Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
Urgent
Important
Warning
Warning
CVE
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
脅威度ソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Feb. 3, 2025, 1:14 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
190071 7.5 危険 jadu - Jadu Galaxies の scripts/documents.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-6254 2012-09-25 17:27 2009-02-24 Show GitHub Exploit DB Packet Storm
190072 7.5 危険 gwm - Galatolo WebManager の plugins/users/index.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-6249 2012-09-25 17:27 2009-02-23 Show GitHub Exploit DB Packet Storm
190073 4.3 警告 openedit - OpenEdit DAM の data/views/index.html におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2008-6240 2012-09-25 17:27 2009-02-23 Show GitHub Exploit DB Packet Storm
190074 6.8 警告 openedit - OpenEdit DAM におけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反 		CVE-2008-6239 2012-09-25 17:27 2009-02-23 Show GitHub Exploit DB Packet Storm
190075 4.3 警告 openedit - OpenEdit DAM の archive/savedqueries/savequeryfinish.html におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2008-6238 2012-09-25 17:27 2009-02-23 Show GitHub Exploit DB Packet Storm
190076 5 警告 joomlashowroom - Joomla! 用の pro_desk コンポーネントにおけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2008-6222 2012-09-25 17:27 2009-02-20 Show GitHub Exploit DB Packet Storm
190077 7.5 危険 harlandscripts - Harlandscripts の Pro Traffic One における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-6214 2012-09-25 17:27 2009-02-20 Show GitHub Exploit DB Packet Storm
190078 7.5 危険 harlandscripts - Harlandscripts の Pro Traffic One の mypage.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-6213 2012-09-25 17:27 2009-02-20 Show GitHub Exploit DB Packet Storm
190079 4.3 警告 mcgallerypro - PhpForums.net の mcGallery におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2008-6211 2012-09-25 17:27 2009-02-19 Show GitHub Exploit DB Packet Storm
190080 7.5 危険 jakob-persson - CoBaLT の adminler.asp における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-6203 2012-09-25 17:27 2009-02-19 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:Feb. 23, 2025, 4:07 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
266661 - aol radio Multiple stack-based buffer overflows in the AOL AmpX ActiveX control in AmpX.dll 2.6.1.11 in AOL Radio allow remote attackers to execute arbitrary code via long arguments to unspecified methods. CWE-119
Incorrect Access of Indexable Resource ('Range Error')  		CVE-2007-5755 2017-07-29 10:33 2007-11-14 Show GitHub Exploit DB Packet Storm
266662 - ibm db2_universal_database Stack-based buffer overflow in db2dasrrm in the DB2 Administration Server (DAS) in IBM DB2 Universal Database 9.5 before Fix Pack 1, 9.1 before Fix Pack 4a, and 8 before FixPak 16 allows local users … CWE-119
Incorrect Access of Indexable Resource ('Range Error')  		CVE-2007-5758 2017-07-29 10:33 2008-04-17 Show GitHub Exploit DB Packet Storm
266663 - motorola netoctopus The NantSys device 5.0.0.115 in Motorola netOctopus 5.1.2 build 1011 has weak permissions for the \\.\NantSys device interface (nantsys.sys), which allows local users to gain privileges or cause a de… CWE-264
Permissions, Privileges, and Access Controls 		CVE-2007-5761 2017-07-29 10:33 2008-01-9 Show GitHub Exploit DB Packet Storm
266664 - novell netware_client NICM.SYS driver 3.0.0.4, as used in Novell NetWare Client 4.91 SP4, allows local users to execute arbitrary code by opening the \\.\nicm device and providing crafted kernel addresses via IOCTLs with … CWE-20
 Improper Input Validation  		CVE-2007-5762 2017-07-29 10:33 2008-01-10 Show GitHub Exploit DB Packet Storm
266665 - gnu emacs The hack-local-variables function in Emacs before 22.2, when enable-local-variables is set to :safe, does not properly search lists of unsafe or risky variables, which might allow user-assisted attac… NVD-CWE-Other
CVE-2007-5795 2017-07-29 10:33 2007-11-3 Show GitHub Exploit DB Packet Storm
266666 - ibm websphere_application_server Multiple cross-site scripting (XSS) vulnerabilities in uddigui/navigateTree.do in the UDDI user console in IBM WebSphere Application Server (WAS) before 6.1.0 Fix Pack 13 (6.1.0.13) allow remote atta… CWE-79
Cross-site Scripting 		CVE-2007-5798 2017-07-29 10:33 2007-11-3 Show GitHub Exploit DB Packet Storm
266667 - ibm websphere_application_server Multiple cross-site request forgery (CSRF) vulnerabilities in uddigui/navigateTree.do in the UDDI user console in IBM WebSphere Application Server (WAS) before 6.1.0 Fix Pack 13 (6.1.0.13) allow remo… CWE-352
 Origin Validation Error 		CVE-2007-5799 2017-07-29 10:33 2007-11-3 Show GitHub Exploit DB Packet Storm
266668 - nagios nagios Multiple cross-site scripting (XSS) vulnerabilities in CGI programs in Nagios before 2.12 might allow remote attackers to inject arbitrary web script or HTML via unspecified vectors, a different issu… CWE-79
Cross-site Scripting 		CVE-2007-5803 2017-07-29 10:33 2008-05-14 Show GitHub Exploit DB Packet Storm
266669 - ibm aix cfgcon in IBM AIX 5.2 and 5.3 does not properly validate the argument to the "-p" option to swcons, which allows local users in the system group to create or overwrite an arbitrary file, and enable w… NVD-CWE-Other
CVE-2007-5804 2017-07-29 10:33 2007-11-6 Show GitHub Exploit DB Packet Storm
266670 - ibm aix cfgcon in IBM AIX 5.2 and 5.3 does not properly validate the argument to the "-p" option to swcons, which allows local users in the system group to create an arbitrary file, and enable world writabil… CWE-59
Link Following 		CVE-2007-5805 2017-07-29 10:33 2007-11-6 Show GitHub Exploit DB Packet Storm