Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 5, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
225971 7.5 危険 TYPO3 Association - TYPO3 用の TU-Clausthal Staff エクステンションにおける SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-6344 2012-12-20 19:10 2009-02-27 Show GitHub Exploit DB Packet Storm
225972 4.3 警告 TYPO3 Association - TYPO3 用の TU-Clausthal ODIN エクステンションにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2008-6343 2012-12-20 19:10 2009-02-27 Show GitHub Exploit DB Packet Storm
225973 4.3 警告 TYPO3 Association - TYPO3 用の SB Universal Plugin エクステンションにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2008-6341 2012-12-20 19:10 2009-02-27 Show GitHub Exploit DB Packet Storm
225974 7.5 危険 weber-ebusiness - TYPO3 用の WEBERkommunal Facilities エクステンションにおける SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-6338 2012-12-20 19:10 2009-02-27 Show GitHub Exploit DB Packet Storm
225975 4.3 警告 rightscripts - Text Lines Rearrange Script の download.php におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2008-6336 2012-12-20 19:10 2009-02-27 Show GitHub Exploit DB Packet Storm
225976 7.5 危険 simplecustomer - Simple Customer の login.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-6332 2012-12-20 19:10 2009-02-27 Show GitHub Exploit DB Packet Storm
225977 6 警告 streber-pm - Streber におけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反 		CVE-2008-6331 2012-12-20 19:10 2009-02-27 Show GitHub Exploit DB Packet Storm
225978 7.5 危険 PreProject.com - Pre ASP Job Board の Employee/login.asp における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-6329 2012-12-20 19:10 2009-02-27 Show GitHub Exploit DB Packet Storm
225979 7.5 危険 simplecustomer - Simple Customer の login.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-6326 2012-12-20 19:10 2009-02-27 Show GitHub Exploit DB Packet Storm
225980 4.3 警告 SoftbizScripts - Softbiz Classifieds Script におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2008-6325 2012-12-20 19:10 2009-02-27 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 6, 2026, 4:08 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
314261 7.5 HIGH
Network 		bea weblogic_server The default configuration of BEA WebLogic 3.1.8 through 4.5.1 allows a remote attacker to view source code of a JSP program by requesting a URL which provides the JSP extension in upper case. CWE-178
 Improper Handling of Case Sensitivity 		CVE-2000-0499 2024-01-27 02:43 2000-06-8 Show GitHub Exploit DB Packet Storm
314262 7.1 HIGH
Local 		iss blackice_server_protection
blackice_pc_protection 		BlackICE PC Protection and Server Protection installs (1) firewall.ini, (2) blackice.ini, (3) sigs.ini and (4) protect.ini with Everyone Full Control permissions, which allows local users to cause a … CWE-732
 Incorrect Permission Assignment for Critical Resource 		CVE-2004-1714 2024-01-27 02:21 2004-08-11 Show GitHub Exploit DB Packet Storm
314263 7.0 HIGH
Local 		symantec antivirus_scan_engine The LiveUpdate capability (liveupdate.sh) in Symantec AntiVirus Scan Engine 4.0 and 4.3 for Red Hat Linux allows local users to create or append to arbitrary files via a symlink attack on /tmp/LiveUp… CWE-59
Link Following 		CVE-2004-0217 2024-01-27 02:21 2004-04-15 Show GitHub Exploit DB Packet Storm
314264 5.5 MEDIUM
Local 		mgetty_project mgetty faxrunqd.in in mgetty 1.1.28 and earlier allows local users to overwrite files via a symlink attack on JOB files. CWE-59
Link Following 		CVE-2003-0517 2024-01-27 02:20 2003-08-18 Show GitHub Exploit DB Packet Storm
314265 7.8 HIGH
Local 		ibm u2_universe cci_dir in IBM U2 UniVerse 10.0.0.9 and earlier creates hard links and unlinks files as root, which allows local users to gain privileges by deleting and overwriting arbitrary files. CWE-59
Link Following 		CVE-2003-0578 2024-01-27 02:19 2003-08-18 Show GitHub Exploit DB Packet Storm
314266 7.8 HIGH
Local 		oracle mysql Buffer overflow in MySQL daemon (mysqld) before 3.23.50, and 4.0 beta before 4.02, on the Win32 platform, allows local users to execute arbitrary code via a long "datadir" parameter in the my.ini ini… CWE-120
Classic Buffer Overflow 		CVE-2002-0969 2024-01-27 02:19 2002-10-11 Show GitHub Exploit DB Packet Storm
314267 5.5 MEDIUM
Local 		blackberry qnx_neutrino_real-time_operating_system Hard link and possibly symbolic link following vulnerabilities in QNX RTOS 4.25 (aka QNX4) allow local users to overwrite arbitrary files via (1) the -f argument to the monitor utility, (2) the -d ar… CWE-59
Link Following 		CVE-2002-0793 2024-01-27 02:18 2002-08-12 Show GitHub Exploit DB Packet Storm
314268 5.5 MEDIUM
Local 		kernel
avaya 		util-linux
cvlan
interactive_response
integrated_management_suit
intuity_lx
message_networking
messaging_storage_server 		script command in the util-linux package before 2.11n allows local users to overwrite arbitrary files by setting a hardlink from the typescript log file to any file on the system, then having root ex… CWE-59
Link Following 		CVE-2001-1494 2024-01-27 02:16 2001-12-31 Show GitHub Exploit DB Packet Storm
314269 7.1 HIGH
Local 		microsoft windows_nt The Winsock2ProtocolCatalogMutex mutex in Windows NT 4.0 has inappropriate Everyone/Full Control permissions, which allows local users to modify the permissions to "No Access" and disable Winsock net… CWE-732
 Incorrect Permission Assignment for Critical Resource 		CVE-2001-0006 2024-01-27 02:08 2001-02-12 Show GitHub Exploit DB Packet Storm
314270 4.7 MEDIUM
Local 		gnu
debian
canonical 		cpio
debian_linux
ubuntu_linux 		Race condition in cpio 2.6 and earlier allows local users to modify permissions of arbitrary files via a hard link attack on a file while it is being decompressed, whose permissions are changed by cp… CWE-59
CWE-367
Link Following
 Time-of-check Time-of-use (TOCTOU) Race Condition 		CVE-2005-1111 2024-01-27 02:07 2005-05-2 Show GitHub Exploit DB Packet Storm