Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Feb. 9, 2026, 12:59 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
241941 6.8 警告 francisco burzi - Francisco Burzi PHP-Nuke の index.php における SQL インジェクションの脆弱性 - CVE-2007-1061 2012-06-26 15:46 2007-02-21 Show GitHub Exploit DB Packet Storm
241942 4.6 警告 Comodo - Comodo Firewall Pro におけるセキュリティ保護を回避される脆弱性 - CVE-2007-1051 2012-06-26 15:46 2007-02-21 Show GitHub Exploit DB Packet Storm
241943 4.3 警告 abledesign - AbleDesign MyCalendar の index.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2007-1050 2012-06-26 15:46 2007-02-21 Show GitHub Exploit DB Packet Storm
241944 7.5 危険 distributed checksum clearinghouse - DCC における /var/dcc/maps 配下の hosts を削除される脆弱性 - CVE-2007-1047 2012-06-26 15:46 2007-02-21 Show GitHub Exploit DB Packet Storm
241945 5 警告 dem trac - Dem_trac におけるログファイルの内容を読み取られる脆弱性 - CVE-2007-1046 2012-06-26 15:46 2007-02-21 Show GitHub Exploit DB Packet Storm
241946 7.5 危険 ezboo - Ezboo webstats における認証を回避される脆弱性 - CVE-2007-1043 2012-06-26 15:46 2007-02-21 Show GitHub Exploit DB Packet Storm
241947 7.5 危険 Drupal - Drupal 用の Mediafield などのモジュールで使用される getID3 の特定のデモスクリプトにおける任意のファイルを削除される脆弱性 - CVE-2007-1035 2012-06-26 15:46 2007-02-16 Show GitHub Exploit DB Packet Storm
241948 7.5 危険 Drupal - Drupal 用の Secure site モジュールにおけるアクセス制限を回避される脆弱性 CWE-Other
その他 		CVE-2007-1033 2012-06-26 15:46 2007-02-16 Show GitHub Exploit DB Packet Storm
241949 6.8 警告 barry jaspan - Drupal の Barry Jaspan Image Pager におけるクロスサイトスクリプティングの脆弱性 - CVE-2007-1028 2012-06-26 15:46 2007-02-15 Show GitHub Exploit DB Packet Storm
241950 6.8 警告 cedstat - CedStat の index.php におけるクロスサイトスクリプティングの脆弱性 - CVE-2007-1020 2012-06-26 15:46 2007-02-21 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:April 24, 2026, 4 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
293681 - watchfire appscan Multiple absolute path traversal vulnerabilities in certain ActiveX controls in WatchFire AppScan 7.0 allow remote attackers to create or overwrite arbitrary files via a full pathname in the argument… CWE-22
Path Traversal 		CVE-2008-2015 2017-09-29 10:30 2008-04-30 Show GitHub Exploit DB Packet Storm
293682 - phpizabi phpizabi The AssignUser function in template.class.php in PHPizabi 0.848b C1 HFP3 performs unsafe macro expansions on strings delimited by '{' and '}' characters, which allows remote authenticated users to ob… CWE-200
Information Exposure 		CVE-2008-2018 2017-09-29 10:30 2008-04-30 Show GitHub Exploit DB Packet Storm
293683 - pd9_software megabbs Mulatiple cross-site scripting (XSS) vulnerabilities in PD9 Software MegaBBS 2.2 allow remote attackers to inject arbitrary web script or HTML via the (1) toid parameter to send-private-message.asp a… CWE-79
Cross-site Scripting 		CVE-2008-2022 2017-09-29 10:30 2008-04-30 Show GitHub Exploit DB Packet Storm
293684 - pd9_software megabbs Multiple SQL injection vulnerabilities in PD9 Software MegaBBS 2.2 allow remote attackers to execute arbitrary SQL commands via the (1) invisible and (2) timeoffset parameters to profile/controlpanel… CWE-89
SQL Injection 		CVE-2008-2023 2017-09-29 10:30 2008-04-30 Show GitHub Exploit DB Packet Storm
293685 - minibb minibb Cross-site scripting (XSS) vulnerability in index.php in miniBB 2.2, and possibly earlier, when register_globals is enabled, allows remote attackers to inject arbitrary web script or HTML via the gla… CWE-79
Cross-site Scripting 		CVE-2008-2024 2017-09-29 10:30 2008-04-30 Show GitHub Exploit DB Packet Storm
293686 - minibb minibb miniBB 2.2, and possibly earlier, when register_globals is enabled, allows remote attackers to obtain the full path via a direct request to the glang parameter in a registernew action to index.php, w… CWE-200
Information Exposure 		CVE-2008-2028 2017-09-29 10:30 2008-05-1 Show GitHub Exploit DB Packet Storm
293687 - minibb minibb Multiple SQL injection vulnerabilities in (1) setup_mysql.php and (2) setup_options.php in miniBB 2.2 and possibly earlier, when register_globals is enabled, allow remote attackers to execute arbitra… CWE-89
SQL Injection 		CVE-2008-2029 2017-09-29 10:30 2008-05-1 Show GitHub Exploit DB Packet Storm
293688 - aspindir angelo-emlak Multiple SQL injection vulnerabilities in Angelo-Emlak 1.0 allow remote attackers to execute arbitrary SQL commands via the id parameter to (1) hpz/profil.asp and (2) hpz/prodetail.asp. CWE-89
SQL Injection 		CVE-2008-2047 2017-09-29 10:30 2008-05-2 Show GitHub Exploit DB Packet Storm
293689 - aspindir angelo-emlak Cross-site scripting (XSS) vulnerability in hpz/admin/Default.asp in Angelo-Emlak 1.0 allows remote attackers to inject arbitrary web script or HTML via the sayfa parameter. CWE-79
Cross-site Scripting 		CVE-2008-2048 2017-09-29 10:30 2008-05-2 Show GitHub Exploit DB Packet Storm
293690 - joovili joovili SQL injection vulnerability in browse.videos.php in Joovili 3.1 allows remote attackers to execute arbitrary SQL commands via the category parameter. CWE-89
SQL Injection 		CVE-2008-2063 2017-09-29 10:30 2008-05-3 Show GitHub Exploit DB Packet Storm