Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Feb. 9, 2026, 12:59 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
194341 8.8 重要
Local
SELinuxProject
Fedora Project
レッドハット
- SELinux policycoreutil におけるサンドボックス外で任意のコマンドを実行される脆弱性 CWE-284
不適切なアクセス制御
CVE-2016-7545 2017-01-31 17:42 2016-09-23 Show GitHub Exploit DB Packet Storm
194342 7.5 重要
Network
サムスン - Samsung Exynos の特定のチップセットを伴う Android 用 Exynos fimg2d ドライバにおける重要な情報を取得される脆弱性 CWE-416
解放済みメモリの使用
CVE-2016-9279 2017-01-31 17:24 2016-08-5 Show GitHub Exploit DB Packet Storm
194343 5.5 警告
Local
サムスン - Samsung Exynos の特定のチップセットを伴う Android 用 Exynos fimg2d ドライバにおけるサービス運用妨害 (DoS) の脆弱性 CWE-20
不適切な入力確認
CVE-2016-9278 2017-01-31 17:24 2016-06-11 Show GitHub Exploit DB Packet Storm
194344 6.1 警告
Network
Atlassian - Atlassian Confluence におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2016-6283 2017-01-31 15:53 2016-08-4 Show GitHub Exploit DB Packet Storm
194345 7.5 重要
Network
Apache Software Foundation - Groovy LDAP API の main/java/org/apache/directory/groovyldap/LDAP.java における LDAP エントリポイズニング攻撃を実行される脆弱性 CWE-254
セキュリティ機能
CVE-2016-6497 2017-01-31 15:27 2016-10-17 Show GitHub Exploit DB Packet Storm
194346 8.4 重要
Local
GNU Project
Fedora Project
- Bash における root 権限で任意のコマンドを実行される脆弱性 CWE-20
不適切な入力確認
CVE-2016-7543 2017-01-31 15:27 2016-09-16 Show GitHub Exploit DB Packet Storm
194347 7.8 重要
Local
tqdm project - tqdm の tqdm._version モジュールにおける任意のコードを実行される脆弱性 CWE-17
コード
CVE-2016-10075 2017-01-31 15:14 2016-12-26 Show GitHub Exploit DB Packet Storm
194348 9.8 緊急
Network
NetBSD - NetBSD の bozohttpd の CGI 処理における任意のコードを実行される脆弱性 CWE-20
不適切な入力確認
CVE-2015-8212 2017-01-31 14:47 2015-11-14 Show GitHub Exploit DB Packet Storm
194349 8.1 重要
Network
UnrealIRCd - UnrealIRCd の modules/m_sasl.c の m_authenticate 関数における証明書のフィンガープリントを偽造される脆弱性 CWE-287
不適切な認証
CVE-2016-7144 2017-01-31 14:35 2016-09-3 Show GitHub Exploit DB Packet Storm
194350 6.1 警告
Network
Moodle - Moodle の課題提出ページにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2017-2578 2017-01-31 14:29 2017-01-17 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:April 25, 2026, 4:08 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
293191 - availscript availscript_jobs_portal_script SQL injection vulnerability in job_seeker/applynow.php in AvailScript Job Portal Script allows remote attackers to execute arbitrary SQL commands via the jid parameter. CWE-89
SQL Injection
CVE-2008-4373 2017-09-29 10:32 2008-10-2 Show GitHub Exploit DB Packet Storm
293192 - cmsbuzz cms_buzz SQL injection vulnerability in index.php in CMS Buzz allows remote attackers to execute arbitrary SQL commands via the id parameter in a playgame action. CWE-89
SQL Injection
CVE-2008-4374 2017-09-29 10:32 2008-10-2 Show GitHub Exploit DB Packet Storm
293193 - availscript availscript_classmate_script SQL injection vulnerability in viewprofile.php in Availscript Classmate Script allows remote attackers to execute arbitrary SQL commands via the p parameter. CWE-89
SQL Injection
CVE-2008-4375 2017-09-29 10:32 2008-10-2 Show GitHub Exploit DB Packet Storm
293194 - livetvscript live_tv_script SQL injection vulnerability in index.php in Live TV Script allows remote attackers to execute arbitrary SQL commands via the mid parameter. CWE-89
SQL Injection
CVE-2008-4376 2017-09-29 10:32 2008-10-2 Show GitHub Exploit DB Packet Storm
293195 - creative_mind creator_cms SQL injection vulnerability in index.asp in Creative Mind Creator CMS 5.0 allows remote attackers to execute arbitrary SQL commands via the sideid parameter. CWE-89
SQL Injection
CVE-2008-4377 2017-09-29 10:32 2008-10-2 Show GitHub Exploit DB Packet Storm
293196 - mr._cgi_guy hot_links_sql_php SQL injection vulnerability in report.php in Mr. CGI Guy Hot Links SQL-PHP 3.0 and earlier allows remote attackers to execute arbitrary SQL commands via the id parameter. CWE-89
SQL Injection
CVE-2008-4378 2017-09-29 10:32 2008-10-2 Show GitHub Exploit DB Packet Storm
293197 - mr._cgi_guy hot_links_sql_php Cross-site scripting (XSS) vulnerability in report.php in Mr. CGI Guy Hot Links SQL-PHP 3.0 and earlier allows remote attackers to inject arbitrary web script or HTML via the id parameter. CWE-89
SQL Injection
CVE-2008-4379 2017-09-29 10:32 2008-10-2 Show GitHub Exploit DB Packet Storm
293198 - samsung dvr_shr2040 The web interface in Samsung DVR SHR2040 allows remote attackers to cause a denial of service (crash) via a malformed HTTP request, related to the filter for configuration properties and "/x" charact… CWE-20
 Improper Input Validation 
CVE-2008-4380 2017-09-29 10:32 2008-10-2 Show GitHub Exploit DB Packet Storm
293199 - citrix xen xend in Xen 3.0.3 does not properly limit the contents of the /local/domain xenstore directory tree, and does not properly restrict a guest VM's write access within this tree, which allows guest OS u… CWE-264
Permissions, Privileges, and Access Controls
CVE-2008-4405 2017-09-29 10:32 2008-10-4 Show GitHub Exploit DB Packet Storm
293200 - hp hp-ux Unspecified vulnerability in the kernel in HP HP-UX B.11.31 allows local users to cause a denial of service via unknown vectors. NVD-CWE-noinfo
CVE-2008-4416 2017-09-29 10:32 2008-12-5 Show GitHub Exploit DB Packet Storm