Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
Urgent
Important
Warning
Warning
CVE
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
脅威度ソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Feb. 3, 2025, 1:14 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
190891 7.5 危険 gwm - Galatolo WebManager の view.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-2700 2012-09-25 17:17 2008-06-13 Show GitHub Exploit DB Packet Storm
190892 7.5 危険 gwm - GWM におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2008-2699 2012-09-25 17:17 2008-06-13 Show GitHub Exploit DB Packet Storm
190893 7.5 危険 jiro - JiRo's FAQ Manager eXperience の read.asp における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-2691 2012-09-25 17:17 2008-06-13 Show GitHub Exploit DB Packet Storm
190894 7.5 危険 insanelysimple2 - Insanely Simple Blog の index.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-2670 2012-09-25 17:17 2008-06-11 Show GitHub Exploit DB Packet Storm
190895 10 危険 lavrsen - Motion の webhttpd.c の read_client 関数における任意のコードを実行される脆弱性 CWE-189
数値処理の問題 		CVE-2008-2654 2012-09-25 17:17 2008-06-10 Show GitHub Exploit DB Packet Storm
190896 6.8 警告 mebiblio - meBiblio の upload/uploader.html における任意のコードを実行される脆弱性 CWE-20
不適切な入力確認 		CVE-2008-2648 2012-09-25 17:17 2008-06-10 Show GitHub Exploit DB Packet Storm
190897 7.5 危険 mebiblio - meBiblio の admin/journal_change_mask.inc.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-2647 2012-09-25 17:17 2008-06-10 Show GitHub Exploit DB Packet Storm
190898 4.3 警告 mebiblio - meBiblio におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2008-2646 2012-09-25 17:17 2008-06-10 Show GitHub Exploit DB Packet Storm
190899 7.5 危険 kmrg-itb - OtomiGenX の login.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-2642 2012-09-25 17:17 2008-06-10 Show GitHub Exploit DB Packet Storm
190900 7.5 危険 Joomla! - Joomla! 用の JooBlog コンポーネントにおける SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-2630 2012-09-25 17:17 2008-06-9 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:Feb. 23, 2025, 4:07 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
267131 - fac_guestbook fac_guestbook FAC Guestbook 3.01 stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database via a direct request for db/gbdb.mdb. NOTE: … NVD-CWE-Other
CVE-2007-2101 2017-07-29 10:31 2007-04-18 Show GitHub Exploit DB Packet Storm
267132 - mcafee e-business_server The administration server in McAfee e-Business Server before 8.1.1 and 8.5.x before 8.5.2 allows remote attackers to cause a denial of service (service crash) via a large length value in a malformed … NVD-CWE-Other
CVE-2007-2151 2017-07-29 10:31 2007-04-19 Show GitHub Exploit DB Packet Storm
267133 - mcafee e-business_server The vendor has addressed this issue in the following product update: https://knowledge.mcafee.com/SupportSite/dynamickc.do?externalId=612751&command=show&forward=nonthreadedKC NVD-CWE-Other
CVE-2007-2151 2017-07-29 10:31 2007-04-19 Show GitHub Exploit DB Packet Storm
267134 - mcafee virusscan_enterprise Buffer overflow in the On-Access Scanner in McAfee VirusScan Enterprise before 8.0i Patch 12 allows user-assisted remote attackers to execute arbitrary code via a long filename containing multi-byte … NVD-CWE-Other
CVE-2007-2152 2017-07-29 10:31 2007-04-19 Show GitHub Exploit DB Packet Storm
267135 - mcafee virusscan_enterprise The vendor has addressed this issue with the following product update: https://knowledge.mcafee.com/SupportSite/dynamickc.do?externalId=612750&command=show&forward=nonthreadedKC NVD-CWE-Other
CVE-2007-2152 2017-07-29 10:31 2007-04-19 Show GitHub Exploit DB Packet Storm
267136 - proftpd_project proftpd The Auth API in ProFTPD before 20070417, when multiple simultaneous authentication modules are configured, does not require that the module that checks authentication is the same as the module that r… NVD-CWE-Other
CVE-2007-2165 2017-07-29 10:31 2007-04-23 Show GitHub Exploit DB Packet Storm
267137 - aimstats aimstats Static code injection vulnerability in process.php in AimStats 3.2 and earlier allows remote attackers to inject PHP code into config.php via the databasehost parameter. NOTE: the provenance of this… NVD-CWE-Other
CVE-2007-2168 2017-07-29 10:31 2007-04-23 Show GitHub Exploit DB Packet Storm
267138 - double_precision_incorporated courier-imap Eval injection vulnerability in (1) courier-imapd.indirect and (2) courier-pop3d.indirect in Courier-IMAP before 4.0.6-r2, and 4.1.x before 4.1.2-r1, on Gentoo Linux allows remote attackers to execut… NVD-CWE-Other
CVE-2007-2173 2017-07-29 10:31 2007-04-25 Show GitHub Exploit DB Packet Storm
267139 - objective_development sharity Multiple unspecified vulnerabilities in Objective Development Sharity before 3.3 allow remote attackers to cause a denial of service (daemon crash) via unspecified vectors. NVD-CWE-Other
CVE-2007-2178 2017-07-29 10:31 2007-04-25 Show GitHub Exploit DB Packet Storm
267140 - freepbx freepbx Multiple cross-site scripting (XSS) vulnerabilities in freePBX 2.2.x allow remote attackers to inject arbitrary web script or HTML via the (1) From, (2) To, (3) Call-ID, (4) User-Agent, and unspecifi… NVD-CWE-Other
CVE-2007-2191 2017-07-29 10:31 2007-04-25 Show GitHub Exploit DB Packet Storm