Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 14, 2026, 6:01 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
242471 7.5 危険 aj square - AJ Classifieds における管理者権限を取得される脆弱性 CWE-287
不適切な認証 		CVE-2008-7041 2012-06-26 16:10 2009-08-24 Show GitHub Exploit DB Packet Storm
242472 4.3 警告 gelatocms - Gelato CMS の admin/comments.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2008-7039 2012-06-26 16:10 2009-08-24 Show GitHub Exploit DB Packet Storm
242473 4.3 警告 bcoos - bcoos の DevTracker のモジュールの index.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2008-7036 2012-06-26 16:10 2009-08-24 Show GitHub Exploit DB Packet Storm
242474 7.5 危険 galore
Joomla!		 - Joomla! 用 Simple Shop Galore コンポーネントにおける SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-7033 2012-06-26 16:10 2009-08-24 Show GitHub Exploit DB Packet Storm
242475 6.8 警告 F5 Networks - F5 BIG-IP の Web 管理コンソールにおけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反 		CVE-2008-7032 2012-06-26 16:10 2009-08-24 Show GitHub Exploit DB Packet Storm
242476 10 危険 Foxit Software Inc - Foxit Remote Access Server におけるヒープベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2008-7031 2012-06-26 16:10 2009-08-24 Show GitHub Exploit DB Packet Storm
242477 6 警告 alilg - AlilG Application AliBoard Beta の usercp.php における任意のコードを実行される脆弱性 CWE-20
不適切な入力確認 		CVE-2008-7029 2012-06-26 16:10 2009-08-24 Show GitHub Exploit DB Packet Storm
242478 7.5 危険 aves - RPG.Board における権限を取得される脆弱性 CWE-287
不適切な認証 		CVE-2008-7028 2012-06-26 16:10 2009-08-21 Show GitHub Exploit DB Packet Storm
242479 6.8 警告 eFront Learning - eFront の filesystem3.class.php における任意のコードを実行される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2008-7026 2012-06-26 16:10 2009-08-21 Show GitHub Exploit DB Packet Storm
242480 4.3 警告 チェック・ポイント・ソフトウェア・テクノロジーズ - Check Point ZoneAlarm の TrueVector におけるサービス運用妨害 (DoS) の脆弱性 CWE-Other
その他 		CVE-2008-7025 2012-06-26 16:10 2009-08-21 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 14, 2026, 4 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
267571 4.4 MEDIUM
Network 		cookie-signature_project
debian 		cookie-signature
debian_linux 		Node-cookie-signature before 1.0.6 is affected by a timing attack due to the type of comparison used. CWE-362
Race Condition 		CVE-2016-1000236 2024-11-21 11:43 2019-11-20 Show GitHub Exploit DB Packet Storm
267572 6.1 MEDIUM
Network 		doxygen doxygen Insufficient sanitization of the query parameter in templates/html/search_opensearch.php could lead to reflected cross-site scripting or iframe injection. CWE-79
Cross-site Scripting 		CVE-2016-10245 2024-11-21 11:43 2019-05-25 Show GitHub Exploit DB Packet Storm
267573 9.8 CRITICAL
Network 		haraka_project haraka Haraka version 2.8.8 and earlier comes with a plugin for processing attachments for zip files. Versions 2.8.8 and earlier can be vulnerable to command injection. CWE-77
Command Injection 		CVE-2016-1000282 2024-11-21 11:43 2019-02-6 Show GitHub Exploit DB Packet Storm
267574 9.8 CRITICAL
Network 		dthdevelopment dt_register Joomla extension DT Register version before 3.1.12 (Joomla 3.x) / 2.8.18 (Joomla 2.5) contains an SQL injection in "/index.php?controller=calendar&format=raw&cat[0]=SQLi&task=events". This attack app… CWE-89
SQL Injection 		CVE-2016-1000271 2024-11-21 11:43 2019-02-5 Show GitHub Exploit DB Packet Storm
267575 8.8 HIGH
Network 		google chrome Insufficient data validation on image data in PDFium in Google Chrome prior to 51.0.2704.63 allowed a remote attacker to perform an out of bounds memory read via a crafted PDF file. CWE-125
Out-of-bounds Read 		CVE-2016-10403 2024-11-21 11:43 2019-01-10 Show GitHub Exploit DB Packet Storm
267576 5.3 MEDIUM
Network 		salesforce
ibm
redhat 		tough-cookie
api_connect
openshift_container_platform 		NodeJS Tough-Cookie version 2.2.2 contains a Regular Expression Parsing vulnerability in HTTP request Cookie Header parsing that can result in Denial of Service. This attack appear to be exploitable … CWE-20
 Improper Input Validation  		CVE-2016-1000232 2024-11-21 11:43 2018-09-6 Show GitHub Exploit DB Packet Storm
267577 7.4 HIGH
Network 		bouncycastle legion-of-the-bouncy-castle-java-crytography-api In the Bouncy Castle JCE Provider version 1.55 and earlier the ECIES implementation allowed the use of ECB mode. This mode is regarded as unsafe and support for it has been removed from the provider. CWE-310
Cryptographic Issues 		CVE-2016-1000352 2024-11-21 11:43 2018-06-5 Show GitHub Exploit DB Packet Storm
267578 3.7 LOW
Network 		bouncycastle
debian 		legion-of-the-bouncy-castle-java-crytography-api
debian_linux 		In the Bouncy Castle JCE Provider version 1.55 and earlier the other party DH public key is not fully validated. This can cause issues as invalid keys can be used to reveal details about the other pa… CWE-320
 Key Management Errors 		CVE-2016-1000346 2024-11-21 11:43 2018-06-5 Show GitHub Exploit DB Packet Storm
267579 5.9 MEDIUM
Network 		bouncycastle
debian 		legion-of-the-bouncy-castle-java-crytography-api
debian_linux 		In the Bouncy Castle JCE Provider version 1.55 and earlier the DHIES/ECIES CBC mode vulnerable to padding oracle attack. For BC 1.55 and older, in an environment where timings can be easily observed,… CWE-361
 7PK - Time and State 		CVE-2016-1000345 2024-11-21 11:43 2018-06-5 Show GitHub Exploit DB Packet Storm
267580 7.4 HIGH
Network 		bouncycastle legion-of-the-bouncy-castle-java-crytography-api In the Bouncy Castle JCE Provider version 1.55 and earlier the DHIES implementation allowed the use of ECB mode. This mode is regarded as unsafe and support for it has been removed from the provider. CWE-310
Cryptographic Issues 		CVE-2016-1000344 2024-11-21 11:43 2018-06-5 Show GitHub Exploit DB Packet Storm