Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Feb. 9, 2026, 12:59 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
224471 4.9 警告 レッドハット - Fedora 上で稼動している Linux カーネルの utrace サブシステム用の特定の Fedora パッチにおけるサービス運用妨害 (DoS) の脆弱性 CWE-399
リソース管理の問題 		CVE-2008-3832 2012-12-20 18:52 2008-09-30 Show GitHub Exploit DB Packet Storm
224472 5 警告 swfdec - Swfdec におけるサービス運用妨害 (DoS) の脆弱性 CWE-20
不適切な入力確認 		CVE-2008-3796 2012-12-20 18:52 2008-08-27 Show GitHub Exploit DB Packet Storm
224473 6.8 警告 VideoLAN - VLC Media Player の modules/access/mms/mmstu.c 関数における整数符号エラーの脆弱性 CWE-189
数値処理の問題 		CVE-2008-3794 2012-12-20 18:52 2008-08-26 Show GitHub Exploit DB Packet Storm
224474 6.8 警告 PicturesPro - PICTURESPRO Photo Cart における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-3788 2012-12-20 18:52 2008-08-26 Show GitHub Exploit DB Packet Storm
224475 4.3 警告 PicturesPro - PICTURESPRO Photo Cart の index.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2008-3786 2012-12-20 18:52 2008-08-26 Show GitHub Exploit DB Packet Storm
224476 7.5 危険 review-script - Five Star Review Script の recommend.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-3780 2012-12-20 18:52 2008-08-26 Show GitHub Exploit DB Packet Storm
224477 4.3 警告 review-script - Five Star Review Script の search/index.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2008-3779 2012-12-20 18:52 2008-08-26 Show GitHub Exploit DB Packet Storm
224478 7.5 危険 simasy - Simasy CMS の index.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-3774 2012-12-20 18:52 2008-08-22 Show GitHub Exploit DB Packet Storm
224479 4.3 警告 vBulletin Solutions, Inc. - vBulletin におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2008-3773 2012-12-20 18:52 2008-08-18 Show GitHub Exploit DB Packet Storm
224480 7.5 危険 turnkey web tools - Turnkey Web Tools SunShop Shopping Cart の class.ajax.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-3768 2012-12-20 18:52 2008-08-22 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:April 22, 2026, 4 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
1541 9.8 CRITICAL
Network 		itsourcecode online_student_enrollment_system A SQL injection vulnerability was found in the instructorClasses.php file of itsourcecode Online Student Enrollment System v1.0. The reason for this issue is that the 'classId' parameter from $_GET['… CWE-89
SQL Injection 		CVE-2026-36232 2026-04-15 02:40 2026-04-11 Show GitHub Exploit DB Packet Storm
1542 7.5 HIGH
Network 		gitlab gitlab GitLab has remediated an issue in GitLab CE/EE affecting all versions from 12.10 before 18.8.9, 18.9 before 18.9.5, and 18.10 before 18.10.3 that could have allowed an unauthenticated user to cause d… CWE-1284
 Improper Validation of Specified Quantity in Input 		CVE-2026-1092 2026-04-15 02:38 2026-04-9 Show GitHub Exploit DB Packet Storm
1543 7.5 HIGH
Network 		hono node-server @hono/node-server allows running the Hono application on Node.js. Prior to version 1.19.10, when using @hono/node-server's static file serving together with route-based middleware protections (e.g. p… CWE-863
 Incorrect Authorization 		CVE-2026-29087 2026-04-15 02:36 2026-03-7 Show GitHub Exploit DB Packet Storm
1544 7.5 HIGH
Network 		hono node-server @hono/node-server permite ejecutar la aplicación Hono en Node.js. Antes de la versión 1.19.10, al usar el servicio de archivos estáticos de @hono/node-server junto con protecciones de middleware basa… CWE-863
 Incorrect Authorization 		CVE-2026-29087 2026-04-15 02:36 2026-03-7 Show GitHub Exploit DB Packet Storm
1545 8.8 HIGH
Network 		monospace directus Directus is a real-time API and App dashboard for managing SQL database content. Prior to 11.17.0, the PATCH /files/{id} endpoint accepts a user-controlled filename_disk parameter. By setting this va… CWE-284
CWE-639
Improper Access Control
 Authorization Bypass Through User-Controlled Key 		CVE-2026-39942 2026-04-15 02:36 2026-04-10 Show GitHub Exploit DB Packet Storm
1546 8.8 HIGH
Network 		google clasp Path Traversal in Clasp impacting versions < 3.2.0 allows a remote attacker to perform remote code execution via a malicious Google Apps Script project containing specially crafted filenames with dir… CWE-22
Path Traversal 		CVE-2026-4092 2026-04-15 02:34 2026-03-14 Show GitHub Exploit DB Packet Storm
1547 8.8 HIGH
Network 		google clasp Salto de ruta en Clasp que afecta a las versiones &lt; 3.2.0 permite a un atacante remoto realizar ejecución remota de código mediante un proyecto malicioso de Google Apps Script que contiene nombres… CWE-22
Path Traversal 		CVE-2026-4092 2026-04-15 02:34 2026-03-14 Show GitHub Exploit DB Packet Storm
1548 6.5 MEDIUM
Network 		monospace directus Directus is a real-time API and App dashboard for managing SQL database content. Prior to 11.17.0, Directus stores revision records (in directus_revisions) whenever items are created or updated. Due … CWE-200
CWE-312
Information Exposure
 Cleartext Storage of Sensitive Information 		CVE-2026-39943 2026-04-15 02:34 2026-04-10 Show GitHub Exploit DB Packet Storm
1549 3.5 LOW
Network 		telesquare sdt-cs3b1_firmware Telesquare SKT LTE Router SDT-CS3B1 version 1.2.0 contains a cross-site request forgery vulnerability that allows authenticated attackers to execute arbitrary system commands by exploiting missing re… CWE-352
 Origin Validation Error 		CVE-2017-20221 2026-04-15 02:29 2026-03-16 Show GitHub Exploit DB Packet Storm
1550 3.5 LOW
Network 		telesquare sdt-cs3b1_firmware El router Telesquare SKT LTE SDT-CS3B1 versión 1.2.0 contiene una vulnerabilidad de falsificación de petición en sitios cruzados que permite a atacantes autenticados ejecutar comandos de sistema arbi… CWE-352
 Origin Validation Error 		CVE-2017-20221 2026-04-15 02:29 2026-03-16 Show GitHub Exploit DB Packet Storm