Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 3, 2026, 6:08 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
245241 4.3 警告 goodlyrics - buymyscripts Lyrics Script の search_results.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2008-4672 2012-06-26 16:02 2008-10-22 Show GitHub Exploit DB Packet Storm
245242 4.3 警告 ed putal - Ed Pudol Clickbank Portal の search.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2008-4670 2012-06-26 16:02 2008-10-22 Show GitHub Exploit DB Packet Storm
245243 4.3 警告 dan fletcher - Dan Fletcher Recipe Script の search.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2008-4669 2012-06-26 16:02 2008-10-22 Show GitHub Exploit DB Packet Storm
245244 7.5 危険 arabcms - ArabCMS の rss.php におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2008-4667 2012-06-26 16:02 2008-10-22 Show GitHub Exploit DB Packet Storm
245245 6.8 警告 deeserver - Ultimate Webboard の webboard.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-4666 2012-06-26 16:02 2008-10-22 Show GitHub Exploit DB Packet Storm
245246 7.5 危険 datingpro - PG Matchmaking における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-4665 2012-06-26 16:02 2008-10-22 Show GitHub Exploit DB Packet Storm
245247 9.3 危険 Dart Communications - ActiveX 用の Dart Communications PowerTCP FTP の ActiveX コントロールにおけるバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2008-4652 2012-06-26 16:02 2008-10-21 Show GitHub Exploit DB Packet Storm
245248 7.5 危険 Elxis - Elxis CMS におけるセッションをハイジャックされる脆弱性 CWE-287
不適切な認証 		CVE-2008-4649 2012-06-26 16:02 2008-10-21 Show GitHub Exploit DB Packet Storm
245249 4.3 警告 Elxis - Elxis CMS の index.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2008-4648 2012-06-26 16:02 2008-10-21 Show GitHub Exploit DB Packet Storm
245250 7.5 危険 astrospaces - AstroSPACES の profile.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-4642 2012-06-26 16:02 2008-10-21 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 3, 2026, 4:18 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
253151 8.8 HIGH
Local 		veritas netbackup_appliance
netbackup 		An issue was discovered in Veritas NetBackup Before 7.7.2 and NetBackup Appliance Before 2.7.2. Privileged remote command execution on NetBackup Server and Client (on the server or a connected client… NVD-CWE-noinfo
CVE-2017-6407 2024-11-21 12:29 2017-03-2 Show GitHub Exploit DB Packet Storm
253152 8.8 HIGH
Local 		veritas netbackup_appliance
netbackup
access 		An issue was discovered in Veritas NetBackup Before 7.7.2 and NetBackup Appliance Before 2.7.2. Arbitrary privileged command execution, using whitelist directory escape with "../" substrings, can occ… NVD-CWE-noinfo
CVE-2017-6406 2024-11-21 12:29 2017-03-2 Show GitHub Exploit DB Packet Storm
253153 7.5 HIGH
Network 		veritas netbackup_appliance
netbackup 		An issue was discovered in Veritas NetBackup 8.0 and earlier and NetBackup Appliance 3.0 and earlier. Hostname-based security is open to DNS spoofing. CWE-290
 Authentication Bypass by Spoofing 		CVE-2017-6405 2024-11-21 12:29 2017-03-2 Show GitHub Exploit DB Packet Storm
253154 5.5 MEDIUM
Local 		veritas netbackup
netbackup_appliance 		An issue was discovered in Veritas NetBackup Before 7.7 and NetBackup Appliance Before 2.7. There are world-writable log files, allowing destruction or spoofing of log data. CWE-276
Incorrect Default Permissions  		CVE-2017-6404 2024-11-21 12:29 2017-03-2 Show GitHub Exploit DB Packet Storm
253155 9.8 CRITICAL
Network 		veritas netbackup_appliance
netbackup 		An issue was discovered in Veritas NetBackup Before 8.0 and NetBackup Appliance Before 3.0. NetBackup Cloud Storage Service uses a hardcoded username and password. CWE-798
 Use of Hard-coded Credentials 		CVE-2017-6403 2024-11-21 12:29 2017-03-2 Show GitHub Exploit DB Packet Storm
253156 6.5 MEDIUM
Network 		veritas netbackup_appliance
netbackup 		An issue was discovered in Veritas NetBackup 8.0 and earlier and NetBackup Appliance 3.0 and earlier. Denial of service affecting NetBackup server can occur. NVD-CWE-noinfo
CVE-2017-6402 2024-11-21 12:29 2017-03-2 Show GitHub Exploit DB Packet Storm
253157 7.8 HIGH
Local 		veritas netbackup_appliance
netbackup 		An issue was discovered in Veritas NetBackup before 8.0 and NetBackup Appliance before 3.0. Local arbitrary command execution can occur when using bpcd and bpnbat. CWE-269
 Improper Privilege Management 		CVE-2017-6401 2024-11-21 12:29 2017-03-2 Show GitHub Exploit DB Packet Storm
253158 8.8 HIGH
Local 		veritas netbackup_appliance
netbackup
access 		An issue was discovered in Veritas NetBackup Before 7.7.2 and NetBackup Appliance Before 2.7.2. Privileged command execution on NetBackup Server and Client can occur (on the local system). NVD-CWE-noinfo
CVE-2017-6400 2024-11-21 12:29 2017-03-2 Show GitHub Exploit DB Packet Storm
253159 8.8 HIGH
Local 		veritas netbackup_appliance
netbackup
access 		An issue was discovered in Veritas NetBackup Before 7.7.2 and NetBackup Appliance Before 2.7.2. Privileged remote command execution on NetBackup Server and Client (on the server or a connected client… NVD-CWE-noinfo
CVE-2017-6399 2024-11-21 12:29 2017-03-2 Show GitHub Exploit DB Packet Storm
253160 6.1 MEDIUM
Network 		flightairmap flightairmap An issue was discovered in FlightAirMap v1.0-beta.10. The vulnerability exists due to insufficient filtration of user-supplied data in multiple parameters passed to several *-sub-menu.php pages. An a… CWE-79
Cross-site Scripting 		CVE-2017-6397 2024-11-21 12:29 2017-03-2 Show GitHub Exploit DB Packet Storm