file to a… CWE-264
Permissions, Privileges, and Access Controls 		CVE-2008-1230 2017-09-29 10:30 2008-03-11 Show GitHub Exploit DB Packet Storm
293499 - jspwiki jspwiki Reference links suggest possible solution upgrade to latest version (2.6.1) at: http://www.jspwiki.org/wiki/JSPWikiDownload CWE-264
Permissions, Privileges, and Access Controls 		CVE-2008-1230 2017-09-29 10:30 2008-03-11 Show GitHub Exploit DB Packet Storm
293500 - jspwiki jspwiki Directory traversal vulnerability in Edit.jsp in JSPWiki 2.4.104 and 2.5.139 allows remote attackers to include and execute arbitrary local .jsp files, and obtain sensitive information, via a .. (dot… CWE-22
Path Traversal 		CVE-2008-1231 2017-09-29 10:30 2008-03-11 Show GitHub Exploit DB Packet Storm