Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Feb. 9, 2026, 12:59 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
224271 5 警告 php-daily - PHP-Daily の download_file.php におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル
CVE-2008-4758 2012-12-20 18:52 2008-10-27 Show GitHub Exploit DB Packet Storm
224272 7.5 危険 php-daily - PHP-Daily における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2008-4757 2012-12-20 18:52 2008-10-27 Show GitHub Exploit DB Packet Storm
224273 4.3 警告 php-daily - PHP-Daily の add_prest_date.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2008-4756 2012-12-20 18:52 2008-10-27 Show GitHub Exploit DB Packet Storm
224274 7.5 危険 pozscripts - PozScripts Classified Auctions Script の gotourl.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2008-4755 2012-12-20 18:52 2008-10-27 Show GitHub Exploit DB Packet Storm
224275 5.8 警告 scripts-for-sites - SFS Ez Forum の forum.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2008-4754 2012-12-20 18:52 2008-10-27 Show GitHub Exploit DB Packet Storm
224276 7.5 危険 tech logic - TlNews における認証を回避される脆弱性 CWE-287
不適切な認証
CVE-2008-4752 2012-12-20 18:52 2008-10-27 Show GitHub Exploit DB Packet Storm
224277 7.5 危険 uniwin - Uniwin eCart Professional における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2008-4746 2012-12-20 18:52 2008-10-27 Show GitHub Exploit DB Packet Storm
224278 4.3 警告 uniwin - Uniwin eCart Professional の emailFriend.asp におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2008-4745 2012-12-20 18:52 2008-10-27 Show GitHub Exploit DB Packet Storm
224279 7.5 危険 quidascript - QuidaScript FAQ Management Script の index.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2008-4743 2012-12-20 18:52 2008-10-27 Show GitHub Exploit DB Packet Storm
224280 4.3 警告 timetrex - TimeTrex の interface/Login.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2008-4742 2012-12-20 18:52 2008-10-27 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:April 20, 2026, 4:09 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
1591 9.8 CRITICAL
Network
elecom wab-s300iw-pd_firmware
wab-s733iw-pd_firmware
wrc-x1500gsa-b_firmware
wrc-x1500gs-b_firmware
wab-s300iw2-pd_firmware
wab-s300iw-ac_firmware
wab-s733iw2-pd_firmware
wab-s733iw-ac_…
Vulnerabilidad de desbordamiento de búfer basado en pila existe en dispositivos de punto de acceso LAN inalámbrica ELECOM. Un paquete manipulado puede conducir a ejecución de código arbitrario. CWE-121
Stack-based Buffer Overflow
CVE-2026-24465 2026-04-14 21:59 2026-02-3 Show GitHub Exploit DB Packet Storm
1592 7.5 HIGH
Network
apache tomcat Padding Oracle vulnerability in Apache Tomcat's EncryptInterceptor with default configuration. This issue affects Apache Tomcat: from 11.0.0-M1 through 11.0.18, from 10.0.0-M1 through 10.1.52, from … CWE-209
CWE-642
Information Exposure Through an Error Message
 External Control of Critical State Data
CVE-2026-29146 2026-04-14 21:56 2026-04-10 Show GitHub Exploit DB Packet Storm
1593 5.3 MEDIUM
Network
apache tomcat Improper Input Validation vulnerability in Apache Tomcat due to an incomplete fix of CVE-2025-66614. This issue affects Apache Tomcat: from 11.0.15 through 11.0.19, from 10.1.50 through 10.1.52, fro… CWE-20
 Improper Input Validation 
CVE-2026-32990 2026-04-14 21:47 2026-04-10 Show GitHub Exploit DB Packet Storm
1594 7.5 HIGH
Network
apache tomcat Improper Encoding or Escaping of Output vulnerability in the JsonAccessLogValve component of Apache Tomcat. This issue affects Apache Tomcat: from 11.0.0-M1 through 11.0.20, from 10.1.0-M1 through 1… CWE-116
 Improper Encoding or Escaping of Output
CVE-2026-34483 2026-04-14 21:46 2026-04-10 Show GitHub Exploit DB Packet Storm
1595 7.5 HIGH
Network
apache tomcat Missing Encryption of Sensitive Data vulnerability in Apache Tomcat due to the fix for CVE-2026-29146 allowing the bypass of the EncryptInterceptor. This issue affects Apache Tomcat: 11.0.20, 10.1.5… CWE-311
Missing Encryption of Sensitive Data
CVE-2026-34486 2026-04-14 21:45 2026-04-10 Show GitHub Exploit DB Packet Storm
1596 7.5 HIGH
Network
apache tomcat Insertion of Sensitive Information into Log File vulnerability in the cloud membership for clustering component of Apache Tomcat exposed the Kubernetes bearer token. This issue affects Apache Tomcat… CWE-532
 Inclusion of Sensitive Information in Log Files
CVE-2026-34487 2026-04-14 21:44 2026-04-10 Show GitHub Exploit DB Packet Storm
1597 6.5 MEDIUM
Network
apache tomcat CLIENT_CERT authentication does not fail as expected for some scenarios when soft fail is disabled and FFM is used in Apache Tomcat. This issue affects Apache Tomcat: from 11.0.0-M14 through 11.0.20… CWE-287
Improper Authentication
CVE-2026-34500 2026-04-14 21:43 2026-04-10 Show GitHub Exploit DB Packet Storm
1598 7.5 HIGH
Network
- - A flaw was found in the gdk-pixbuf library. This heap-based buffer overflow vulnerability occurs in the JPEG image loader due to improper validation of color component counts when processing a specia… CWE-122
Heap-based Buffer Overflow
CVE-2026-5201 2026-04-14 21:16 2026-03-31 Show GitHub Exploit DB Packet Storm
1599 7.5 HIGH
Network
- - Se encontró un fallo en la biblioteca gdk-pixbuf. Esta vulnerabilidad de desbordamiento de búfer basado en montículo ocurre en el cargador de imágenes JPEG debido a una validación incorrecta del recu… CWE-122
Heap-based Buffer Overflow
CVE-2026-5201 2026-04-14 21:16 2026-03-31 Show GitHub Exploit DB Packet Storm
1600 5.4 MEDIUM
Network
microsoft edge User interface (ui) misrepresentation of critical information in Microsoft Edge (Chromium-based) allows an unauthorized attacker to perform spoofing over a network. CWE-451
 User Interface (UI) Misrepresentation of Critical Information
CVE-2026-33119 2026-04-14 20:57 2026-04-11 Show GitHub Exploit DB Packet Storm