Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":Feb. 9, 2026, 12:59 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
193871	7.5	重要 Network	Libical project	-	Libical の parser_get_next_char 関数におけるサービス運用妨害 (DoS) の脆弱性	CWE-125 境界外読み取り	CVE-2016-5826	2017-02-13 15:25	2016-06-20	Show	GitHub Exploit DB Packet Storm

193872	5.5	警告 Local	Libical project	-	Libical の icalparser_parse_string 関数におけるサービス運用妨害 (DoS) の脆弱性	CWE-125 境界外読み取り	CVE-2016-5825	2017-02-13 15:25	2016-06-24	Show	GitHub Exploit DB Packet Storm

193873	5.5	警告 Local	Libical project	-	Libical におけるサービス運用妨害 (DoS) の脆弱性	CWE-416 解放済みメモリの使用	CVE-2016-5824	2017-02-13 15:25	2016-12-3	Show	GitHub Exploit DB Packet Storm

193874	5.5	警告 Local	Libical project	-	Libical の icalproperty_new_clone 関数におけるサービス運用妨害 (DoS) の脆弱性	CWE-416 解放済みメモリの使用	CVE-2016-5823	2017-02-13 15:25	2016-06-25	Show	GitHub Exploit DB Packet Storm

193875	4.7	警告 Local	サムスン	-	Samsung Knox における重要な情報を取得される脆弱性	CWE-200 CWE-310	CVE-2016-1919	2017-02-13 14:33	2016-01-16	Show	GitHub Exploit DB Packet Storm

193876	5.5	警告 Local	サムスン	-	Samsung Knox における中間者攻撃を実行される脆弱性	CWE-284 不適切なアクセス制御	CVE-2016-1920	2017-02-13 14:33	2016-01-16	Show	GitHub Exploit DB Packet Storm

193877	5.4	警告 Network	IBM	-	IBM Kenexa LMS on Cloud におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2016-8920	2017-02-13 11:54	2016-11-11	Show	GitHub Exploit DB Packet Storm

193878	5.4	警告 Network	IBM	-	IBM Kenexa LMS on Cloud におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2016-6125	2017-02-13 11:54	2016-11-11	Show	GitHub Exploit DB Packet Storm

193879	5.4	警告 Network	IBM	-	IBM Kenexa LMS on Cloud におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2016-6123	2017-02-13 11:53	2016-11-11	Show	GitHub Exploit DB Packet Storm

193880	6.1	警告 Network	IBM	-	IBM iNotes におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2016-6113	2017-02-13 11:53	2016-11-2	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:April 25, 2026, 4:08 a.m.

No	CVSS	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
293201	-	phlatline	personal_information_manager	Directory traversal vulnerability in upload.php in Phlatline's Personal Information Manager (pPIM) 1.0 allows remote attackers to delete arbitrary files via directory traversal sequences in the file …	CWE-22 Path Traversal	CVE-2008-4425	2017-09-29 10:32	2008-10-4	Show	GitHub Exploit DB Packet Storm

293202	-	phlatline	personal_information_manager	Cross-site scripting (XSS) vulnerability in events.php in Phlatline's Personal Information Manager (pPIM) 1.0 allows remote attackers to inject arbitrary web script or HTML via the date parameter in …	CWE-79 Cross-site Scripting	CVE-2008-4426	2017-09-29 10:32	2008-10-4	Show	GitHub Exploit DB Packet Storm

293203	-	phlatline	personal_information_manager	changepassword.php in Phlatline's Personal Information Manager (pPIM) 1.0 and earlier does not require administrative authentication, which allows remote attackers to change arbitrary passwords.	CWE-287 Improper Authentication	CVE-2008-4427	2017-09-29 10:32	2008-10-4	Show	GitHub Exploit DB Packet Storm

293204	-	phlatline	personal_information_manager	Unrestricted file upload vulnerability in upload.php in Phlatline's Personal Information Manager (pPIM) 1.0 and earlier allows remote attackers to execute arbitrary code by uploading a .php file, the…	CWE-20 Improper Input Validation	CVE-2008-4428	2017-09-29 10:32	2008-10-4	Show	GitHub Exploit DB Packet Storm

293205	-	bblog	wbblog	SQL injection vulnerability in bblog_plugins/builtin.help.php in bBlog 0.7.6 allows remote attackers to execute arbitrary SQL commands via the mod parameter.	CWE-89 SQL Injection	CVE-2008-4436	2017-09-29 10:32	2008-10-4	Show	GitHub Exploit DB Packet Storm

293206	-	bblog	wbblog	bBlog is no longer actively maintained, and there are no plans to carry on with development. Source: http://www.bblog.com/	CWE-89 SQL Injection	CVE-2008-4436	2017-09-29 10:32	2008-10-4	Show	GitHub Exploit DB Packet Storm

293207	-	mirc	mirc	Stack-based buffer overflow in mIRC 6.34 allows remote attackers to execute arbitrary code via a long hostname in a PRIVMSG message.	CWE-119 Incorrect Access of Indexable Resource ('Range Error')	CVE-2008-4449	2017-09-29 10:32	2008-10-7	Show	GitHub Exploit DB Packet Storm

293208	-	eset_software	system_analyzer_tool	The SysInspector AntiStealth driver (esiasdrv.sys) 3.0.65535.0 in ESET System Analyzer Tool 1.1.1.0 allows local users to execute arbitrary code via a certain METHOD_NEITHER IOCTL request to \Device\…	CWE-94 CWE-264 Code Injection Permissions, Privileges, and Access Controls	CVE-2008-4451	2017-09-29 10:32	2008-10-7	Show	GitHub Exploit DB Packet Storm

293209	-	cambridge_computer_corporation	vxftpsrv	Buffer overflow in Cambridge Computer Corporation vxFtpSrv 2.0.3 allows remote attackers to cause a denial of service (crash and hang) and possibly execute arbitrary code via a long CWD request.	CWE-119 Incorrect Access of Indexable Resource ('Range Error')	CVE-2008-4452	2017-09-29 10:32	2008-10-7	Show	GitHub Exploit DB Packet Storm

293210	-	dspicture	light_imaging_toolkit pro_imaging_sdk	The GdPicture (1) Light Imaging Toolkit 4.7.1 GdPicture4S.Imaging ActiveX control (gdpicture4s.ocx) 4.7.0.1 and (2) Pro Imaging SDK 5.7.1 GdPicturePro5S.Imaging ActiveX control (gdpicturepro5s.ocx) 5…	CWE-264 Permissions, Privileges, and Access Controls	CVE-2008-4453	2017-09-29 10:32	2008-10-7	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed