Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 22, 2026, 12:09 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
229001 5.1 警告 phpclanwebsite - Phpclanwebsite におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2008-5878 2012-12-20 19:10 2009-01-8 Show GitHub Exploit DB Packet Storm
229002 6.8 警告 phpclanwebsite - Phpclanwebsite における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-5877 2012-12-20 19:10 2009-01-8 Show GitHub Exploit DB Packet Storm
229003 7.5 危険 yerba - Yerba SACphp における認証を回避される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2008-5873 2012-12-20 19:10 2009-01-8 Show GitHub Exploit DB Packet Storm
229004 4.3 警告 proxim - Proxim Wireless Tsunami におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2008-5869 2012-12-20 19:10 2009-01-8 Show GitHub Exploit DB Packet Storm
229005 5 警告 yerba - Yerba SACphp におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2008-5867 2012-12-20 19:10 2009-01-7 Show GitHub Exploit DB Packet Storm
229006 10 危険 proxim - Proxim Wireless Tsunami における重要な情報を取得される脆弱性 CWE-94
コード・インジェクション 		CVE-2008-5866 2012-12-20 19:10 2009-01-7 Show GitHub Exploit DB Packet Storm
229007 7.5 危険 v-gn - wBB 用の Userlocator モジュールにおける SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-5863 2012-12-20 19:10 2009-01-6 Show GitHub Exploit DB Packet Storm
229008 5 警告 webcamxp - webcamXP におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2008-5862 2012-12-20 19:10 2009-01-6 Show GitHub Exploit DB Packet Storm
229009 4 警告 シックス・アパート株式会社 - Six Apart MT におけるアクセス制限を回避される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2008-5846 2012-12-20 19:10 2009-01-5 Show GitHub Exploit DB Packet Storm
229010 7.5 危険 phpicalendar - PHP iCalendar における認証を回避される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2008-5840 2012-12-20 19:10 2009-01-5 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 22, 2026, 4:08 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
346121 - cvstrac cvstrac Multiple cross-site scripting (XSS) vulnerabilities in (1) main.c and (2) login.c for CVSTrac before 1.1.5 allow remote attackers to inject arbitrary HTML and web script. NVD-CWE-Other
CVE-2004-1146 2017-07-11 10:30 2004-12-31 Show GitHub Exploit DB Packet Storm
346122 - phpmyadmin phpmyadmin phpMyAdmin 2.6.0-pl2, and other versions before 2.6.1, with external transformations enabled, allows remote attackers to execute arbitrary commands via shell metacharacters. NVD-CWE-Other
CVE-2004-1147 2017-07-11 10:30 2005-01-10 Show GitHub Exploit DB Packet Storm
346123 - phpmyadmin phpmyadmin phpMyAdmin before 2.6.1, when configured with UploadDir functionality, allows remote attackers to read arbitrary files via the sql_localfile parameter. NVD-CWE-Other
CVE-2004-1148 2017-07-11 10:30 2005-01-10 Show GitHub Exploit DB Packet Storm
346124 - nullsoft winamp Stack-based buffer overflow in the in_cdda.dll plugin for Winamp 5.0 through 5.08c allows attackers to execute arbitrary code via a cda:// URL with a long (1) device name or (2) sound track number, a… NVD-CWE-Other
CVE-2004-1150 2017-07-11 10:30 2004-12-31 Show GitHub Exploit DB Packet Storm
346125 - adobe acrobat_reader Buffer overflow in the mailListIsPdf function in Adobe Acrobat Reader 5.09 for Unix allows remote attackers to execute arbitrary code via an e-mail message with a crafted PDF attachment. NVD-CWE-Other
CVE-2004-1152 2017-07-11 10:30 2005-01-10 Show GitHub Exploit DB Packet Storm
346126 - scponly
gentoo 		scponly
linux 		The unison command in scponly before 4.0 does not properly restrict programs that can be run, which could allow remote authenticated users to bypass intended access restrictions and execute arbitrary… NVD-CWE-Other
CVE-2004-1162 2017-07-11 10:30 2005-01-10 Show GitHub Exploit DB Packet Storm
346127 - cisco cns_network_registrar Cisco CNS Network Registrar Central Configuration Management (CCM) server 6.0 through 6.1.1.3 allows remote attackers to cause a denial of service (CPU consumption) by ending a connection after sendi… NVD-CWE-Other
CVE-2004-1163 2017-07-11 10:30 2005-01-10 Show GitHub Exploit DB Packet Storm
346128 - cisco cns_network_registrar The lock manager in Cisco CNS Network Registrar 6.0 through 6.1.1.3 allows remote attackers to cause a denial of service (process crash) via a certain "unexpected packet sequence." NVD-CWE-Other
CVE-2004-1164 2017-07-11 10:30 2005-01-10 Show GitHub Exploit DB Packet Storm
346129 - gentoo mirrorselect mirrorselect before 0.89 creates temporary files in a world-writable location with predictable file names, which allows remote attackers to overwrite arbitrary files via a symlink attack. NVD-CWE-Other
CVE-2004-1167 2017-07-11 10:30 2005-01-10 Show GitHub Exploit DB Packet Storm
346130 - mysql maxdb Stack-based buffer overflow in the WebDav handler in MaxDB WebTools 7.5.00.18 and earlier allows remote attackers to execute arbitrary code via a long Overwrite header. NVD-CWE-Other
CVE-2004-1168 2017-07-11 10:30 2005-01-10 Show GitHub Exploit DB Packet Storm