Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 9, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
245811 5 警告 codeavalanche - CodeAvalanche FreeForum における管理者パスワードを含むデータベースファイルをダウンロードされる脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2008-5932 2012-06-26 16:10 2009-01-21 Show GitHub Exploit DB Packet Storm
245812 7.5 危険 flds-script - FLDS の redir.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-5928 2012-06-26 16:10 2009-01-21 Show GitHub Exploit DB Packet Storm
245813 7.5 危険 china-on-site - FlexPHPNews の admin/usercheck.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-5927 2012-06-26 16:10 2009-01-21 Show GitHub Exploit DB Packet Storm
245814 7.5 危険 ASP-DEV - ASP-DEv Internal E-Mail System の login.asp における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-5926 2012-06-26 16:10 2009-01-21 Show GitHub Exploit DB Packet Storm
245815 5 警告 ASP-DEV - ASP-DEv XM Events Diary におけるデータベースをダウンロードされる脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2008-5925 2012-06-26 16:10 2009-01-21 Show GitHub Exploit DB Packet Storm
245816 7.5 危険 ASP-DEV - ASP-DEv XM Events Diary の diary_viewC.asp における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-5924 2012-06-26 16:10 2009-01-21 Show GitHub Exploit DB Packet Storm
245817 7.5 危険 ASP-DEV - ASP-DEv XM Events Diary の default.asp における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-5923 2012-06-26 16:10 2009-01-21 Show GitHub Exploit DB Packet Storm
245818 7.5 危険 cfagcms - CFAGCMS の themes/default/index.php における PHP リモートファイルインクルージョンの脆弱性 CWE-94
コード・インジェクション 		CVE-2008-5922 2012-06-26 16:10 2009-01-21 Show GitHub Exploit DB Packet Storm
245819 7.5 危険 codeavalanche - CodeAvalanche Articles における管理者パスワードを含むデータベースファイルをダウンロードされる脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2008-5900 2012-06-26 16:10 2009-01-12 Show GitHub Exploit DB Packet Storm
245820 7.5 危険 codeavalanche - CodeAvalanche FreeForAll における管理者パスワードを含むデータベースファイルをダウンロードされる脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2008-5899 2012-06-26 16:10 2009-01-12 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 9, 2026, 4:16 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
253161 8.8 HIGH
Network 		apache openmeetings Apache OpenMeetings 1.0.0 is vulnerable to Cross-Site Request Forgery (CSRF) attacks, XSS attacks, click-jacking, and MIME based attacks. CWE-352
CWE-79
 Origin Validation Error
Cross-site Scripting 		CVE-2017-7666 2024-11-21 12:32 2017-07-17 Show GitHub Exploit DB Packet Storm
253162 10.0 CRITICAL
Network 		apache openmeetings Uploaded XML documents were not correctly validated in Apache OpenMeetings 3.1.0. CWE-611
XXE 		CVE-2017-7664 2024-11-21 12:32 2017-07-17 Show GitHub Exploit DB Packet Storm
253163 6.1 MEDIUM
Network 		apache openmeetings Both global and Room chat are vulnerable to XSS attack in Apache OpenMeetings 3.2.0. CWE-79
Cross-site Scripting 		CVE-2017-7663 2024-11-21 12:32 2017-07-17 Show GitHub Exploit DB Packet Storm
253164 5.9 MEDIUM
Network 		apache struts If an application allows enter an URL in a form field and built-in URLValidator is used, it is possible to prepare a special URL which will be used to overload server process when performing validati… CWE-20
 Improper Input Validation  		CVE-2017-7672 2024-11-21 12:32 2017-07-14 Show GitHub Exploit DB Packet Storm
253165 7.5 HIGH
Network 		f5
puppet
apple 		nginx
puppet_enterprise
xcode 		Nginx versions since 0.5.6 up to and including 1.13.2 are vulnerable to integer overflow vulnerability in nginx range filter module resulting into leak of potentially sensitive information triggered … - CVE-2017-7529 2024-11-21 12:32 2017-07-13 Show GitHub Exploit DB Packet Storm
253166 6.1 MEDIUM
Network 		apache spark In Apache Spark before 2.2.0, it is possible for an attacker to take advantage of a user's trust in the server to trick them into visiting a link that points to a shared Spark cluster and submits dat… CWE-79
Cross-site Scripting 		CVE-2017-7678 2024-11-21 12:32 2017-07-12 Show GitHub Exploit DB Packet Storm
253167 7.5 HIGH
Network 		ismartalarm cubeone_firmware iSmartAlarm cube devices allow Denial of Service. Sending a SYN flood on port 12345 will freeze the "cube" and it will stop responding. CWE-20
 Improper Input Validation  		CVE-2017-7730 2024-11-21 12:32 2017-07-12 Show GitHub Exploit DB Packet Storm
253168 7.5 HIGH
Network 		ismartalarm cubeone_firmware On iSmartAlarm cube devices, there is Incorrect Access Control because a "new key" is transmitted in cleartext. CWE-311
Missing Encryption of Sensitive Data 		CVE-2017-7729 2024-11-21 12:32 2017-07-12 Show GitHub Exploit DB Packet Storm
253169 9.8 CRITICAL
Network 		ismartalarm cubeone_firmware On iSmartAlarm cube devices, there is authentication bypass leading to remote execution of commands (e.g., setting the alarm on/off), related to incorrect cryptography. NVD-CWE-noinfo
CVE-2017-7728 2024-11-21 12:32 2017-07-12 Show GitHub Exploit DB Packet Storm
253170 7.5 HIGH
Network 		ismartalarm cubeone_firmware iSmartAlarm cube devices have an SSL Certificate Validation Vulnerability. CWE-295
Improper Certificate Validation  		CVE-2017-7726 2024-11-21 12:32 2017-07-12 Show GitHub Exploit DB Packet Storm