Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Feb. 9, 2026, 12:59 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
223631 7.5 危険 site2nite - Site2Nite Real Estate Web における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-7030 2012-12-20 19:10 2009-08-24 Show GitHub Exploit DB Packet Storm
223632 10 危険 skalinks - Skalfa Software SkaLinks Exchange Script における管理者を追加される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2008-7010 2012-12-20 19:10 2009-08-19 Show GitHub Exploit DB Packet Storm
223633 7.5 危険 phpversion - Free PHP VX Guestbook における管理者アクセス権を取得される脆弱性 CWE-287
不適切な認証 		CVE-2008-7007 2012-12-20 19:10 2009-08-19 Show GitHub Exploit DB Packet Storm
223634 5 警告 phpversion - Free PHP VX Guestbook におけるデータベースのバックアップをダウンロードされる脆弱性 CWE-287
不適切な認証 		CVE-2008-7006 2012-12-20 19:10 2009-08-19 Show GitHub Exploit DB Packet Storm
223635 7.5 危険 the-rat-cms - The Rat CMS の login.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-7003 2012-12-20 19:10 2009-08-19 Show GitHub Exploit DB Packet Storm
223636 7.5 危険 phpauction - PHPAuction の index.php における PHP リモートファイルインクルージョンの脆弱性 CWE-94
コード・インジェクション 		CVE-2008-7000 2012-12-20 19:10 2009-08-19 Show GitHub Exploit DB Packet Storm
223637 5 警告 phpauction - phpAuction における設定情報を取得される脆弱性 CWE-200
情報漏えい 		CVE-2008-6999 2012-12-20 19:10 2009-08-19 Show GitHub Exploit DB Packet Storm
223638 10 危険 シーメンス - Siemens Gigaset WLAN Camera における許可されていない操作を実行される脆弱性 CWE-310
暗号の問題 		CVE-2008-6993 2012-12-20 19:10 2009-08-19 Show GitHub Exploit DB Packet Storm
223639 6.8 警告 Zen Cart - Zen Cart の includes/classes/shopping_cart.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-6986 2012-12-20 19:10 2009-08-19 Show GitHub Exploit DB Packet Storm
223640 6.8 警告 Zen Cart - Zen Cart の includes/classes/shopping_cart.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-6985 2012-12-20 19:10 2009-08-19 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:April 21, 2026, 4:10 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
1331 8.4 HIGH
Local 		- - Faleemi Desktop Software 1.8 contains a local buffer overflow vulnerability in the System Setup dialog that allows attackers to bypass DEP protections through structured exception handling exploitati… CWE-787
 Out-of-bounds Write 		CVE-2019-25691 2026-04-16 00:00 2026-04-12 Show GitHub Exploit DB Packet Storm
1332 8.4 HIGH
Local 		- - R 3.4.4 contains a local buffer overflow vulnerability that allows attackers to execute arbitrary code by injecting malicious input into the GUI Preferences language field. Attackers can craft a payl… CWE-787
 Out-of-bounds Write 		CVE-2019-25695 2026-04-16 00:00 2026-04-12 Show GitHub Exploit DB Packet Storm
1333 5.0 MEDIUM
Local 		bytecodealliance wasmtime Wasmtime is a runtime for WebAssembly. In 43.0.0, cloning a wasmtime::Linker is unsound and can result in use-after-free bugs. This bug is not controllable by guest Wasm programs. It can only be trig… CWE-416
 Use After Free 		CVE-2026-34983 2026-04-15 23:49 2026-04-10 Show GitHub Exploit DB Packet Storm
1334 7.8 HIGH
Local 		bytecodealliance wasmtime Wasmtime is a runtime for WebAssembly. From 32.0.0 to before 36.0.7, 42.0.2, and 43.0.1, Wasmtime's Cranelift compilation backend contains a bug on aarch64 when performing a certain shape of heap acc… CWE-125
CWE-787
Out-of-bounds Read
 Out-of-bounds Write 		CVE-2026-34971 2026-04-15 23:10 2026-04-10 Show GitHub Exploit DB Packet Storm
1335 9.9 CRITICAL
Network 		bytecodealliance wasmtime Wasmtime is a runtime for WebAssembly. From 25.0.0 to before 36.0.7, 42.0.2, and 43.0.1, Wasmtime with its Winch (baseline) non-default compiler backend may allow properly constructed guest Wasm to a… CWE-125
CWE-787
Out-of-bounds Read
 Out-of-bounds Write 		CVE-2026-34987 2026-04-15 22:41 2026-04-10 Show GitHub Exploit DB Packet Storm
1336 6.3 MEDIUM
Network 		bytecodealliance wasmtime Wasmtime is a runtime for WebAssembly. From 28.0.0 to before 36.0.7, 42.0.2, and 43.0.1, Wasmtime's implementation of its pooling allocator contains a bug where in certain configurations the contents… CWE-119
Incorrect Access of Indexable Resource ('Range Error')  		CVE-2026-34988 2026-04-15 22:14 2026-04-10 Show GitHub Exploit DB Packet Storm
1337 7.5 HIGH
Network 		bytecodealliance wasmtime Wasmtime is a runtime for WebAssembly. From 25.0.0 to before 36.0.7, 42.0.2, and 43.0.1, Wasmtime's Winch compiler backend contains a bug where translating the table.grow operator causes the result t… CWE-789
 Memory Allocation with Excessive Size Value 		CVE-2026-35186 2026-04-15 22:04 2026-04-10 Show GitHub Exploit DB Packet Storm
1338 5.4 MEDIUM
Network 		bytecodealliance wasmtime Wasmtime is a runtime for WebAssembly. Prior to 24.0.7, 36.0.7, 42.0.2, and 43.0.1, Wasmtime's implementation of transcoding strings between components contains a bug where the return value of a gues… CWE-787
 Out-of-bounds Write 		CVE-2026-35195 2026-04-15 22:00 2026-04-10 Show GitHub Exploit DB Packet Storm
1339 9.8 CRITICAL
Network 		sonos era_300_firmware Sonos Era 300 SMB Response Out-Of-Bounds Access Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Sonos Era 300. A… CWE-119
Incorrect Access of Indexable Resource ('Range Error')  		CVE-2026-4149 2026-04-15 21:26 2026-04-11 Show GitHub Exploit DB Packet Storm
1340 6.8 MEDIUM
Physics 		samsung android Improper check for exceptional conditions in Recents prior to SMR Apr-2026 Release 1 allows physical attacker to bypass App Pinning. CWE-754
 Improper Check for Unusual or Exceptional Conditions 		CVE-2026-21009 2026-04-15 21:23 2026-04-13 Show GitHub Exploit DB Packet Storm