Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Feb. 9, 2026, 12:59 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
239571 10 危険 flip4mac - Flip4Mac WMV の Importer における詳細不明な脆弱性 CWE-noinfo
情報不足 		CVE-2008-4095 2012-06-26 16:02 2008-09-16 Show GitHub Exploit DB Packet Storm
239572 7.5 危険 couponscript - PHP Coupon Script の index.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-4090 2012-06-26 16:02 2008-09-15 Show GitHub Exploit DB Packet Storm
239573 6.8 警告 acoustica - Acoustica Beatcraft におけるスタックベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2008-4087 2012-06-26 16:02 2008-09-15 Show GitHub Exploit DB Packet Storm
239574 3.5 注意 brim-project - Brim の Bookmarks プラグインにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2008-4083 2012-06-26 16:02 2008-09-15 Show GitHub Exploit DB Packet Storm
239575 4.6 警告 brim-project - Brim の Tasks プラグインにおける SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-4082 2012-06-26 16:02 2008-09-15 Show GitHub Exploit DB Packet Storm
239576 6.5 警告 LedgerSMB
dws systems inc.
sql-ledger		 - LSMB などにおける SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-4078 2012-06-26 16:02 2008-09-15 Show GitHub Exploit DB Packet Storm
239577 7.8 危険 LedgerSMB
dws systems inc.
sql-ledger		 - LSMB の CGI スクリプトにおけるサービス運用妨害 (DoS) の脆弱性 CWE-399
リソース管理の問題 		CVE-2008-4077 2012-06-26 16:02 2008-08-26 Show GitHub Exploit DB Packet Storm
239578 6.8 警告 Dino - D-iscussion Board の index.php におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2008-4075 2012-06-26 16:02 2008-09-15 Show GitHub Exploit DB Packet Storm
239579 5 警告 マイクロソフト
アドビシステムズ		 - Adobe Acrobat の特定の ActiveX コントロールにおけるサービス運用妨害 (DoS) の脆弱性 CWE-20
不適切な入力確認 		CVE-2008-4071 2012-06-26 16:02 2008-09-15 Show GitHub Exploit DB Packet Storm
239580 4.3 警告 XOOPS
有限会社ブルームーン		 - XOOPS 用の Bluemoon PopnupBLOG モジュールの index.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2008-4053 2012-06-26 16:02 2008-09-11 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:April 22, 2026, 4 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
257131 - - - 1Password 8 before 8.10.36 for macOS allows local attackers to exfiltrate vault items because XPC inter-process communication validation is insufficient. - CVE-2024-42219 2024-08-8 00:17 2024-08-7 Show GitHub Exploit DB Packet Storm
257132 - - - There are vulnerabilities in the Soft AP Daemon Service which could allow a threat actor to execute an unauthenticated RCE attack. Successful exploitation could allow an attacker to execute arbitrary… - CVE-2024-42393 2024-08-8 00:17 2024-08-7 Show GitHub Exploit DB Packet Storm
257133 - - - An issue in Koha ILS 23.05 and before allows a remote attacker to execute arbitrary code via a crafted script to the format parameter. - CVE-2024-28739 2024-08-8 00:17 2024-08-7 Show GitHub Exploit DB Packet Storm
257134 - - - matrix-react-sdk is a react-based SDK for inserting a Matrix chat/voip client into a web page. A malicious homeserver could manipulate a user's account data to cause the client to enable URL preview… - CVE-2024-42347 2024-08-8 00:17 2024-08-7 Show GitHub Exploit DB Packet Storm
257135 - - - Qwik is a performance focused javascript framework. A potential mutation XSS vulnerability exists in Qwik for versions up to but not including 1.6.0. Qwik improperly escapes HTML on server-side rende… - CVE-2024-41677 2024-08-8 00:17 2024-08-7 Show GitHub Exploit DB Packet Storm
257136 - - - A crafted DPA file could force Delta Electronics DIAScreen to overflow a stack-based buffer, which could allow an attacker to execute arbitrary code. - CVE-2024-7502 2024-08-8 00:17 2024-08-7 Show GitHub Exploit DB Packet Storm
257137 - - - PDFio is a simple C library for reading and writing PDF files. There is a denial of service (DOS) vulnerability in the TTF parser. Maliciously crafted TTF files can cause the program to utilize 100% … - CVE-2024-42358 2024-08-8 00:17 2024-08-7 Show GitHub Exploit DB Packet Storm
257138 - spip spip PHP remote file inclusion vulnerability in inc-calcul.php3 in SPIP 1.7.2 allows remote attackers to execute arbitrary PHP code via a URL in the squelette_cache parameter, a different vector than CVE-… CWE-94
Code Injection 		CVE-2007-4525 2024-08-8 00:15 2007-08-25 Show GitHub Exploit DB Packet Storm
257139 - jelsoft vbulletin Multiple cross-site scripting (XSS) vulnerabilities in vBulletin 3.6.8 allow remote attackers to inject arbitrary web code or HTML via the (1) s parameter to index.php, and the (2) q parameter to (a)… NVD-CWE-Other
CVE-2007-4453 2024-08-8 00:15 2007-08-22 Show GitHub Exploit DB Packet Storm
257140 - jemjabella bellabook captcha.php in BellaBook (aka BellaBuffs) allows remote attackers to obtain administrative privileges by sending the admin's username (admin_name) in a pheap_login cookie. NOTE: the vendor disputes … NVD-CWE-Other
CVE-2007-4416 2024-08-8 00:15 2007-08-19 Show GitHub Exploit DB Packet Storm