Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Feb. 9, 2026, 12:59 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
232471 7.5 危険 joovili - Joovili の browse.videos.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2008-2063 2012-09-25 17:16 2008-05-2 Show GitHub Exploit DB Packet Storm
232472 7.5 危険 netoffice - netOffice Dwins の includes/library.php における認証を回避される脆弱性 CWE-94
コード・インジェクション
CVE-2008-2044 2012-09-25 17:16 2008-05-1 Show GitHub Exploit DB Packet Storm
232473 7.5 危険 peercast - Peercast の HTTP::getAuthUserPass 関数におけるスタックベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー
CVE-2008-2040 2012-09-25 17:16 2008-04-30 Show GitHub Exploit DB Packet Storm
232474 6.8 警告 miniBB - miniBB の setup_mysql.php などにおける SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2008-2029 2012-09-25 17:16 2008-04-30 Show GitHub Exploit DB Packet Storm
232475 4.3 警告 miniBB - miniBB におけるフルパスを取得される脆弱性 CWE-200
情報漏えい
CVE-2008-2028 2012-09-25 17:16 2008-04-30 Show GitHub Exploit DB Packet Storm
232476 4.3 警告 miniBB - miniBB の index.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2008-2024 2012-09-25 17:16 2008-04-30 Show GitHub Exploit DB Packet Storm
232477 7.5 危険 pd9 software - PD9 Software の MegaBBS における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2008-2023 2012-09-25 17:16 2008-04-30 Show GitHub Exploit DB Packet Storm
232478 4.3 警告 pd9 software - PD9 Software MegaBBS におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2008-2022 2012-09-25 17:16 2008-04-30 Show GitHub Exploit DB Packet Storm
232479 5 警告 Mozilla Foundation - Mozilla Firefox におけるサービス運用妨害 (DoS) の脆弱性 CWE-399
リソース管理の問題
CVE-2008-2014 2012-09-25 17:16 2008-04-29 Show GitHub Exploit DB Packet Storm
232480 4.3 警告 national rail enquiries - National Rail Enquiries Live Departure Boards ガジェットにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2008-2011 2012-09-25 17:16 2008-04-29 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:April 17, 2026, 4:13 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
61 7.5 HIGH
Network
- - A heap buffer overflow in the av_bprint_finalize() function of FFmpeg v8.0.1 allows attackers to cause a Denial of Service (DoS) via a crafted input. New CWE-122
Heap-based Buffer Overflow
CVE-2026-30999 2026-04-18 00:38 2026-04-14 Show GitHub Exploit DB Packet Storm
62 5.4 MEDIUM
Network
- - Cross-Site Scripting vulnerability in the Snipe-IT web-based asset management system v8.3.0 to up and including v8.3.1 allows authenticated attacker with lowest privileges sufficient only to log in, … New CWE-79
Cross-site Scripting
CVE-2025-63743 2026-04-18 00:38 2026-04-14 Show GitHub Exploit DB Packet Storm
63 7.5 HIGH
Network
- - A NULL pointer dereference in Nitro PDF Pro for Windows v14.41.1.4 allows attackers to cause a Denial of Service (DoS) via a crafted XFA packet. New CWE-476
 NULL Pointer Dereference
CVE-2025-66769 2026-04-18 00:38 2026-04-14 Show GitHub Exploit DB Packet Storm
64 7.5 HIGH
Network
- - Nitro PDF Pro for Windows 14.41.1.4 contains a NULL pointer dereference vulnerability in the JavaScript implementation of app.alert(). When app.alert() is called with more than one argument and the f… New CWE-476
 NULL Pointer Dereference
CVE-2025-69624 2026-04-18 00:38 2026-04-14 Show GitHub Exploit DB Packet Storm
65 8.4 HIGH
Local
- - Nitro PDF Pro for Windows 14.41.1.4 contains a heap use-after-free vulnerability in the implementation of the JavaScript method this.mailDoc(). During execution, an internal XID object is allocated a… New CWE-416
 Use After Free
CVE-2025-69627 2026-04-18 00:38 2026-04-14 Show GitHub Exploit DB Packet Storm
66 - - - Unrestricted Upload of File with Dangerous Type vulnerability allows Remote Code Execution via file upload. This issue affects Pandora FMS: from 777 through 800 New CWE-434
 Unrestricted Upload of File with Dangerous Type 
CVE-2026-30804 2026-04-18 00:38 2026-04-14 Show GitHub Exploit DB Packet Storm
67 - - - Improper Neutralization of Special Elements used in an OS Command vulnerability allows OS Command Injection via Network Report. This issue affects Pandora FMS: from 777 through 800 New CWE-78
OS Command 
CVE-2026-30806 2026-04-18 00:38 2026-04-14 Show GitHub Exploit DB Packet Storm
68 - - - Improper Neutralization of Special Elements used in an OS Command vulnerability allows OS Command Injection via WebServerModuleDebug. This issue affects Pandora FMS: from 777 through 800 New CWE-78
OS Command 
CVE-2026-30809 2026-04-18 00:38 2026-04-14 Show GitHub Exploit DB Packet Storm
69 - - - Missing Authorization vulnerability allows Exposure of Sensitive Information via configuration endpoint. This issue affects Pandora FMS: from 777 through 800 New CWE-276
Incorrect Default Permissions 
CVE-2026-30811 2026-04-18 00:38 2026-04-14 Show GitHub Exploit DB Packet Storm
70 - - - Improper Neutralization of Input During Web Page Generation vulnerability allows Stored Cross-Site Scripting via event comments. This issue affects Pandora FMS: from 777 through 800 New CWE-79
Cross-site Scripting
CVE-2026-30812 2026-04-18 00:38 2026-04-14 Show GitHub Exploit DB Packet Storm