Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 8, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
246281 10 危険 シトリックス・システムズ - Citrix Access Gateway Standard Edition および Advanced Edition におけるネットワークリソースにアクセスされる脆弱性 CWE-287
不適切な認証 		CVE-2008-2528 2012-06-26 16:02 2008-05-9 Show GitHub Exploit DB Packet Storm
246282 4.3 警告 actualscripts - 複数の ActualScripts ActualAnalyzer 製品におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2008-2527 2012-06-26 16:02 2008-06-3 Show GitHub Exploit DB Packet Storm
246283 7.5 危険 BIGACE - BigACE における PHP リモートファイルインクルージョンの脆弱性 CWE-94
コード・インジェクション 		CVE-2008-2520 2012-06-26 16:02 2008-06-3 Show GitHub Exploit DB Packet Storm
246284 6.8 警告 Core FTP - Core FTP クライアントにおけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2008-2519 2012-06-26 16:02 2008-02-18 Show GitHub Exploit DB Packet Storm
246285 7.5 危険 excuse online - Excuse Online の pwd.asp における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-2509 2012-06-26 16:02 2008-05-29 Show GitHub Exploit DB Packet Storm
246286 4.3 警告 brown bear software - Brown Bear Software Calcium の Calcium40.pl におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2008-2507 2012-06-26 16:02 2008-05-29 Show GitHub Exploit DB Packet Storm
246287 7.5 危険 emule - eMule X-Ray の Web サーバにおけるメモリ破損を誘発される脆弱性 CWE-399
リソース管理の問題 		CVE-2008-2502 2012-06-26 16:02 2008-05-29 Show GitHub Exploit DB Packet Storm
246288 4.3 警告 badongo - Campus Bulletin Board の post3/Book.asp におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2008-2493 2012-06-26 16:02 2008-05-28 Show GitHub Exploit DB Packet Storm
246289 7.5 危険 badongo - Campus Bulletin Board における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-2492 2012-06-26 16:02 2008-05-28 Show GitHub Exploit DB Packet Storm
246290 9.3 危険 ebay - eBay Enhanced Picture Uploader ActiveX コントロールにおける任意のコマンドを実行される脆弱性 CWE-78
OSコマンド・インジェクション 		CVE-2008-2475 2012-06-26 16:02 2009-06-9 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 8, 2026, 4:09 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
349531 - yabb yabb Cross-site request forgery (CSRF) vulnerability in YaBB 1 GOLD SP 1.3.2 allows remote attackers to perform unauthorized actions as the administrative user via a link or IMG tag to YaBB.pl that specif… NVD-CWE-Other
CVE-2004-2403 2017-07-11 10:31 2004-12-31 Show GitHub Exploit DB Packet Storm
349532 - f-secure f-secure_anti-virus
f-secure_for_firewalls
f-secure_internet_security
internet_gatekeeper 		Buffer overflow in multiple F-Secure Anti-Virus products, including F-Secure Anti-Virus 5.42 and earlier, allows remote attackers to bypass scanning or cause a denial of service (crash or module rest… NVD-CWE-Other
CVE-2004-2405 2017-07-11 10:31 2004-12-31 Show GitHub Exploit DB Packet Storm
349533 - vserver linux-vserver Linux VServer 1.27 and earlier, 1.3.9 and earlier, and 1.9.1 and earlier shares /proc permissions across all virtual and host servers, which allows local users with the ability to set permissions in … NVD-CWE-Other
CVE-2004-2408 2017-07-11 10:31 2004-12-31 Show GitHub Exploit DB Packet Storm
349534 - samhain_labs samhain Buffer overflow in the sh_hash_compdata function for Samhain 1.8.9 through 2.0.1, when running in update mode ("-t update"), might allow attackers to execute arbitrary code. NVD-CWE-Other
CVE-2004-2409 2017-07-11 10:31 2004-12-31 Show GitHub Exploit DB Packet Storm
349535 - virtual_programming vp-asp The CleanseMessage function in shop$db.asp for VP-ASP Shopping Cart 4.0 through 5.0 does not sufficiently cleanse inputs, which allows remote attackers to conduct cross-site scripting (XSS) attacks t… NVD-CWE-Other
CVE-2004-2411 2017-07-11 10:31 2004-12-31 Show GitHub Exploit DB Packet Storm
349536 - virtual_programming vp-asp Multiple SQL injection vulnerabilities in VP-ASP Shopping Cart 4.0 through 5.0 allow remote attackers to execute arbitrary SQL commands via the catalogid parameter in (1) shopreviewlist.asp and (2) s… NVD-CWE-Other
CVE-2004-2412 2017-07-11 10:31 2004-12-31 Show GitHub Exploit DB Packet Storm
349537 - virtual_programming vp-asp SQL injection vulnerability in VP-ASP Shopping Cart 4.0 through 5.0 allows remote attackers to execute arbitrary SQL commands via the (1) Processed0 and (2) Processed1 parameters in a POST request to… NVD-CWE-Other
CVE-2004-2413 2017-07-11 10:31 2004-12-31 Show GitHub Exploit DB Packet Storm
349538 - novell netware Novell NetWare 6.5 SP 1.1, when installing or upgrading using the Overlay CDs and performing a custom installation with OpenSSH, includes sensitive password information in the (1) NIOUTPUT.TXT and (2… NVD-CWE-Other
CVE-2004-2414 2017-07-11 10:31 2004-12-31 Show GitHub Exploit DB Packet Storm
349539 - davenport davenport Davenport before 0.9.10 allows attackers to cause a denial of service (resource consumption) via (1) a very large XML file or (2) entity expansion attacks. NVD-CWE-Other
CVE-2004-2415 2017-07-11 10:31 2004-12-31 Show GitHub Exploit DB Packet Storm
349540 - youngzsoft ccproxy Buffer overflow in the logging component of CCProxy allows remote attackers to execute arbitrary code via a long HTTP GET request. NVD-CWE-Other
CVE-2004-2416 2017-07-11 10:31 2004-12-31 Show GitHub Exploit DB Packet Storm