Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Feb. 9, 2026, 12:59 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
224821 9.3 危険 VideoLAN - Windows 上で稼動する VLC Media Player の modules/demux/wav.c における整数オーバーフローの脆弱性 CWE-189
数値処理の問題 		CVE-2008-2430 2012-12-20 18:52 2008-07-7 Show GitHub Exploit DB Packet Storm
224822 6.8 警告 torrenttrader - TorrentTrader Classic における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-2428 2012-12-20 18:52 2008-06-18 Show GitHub Exploit DB Packet Storm
224823 7.5 危険 webslider - Web Slider の index.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-2422 2012-12-20 18:52 2008-05-23 Show GitHub Exploit DB Packet Storm
224824 4.3 警告 SAP - SAP WAS などの Web GUI におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2008-2421 2012-12-20 18:52 2008-05-23 Show GitHub Exploit DB Packet Storm
224825 6.8 警告 stunnel - stunnel の OCSP 関数におけるアクセス制限を回避される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2008-2420 2012-12-20 18:52 2008-05-23 Show GitHub Exploit DB Packet Storm
224826 6.8 警告 sazcart - SazCart の index.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-2411 2012-12-20 18:52 2008-05-22 Show GitHub Exploit DB Packet Storm
224827 7.5 危険 サン・マイクロシステムズ - Sun Java ASP Server の管理アプリケーションサーバにおける認証を回避される脆弱性 CWE-287
不適切な認証 		CVE-2008-2406 2012-12-20 18:52 2008-06-3 Show GitHub Exploit DB Packet Storm
224828 7.5 危険 サン・マイクロシステムズ - Sun Java ASP Server における任意のコマンドを実行される脆弱性 CWE-20
不適切な入力確認 		CVE-2008-2405 2012-12-20 18:52 2008-06-3 Show GitHub Exploit DB Packet Storm
224829 10 危険 サン・マイクロシステムズ - Sun Java ASP Server のリクエスト処理実装におけるスタックベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2008-2404 2012-12-20 18:52 2008-06-3 Show GitHub Exploit DB Packet Storm
224830 5 警告 サン・マイクロシステムズ - Sun Java ASP Server の Admin Server におけるパスワードハッシュを読まれる脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2008-2402 2012-12-20 18:52 2008-06-3 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:April 25, 2026, 4:08 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
1381 9.8 CRITICAL
Network 		- - Anviz CX2 Lite and CX7 are vulnerable to unauthenticated firmware uploads. This causes crafted archives to be accepted, enabling attackers to plant and execute code and obtain a reverse shell. CWE-306
Missing Authentication for Critical Function 		CVE-2026-35546 2026-04-21 04:05 2026-04-18 Show GitHub Exploit DB Packet Storm
1382 8.8 HIGH
Network 		- - Anviz CX2 Lite is vulnerable to an authenticated command injection via a filename parameter that enables arbitrary command execution (e.g., starting telnetd), resulting in root‑level access. CWE-77
Command Injection 		CVE-2026-35682 2026-04-21 04:05 2026-04-18 Show GitHub Exploit DB Packet Storm
1383 8.8 HIGH
Network 		- - Anviz CX2 Lite and CX7 are vulnerable to unverified update packages that can be uploaded. The device unpacks and executes a script resulting in unauthenticated remote code execution. CWE-494
 Download of Code Without Integrity Check 		CVE-2026-40066 2026-04-21 04:05 2026-04-18 Show GitHub Exploit DB Packet Storm
1384 8.1 HIGH
Adjacent 		- - Anviz CrossChex Standard lacks source verification in the client/server channel, enabling TCP packet injection by an attacker on the same network to alter or disrupt application traffic. CWE-940
 Improper Verification of Source of a Communication Channel 		CVE-2026-40434 2026-04-21 04:05 2026-04-18 Show GitHub Exploit DB Packet Storm
1385 7.5 HIGH
Network 		- - Anviz CX2 Lite and CX7 are vulnerable to unauthenticated POST requests that modify debug settings (e.g., enabling SSH), allowing unauthorized state changes that can facilitate later compromise. CWE-306
Missing Authentication for Critical Function 		CVE-2026-40461 2026-04-21 04:05 2026-04-18 Show GitHub Exploit DB Packet Storm
1386 7.8 HIGH
Local 		- - radare2 prior to commit bc5a890 contains a command injection vulnerability in the afsv/afsvj command path where crafted ELF binaries can embed malicious r2 command sequences as DWARF DW_TAG_formal_pa… CWE-78
OS Command  		CVE-2026-40527 2026-04-21 04:05 2026-04-18 Show GitHub Exploit DB Packet Storm
1387 6.9 MEDIUM
Local 		- - In iTerm2 through 3.6.9, displaying a .txt file can cause code execution via DCS 2000p and OSC 135 data, if the working directory contains a malicious file whose name is valid output from the conduct… CWE-829
 Inclusion of Functionality from Untrusted Control Sphere 		CVE-2026-41253 2026-04-21 04:05 2026-04-18 Show GitHub Exploit DB Packet Storm
1388 8.2 HIGH
Network 		- - Firebird is an open-source relational database management system. In versions prior to 5.0.4, 4.0.7 and 3.0.14, when processing CNCT_specific_data segments during authentication, the server assumes s… CWE-119
CWE-787
Incorrect Access of Indexable Resource ('Range Error') 
 Out-of-bounds Write 		CVE-2026-27890 2026-04-21 04:03 2026-04-18 Show GitHub Exploit DB Packet Storm
1389 7.5 HIGH
Network 		- - Firebird is an open-source relational database management system. In versions prior to 6.0.0, 5.0.4, 4.0.7 and 3.0.14, when processing an op_slice network packet, the server passes an unprepared stru… CWE-476
 NULL Pointer Dereference 		CVE-2026-28212 2026-04-21 04:03 2026-04-18 Show GitHub Exploit DB Packet Storm
1390 - - - Firebird is an open-source relational database management system. In versions prior to 5.0.4, 4.0.7 and 3.0.14, the ClumpletReader::getClumpletSize() function can overflow the totalLength value when … CWE-190
CWE-835
 Integer Overflow or Wraparound
 Loop with Unreachable Exit Condition ('Infinite Loop') 		CVE-2026-28214 2026-04-21 04:03 2026-04-18 Show GitHub Exploit DB Packet Storm