Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Feb. 9, 2026, 12:59 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
229961 7.5 危険 peter hocherl - Joomla! 用の TRAVELbook コンポーネントにおけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2010-1535 2012-09-25 17:38 2010-04-26 Show GitHub Exploit DB Packet Storm
229962 5 警告 joomla.batjo - Joomla! 用の Shoutbox Pro コンポーネントにおけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2010-1534 2012-09-25 17:38 2010-04-26 Show GitHub Exploit DB Packet Storm
229963 7.5 危険 peter hocherl - Joomla! 用の TweetLA コンポーネントにおけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2010-1533 2012-09-25 17:38 2010-04-26 Show GitHub Exploit DB Packet Storm
229964 9.3 危険 Novell - Novell iPrint Client におけるスタックベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2010-1527 2012-09-25 17:38 2010-08-19 Show GitHub Exploit DB Packet Storm
229965 6.8 警告 Mono Project - Mono で使用される libgdiplus における整数オーバーフローの脆弱性 CWE-189
数値処理の問題 		CVE-2010-1526 2012-09-25 17:38 2010-08-24 Show GitHub Exploit DB Packet Storm
229966 7.5 危険 OrdaSoft - Joomla! 用の BookLibrary Basic コンポーネントにおける SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2010-1522 2012-09-25 17:38 2010-07-2 Show GitHub Exploit DB Packet Storm
229967 6.4 警告 KDE project - KDE SC の KGet における任意のファイルを上書きされる脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2010-1511 2012-09-25 17:38 2010-05-13 Show GitHub Exploit DB Packet Storm
229968 5 警告 Irfan Skiljan - IrfanView におけるヒープベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2010-1510 2012-09-25 17:38 2010-05-14 Show GitHub Exploit DB Packet Storm
229969 5 警告 Irfan Skiljan - IrfanView におけるサービス運用妨害 (DoS) の脆弱性 CWE-119
バッファエラー 		CVE-2010-1509 2012-09-25 17:38 2010-05-14 Show GitHub Exploit DB Packet Storm
229970 5 警告 Novell - SLE の yast2-webclient におけるセッションクッキーを偽造される脆弱性 CWE-255
証明書・パスワード管理 		CVE-2010-1507 2012-09-25 17:38 2010-08-2 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:April 18, 2026, 4:11 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
285091 - videolan vlc_media_player Array index error in VLC media player 0.9.2 allows remote attackers to overwrite arbitrary memory and execute arbitrary code via an XSPF playlist file with a negative identifier tag, which passes a s… CWE-399
 Resource Management Errors 		CVE-2008-4558 2018-10-12 05:52 2008-10-15 Show GitHub Exploit DB Packet Storm
285092 - dovecot dovecot The ACL plugin in Dovecot before 1.1.4 allows attackers to bypass intended access restrictions by using the "k" right to create unauthorized "parent/child/child" mailboxes. CWE-264
Permissions, Privileges, and Access Controls 		CVE-2008-4578 2018-10-12 05:52 2008-10-16 Show GitHub Exploit DB Packet Storm
285093 - belong_software site_builder Belong Software Site Builder 0.1 beta allows remote attackers to bypass intended access restrictions and perform administrative actions via a direct request to admin/home.php. CWE-264
Permissions, Privileges, and Access Controls 		CVE-2008-4585 2018-10-12 05:52 2008-10-16 Show GitHub Exploit DB Packet Storm
285094 - lenovo resuce_and_recovery Heap-based buffer overflow in the tvtumin.sys kernel driver in Lenovo Rescue and Recovery 4.20, including 4.20.0511 and 4.20.0512, allows local users to execute arbitrary code via a long file name. CWE-119
Incorrect Access of Indexable Resource ('Range Error')  		CVE-2008-4589 2018-10-12 05:52 2008-10-16 Show GitHub Exploit DB Packet Storm
285095 - php_arsivimiz php_ziyaretci_defteri SQL injection vulnerability in index.php in PHP Arsivimiz Php Ziyaretci Defteri allows remote attackers to execute arbitrary SQL commands via the sayfa parameter. CWE-89
SQL Injection 		CVE-2008-4611 2018-10-12 05:52 2008-10-21 Show GitHub Exploit DB Packet Storm
285096 - portalapp portalapp Cross-site scripting (XSS) vulnerability in PortalApp 4.0 allows remote attackers to inject arbitrary web script or HTML via the keywords parameter to (1) forums.asp and (2) content.asp. CWE-79
Cross-site Scripting 		CVE-2008-4612 2018-10-12 05:52 2008-10-21 Show GitHub Exploit DB Packet Storm
285097 - the_spanner
wordpress 		spambam_plugin The SpamBam plugin for WordPress allows remote attackers to bypass restrictions and add blog comments by using server-supplied values to calculate a shared key. CWE-20
 Improper Input Validation  		CVE-2008-4616 2018-10-12 05:52 2008-10-21 Show GitHub Exploit DB Packet Storm
285098 - symantec veritas_file_system qioadmin in the Quick I/O for Database feature in Symantec Veritas File System (VxFS) on HP-UX, and before 5.0 MP3 on Solaris, Linux, and AIX, allows local users to read arbitrary files by causing qi… CWE-200
Information Exposure 		CVE-2008-4638 2018-10-12 05:52 2008-10-22 Show GitHub Exploit DB Packet Storm
285099 - lokicms lokicms Directory traversal vulnerability in admin.php in LokiCMS 0.3.4, when magic_quotes_gpc is disabled, allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the lang… CWE-22
Path Traversal 		CVE-2008-4662 2018-10-12 05:52 2008-10-22 Show GitHub Exploit DB Packet Storm
285100 - wireshark wireshark packet-usb.c in the USB dissector in Wireshark 0.99.7 through 1.0.3 allows remote attackers to cause a denial of service (application crash or abort) via a malformed USB Request Block (URB). CWE-399
 Resource Management Errors 		CVE-2008-4680 2018-10-12 05:52 2008-10-23 Show GitHub Exploit DB Packet Storm