Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Feb. 9, 2026, 12:59 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
223621 5 警告 unica - Unica Affinium Campaign のリスナーサーバにおけるサービス運用妨害 (DoS) の脆弱性 CWE-399
リソース管理の問題 		CVE-2008-7094 2012-12-20 19:10 2009-08-26 Show GitHub Exploit DB Packet Storm
223622 6.8 警告 unica - Unica Affinium Campaign におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2008-7093 2012-12-20 19:10 2009-08-26 Show GitHub Exploit DB Packet Storm
223623 4.3 警告 unica - Unica Affinium Campaign におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2008-7092 2012-12-20 19:10 2009-08-26 Show GitHub Exploit DB Packet Storm
223624 7.5 危険 Pligg - Pligg における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-7091 2012-12-20 19:10 2009-08-26 Show GitHub Exploit DB Packet Storm
223625 7.8 危険 Pligg - Pligg におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2008-7090 2012-12-20 19:10 2009-08-26 Show GitHub Exploit DB Packet Storm
223626 4.3 警告 Pligg - Pligg におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2008-7089 2012-12-20 19:10 2009-08-26 Show GitHub Exploit DB Packet Storm
223627 7.5 危険 thehockeystop - TheHockeyStop HockeySTATS Online における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-7085 2012-12-20 19:10 2009-08-26 Show GitHub Exploit DB Packet Storm
223628 7.5 危険 revou - ReVou Micro Blogging Twitter クローンにおける SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-7083 2012-12-20 19:10 2009-08-25 Show GitHub Exploit DB Packet Storm
223629 4.3 警告 Simple Machines
phpraider		 - Simple Machines phpRaider の不特定のコンポーネントにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2008-7035 2012-12-20 19:10 2009-08-24 Show GitHub Exploit DB Packet Storm
223630 7.5 危険 tigran abrahamyan - PHPEcho CMS の kernel/smarty/Smarty.class.php における PHP リモートファイルインクルージョンの脆弱性 CWE-94
コード・インジェクション 		CVE-2008-7034 2012-12-20 19:10 2009-08-24 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:April 21, 2026, 4:10 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
1331 8.4 HIGH
Local 		- - Faleemi Desktop Software 1.8 contains a local buffer overflow vulnerability in the System Setup dialog that allows attackers to bypass DEP protections through structured exception handling exploitati… CWE-787
 Out-of-bounds Write 		CVE-2019-25691 2026-04-16 00:00 2026-04-12 Show GitHub Exploit DB Packet Storm
1332 8.4 HIGH
Local 		- - R 3.4.4 contains a local buffer overflow vulnerability that allows attackers to execute arbitrary code by injecting malicious input into the GUI Preferences language field. Attackers can craft a payl… CWE-787
 Out-of-bounds Write 		CVE-2019-25695 2026-04-16 00:00 2026-04-12 Show GitHub Exploit DB Packet Storm
1333 5.0 MEDIUM
Local 		bytecodealliance wasmtime Wasmtime is a runtime for WebAssembly. In 43.0.0, cloning a wasmtime::Linker is unsound and can result in use-after-free bugs. This bug is not controllable by guest Wasm programs. It can only be trig… CWE-416
 Use After Free 		CVE-2026-34983 2026-04-15 23:49 2026-04-10 Show GitHub Exploit DB Packet Storm
1334 7.8 HIGH
Local 		bytecodealliance wasmtime Wasmtime is a runtime for WebAssembly. From 32.0.0 to before 36.0.7, 42.0.2, and 43.0.1, Wasmtime's Cranelift compilation backend contains a bug on aarch64 when performing a certain shape of heap acc… CWE-125
CWE-787
Out-of-bounds Read
 Out-of-bounds Write 		CVE-2026-34971 2026-04-15 23:10 2026-04-10 Show GitHub Exploit DB Packet Storm
1335 9.9 CRITICAL
Network 		bytecodealliance wasmtime Wasmtime is a runtime for WebAssembly. From 25.0.0 to before 36.0.7, 42.0.2, and 43.0.1, Wasmtime with its Winch (baseline) non-default compiler backend may allow properly constructed guest Wasm to a… CWE-125
CWE-787
Out-of-bounds Read
 Out-of-bounds Write 		CVE-2026-34987 2026-04-15 22:41 2026-04-10 Show GitHub Exploit DB Packet Storm
1336 6.3 MEDIUM
Network 		bytecodealliance wasmtime Wasmtime is a runtime for WebAssembly. From 28.0.0 to before 36.0.7, 42.0.2, and 43.0.1, Wasmtime's implementation of its pooling allocator contains a bug where in certain configurations the contents… CWE-119
Incorrect Access of Indexable Resource ('Range Error')  		CVE-2026-34988 2026-04-15 22:14 2026-04-10 Show GitHub Exploit DB Packet Storm
1337 7.5 HIGH
Network 		bytecodealliance wasmtime Wasmtime is a runtime for WebAssembly. From 25.0.0 to before 36.0.7, 42.0.2, and 43.0.1, Wasmtime's Winch compiler backend contains a bug where translating the table.grow operator causes the result t… CWE-789
 Memory Allocation with Excessive Size Value 		CVE-2026-35186 2026-04-15 22:04 2026-04-10 Show GitHub Exploit DB Packet Storm
1338 5.4 MEDIUM
Network 		bytecodealliance wasmtime Wasmtime is a runtime for WebAssembly. Prior to 24.0.7, 36.0.7, 42.0.2, and 43.0.1, Wasmtime's implementation of transcoding strings between components contains a bug where the return value of a gues… CWE-787
 Out-of-bounds Write 		CVE-2026-35195 2026-04-15 22:00 2026-04-10 Show GitHub Exploit DB Packet Storm
1339 9.8 CRITICAL
Network 		sonos era_300_firmware Sonos Era 300 SMB Response Out-Of-Bounds Access Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Sonos Era 300. A… CWE-119
Incorrect Access of Indexable Resource ('Range Error')  		CVE-2026-4149 2026-04-15 21:26 2026-04-11 Show GitHub Exploit DB Packet Storm
1340 6.8 MEDIUM
Physics 		samsung android Improper check for exceptional conditions in Recents prior to SMR Apr-2026 Release 1 allows physical attacker to bypass App Pinning. CWE-754
 Improper Check for Unusual or Exceptional Conditions 		CVE-2026-21009 2026-04-15 21:23 2026-04-13 Show GitHub Exploit DB Packet Storm