Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Feb. 9, 2026, 12:59 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
216161 5 警告 シスコシステムズ - Cisco Unified Communications Manager の log4jinit Web アプリケーションにおけるサービス運用妨害 (DoS) の脆弱性 CWE-287
不適切な認証
CVE-2014-0722 2014-02-14 14:43 2014-02-12 Show GitHub Exploit DB Packet Storm
216162 6.4 警告 atmail pty ltd - Atmail オープンソースの Atmail WebMail Client における CRLF インジェクションの脆弱性 CWE-94
コード・インジェクション
CVE-2012-1919 2014-02-14 14:18 2012-03-27 Show GitHub Exploit DB Packet Storm
216163 4.3 警告 atmail pty ltd - Atmail Webmail Server におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2013-2585 2014-02-14 12:03 2013-03-25 Show GitHub Exploit DB Packet Storm
216164 4.3 警告 IBM
オラクル
- Oracle Java SE および Java SE Embedded における JGSS に関する脆弱性 CWE-noinfo
情報不足
CVE-2013-5800 2014-02-13 18:10 2013-10-15 Show GitHub Exploit DB Packet Storm
216165 10 危険 IBM
オラクル
- Oracle Java SE および Java SE Embedded における Deployment に関する脆弱性 CWE-noinfo
情報不足
CVE-2013-5788 2014-02-13 17:56 2013-10-15 Show GitHub Exploit DB Packet Storm
216166 4.3 警告 PostgreSQL.org
アップル
FreeBSD
The PHP Group
- FreeBSD の crypt_des 関数におけるアクセス権を取得される脆弱性 CWE-310
暗号の問題
CVE-2012-2143 2014-02-13 17:48 2012-05-30 Show GitHub Exploit DB Packet Storm
216167 4.3 警告 synetics - synetics i-doit におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2014-1237 2014-02-13 17:45 2014-01-15 Show GitHub Exploit DB Packet Storm
216168 4.3 警告 synetics - synetics i-doit におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2013-1413 2014-02-13 17:42 2013-01-5 Show GitHub Exploit DB Packet Storm
216169 6.8 警告 Extended Module Player Project - libxmp の loaders/masi_load.c 内の get_dsmp 関数におけるバッファオーバーフローの脆弱性 CWE-119
バッファエラー
CVE-2013-1980 2014-02-13 17:20 2013-04-20 Show GitHub Exploit DB Packet Storm
216170 6.5 警告 doorGets - doorGets CMS の dg-admin/index.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2014-1459 2014-02-13 17:20 2014-01-15 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:April 25, 2026, 4:08 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
298541 - smarty smarty The _expand_quoted_text function in libs/Smarty_Compiler.class.php in Smarty 2.6.20 before r2797 allows remote attackers to execute arbitrary PHP code via vectors related to templates and (1) a dolla… CWE-94
Code Injection
CVE-2008-4810 2017-08-8 10:32 2008-11-1 Show GitHub Exploit DB Packet Storm
298542 - smarty smarty The _expand_quoted_text function in libs/Smarty_Compiler.class.php in Smarty 2.6.20 r2797 and earlier allows remote attackers to execute arbitrary PHP code via vectors related to templates and a \ (b… CWE-264
Permissions, Privileges, and Access Controls
CVE-2008-4811 2017-08-8 10:32 2008-11-1 Show GitHub Exploit DB Packet Storm
298543 - rpath initscripts rc.sysinit in initscripts 8.12-8.21 and 8.56.15-0.1 on rPath allows local users to delete arbitrary files via a symlink attack on a directory under (1) /var/lock or (2) /var/run. NOTE: this issue ex… CWE-59
Link Following
CVE-2008-4832 2017-08-8 10:32 2008-11-18 Show GitHub Exploit DB Packet Storm
298544 - ffmpeg ffmpeg Multiple buffer overflows in libavformat/utils.c in FFmpeg 0.4.9 before r14715, as used by MPlayer, allow context-dependent attackers to have an unknown impact via vectors related to execution of DTS… CWE-119
Incorrect Access of Indexable Resource ('Range Error') 
CVE-2008-4866 2017-08-8 10:32 2008-11-1 Show GitHub Exploit DB Packet Storm
298545 - ffmpeg ffmpeg Buffer overflow in libavcodec/dca.c in FFmpeg 0.4.9 before r14917, as used by MPlayer, allows context-dependent attackers to have an unknown impact via vectors related to an incorrect DCA_MAX_FRAME_S… CWE-119
Incorrect Access of Indexable Resource ('Range Error') 
CVE-2008-4867 2017-08-8 10:32 2008-11-1 Show GitHub Exploit DB Packet Storm
298546 - ffmpeg ffmpeg Unspecified vulnerability in the avcodec_close function in libavcodec/utils.c in FFmpeg 0.4.9 before r14787, as used by MPlayer, has unknown impact and attack vectors, related to a free "on random po… NVD-CWE-noinfo
CVE-2008-4868 2017-08-8 10:32 2008-11-1 Show GitHub Exploit DB Packet Storm
298547 - ffmpeg ffmpeg FFmpeg 0.4.9, as used by MPlayer, allows context-dependent attackers to cause a denial of service (memory consumption) via unknown vectors, aka a "Tcp/udp memory leak." NVD-CWE-noinfo
CWE-399
 Resource Management Errors
CVE-2008-4869 2017-08-8 10:32 2008-11-1 Show GitHub Exploit DB Packet Storm
298548 - itechscripts itechbids Cross-site scripting (XSS) vulnerability in bidhistory.php in iTechBids Gold 5.0 allows remote attackers to inject arbitrary web script or HTML via the item_id parameter. NOTE: the provenance of thi… CWE-79
Cross-site Scripting
CVE-2008-4872 2017-08-8 10:32 2008-11-1 Show GitHub Exploit DB Packet Storm
298549 - planetluc signme Cross-site scripting (XSS) vulnerability in signme.inc.php in Planetluc SignMe 1.5 before 1.55 allows remote attackers to inject arbitrary web script or HTML via the hash parameter. NOTE: some of th… CWE-79
Cross-site Scripting
CVE-2008-4891 2017-08-8 10:32 2008-11-4 Show GitHub Exploit DB Packet Storm
298550 - planetluc mygallery Cross-site scripting (XSS) vulnerability in gallery.inc.php in Planetluc MyGallery 1.7.2 and earlier, and possibly other versions before 1.8.1, allows remote attackers to inject arbitrary web script … CWE-79
Cross-site Scripting
CVE-2008-4892 2017-08-8 10:32 2008-11-4 Show GitHub Exploit DB Packet Storm