Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 27, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
230351 7.5 危険 shoppingtree - CP の admin/SA_shipFedExMeter.asp における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-0739 2012-12-20 18:34 2008-02-12 Show GitHub Exploit DB Packet Storm
230352 7.5 危険 shoppingtree - CP における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-0738 2012-12-20 18:34 2008-02-12 Show GitHub Exploit DB Packet Storm
230353 7.5 危険 shoppingtree - CP の admin/utilities_ConfigHelp.asp における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-0737 2012-12-20 18:34 2008-02-12 Show GitHub Exploit DB Packet Storm
230354 5 警告 shoppingtree - CP の admin/SA_shipFedExMeter.asp におけるパスを取得される脆弱性 CWE-200
情報漏えい 		CVE-2008-0736 2012-12-20 18:34 2008-02-12 Show GitHub Exploit DB Packet Storm
230355 10 危険 titan - Titan FTP Server の FTP サービスなどにおけるヒープベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2008-0725 2012-12-20 18:34 2008-02-11 Show GitHub Exploit DB Packet Storm
230356 5 警告 the everything development company - The Everything Development System の The Everything Development Engine におけるユーザアカウントへアクセス権を取得される脆弱性 CWE-255
証明書・パスワード管理 		CVE-2008-0724 2012-12-20 18:34 2008-02-11 Show GitHub Exploit DB Packet Storm
230357 4.3 警告 planetluc - MyNews の mynews.inc.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2008-0723 2012-12-20 18:34 2008-02-11 Show GitHub Exploit DB Packet Storm
230358 4.3 警告 Webmin Project - Webmin および Usermin におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2008-0720 2012-12-20 18:34 2008-02-11 Show GitHub Exploit DB Packet Storm
230359 6.8 警告 シマンテック - Symantec Altiris Notification Server のエージェントにおける権限を取得される脆弱性 CWE-DesignError
CVE-2008-0716 2012-12-20 18:34 2008-02-6 Show GitHub Exploit DB Packet Storm
230360 5 警告 sflog - sflog! におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2008-0703 2012-12-20 18:34 2008-02-11 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 27, 2026, 4:52 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
346401 - skintech phpnewsmanager Directory traversal vulnerability in functions.php in PhpNewsManager 1.46 allows remote attackers to retrieve arbitrary files via .. (dot dot) sequences in the clang parameter. NVD-CWE-Other
CVE-2004-0327 2017-07-11 10:30 2004-11-23 Show GitHub Exploit DB Packet Storm
346402 - gigabyte gn-b46b Gigabyte Gn-B46B 2.4Ghz wireless broadband router firmware 1.003.00 allows local users on the same local network as the router to bypass authentication by using a copy of the router's html menu on a … NVD-CWE-Other
CVE-2004-0328 2017-07-11 10:30 2004-11-23 Show GitHub Exploit DB Packet Storm
346403 - freechat freechat FreeChat 1.1.1a allows remote attackers to cause a denial of service (crash) via certain unexpected strings, as demonstrated using "aaaaa". NVD-CWE-Other
CVE-2004-0329 2017-07-11 10:30 2004-11-23 Show GitHub Exploit DB Packet Storm
346404 - dell openmanage Heap-based buffer overflow in Dell OpenManage Web Server 3.4.0 allows remote attackers to cause a denial of service (crash) via a HTTP POST with a long application variable. NVD-CWE-Other
CVE-2004-0331 2017-07-11 10:30 2004-11-23 Show GitHub Exploit DB Packet Storm
346405 - extremail extremail Extremail 1.5.9 does not check passwords correctly when they are all digits or begin with a digit, which allows remote attackers to gain privileges. NVD-CWE-Other
CVE-2004-0332 2017-07-11 10:30 2004-11-23 Show GitHub Exploit DB Packet Storm
346406 - openpkg
uudeview
winzip
gentoo 		openpkg
uudeview
winzip
linux 		Buffer overflow in the UUDeview package, as used in WinZip 6.2 through WinZip 8.1 SR-1, and possibly other packages, allows remote attackers to execute arbitrary code via a MIME archive with certain … NVD-CWE-Other
CVE-2004-0333 2017-07-11 10:30 2004-11-23 Show GitHub Exploit DB Packet Storm
346407 - openpkg
uudeview
winzip
gentoo 		openpkg
uudeview
winzip
linux 		This was fixed in WinZip 8.1 SR-2 in March of 2004. You can find more information on the subject on the following pages of the winzip site: http://www.winzip.com/wz81sr2.htm http://www.winzip.com/f… NVD-CWE-Other
CVE-2004-0333 2017-07-11 10:30 2004-11-23 Show GitHub Exploit DB Packet Storm
346408 - innomedia innomedia_videophone InnoMedia VideoPhone allows remote attackers to bypass Basic Authorization via an HTTP request to (1) videophone_admindetail.asp, (2) videophone_syscfg.asp, (3) videophone_upgrade.asp, or (4) videoph… NVD-CWE-Other
CVE-2004-0334 2017-07-11 10:30 2004-11-23 Show GitHub Exploit DB Packet Storm
346409 - software602 602pro_lan_suite LAN SUITE Web Mail 602Pro, when configured to use the "Directory browsing" feature, allows remote attackers to obtain a directory listing via an HTTP request to (1) index.html, (2) cgi-bin/, or (3) u… NVD-CWE-Other
CVE-2004-0335 2017-07-11 10:30 2004-11-23 Show GitHub Exploit DB Packet Storm
346410 - software602 602pro_lan_suite Cross-site scripting (XSS) vulnerability in LAN SUITE Web Mail 602Pro allows remote attackers to execute arbitrary script or HTML as other users via a URL to index.html, followed by a / (slash) and t… NVD-CWE-Other
CVE-2004-0337 2017-07-11 10:30 2004-11-23 Show GitHub Exploit DB Packet Storm