Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 12, 2026, 6 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
242161 4.3 警告 cPanel - cPanel の Fantastico De Luxe モジュール におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2008-6927 2012-06-26 16:10 2009-08-10 Show GitHub Exploit DB Packet Storm
242162 7.5 危険 exoscripts - Exocrew ExoPHPDesk の admin.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2008-6917 2012-06-26 16:10 2009-08-7 Show GitHub Exploit DB Packet Storm
242163 6.8 警告 brewblogger - BB の includes/authentication.inc.php の authenticateUser 関数における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2008-6911 2012-06-26 16:10 2009-08-6 Show GitHub Exploit DB Packet Storm
242164 6.8 警告 2532gigs - 2532designs 2532|Gigs Stable の checkuser.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2008-6907 2012-06-26 16:10 2009-08-6 Show GitHub Exploit DB Packet Storm
242165 4.3 警告 babbleboard - BabbleBoard の index.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2008-6906 2012-06-26 16:10 2009-08-6 Show GitHub Exploit DB Packet Storm
242166 6 警告 babbleboard - BabbleBoard の index.php におけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反
CVE-2008-6905 2012-06-26 16:10 2009-08-6 Show GitHub Exploit DB Packet Storm
242167 6.8 警告 2532gigs - 2532designs 2532|Gigs の upload_flyer.php における任意のコードを実行される脆弱性 CWE-94
コード・インジェクション
CVE-2008-6902 2012-06-26 16:10 2009-08-5 Show GitHub Exploit DB Packet Storm
242168 5.1 警告 2532gigs - 2532designs 2532|Gigs におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル
CVE-2008-6901 2012-06-26 16:10 2009-08-5 Show GitHub Exploit DB Packet Storm
242169 6.5 警告 availscript - AvailScript Article Script の addpen.php の "ペンネーム / 作成名を追加" 機能における任意のコードを実行される脆弱性 CWE-94
コード・インジェクション
CVE-2008-6900 2012-06-26 16:10 2009-08-5 Show GitHub Exploit DB Packet Storm
242170 9 危険 freeSSHd - freeSSHd におけるバッファオーバーフローの脆弱性 CWE-119
バッファエラー
CVE-2008-6899 2012-06-26 16:10 2009-08-5 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 12, 2026, 5:06 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
268141 7.8 HIGH
Local
microsoft word
office
office_web_apps_server
sharepoint_server
office_compatibility_pack
word_viewer
Microsoft Word 2007 SP3, Office 2010 SP2, Word 2010 SP2, Word 2013 SP1, Word 2013 RT SP1, Word 2016, Office Compatibility Pack SP3, Word Viewer, Word Automation Services on SharePoint Server 2013 SP1… CWE-119
Incorrect Access of Indexable Resource ('Range Error') 
CVE-2016-0053 2024-11-21 11:41 2016-02-10 Show GitHub Exploit DB Packet Storm
268142 6.1 MEDIUM
Network
ibm websphere_portal Cross-site scripting (XSS) vulnerability in IBM WebSphere Portal 8.5.0 before CF09 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. CWE-79
Cross-site Scripting
CVE-2016-0209 2024-11-21 11:41 2016-01-27 Show GitHub Exploit DB Packet Storm
268143 - opensuse
oracle
leap
opensuse
mysql
Unspecified vulnerability in Oracle MySQL 5.6.21 and earlier allows remote authenticated users to affect availability via vectors related to DML. NVD-CWE-noinfo
CVE-2016-0594 2024-11-21 11:41 2016-01-21 Show GitHub Exploit DB Packet Storm
268144 - oracle
debian
vm_virtualbox
debian_linux
Unspecified vulnerability in the Oracle VM VirtualBox component in Oracle Virtualization VirtualBox before 4.3.36 and before 5.0.14 allows local users to affect availability via unknown vectors relat… NVD-CWE-noinfo
CVE-2016-0592 2024-11-21 11:41 2016-01-21 Show GitHub Exploit DB Packet Storm
268145 - oracle peoplesoft_supply_chain_management_purchasing Unspecified vulnerability in the PeopleSoft Enterprise SCM Purchasing component in Oracle PeopleSoft Products 9.1 and 9.2 allows remote authenticated users to affect confidentiality and integrity via… NVD-CWE-noinfo
CVE-2016-0591 2024-11-21 11:41 2016-01-21 Show GitHub Exploit DB Packet Storm
268146 - oracle peoplesoft_supply_chain_management_order_management Unspecified vulnerability in the PeopleSoft Enterprise SCM Order Management component in Oracle PeopleSoft Products 9.1 and 9.2 allows remote attackers to affect integrity via unknown vectors. NVD-CWE-noinfo
CVE-2016-0590 2024-11-21 11:41 2016-01-21 Show GitHub Exploit DB Packet Storm
268147 - oracle application_object_library Unspecified vulnerability in the Oracle Application Object Library component in Oracle E-Business Suite 11.5.10.2 allows remote attackers to affect confidentiality and integrity via unknown vectors. NVD-CWE-noinfo
CVE-2016-0589 2024-11-21 11:41 2016-01-21 Show GitHub Exploit DB Packet Storm
268148 - oracle general_ledger Unspecified vulnerability in the Oracle General Ledger component in Oracle E-Business Suite 11.5.10.2 allows remote attackers to affect integrity via unknown vectors related to Consolidation Hierarch… NVD-CWE-noinfo
CVE-2016-0588 2024-11-21 11:41 2016-01-21 Show GitHub Exploit DB Packet Storm
268149 - oracle peoplesoft_enterprise_peopletools Unspecified vulnerability in the PeopleSoft Enterprise PeopleTools component in Oracle PeopleSoft Products 8.53, 8.54, and 8.55 allows remote authenticated users to affect confidentiality via unknown… NVD-CWE-noinfo
CVE-2016-0587 2024-11-21 11:41 2016-01-21 Show GitHub Exploit DB Packet Storm
268150 - oracle application_object_library Unspecified vulnerability in the Oracle Application Object Library component in Oracle E-Business Suite 11.5.10.2 allows remote attackers to affect integrity via unknown vectors related to iHelp. NVD-CWE-noinfo
CVE-2016-0586 2024-11-21 11:41 2016-01-21 Show GitHub Exploit DB Packet Storm