Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Feb. 9, 2026, 12:59 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
239461 6.8 警告 chilkat software - ChilkatCert.dll における任意のファイルを上書きされる脆弱性 CWE-Other
その他
CVE-2008-4584 2012-06-26 16:02 2008-10-15 Show GitHub Exploit DB Packet Storm
239462 7.5 危険 chilkat software - ChilkatCert.dll における任意のファイルを上書きされる脆弱性 CWE-Other
その他
CVE-2008-4583 2012-06-26 16:02 2008-10-15 Show GitHub Exploit DB Packet Storm
239463 7.2 危険 Gentoo Linux - fence で使用される fence_manual における任意のファイルを変更される脆弱性 CWE-59
リンク解釈の問題
CVE-2008-4580 2012-06-26 16:02 2008-10-8 Show GitHub Exploit DB Packet Storm
239464 5 警告 Timo Sirainen - Dovecot の ACL プラグインにおけるアクセス制限を回避される脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2008-4578 2012-06-26 16:02 2008-10-5 Show GitHub Exploit DB Packet Storm
239465 7.5 危険 ASP indir - Ayco Okul Portali の default.asp における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2008-4574 2012-06-26 16:02 2008-10-15 Show GitHub Exploit DB Packet Storm
239466 7.5 危険 ASP indir - MunzurSoft Wep Portal W3 の kategori.asp における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2008-4573 2012-06-26 16:02 2008-10-15 Show GitHub Exploit DB Packet Storm
239467 10 危険 CutePHP - CuteNews.ru の plugins/wacko/highlight/html.php における任意の PHP コードを実行される脆弱性 CWE-94
コード・インジェクション
CVE-2008-4557 2012-06-26 16:02 2008-10-14 Show GitHub Exploit DB Packet Storm
239468 8.5 危険 Graphviz - Graphviz の parser.y (lib/graph/parser.c) の push_subg 関数におけるスタックベースのバッファーオーバーフローの脆弱性 CWE-119
バッファエラー
CVE-2008-4555 2012-06-26 16:02 2008-10-14 Show GitHub Exploit DB Packet Storm
239469 9.3 危険 dvrstation - DVRHOST Web CMS OCX のpdvratl.dll におけるヒープベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー
CVE-2008-4547 2012-06-26 16:02 2008-10-14 Show GitHub Exploit DB Packet Storm
239470 7.5 危険 asicms - asiCMS alpha における PHP リモートファイルインクルージョンの脆弱性 CWE-94
コード・インジェクション
CVE-2008-4529 2012-06-26 16:02 2008-10-9 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:April 24, 2026, 4 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
981 7.3 HIGH
Local
- - During an internal security assessment, a potential vulnerability was discovered in Lenovo Software Fix, that during installation could allow a local authenticated user to execute code with elevated … CWE-427
 Uncontrolled Search Path Element
CVE-2026-4134 2026-04-18 00:09 2026-04-15 Show GitHub Exploit DB Packet Storm
982 6.6 MEDIUM
Local
- - During an internal security assessment, a potential vulnerability was discovered in Lenovo Software Fix, that during installation could allow a local authenticated user to perform an arbitrary file w… CWE-59
Link Following
CVE-2026-4135 2026-04-18 00:09 2026-04-15 Show GitHub Exploit DB Packet Storm
983 7.8 HIGH
Local
- - During an internal security assessment, a potential vulnerability was discovered in Lenovo Software Fix that could allow a local authenticated user to perform arbitrary code execution with elevated p… CWE-88
Argument Injection
CVE-2026-4145 2026-04-18 00:09 2026-04-15 Show GitHub Exploit DB Packet Storm
984 8.4 HIGH
Local
- - Command injection in the connect function in NietThijmen ShoppingCart 0.0.2 allows an attacker to execute arbitrary shell commands and achieve remote code execution via injection of malicious payload… CWE-77
Command Injection
CVE-2024-53412 2026-04-18 00:09 2026-04-16 Show GitHub Exploit DB Packet Storm
985 7.5 HIGH
Network
- - CentSDR commit e40795 was discovered to contain a stack overflow in the "Thread1" function. CWE-121
Stack-based Buffer Overflow
CVE-2026-30364 2026-04-18 00:09 2026-04-16 Show GitHub Exploit DB Packet Storm
986 - - - HP System Optimizer might potentially be vulnerable to escalation of privilege. HP is releasing an update to mitigate this potential vulnerability. CWE-250
 Execution with Unnecessary Privileges
CVE-2026-4667 2026-04-18 00:09 2026-04-16 Show GitHub Exploit DB Packet Storm
987 - - - Certain HP DeskJet All in One devices may be vulnerable to remote code execution caused by a buffer overflow when specially crafted Web Services for Devices (WSD) scan requests are improperly validat… CWE-121
Stack-based Buffer Overflow
CVE-2026-4682 2026-04-18 00:09 2026-04-16 Show GitHub Exploit DB Packet Storm
988 - - - In Grafana's alerting system, users with edit permissions for a contact point, specifically the permissions “alert.notifications:write” or “alert.notifications.receivers:test” that are granted as par… CWE-200
Information Exposure
CVE-2025-12141 2026-04-18 00:09 2026-04-16 Show GitHub Exploit DB Packet Storm
989 7.5 HIGH
Network
- - Nordic Semiconductor IronSide SE for nRF54H20 before 23.0.2+17 has an Algorithmic complexity issue. CWE-407
 Inefficient Algorithmic Complexity
CVE-2025-67841 2026-04-18 00:09 2026-04-16 Show GitHub Exploit DB Packet Storm
990 6.6 MEDIUM
Network
- - In Splunk Enterprise versions below 10.2.2, 10.0.5, 9.4.10, and 9.3.11, and Splunk Cloud Platform versions below 10.4.2603.0, 10.3.2512.6, 10.2.2510.10, 10.1.2507.20, 10.0.2503.13, and 9.3.2411.127, … CWE-176
 Improper Handling of Unicode Encoding
CVE-2026-20202 2026-04-18 00:09 2026-04-16 Show GitHub Exploit DB Packet Storm