Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Feb. 9, 2026, 12:59 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
224561 7.5 危険 speedbit - SpeedBit Video Acceleration における任意のコードを実行される脆弱性 CWE-94
コード・インジェクション 		CVE-2008-3439 2012-12-20 18:52 2008-08-1 Show GitHub Exploit DB Packet Storm
224562 7.5 危険 speedbit - SpeedBit DAP における任意のコードを実行される脆弱性 CWE-94
コード・インジェクション 		CVE-2008-3433 2012-12-20 18:52 2008-08-1 Show GitHub Exploit DB Packet Storm
224563 5 警告 Vtiger - Vtiger CRM におけるメールマージテンプレートを読まれる脆弱性 CWE-200
情報漏えい 		CVE-2008-3458 2012-12-20 18:52 2006-09-9 Show GitHub Exploit DB Packet Storm
224564 7.2 危険 サン・マイクロシステムズ - IOCTL 用の METHOD_NEITHER 通信メソッドで使用されている Sun xVM VirtualBox における権限を取得される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2008-3431 2012-12-20 18:52 2008-08-5 Show GitHub Exploit DB Packet Storm
224565 6.5 警告 PhpFreeChat - phpFreeChat におけるセッションをハイジャックされる脆弱性 CWE-287
不適切な認証 		CVE-2008-3428 2012-12-20 18:52 2008-07-31 Show GitHub Exploit DB Packet Storm
224566 6.5 警告 サン・マイクロシステムズ - Sun N1 SPS の Sun Java System Web Server プラグインにおける Web サーバへの管理アクセス権限を取得される脆弱性 CWE-287
不適切な認証 		CVE-2008-3425 2012-12-20 18:52 2008-07-30 Show GitHub Exploit DB Packet Storm
224567 7.5 危険 willo - Mobius for Mimsy XG における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-3420 2012-12-20 18:52 2008-07-31 Show GitHub Exploit DB Packet Storm
224568 7.5 危険 willo - TriO の browse.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-3418 2012-12-20 18:52 2008-07-31 Show GitHub Exploit DB Packet Storm
224569 7.5 危険 siteadmin - SiteAdmin の line2.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-3414 2012-12-20 18:52 2008-07-31 Show GitHub Exploit DB Packet Storm
224570 5 警告 phplinkat - phpLinkat における認証を回避される脆弱性 CWE-287
不適切な認証 		CVE-2008-3407 2012-12-20 18:52 2008-07-31 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:April 26, 2026, 4:08 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
1021 9.8 CRITICAL
Network 		- - ELBA5 5.8.0 contains a remote code execution vulnerability that allows attackers to obtain database credentials and execute arbitrary commands with SYSTEM level permissions. Attackers can connect to … CWE-326
Inadequate Encryption Strength 		CVE-2018-25272 2026-04-23 06:23 2026-04-23 Show GitHub Exploit DB Packet Storm
1022 6.5 MEDIUM
Network 		- - DDEV is an open-source tool for running local web development environments for PHP and Node.js. Versions prior to 1.25.2 have unsanitized extraction in both `Untar()` and `Unzip()` functions in `pkg/… CWE-22
Path Traversal 		CVE-2026-32885 2026-04-23 06:23 2026-04-23 Show GitHub Exploit DB Packet Storm
1023 7.3 HIGH
Local 		- - A vulnerability in the chmod utility of uutils coreutils allows users to bypass the --preserve-root safety mechanism. The implementation only validates if the target path is literally / and does not … CWE-22
Path Traversal 		CVE-2026-35338 2026-04-23 06:23 2026-04-23 Show GitHub Exploit DB Packet Storm
1024 5.5 MEDIUM
Local 		- - The recursive mode (-R) of the chmod utility in uutils coreutils incorrectly handles exit codes when processing multiple files. The final return value is determined solely by the success or failure o… CWE-253
 Incorrect Check of Function Return Value 		CVE-2026-35339 2026-04-23 06:23 2026-04-23 Show GitHub Exploit DB Packet Storm
1025 5.5 MEDIUM
Local 		- - A flaw in the ChownExecutor used by uutils coreutils chown and chgrp causes the utilities to return an incorrect exit code during recursive operations. The final exit code is determined only by the l… CWE-253
 Incorrect Check of Function Return Value 		CVE-2026-35340 2026-04-23 06:23 2026-04-23 Show GitHub Exploit DB Packet Storm
1026 3.3 LOW
Local 		- - The mktemp utility in uutils coreutils fails to properly handle an empty TMPDIR environment variable. Unlike GNU mktemp, which falls back to /tmp when TMPDIR is an empty string, the uutils implementa… CWE-377
 Insecure Temporary File 		CVE-2026-35342 2026-04-23 06:23 2026-04-23 Show GitHub Exploit DB Packet Storm
1027 3.3 LOW
Local 		- - The cut utility in uutils coreutils incorrectly handles the -s (only-delimited) option when a newline character is specified as the delimiter. The implementation fails to verify the only_delimited fl… CWE-670
 Always-Incorrect Control Flow Implementation 		CVE-2026-35343 2026-04-23 06:23 2026-04-23 Show GitHub Exploit DB Packet Storm
1028 3.3 LOW
Local 		- - The dd utility in uutils coreutils suppresses errors during file truncation operations by unconditionally calling Result::ok() on truncation attempts. While intended to mimic GNU behavior for special… CWE-252
 Unchecked Return Value 		CVE-2026-35344 2026-04-23 06:23 2026-04-23 Show GitHub Exploit DB Packet Storm
1029 3.3 LOW
Local 		- - The comm utility in uutils coreutils silently corrupts data by performing lossy UTF-8 conversion on all output lines. The implementation uses String::from_utf8_lossy(), which replaces invalid UTF-8 b… CWE-176
 Improper Handling of Unicode Encoding 		CVE-2026-35346 2026-04-23 06:23 2026-04-23 Show GitHub Exploit DB Packet Storm
1030 4.4 MEDIUM
Local 		- - The comm utility in uutils coreutils incorrectly consumes data from non-regular file inputs before performing comparison operations. The are_files_identical function opens and reads from both input p… CWE-20
 Improper Input Validation  		CVE-2026-35347 2026-04-23 06:23 2026-04-23 Show GitHub Exploit DB Packet Storm