Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Feb. 9, 2026, 12:59 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
194781 7.5 重要
Network
The PHP Group
LibGD project
- PHP で使用される GD Graphics Library の gd.c の gdImageFillToBorder 関数におけるサービス運用妨害 (DoS) の脆弱性 CWE-119
バッファエラー
CVE-2016-9933 2017-01-16 17:03 2016-06-10 Show GitHub Exploit DB Packet Storm
194782 9.8 緊急
Network
The PHP Group - PHP におけるサービス運用妨害 (DoS) の脆弱性 CWE-416
解放済みメモリの使用
CVE-2016-9138 2017-01-16 17:03 2016-09-23 Show GitHub Exploit DB Packet Storm
194783 9.8 緊急
Network
The PHP Group - PHP の ext/curl/curl_file.c の CURLFile の実装におけるサービス運用妨害 (DoS) の脆弱性 CWE-416
解放済みメモリの使用
CVE-2016-9137 2017-01-16 17:03 2016-10-13 Show GitHub Exploit DB Packet Storm
194784 9.8 緊急
Network
LibGD project - PHP で使用される GD Graphics Library の gd_io_dp.c の dynamicGetbuf 関数における整数符号エラーの脆弱性 CWE-119
バッファエラー
CVE-2016-8670 2017-01-16 17:03 2016-10-12 Show GitHub Exploit DB Packet Storm
194785 9.8 緊急
Network
The PHP Group - PHP の ext/intl/locale/locale_methods.c の get_icu_disp_value_src_php 関数におけるサービス運用妨害 (DoS) の脆弱性 CWE-119
バッファエラー
CVE-2014-9912 2017-01-16 17:03 2014-06-24 Show GitHub Exploit DB Packet Storm
194786 7.8 重要
Local
OpenBSD - OpenSSH の sshd の共有メモリマネージャにおける権限を取得される脆弱性 CWE-119
バッファエラー
CVE-2016-10012 2017-01-16 14:28 2016-12-19 Show GitHub Exploit DB Packet Storm
194787 5.5 警告
Local
OpenBSD - OpenSSH の sshd の authfile.c における重要な秘密鍵の情報を取得される脆弱性 CWE-320
鍵管理のエラー
CVE-2016-10011 2017-01-16 14:28 2016-12-19 Show GitHub Exploit DB Packet Storm
194788 7 重要
Local
OpenBSD - OpenSSH の sshd における権限を取得される脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2016-10010 2017-01-16 14:28 2016-12-19 Show GitHub Exploit DB Packet Storm
194789 7.5 重要
Network
ISC, Inc. - ISC BIND の named におけるサービス運用妨害 (DoS) の脆弱性 CWE-20
不適切な入力確認
CVE-2016-9444 2017-01-16 11:13 2016-11-18 Show GitHub Exploit DB Packet Storm
194790 7.5 重要
Network
ISC, Inc. - ISC BIND の named におけるサービス運用妨害 (DoS) の脆弱性 CWE-20
不適切な入力確認
CVE-2016-9147 2017-01-16 11:13 2016-11-3 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:April 25, 2026, 4:08 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
293621 - bpsoft hex_workshop Buffer overflow in BreakPoint Software Hex Workshop 5.1.4 allows user-assisted attackers to cause a denial of service and possibly execute arbitrary code via a long mapping reference in a Color Mappi… CWE-119
Incorrect Access of Indexable Resource ('Range Error') 
CVE-2008-5756 2017-09-29 10:32 2008-12-31 Show GitHub Exploit DB Packet Storm
293622 - flatnux flatnux Multiple cross-site scripting (XSS) vulnerabilities in FlatnuX CMS (aka Flatnuke3) 2008-12-11 allow remote attackers to inject arbitrary web script or HTML via (1) the mod parameter to the default UR… CWE-79
Cross-site Scripting
CVE-2008-5761 2017-09-29 10:32 2008-12-31 Show GitHub Exploit DB Packet Storm
293623 - mariovaldez simple_text-file_login_script Simple Text-File Login Script (SiTeFiLo) 1.0.6 stores sensitive information under the web root with insufficient access control, which allows remote attackers to download the database file containing… CWE-264
Permissions, Privileges, and Access Controls
CVE-2008-5762 2017-09-29 10:32 2008-12-31 Show GitHub Exploit DB Packet Storm
293624 - mariovaldez simple_text-file_login_script PHP remote file inclusion vulnerability in slogin_lib.inc.php in Simple Text-File Login Script (SiTeFiLo) 1.0.6 allows remote attackers to execute arbitrary PHP code via a URL in the slogin_path para… CWE-94
Code Injection
CVE-2008-5763 2017-09-29 10:32 2008-12-31 Show GitHub Exploit DB Packet Storm
293625 - 2500mhz worksimple PHP remote file inclusion vulnerability in calendar.php in WorkSimple 1.2.1, when register_globals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the lang parameter. CWE-94
Code Injection
CVE-2008-5764 2017-09-29 10:32 2008-12-31 Show GitHub Exploit DB Packet Storm
293626 - 2500mhz worksimple WorkSimple 1.2.1 stores sensitive information under the web root with insufficient access control, which allows remote attackers to download the database file containing usernames and passwords via a… CWE-264
Permissions, Privileges, and Access Controls
CVE-2008-5765 2017-09-29 10:32 2008-12-31 Show GitHub Exploit DB Packet Storm
293627 - fascript faupload SQL injection vulnerability in download.php in Farsi Script Faupload allows remote attackers to execute arbitrary SQL commands via the id parameter. CWE-89
SQL Injection
CVE-2008-5766 2017-09-29 10:32 2008-12-31 Show GitHub Exploit DB Packet Storm
293628 - gazatem gnews_publisher SQL injection vulnerability in authors.asp in gNews Publisher allows remote attackers to execute arbitrary SQL commands via the authorID parameter. CWE-89
SQL Injection
CVE-2008-5767 2017-09-29 10:32 2008-12-31 Show GitHub Exploit DB Packet Storm
293629 - sirium am_events_module SQL injection vulnerability in print.php in the AM Events (aka Amevents) module 0.22 for XOOPS allows remote attackers to execute arbitrary SQL commands via the id parameter. CWE-89
SQL Injection
CVE-2008-5768 2017-09-29 10:32 2008-12-31 Show GitHub Exploit DB Packet Storm
293630 - phpweather phpweather Cross-site scripting (XSS) vulnerability in config/make_config.php in PHP Weather 2.2.2 allows remote attackers to inject arbitrary web script or HTML via the PATH_INFO. CWE-79
Cross-site Scripting
CVE-2008-5770 2017-09-29 10:32 2008-12-31 Show GitHub Exploit DB Packet Storm