Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 13, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
242341 7.5 危険 bookingcentre - Hotels Group の Venalsur Booking Centre Booking System の hotel_habitaciones.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-6809 2012-06-26 16:10 2009-05-18 Show GitHub Exploit DB Packet Storm
242342 6.8 警告 7-shop - 7Shop の includes/imageupload.php における任意のファイルを実行される脆弱性 CWE-20
不適切な入力確認 		CVE-2008-6806 2012-06-26 16:10 2009-05-12 Show GitHub Exploit DB Packet Storm
242343 6.8 警告 DFLabs - DFLabs PTK の lib/file_content.php の get_file_type 関数における任意のコマンドを実行される脆弱性 CWE-20
不適切な入力確認 		CVE-2008-6793 2012-06-26 16:10 2009-05-7 Show GitHub Exploit DB Packet Storm
242344 5 警告 codewiz - GeekiGeeki の geekigeeki.py におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2008-6786 2012-06-26 16:10 2009-05-1 Show GitHub Exploit DB Packet Storm
242345 6.8 警告 galaxyscripts - Mini File Host における任意のコードを実行される脆弱性 CWE-94
コード・インジェクション 		CVE-2008-6785 2012-06-26 16:10 2009-05-1 Show GitHub Exploit DB Packet Storm
242346 10 危険 china-on-site - Flexcustomer の admin/install.php における任意の PHP コードが挿入される脆弱性 CWE-94
コード・インジェクション 		CVE-2008-6761 2012-06-26 16:10 2009-04-28 Show GitHub Exploit DB Packet Storm
242347 6.8 警告 china-on-site - FlexPHPDirectory の add.php における任意のコードを実行される脆弱性 CWE-20
不適切な入力確認 		CVE-2008-6750 2012-06-26 16:10 2009-04-24 Show GitHub Exploit DB Packet Storm
242348 6.8 警告 china-on-site - FlexPHPDirectory の admin/usercheck.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-6749 2012-06-26 16:10 2009-04-24 Show GitHub Exploit DB Packet Storm
242349 6.8 警告 dotProject - dotProject における権限を取得される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2008-6747 2012-06-26 16:10 2009-04-23 Show GitHub Exploit DB Packet Storm
242350 7.5 危険 BlogPHP - BlogPHP の index.php における管理者権限を取得される脆弱性 CWE-20
不適切な入力確認 		CVE-2008-6745 2012-06-26 16:10 2009-04-23 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 13, 2026, 5:05 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
267301 8.1 HIGH
Network 		haxe haxe Haxe 3 : The Cross-Platform Toolkit (a fork from David Mouton's damoebius/haxe-npm) haxe3 downloads resources over HTTP, which leaves it vulnerable to MITM attacks. It may be possible to cause remote… CWE-310
Cryptographic Issues 		CVE-2016-10688 2024-11-21 11:44 2018-06-5 Show GitHub Exploit DB Packet Storm
267302 8.1 HIGH
Network 		windows-selenium-chromedriver_project windows-selenium-chromedriver windows-selenium-chromedriver is a module that downloads the Selenium Jar file. windows-selenium-chromedriver downloads binary resources over HTTP, which leaves it vulnerable to MITM attacks. It may … CWE-310
Cryptographic Issues 		CVE-2016-10687 2024-11-21 11:44 2018-06-5 Show GitHub Exploit DB Packet Storm
267303 8.1 HIGH
Network 		fis-sass-all_project fis-sass-all fis-sass-all is another libsass wrapper for node. fis-sass-all downloads binary resources over HTTP, which leaves it vulnerable to MITM attacks. It may be possible to cause remote code execution (RCE… CWE-310
Cryptographic Issues 		CVE-2016-10686 2024-11-21 11:44 2018-06-5 Show GitHub Exploit DB Packet Storm
267304 8.1 HIGH
Network 		pk-app-wonderbox_project pk-app-wonderbox pk-app-wonderbox is an integration with wonderbox pk-app-wonderbox downloads binary resources over HTTP, which leaves it vulnerable to MITM attacks. It may be possible to cause remote code execution … CWE-310
Cryptographic Issues 		CVE-2016-10685 2024-11-21 11:44 2018-06-5 Show GitHub Exploit DB Packet Storm
267305 8.1 HIGH
Network 		healthcenter_project healthcenter healthcenter - IBM Monitoring and Diagnostic Tools health Center agent healthcenter downloads binary resources over HTTP, which leaves it vulnerable to MITM attacks. It may be possible to cause remot… CWE-310
Cryptographic Issues 		CVE-2016-10684 2024-11-21 11:44 2018-06-5 Show GitHub Exploit DB Packet Storm
267306 8.1 HIGH
Network 		hujiang arcanist arcanist downloads resources over HTTP, which leaves it vulnerable to MITM attacks. It may be possible to cause remote code execution (RCE) by swapping out the requested resources with an attacker co… CWE-310
Cryptographic Issues 		CVE-2016-10683 2024-11-21 11:44 2018-06-5 Show GitHub Exploit DB Packet Storm
267307 8.1 HIGH
Network 		serc.js_project serc.js serc.js is a Selenium RC process wrapper serc.js downloads binary resources over HTTP, which leaves it vulnerable to MITM attacks. It may be possible to cause remote code execution (RCE) by swapping … CWE-310
Cryptographic Issues 		CVE-2016-10678 2024-11-21 11:44 2018-06-5 Show GitHub Exploit DB Packet Storm
267308 8.1 HIGH
Network 		google-closure-tools-latest_project google-closure-tools-latest google-closure-tools-latest is a Node.js module wrapper for downloading the latest version of the Google Closure tools google-closure-tools-latest downloads binary resources over HTTP, which leaves i… CWE-310
Cryptographic Issues 		CVE-2016-10677 2024-11-21 11:44 2018-06-5 Show GitHub Exploit DB Packet Storm
267309 8.1 HIGH
Network 		rs-brightcove_project rs-brightcove rs-brightcove is a wrapper around brightcove's web api rs-brightcove downloads source file resources over HTTP, which leaves it vulnerable to MITM attacks. It may be possible to cause remote code exe… CWE-310
Cryptographic Issues 		CVE-2016-10676 2024-11-21 11:44 2018-06-5 Show GitHub Exploit DB Packet Storm
267310 8.1 HIGH
Network 		libsbmlsim_project libsbmlsim libsbmlsim is a module that installs linux binaries for libsbmlsim libsbmlsim downloads binary resources over HTTP, which leaves it vulnerable to MITM attacks. It may be possible to cause remote code… CWE-310
Cryptographic Issues 		CVE-2016-10675 2024-11-21 11:44 2018-06-5 Show GitHub Exploit DB Packet Storm