Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Feb. 9, 2026, 12:59 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
193831 7.8 重要
Local
Peter Selinger - potrace の bitmap_io.c の bm_readbody_bmp 関数におけるヒープベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー
CVE-2016-8698 2017-02-13 17:30 2016-08-8 Show GitHub Exploit DB Packet Storm
193832 4.3 警告 Peter Selinger - potrace の bitmap.h の bm_new 関数におけるサービス運用妨害 (DoS) の脆弱性 CWE-369
ゼロ除算
CVE-2016-8697 2017-02-13 17:30 2016-08-8 Show GitHub Exploit DB Packet Storm
193833 5.5 警告
Local
Peter Selinger - potrace の bitmap_io.c の bm_readbody_bmp 関数におけるサービス運用妨害 (DoS) の脆弱性 CWE-476
NULL ポインタデリファレンス
CVE-2016-8696 2017-02-13 17:30 2016-08-8 Show GitHub Exploit DB Packet Storm
193834 5.5 警告
Local
Peter Selinger - potrace の bitmap_io.c の bm_readbody_bmp 関数におけるサービス運用妨害 (DoS) の脆弱性 CWE-476
NULL ポインタデリファレンス
CVE-2016-8695 2017-02-13 17:30 2016-08-8 Show GitHub Exploit DB Packet Storm
193835 5.5 警告
Local
Peter Selinger - potrace の bitmap_io.c の bm_readbody_bmp 関数におけるサービス運用妨害 (DoS) の脆弱性 CWE-476
NULL ポインタデリファレンス
CVE-2016-8694 2017-02-13 17:30 2016-08-8 Show GitHub Exploit DB Packet Storm
193836 7.8 重要
Local
Peter Selinger - potrace の bitmap.h の bm_new 関数におけるメモリアロケーションエラーを誘発される脆弱性 CWE-119
バッファエラー
CVE-2016-8686 2017-02-13 17:30 2016-08-29 Show GitHub Exploit DB Packet Storm
193837 5.5 警告
Local
Peter Selinger - potrace の decompose.c の findnext 関数におけるサービス運用妨害 (DoS) の脆弱性 CWE-119
バッファエラー
CVE-2016-8685 2017-02-13 17:30 2016-08-29 Show GitHub Exploit DB Packet Storm
193838 7.8 重要
Local
libquicktime - libquicktime の quicktime_read_pascal 関数における整数オーバーフローの脆弱性 CWE-190
整数オーバーフローまたはラップアラウンド
CVE-2016-2399 2017-02-13 17:15 2016-02-23 Show GitHub Exploit DB Packet Storm
193839 6.1 警告
Network
Debian
Canonical
MoinMoin
- MoinMoin の GUI エディタのリンクダイアログにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2016-9119 2017-02-13 16:59 2016-11-15 Show GitHub Exploit DB Packet Storm
193840 8.8 重要
Network
Roundcube.net - Roundcube の Password プラグインの DBMail ドライバにおけるバッファオーバーフローの脆弱性 CWE-119
バッファエラー
CVE-2015-2181 2017-02-13 16:36 2015-02-5 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:April 26, 2026, 4:08 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
293091 - aj_square aj_auction AJ Square AJ Auction Pro Platinum Skin #1 sends a redirect but does not exit when it is called directly, which allows remote attackers to bypass authentication via a direct request to admin/user.php. CWE-264
Permissions, Privileges, and Access Controls
CVE-2008-6966 2017-09-29 10:33 2009-08-14 Show GitHub Exploit DB Packet Storm
293092 - simplemachines smf The password reset functionality in Simple Machines Forum (SMF) 1.0.x before 1.0.14, 1.1.x before 1.1.6, and 2.0 before 2.0 beta 4 includes clues about the random number generator state within a hidd… CWE-255
Credentials Management
CVE-2008-6971 2017-09-29 10:33 2009-08-14 Show GitHub Exploit DB Packet Storm
293093 - dd-wrt dd-wrt Multiple cross-site request forgery (CSRF) vulnerabilities in apply.cgi in DD-WRT 24 sp1 and earlier allow remote attackers to hijack the authentication of administrators for requests that (1) execut… CWE-352
 Origin Validation Error
CVE-2008-6974 2017-09-29 10:33 2009-08-15 Show GitHub Exploit DB Packet Storm
293094 - dd-wrt dd-wrt Multiple cross-site request forgery (CSRF) vulnerabilities in apply.cgi in DD-WRT 24 sp2 allow remote attackers to hijack the authentication of administrators for requests that (1) execute arbitrary … CWE-352
 Origin Validation Error
CVE-2008-6975 2017-09-29 10:33 2009-08-15 Show GitHub Exploit DB Packet Storm
293095 - fullrevolution aspwebalbum Cross-site scripting (XSS) vulnerability in album.asp in Full Revolution aspWebAlbum 3.2 allows remote attackers to inject arbitrary web script or HTML via the message parameter in a summary action. CWE-79
Cross-site Scripting
CVE-2008-6977 2017-09-29 10:33 2009-08-19 Show GitHub Exploit DB Packet Storm
293096 - fullrevolution aspwebalbum Unrestricted file upload vulnerability in Full Revolution aspWebAlbum 3.2 allows remote attackers to execute arbitrary code by uploading a file with an executable extension, then accessing it via a d… CWE-20
 Improper Input Validation 
CVE-2008-6978 2017-09-29 10:33 2009-08-19 Show GitHub Exploit DB Packet Storm
293097 - devalcms devalcms Cross-site scripting (XSS) vulnerability in index.php in devalcms 1.4a allows remote attackers to inject arbitrary web script or HTML via the currentpath parameter. CWE-79
Cross-site Scripting
CVE-2008-6982 2017-09-29 10:33 2009-08-19 Show GitHub Exploit DB Packet Storm
293098 - devalcms devalcms modules/tool/hitcounter.php in devalcms 1.4a allows remote attackers to execute arbitrary PHP code via the HTTP Referer header with a target file specified in the gv_folder_data parameter, as demonst… CWE-94
Code Injection
CVE-2008-6983 2017-09-29 10:33 2009-08-19 Show GitHub Exploit DB Packet Storm
293099 - cmsbright cmsbright SQL injection vulnerability in public/page.php in Websens CMSbright allows remote attackers to execute arbitrary SQL commands via the id_rub_page parameter. CWE-89
SQL Injection
CVE-2008-6991 2017-09-29 10:33 2009-08-19 Show GitHub Exploit DB Packet Storm
293100 - google chrome Integer underflow in net/base/escape.cc in chrome.dll in Google Chrome 0.2.149.27 allows remote attackers to cause a denial of service (browser crash) via a URI with an invalid handler followed by a … CWE-189
Numeric Errors
CVE-2008-6995 2017-09-29 10:33 2009-08-19 Show GitHub Exploit DB Packet Storm