Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 4, 2026, 4 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
228331 7.5 危険 script-shop24 - LM Starmail Paidmail の home.php における PHP リモートファイルインクルージョンの脆弱性 CWE-94
コード・インジェクション 		CVE-2009-4993 2012-12-20 19:28 2010-08-25 Show GitHub Exploit DB Packet Storm
228332 7.5 危険 script-shop24 - LM Starmail Paidmail の paidbanner.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2009-4992 2012-12-20 19:28 2010-08-25 Show GitHub Exploit DB Packet Storm
228333 10 危険 SAP - SAP Business One の NT_Naming_Service.exe におけるスタックベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2009-4988 2012-12-20 19:28 2010-08-25 Show GitHub Exploit DB Packet Storm
228334 7.5 危険 scripteen - Scripteen Free Image Hosting Script の admin/header.php における認証を回避される脆弱性 CWE-287
不適切な認証 		CVE-2009-4987 2012-12-20 19:28 2010-08-25 Show GitHub Exploit DB Packet Storm
228335 7.5 危険 websitesrus - Accessories Me PHP Affiliate Script の browse.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2009-4985 2012-12-20 19:28 2010-08-25 Show GitHub Exploit DB Packet Storm
228336 4.3 警告 websitesrus - Accessories Me PHP Affiliate Script におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2009-4984 2012-12-20 19:28 2010-08-25 Show GitHub Exploit DB Packet Storm
228337 4.3 警告 snowhall - Silurus Classifieds におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2009-4983 2012-12-20 19:28 2010-08-25 Show GitHub Exploit DB Packet Storm
228338 5 警告 tufat - MyBackup の down.php におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2009-4978 2012-12-20 19:28 2010-08-25 Show GitHub Exploit DB Packet Storm
228339 6.5 警告 tufat - MyBackup の index.php における PHP リモートファイルインクルージョンの脆弱性 CWE-94
コード・インジェクション 		CVE-2009-4977 2012-12-20 19:28 2010-08-25 Show GitHub Exploit DB Packet Storm
228340 7.5 危険 sweetphp - TotalCalendar の box_display.php におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2009-4974 2012-12-20 19:28 2010-07-28 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 4, 2026, 4:17 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
274881 5.3 MEDIUM
Network 		phpmyadmin phpmyadmin libraries/config/messages.inc.php in phpMyAdmin 4.0.x before 4.0.10.12, 4.4.x before 4.4.15.2, and 4.5.x before 4.5.3.1 allows remote attackers to obtain sensitive information via a crafted request, … CWE-200
Information Exposure 		CVE-2015-8669 2024-11-21 11:38 2015-12-27 Show GitHub Exploit DB Packet Storm
274882 8.8 HIGH
Network 		google chrome Integer overflow in the WebCursor::Deserialize function in content/common/cursors/webcursor.cc in Google Chrome before 47.0.2526.106 allows remote attackers to cause a denial of service or possibly h… CWE-189
Numeric Errors 		CVE-2015-8664 2024-11-21 11:38 2015-12-24 Show GitHub Exploit DB Packet Storm
274883 8.3 HIGH
Network 		ffmpeg ffmpeg The ff_get_buffer function in libavcodec/utils.c in FFmpeg before 2.8.4 preserves width and height values after a failure, which allows remote attackers to cause a denial of service (out-of-bounds ar… CWE-119
Incorrect Access of Indexable Resource ('Range Error')  		CVE-2015-8663 2024-11-21 11:38 2015-12-24 Show GitHub Exploit DB Packet Storm
274884 7.3 HIGH
Network 		ffmpeg ffmpeg The ff_dwt_decode function in libavcodec/jpeg2000dwt.c in FFmpeg before 2.8.4 does not validate the number of decomposition levels before proceeding with Discrete Wavelet Transform decoding, which al… CWE-119
Incorrect Access of Indexable Resource ('Range Error')  		CVE-2015-8662 2024-11-21 11:38 2015-12-24 Show GitHub Exploit DB Packet Storm
274885 8.3 HIGH
Network 		ffmpeg ffmpeg The h264_slice_header_init function in libavcodec/h264_slice.c in FFmpeg before 2.8.3 does not validate the relationship between the number of threads and the number of slices, which allows remote at… CWE-119
Incorrect Access of Indexable Resource ('Range Error')  		CVE-2015-8661 2024-11-21 11:38 2015-12-24 Show GitHub Exploit DB Packet Storm
274886 10.0 CRITICAL
Network 		dovestones ad_self_password_reset The PasswordReset.Controllers.ResetController.ChangePasswordIndex method in PasswordReset.dll in Dovestones AD Self Password Reset before 3.0.4.0 allows remote attackers to reset arbitrary passwords … CWE-264
Permissions, Privileges, and Access Controls 		CVE-2015-8267 2024-11-21 11:38 2015-12-24 Show GitHub Exploit DB Packet Storm
274887 6.8 MEDIUM
Network 		isc kea The kea-dhcp4 and kea-dhcp6 servers 0.9.2 and 1.0.0-beta in ISC Kea, when certain debugging settings are used, allow remote attackers to cause a denial of service (daemon crash) via a malformed packe… CWE-20
 Improper Input Validation  		CVE-2015-8373 2024-11-21 11:38 2015-12-23 Show GitHub Exploit DB Packet Storm
274888 - adobe acrobat
acrobat_dc
acrobat_reader
acrobat_reader_dc 		Heap-based buffer overflow in AGM.dll in Adobe Reader and Acrobat 10.x before 10.1.16 and 11.x before 11.0.13, Acrobat and Acrobat Reader DC Classic before 2015.006.30094, and Acrobat and Acrobat Rea… CWE-787
 Out-of-bounds Write 		CVE-2015-8458 2024-11-21 11:38 2015-12-21 Show GitHub Exploit DB Packet Storm
274889 - token_insert_entity_project token_insert_entity The Token Insert Entity module 7.x-1.x before 7.x-1.1 for Drupal does not properly check permissions, which allows remote authenticated users with certain permissions to bypass intended access restri… CWE-200
Information Exposure 		CVE-2015-8602 2024-11-21 11:38 2015-12-18 Show GitHub Exploit DB Packet Storm
274890 - chat_room_project chat_room The Chat Room module 7.x-2.x before 7.x-2.2 for Drupal does not properly check permissions when setting up a websocket for chat messages, which allows remote attackers to bypass intended access restr… CWE-200
Information Exposure 		CVE-2015-8601 2024-11-21 11:38 2015-12-18 Show GitHub Exploit DB Packet Storm