Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":Feb. 9, 2026, 12:59 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
224111	7.5	危険	slimcms	-	SlimCMS の edit.php における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2008-5491	2012-12-20 18:52	2008-12-12	Show	GitHub Exploit DB Packet Storm

224112	7.5	危険	phpstore	-	PHPStore Yahoo Answers の index.php における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2008-5490	2012-12-20 18:52	2008-12-12	Show	GitHub Exploit DB Packet Storm

224113	4.3	警告	turnkeyforms	-	TurnkeyForms Text Link Sales の admin.php におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2008-5487	2012-12-20 18:52	2008-12-12	Show	GitHub Exploit DB Packet Storm

224114	7.5	危険	turnkeyforms	-	TurnkeyForms Text Link Sales の admin.php における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2008-5486	2012-12-20 18:52	2008-12-12	Show	GitHub Exploit DB Packet Storm

224115	4.3	警告	PunBB	-	PunBB の moderate.php におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2008-5435	2012-12-20 18:52	2008-12-11	Show	GitHub Exploit DB Packet Storm

224116	6.5	警告	PunBB	-	PunBB における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2008-5434	2012-12-20 18:52	2008-12-11	Show	GitHub Exploit DB Packet Storm

224117	4.3	警告	PunBB	-	PunBB の login.php におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2008-5433	2012-12-20 18:52	2008-12-11	Show	GitHub Exploit DB Packet Storm

224118	4.3	警告	シマンテック	-	Norton Internet Security の Norton Antivirus におけるサービス運用妨害 (DoS) の脆弱性	CWE-399 リソース管理の問題	CVE-2008-5427	2012-12-20 18:52	2008-12-11	Show	GitHub Exploit DB Packet Storm

224119	4.3	警告	サン・マイクロシステムズ	-	Sun Sun Ray Server Software などにおける Sun Ray 管理者パスワードを特定される脆弱性	CWE-200 情報漏えい	CVE-2008-5423	2012-12-20 18:52	2008-12-4	Show	GitHub Exploit DB Packet Storm

224120	7.5	危険	サン・マイクロシステムズ	-	Sun Sun Ray Server Software における Sun Ray 管理者パスワードを特定される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2008-5422	2012-12-20 18:52	2008-12-4	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:April 20, 2026, 4:09 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
1411	9.8	CRITICAL Network	libarchive redhat	libarchive hardened_images openshift_container_platform enterprise_linux	A flaw was found in libarchive. On 32-bit systems, an integer overflow vulnerability exists in the zisofs block pointer allocation logic. A remote attacker can exploit this by providing a specially c…	CWE-190 Integer Overflow or Wraparound	CVE-2026-5121	2026-04-15 02:16	2026-03-30	Show	GitHub Exploit DB Packet Storm

1412	9.8	CRITICAL Network	libarchive redhat	libarchive hardened_images openshift_container_platform enterprise_linux	Se encontró un fallo en libarchive. En sistemas de 32 bits, existe una vulnerabilidad de desbordamiento de entero en la lógica de asignación de punteros de bloque zisofs. Un atacante remoto puede exp…	CWE-190 Integer Overflow or Wraparound	CVE-2026-5121	2026-04-15 02:16	2026-03-30	Show	GitHub Exploit DB Packet Storm

1413	9.8	CRITICAL Network	-	-	An issue was discovered in ToToLink A3300R firmware v17.0.0cu.557_B20221024 allowing attackers to execute arbitrary commands via the stun-pass parameter to /cgi-bin/cstecgi.cgi.	CWE-77 Command Injection	CVE-2026-31170	2026-04-15 02:16	2026-04-10	Show	GitHub Exploit DB Packet Storm

1414	9.1	CRITICAL Network	-	-	A Dynamic-link Library Injection vulnerability in OSGeo Project MapServer before v8.0 allows attackers to execute arbitrary code via a crafted executable.	CWE-94 Code Injection	CVE-2026-30479	2026-04-15 02:16	2026-04-10	Show	GitHub Exploit DB Packet Storm

1415	7.8	HIGH Local	-	-	The pstrip64.sys driver in EnTech Taiwan PowerStrip <=3.90.736 allows local users to escalate privileges to SYSTEM via a crafted IOCTL request enabling unprivileged users to map arbitrary physical me…	CWE-269 Improper Privilege Management	CVE-2026-29923	2026-04-15 02:16	2026-04-10	Show	GitHub Exploit DB Packet Storm

1416	4.3	MEDIUM Network	-	-	Cross Site Request Forgery vulnerability in Phpbb phbb3 v.3.3.15 allows a local attacker to execute arbitrary code via the Admin Control Panel icon management functionality.	CWE-352 Origin Validation Error	CVE-2025-70811	2026-04-15 02:16	2026-04-10	Show	GitHub Exploit DB Packet Storm

1417	8.8	HIGH Network	-	-	Cross Site Request Forgery vulnerability in Phpbb phbb3 v.3.3.15 allows a local attacker to execute arbitrary code via the login function and the authentication mechanism	CWE-352 Origin Validation Error	CVE-2025-70810	2026-04-15 02:16	2026-04-10	Show	GitHub Exploit DB Packet Storm

1418	8.8	HIGH Network	-	-	An issue was discovered in Kiamo before 8.4 allowing authenticated administrative attackers to execute arbitrary PHP code on the server.	CWE-94 Code Injection	CVE-2025-70364	2026-04-15 02:16	2026-04-10	Show	GitHub Exploit DB Packet Storm

1419	9.8	CRITICAL Network	microsoft	azure_cloud_shell	Server-side request forgery (ssrf) in Azure Cloud Shell allows an unauthorized attacker to elevate privileges over a network.	CWE-918 Server-Side Request Forgery (SSRF)	CVE-2026-32169	2026-04-15 02:14	2026-03-20	Show	GitHub Exploit DB Packet Storm

1420	9.8	CRITICAL Network	microsoft	azure_cloud_shell	Falsificación de petición del lado del servidor (SSRF) en Azure Cloud Shell permite a un atacante no autorizado elevar privilegios sobre una red.	CWE-918 Server-Side Request Forgery (SSRF)	CVE-2026-32169	2026-04-15 02:14	2026-03-20	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed