Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
Urgent
Important
Warning
Warning
CVE
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
脅威度ソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Feb. 3, 2025, 1:14 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
190161 2.6 注意 navboard - NavBoard の modules.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2008-5944 2012-09-25 17:26 2009-01-22 Show GitHub Exploit DB Packet Storm
190162 7.5 危険 navboard - NavBoard におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2008-5943 2012-09-25 17:26 2009-01-22 Show GitHub Exploit DB Packet Storm
190163 4.3 警告 MODX - MODx CMS の index.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2008-5939 2012-09-25 17:26 2009-01-22 Show GitHub Exploit DB Packet Storm
190164 6.8 警告 MODX - MODx CMS における PHP リモートファイルインクルージョンの脆弱性 CWE-94
コード・インジェクション 		CVE-2008-5938 2012-09-25 17:26 2009-01-22 Show GitHub Exploit DB Packet Storm
190165 5 警告 mini-pub - mini-pub の front-end/edit.php における PHP のソースコードを取得される脆弱性 CWE-200
情報漏えい 		CVE-2008-5936 2012-09-25 17:26 2009-01-21 Show GitHub Exploit DB Packet Storm
190166 3.5 注意 link3 - Drupal の Simplenews モジュールにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2008-5996 2012-09-25 17:26 2008-09-24 Show GitHub Exploit DB Packet Storm
190167 7.5 危険 iyziforum - iyzi Forum におけるパスワードを含むデータベースファイルをダウンロードされる脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2008-5901 2012-09-25 17:26 2009-01-12 Show GitHub Exploit DB Packet Storm
190168 7.5 危険 mediatheka - Mediatheka の connection.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-5895 2012-09-25 17:26 2009-01-12 Show GitHub Exploit DB Packet Storm
190169 6.8 警告 mediatheka - Mediatheka の index.php におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2008-5894 2012-09-25 17:26 2009-01-12 Show GitHub Exploit DB Packet Storm
190170 2.6 注意 icash - ClickAndEmail の admin_dblayers.asp におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2008-5893 2012-09-25 17:26 2009-01-12 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:Feb. 21, 2025, 4:08 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
266741 - hydrairc hydrairc Format string vulnerability in HydraIRC 0.3.151 allows remote attackers to cause a denial of service via format string specifiers in certain data related to failed DCC file transfer negotiation. NVD-CWE-Other
CVE-2007-3836 2017-07-29 10:32 2007-07-18 Show GitHub Exploit DB Packet Storm
266742 - hydrairc hydrairc Heap-based buffer overflow in HydraIRC 0.3.151 allows remote IRC servers to cause a denial of service (application crash) via a long CTCP request message containing '%' (percent) characters. NVD-CWE-Other
CVE-2007-3837 2017-07-29 10:32 2007-07-18 Show GitHub Exploit DB Packet Storm
266743 - subversion
tortoisesvn 		subversion
tortoisesvn 		Directory traversal vulnerability in Subversion before 1.4.5, as used by TortoiseSVN before 1.4.5 and possibly other products, when run on Windows-based systems, allows remote authenticated users to … CWE-22
Path Traversal 		CVE-2007-3846 2017-07-29 10:32 2007-08-29 Show GitHub Exploit DB Packet Storm
266744 - oracle database_server Multiple unspecified vulnerabilities in Oracle Database 10.1.0.5 and 10.2.0.3 allow remote authenticated users to have unknown impact via (1) DBMS_JAVA_TEST in the JavaVM component (DB01), (2) Oracle… NVD-CWE-Other
CVE-2007-3853 2017-07-29 10:32 2007-07-19 Show GitHub Exploit DB Packet Storm
266745 - oracle database_server
oracle10g 		Unspecified vulnerability in the Oracle Data Mining component for Oracle Database 10g Release 2 10.2.0.2 and 10.2.0.3, 10g 10.1.0.5, and Oracle9i Database Release 2 9.2.0.7, 9.2.0.8, and 9.2.0.8DV ha… NVD-CWE-Other
CVE-2007-3856 2017-07-29 10:32 2007-07-19 Show GitHub Exploit DB Packet Storm
266746 - oracle database_server
oracle10g 		As the vulnerability impact is unspecified, the impact has been set to a default value of "Obtain Other Access." NVD-CWE-Other
CVE-2007-3856 2017-07-29 10:32 2007-07-19 Show GitHub Exploit DB Packet Storm
266747 - oracle apex
application_server
collaboration_suite
database_server
e-business_suite
peoplesoft_enterprise_customer_relationship_management
peoplesoft_enterprise_human_capital_management 		Multiple unspecified vulnerabilities in Oracle Database 9.0.1.5+, 9.2.0.7, and 10.1.0.5 allow remote authenticated users to have unknown impact via (1) SYS.DBMS_PRVTAQIS in the Advanced Queuing compo… NVD-CWE-noinfo
CVE-2007-3854 2017-07-29 10:32 2007-07-19 Show GitHub Exploit DB Packet Storm
266748 - oracle database_server Multiple unspecified vulnerabilities in Oracle Database 10.1.0.5 allow remote authenticated users to have an unknown impact via (a) the Oracle Text component, including (1) unspecified vectors (DB05)… NVD-CWE-Other
CVE-2007-3857 2017-07-29 10:32 2007-07-19 Show GitHub Exploit DB Packet Storm
266749 - oracle database_server As the vulnerability impact is unspecified, the impact has been set to a default value of "Obtain Other Access." NVD-CWE-Other
CVE-2007-3857 2017-07-29 10:32 2007-07-19 Show GitHub Exploit DB Packet Storm
266750 - oracle database_server Multiple unspecified vulnerabilities in Oracle Database 10.2.0.3 allow remote authenticated users to have an unknown impact via (1) EXFSYS.DBMS_RLMGR_UTL in Rules Manager (DB11) and (2) Program Inter… NVD-CWE-noinfo
CVE-2007-3858 2017-07-29 10:32 2007-07-19 Show GitHub Exploit DB Packet Storm