Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Feb. 9, 2026, 12:59 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
229521 6.8 警告 WordPress.org - WordPress の wp-admin/index.php におけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反
CVE-2012-4448 2012-10-2 16:16 2012-09-28 Show GitHub Exploit DB Packet Storm
229522 5 警告 エマソン - Emerson DeltaV におけるバッファオーバーフローの脆弱性 CWE-119
バッファエラー
CVE-2012-3035 2012-10-2 16:06 2012-09-28 Show GitHub Exploit DB Packet Storm
229523 2.1 注意 IBM - IBM AIX および VIOS の fuser における任意のプロセスを停止される脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2012-4833 2012-10-2 16:05 2012-09-18 Show GitHub Exploit DB Packet Storm
229524 5 警告 IBM - IBM WebSphere Commerce におけるユーザの個人情報を取得される脆弱性 CWE-noinfo
情報不足
CVE-2012-4830 2012-10-2 16:00 2012-10-1 Show GitHub Exploit DB Packet Storm
229525 5 警告 IBM - IBM Rational Business Developer における重要な情報を取得される脆弱性 CWE-200
情報漏えい
CVE-2012-3319 2012-10-2 15:59 2012-10-1 Show GitHub Exploit DB Packet Storm
229526 6.8 警告 IBM - IBM Rational Team Concert におけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反
CVE-2012-0748 2012-10-2 15:56 2012-10-1 Show GitHub Exploit DB Packet Storm
229527 4.3 警告 Smarty - Smarty の SmartyException クラスにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2012-4437 2012-10-2 15:55 2012-10-1 Show GitHub Exploit DB Packet Storm
229528 7.5 危険 OptiPNG - OptiPNG の opngreduc.c における任意のコードを実行される脆弱性 CWE-399
リソース管理の問題
CVE-2012-4432 2012-10-2 15:54 2012-09-16 Show GitHub Exploit DB Packet Storm
229529 6.8 警告 GNOME Project - GNOME の gnome-shell プラグインにおける任意の拡張機能のダウンロードを強制される脆弱性 CWE-94
コード・インジェクション
CVE-2012-4427 2012-10-2 15:42 2012-10-1 Show GitHub Exploit DB Packet Storm
229530 7.5 危険 Apache Software Foundation - Guacamole の libguac におけるスタックベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー
CVE-2012-4415 2012-10-2 15:13 2012-10-1 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:April 26, 2026, 4:08 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
298021 - aspindir dizi_portali SQL injection vulnerability in film.asp in Yigit Aybuga Dizi Portali allows remote attackers to execute arbitrary SQL commands via the film parameter. NOTE: the provenance of this information is unk… CWE-89
SQL Injection
CVE-2008-5057 2017-08-8 10:33 2008-11-13 Show GitHub Exploit DB Packet Storm
298022 - h\&h websoccer SQL injection vulnerability in liga.php in H&H WebSoccer 2.80 allows remote attackers to execute arbitrary SQL commands via the id parameter. CWE-89
SQL Injection
CVE-2008-5064 2017-08-8 10:33 2008-11-14 Show GitHub Exploit DB Packet Storm
298023 - htop htop htop 0.7 writes process names to a terminal without sanitizing non-printable characters, which might allow local users to hide processes, modify arbitrary files, or have unspecified other impact via … CWE-200
Information Exposure
CVE-2008-5076 2017-08-8 10:33 2008-11-15 Show GitHub Exploit DB Packet Storm
298024 - redhat _dogtag_certificate_system
certificate_system
The verifyProof function in the Token Processing System (TPS) component in Red Hat Certificate System (RHCS) 7.1 through 7.3 and Dogtag Certificate System 1.0 returns successfully even when token enr… CWE-287
Improper Authentication
CVE-2008-5082 2017-08-8 10:33 2009-01-31 Show GitHub Exploit DB Packet Storm
298025 - novell edirectory Buffer overflow in the LDAP Service in Novell eDirectory 8.7.3 before SP10a and 8.8 before SP3 allows attackers to cause a denial of service (application crash) via vectors involving an "invalid exte… CWE-119
Incorrect Access of Indexable Resource ('Range Error') 
CVE-2008-5091 2017-08-8 10:33 2008-11-15 Show GitHub Exploit DB Packet Storm
298026 - novell edirectory Cross-site scripting (XSS) vulnerability in the HTTP Protocol Stack (HTTPSTK) in Novell eDirectory before 8.8 SP3 allows remote attackers to inject arbitrary web script or HTML via unknown vectors. CWE-79
Cross-site Scripting
CVE-2008-5093 2017-08-8 10:33 2008-11-15 Show GitHub Exploit DB Packet Storm
298027 - typo3 file_list_extension Unspecified vulnerability in the TYPO3 File List (file_list) extension 0.2.1 and earlier allows remote attackers to obtain sensitive information via unknown attack vectors. NVD-CWE-noinfo
CWE-200
Information Exposure
CVE-2008-5096 2017-08-8 10:33 2008-11-15 Show GitHub Exploit DB Packet Storm
298028 - sun logical_domain_manager Sun Logical Domain Manager (aka LDoms Manager or ldm) 1.0 through 1.0.3 displays the value of the OpenBoot PROM (OBP) security-password variable in cleartext, which allows local users to bypass the S… CWE-200
Information Exposure
CVE-2008-5099 2017-08-8 10:33 2008-11-18 Show GitHub Exploit DB Packet Storm
298029 - sun logical_domain_manager http://sunsolve.sun.com/search/document.do?assetkey=1-26-243606-1 Note: The x86 Platform is not affected by this issue, as Logical Domains (LDoms) software is supported only on the Sun SPARC Platf… CWE-200
Information Exposure
CVE-2008-5099 2017-08-8 10:33 2008-11-18 Show GitHub Exploit DB Packet Storm
298030 - optipng optipng Buffer overflow in the BMP reader in OptiPNG 0.6 and 0.6.1 allows user-assisted attackers to execute arbitrary code via a crafted BMP image, related to an "array overflow." CWE-119
Incorrect Access of Indexable Resource ('Range Error') 
CVE-2008-5101 2017-08-8 10:33 2008-11-18 Show GitHub Exploit DB Packet Storm