|
You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database). |
Update Date":May 5, 2026, 6 p.m.
| No | CVSS | Level Attach Vector |
Vendor Name | Project Name | Title | CWE | CVE | Update Date | Publication Date | Impact Show |
Exploit PoC Search |
|---|---|---|---|---|---|---|---|---|---|---|---|
| 224631 | 7.5 | 危険 | script-shop24 | - | LM Starmail Paidmail の paidbanner.php における SQL インジェクションの脆弱性 |
CWE-89
SQLインジェクション |
CVE-2009-4992 | 2012-12-20 19:28 | 2010-08-25 | Show | GitHub Exploit DB Packet Storm |
| 224632 | 10 | 危険 | SAP | - | SAP Business One の NT_Naming_Service.exe におけるスタックベースのバッファオーバーフローの脆弱性 |
CWE-119
バッファエラー |
CVE-2009-4988 | 2012-12-20 19:28 | 2010-08-25 | Show | GitHub Exploit DB Packet Storm |
| 224633 | 7.5 | 危険 | scripteen | - | Scripteen Free Image Hosting Script の admin/header.php における認証を回避される脆弱性 |
CWE-287
不適切な認証 |
CVE-2009-4987 | 2012-12-20 19:28 | 2010-08-25 | Show | GitHub Exploit DB Packet Storm |
| 224634 | 7.5 | 危険 | websitesrus | - | Accessories Me PHP Affiliate Script の browse.php における SQL インジェクションの脆弱性 |
CWE-89
SQLインジェクション |
CVE-2009-4985 | 2012-12-20 19:28 | 2010-08-25 | Show | GitHub Exploit DB Packet Storm |
| 224635 | 4.3 | 警告 | websitesrus | - | Accessories Me PHP Affiliate Script におけるクロスサイトスクリプティングの脆弱性 |
CWE-79
クロスサイト・スクリプティング(XSS) |
CVE-2009-4984 | 2012-12-20 19:28 | 2010-08-25 | Show | GitHub Exploit DB Packet Storm |
| 224636 | 4.3 | 警告 | snowhall | - | Silurus Classifieds におけるクロスサイトスクリプティングの脆弱性 |
CWE-79
クロスサイト・スクリプティング(XSS) |
CVE-2009-4983 | 2012-12-20 19:28 | 2010-08-25 | Show | GitHub Exploit DB Packet Storm |
| 224637 | 5 | 警告 | tufat | - | MyBackup の down.php におけるディレクトリトラバーサルの脆弱性 |
CWE-22
パス・トラバーサル |
CVE-2009-4978 | 2012-12-20 19:28 | 2010-08-25 | Show | GitHub Exploit DB Packet Storm |
| 224638 | 6.5 | 警告 | tufat | - | MyBackup の index.php における PHP リモートファイルインクルージョンの脆弱性 |
CWE-94
コード・インジェクション |
CVE-2009-4977 | 2012-12-20 19:28 | 2010-08-25 | Show | GitHub Exploit DB Packet Storm |
| 224639 | 7.5 | 危険 | sweetphp | - | TotalCalendar の box_display.php におけるディレクトリトラバーサルの脆弱性 |
CWE-22
パス・トラバーサル |
CVE-2009-4974 | 2012-12-20 19:28 | 2010-07-28 | Show | GitHub Exploit DB Packet Storm |
| 224640 | 7.5 | 危険 | sweetphp | - | TotalCalendar の rss.php における SQL インジェクションの脆弱性 |
CWE-89
SQLインジェクション |
CVE-2009-4973 | 2012-12-20 19:28 | 2010-07-28 | Show | GitHub Exploit DB Packet Storm |
Update Date:May 6, 2026, 4:08 a.m.
| No | CVSS | Level Attach Vector |
Vendor Name | Project Name | Title | CWE | CVE | Update Date | Publication Date | Show Affected | Exploit PoC Search |
|---|---|---|---|---|---|---|---|---|---|---|---|
| 641 | 5.5 |
MEDIUM
Local |
wireshark | wireshark | TLS protocol dissector infinite loop in Wireshark 4.6.0 to 4.6.4 allows denial of service |
CWE-835
Loop with Unreachable Exit Condition ('Infinite Loop') |
CVE-2026-6528 | 2026-05-2 04:28 | 2026-04-30 | Show | GitHub Exploit DB Packet Storm |
| 642 | 5.5 |
MEDIUM
Local |
wireshark | wireshark | iLBC audio codec crash in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial of service |
CWE-122
Heap-based Buffer Overflow |
CVE-2026-6529 | 2026-05-2 04:28 | 2026-04-30 | Show | GitHub Exploit DB Packet Storm |
| 643 | 5.5 |
MEDIUM
Local |
wireshark | wireshark | DCP-ETSI protocol dissector crash in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial of service |
CWE-122
Heap-based Buffer Overflow |
CVE-2026-6530 | 2026-05-2 04:28 | 2026-04-30 | Show | GitHub Exploit DB Packet Storm |
| 644 | 5.5 |
MEDIUM
Local |
wireshark | wireshark | Monero protocol dissector crash in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial of service |
CWE-674
Uncontrolled Recursion |
CVE-2026-5409 | 2026-05-2 04:27 | 2026-04-30 | Show | GitHub Exploit DB Packet Storm |
| 645 | 5.5 |
MEDIUM
Local |
wireshark | wireshark | OpenFlow v5 protocol dissector infinite loops in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial of service |
CWE-835
Loop with Unreachable Exit Condition ('Infinite Loop') |
CVE-2026-6521 | 2026-05-2 04:27 | 2026-04-30 | Show | GitHub Exploit DB Packet Storm |
| 646 | 5.5 |
MEDIUM
Local |
wireshark | wireshark | RPKI-Router protocol dissector infinite loop in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial of service |
CWE-835
Loop with Unreachable Exit Condition ('Infinite Loop') |
CVE-2026-6522 | 2026-05-2 04:27 | 2026-04-30 | Show | GitHub Exploit DB Packet Storm |
| 647 | 5.5 |
MEDIUM
Local |
wireshark | wireshark | GNW protocol dissector infinite loop in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial of service |
CWE-835
Loop with Unreachable Exit Condition ('Infinite Loop') |
CVE-2026-6523 | 2026-05-2 04:27 | 2026-04-30 | Show | GitHub Exploit DB Packet Storm |
| 648 | 5.5 |
MEDIUM
Local |
wireshark | wireshark | MySQL protocol dissector crash in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial of service |
CWE-824
Access of Uninitialized Pointer |
CVE-2026-6524 | 2026-05-2 04:27 | 2026-04-30 | Show | GitHub Exploit DB Packet Storm |
| 649 | 5.5 |
MEDIUM
Local |
wireshark | wireshark | ICMPv6 PvD protocol dissector crash in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial of service |
CWE-674
Uncontrolled Recursion |
CVE-2026-5299 | 2026-05-2 04:26 | 2026-04-30 | Show | GitHub Exploit DB Packet Storm |
| 650 | 5.5 |
MEDIUM
Local |
wireshark | wireshark | AFP Spotlight protocol dissector crash in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial of service |
CWE-674
Uncontrolled Recursion |
CVE-2026-5401 | 2026-05-2 04:26 | 2026-04-30 | Show | GitHub Exploit DB Packet Storm |