Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Feb. 9, 2026, 12:59 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
224371 7.5 危険 Vastal I-Tech & Co. - Vastal I-Tech Visa Zone の view_news.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-4462 2012-12-20 18:52 2008-10-6 Show GitHub Exploit DB Packet Storm
224372 7.5 危険 Vastal I-Tech & Co. - Vastal I-Tech Dating Zone の advanced_search_results.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-4461 2012-12-20 18:52 2008-10-6 Show GitHub Exploit DB Packet Storm
224373 7.5 危険 Vastal I-Tech & Co. - Vastal I-Tech MMORPG Zone の game.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-4460 2012-12-20 18:52 2008-10-6 Show GitHub Exploit DB Packet Storm
224374 6.8 警告 positive software - Positive Software H-Sphere WebShell の actions.php におけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反 		CVE-2008-4448 2012-12-20 18:52 2008-10-6 Show GitHub Exploit DB Packet Storm
224375 4.3 警告 positive software - Positive Software H-Sphere WebShell の actions.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2008-4447 2012-12-20 18:52 2008-10-6 Show GitHub Exploit DB Packet Storm
224376 4.3 警告 rmsoft - Xoops 用の rmdp モジュールにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2008-4435 2012-12-20 18:52 2008-10-3 Show GitHub Exploit DB Packet Storm
224377 7.5 危険 rmsoft - Xoops 用の RMSOFT MiniShop モジュールにおける SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-4433 2012-12-20 18:52 2008-10-3 Show GitHub Exploit DB Packet Storm
224378 4.3 警告 rmsoft - Xoops 用の RMSOFT MiniShop モジュールにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2008-4432 2012-12-20 18:52 2008-10-3 Show GitHub Exploit DB Packet Storm
224379 5 警告 トレンドマイクロ - Trend Micro OfficeScan のサーバにおけるサービス運用妨害 (DoS) の脆弱性 CWE-399
リソース管理の問題 		CVE-2008-4403 2012-12-20 18:52 2008-09-30 Show GitHub Exploit DB Packet Storm
224380 10 危険 トレンドマイクロ - Trend Micro OfficeScan のサーバにおけるバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2008-4402 2012-12-20 18:52 2008-09-30 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:April 22, 2026, 4 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
1331 8.4 HIGH
Local 		- - Faleemi Desktop Software 1.8 contains a local buffer overflow vulnerability in the System Setup dialog that allows attackers to bypass DEP protections through structured exception handling exploitati… CWE-787
 Out-of-bounds Write 		CVE-2019-25691 2026-04-16 00:00 2026-04-12 Show GitHub Exploit DB Packet Storm
1332 8.4 HIGH
Local 		- - R 3.4.4 contains a local buffer overflow vulnerability that allows attackers to execute arbitrary code by injecting malicious input into the GUI Preferences language field. Attackers can craft a payl… CWE-787
 Out-of-bounds Write 		CVE-2019-25695 2026-04-16 00:00 2026-04-12 Show GitHub Exploit DB Packet Storm
1333 5.0 MEDIUM
Local 		bytecodealliance wasmtime Wasmtime is a runtime for WebAssembly. In 43.0.0, cloning a wasmtime::Linker is unsound and can result in use-after-free bugs. This bug is not controllable by guest Wasm programs. It can only be trig… CWE-416
 Use After Free 		CVE-2026-34983 2026-04-15 23:49 2026-04-10 Show GitHub Exploit DB Packet Storm
1334 7.8 HIGH
Local 		bytecodealliance wasmtime Wasmtime is a runtime for WebAssembly. From 32.0.0 to before 36.0.7, 42.0.2, and 43.0.1, Wasmtime's Cranelift compilation backend contains a bug on aarch64 when performing a certain shape of heap acc… CWE-125
CWE-787
Out-of-bounds Read
 Out-of-bounds Write 		CVE-2026-34971 2026-04-15 23:10 2026-04-10 Show GitHub Exploit DB Packet Storm
1335 9.9 CRITICAL
Network 		bytecodealliance wasmtime Wasmtime is a runtime for WebAssembly. From 25.0.0 to before 36.0.7, 42.0.2, and 43.0.1, Wasmtime with its Winch (baseline) non-default compiler backend may allow properly constructed guest Wasm to a… CWE-125
CWE-787
Out-of-bounds Read
 Out-of-bounds Write 		CVE-2026-34987 2026-04-15 22:41 2026-04-10 Show GitHub Exploit DB Packet Storm
1336 6.3 MEDIUM
Network 		bytecodealliance wasmtime Wasmtime is a runtime for WebAssembly. From 28.0.0 to before 36.0.7, 42.0.2, and 43.0.1, Wasmtime's implementation of its pooling allocator contains a bug where in certain configurations the contents… CWE-119
Incorrect Access of Indexable Resource ('Range Error')  		CVE-2026-34988 2026-04-15 22:14 2026-04-10 Show GitHub Exploit DB Packet Storm
1337 7.5 HIGH
Network 		bytecodealliance wasmtime Wasmtime is a runtime for WebAssembly. From 25.0.0 to before 36.0.7, 42.0.2, and 43.0.1, Wasmtime's Winch compiler backend contains a bug where translating the table.grow operator causes the result t… CWE-789
 Memory Allocation with Excessive Size Value 		CVE-2026-35186 2026-04-15 22:04 2026-04-10 Show GitHub Exploit DB Packet Storm
1338 5.4 MEDIUM
Network 		bytecodealliance wasmtime Wasmtime is a runtime for WebAssembly. Prior to 24.0.7, 36.0.7, 42.0.2, and 43.0.1, Wasmtime's implementation of transcoding strings between components contains a bug where the return value of a gues… CWE-787
 Out-of-bounds Write 		CVE-2026-35195 2026-04-15 22:00 2026-04-10 Show GitHub Exploit DB Packet Storm
1339 9.8 CRITICAL
Network 		sonos era_300_firmware Sonos Era 300 SMB Response Out-Of-Bounds Access Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Sonos Era 300. A… CWE-119
Incorrect Access of Indexable Resource ('Range Error')  		CVE-2026-4149 2026-04-15 21:26 2026-04-11 Show GitHub Exploit DB Packet Storm
1340 6.8 MEDIUM
Physics 		samsung android Improper check for exceptional conditions in Recents prior to SMR Apr-2026 Release 1 allows physical attacker to bypass App Pinning. CWE-754
 Improper Check for Unusual or Exceptional Conditions 		CVE-2026-21009 2026-04-15 21:23 2026-04-13 Show GitHub Exploit DB Packet Storm