Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Feb. 9, 2026, 12:59 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
239581 9.3 危険 friendly technologies - Friendly Technologies FriendlyPPPoE Client における任意のファイルを読まれる脆弱性 CWE-20
不適切な入力確認 		CVE-2008-4050 2012-06-26 16:02 2008-09-11 Show GitHub Exploit DB Packet Storm
239582 6.8 警告 friendly technologies - Friendly Technologies FriendlyPPPoE Client の fwRemoteCfg.dll における任意のプログラムを実行される脆弱性 CWE-20
不適切な入力確認 		CVE-2008-4049 2012-06-26 16:02 2008-09-11 Show GitHub Exploit DB Packet Storm
239583 6.8 警告 friendly technologies - Friendly Technologies FriendlyPPPoE Client の fwRemoteCfg.dll におけるヒープベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2008-4048 2012-06-26 16:02 2008-09-11 Show GitHub Exploit DB Packet Storm
239584 7.5 危険 elitecms - eliteCMS の index.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-4046 2012-06-26 16:02 2008-09-11 Show GitHub Exploit DB Packet Storm
239585 4.3 警告 @mail - @Mail におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2008-4045 2012-06-26 16:02 2008-09-11 Show GitHub Exploit DB Packet Storm
239586 7.5 危険 aj square - AJ Square aj-hyip の article/readarticle.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-4044 2012-06-26 16:02 2008-09-11 Show GitHub Exploit DB Packet Storm
239587 7.5 危険 aj square - AJ Square AJ HYIP Acme における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-4043 2012-06-26 16:02 2008-09-11 Show GitHub Exploit DB Packet Storm
239588 9.3 危険 gmanedit2 - gmanedit の open_man_file 関数におけるヒープベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2008-3971 2012-06-26 16:02 2008-09-10 Show GitHub Exploit DB Packet Storm
239589 7.5 危険 bitlbee - BitlBee における既存のアカウントを "上書き" される脆弱性 CWE-264
CWE-399
CVE-2008-3969 2012-06-26 16:02 2008-09-10 Show GitHub Exploit DB Packet Storm
239590 7.5 危険 AlstraSoft - AlstraSoft Forum Pay Per Post Exchange の index.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-3954 2012-06-26 16:02 2008-09-10 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:April 22, 2026, 4 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
255891 - - - Dell Dock Firmware and Dell Client Platform contain an Improper Link Resolution vulnerability during installation resulting in arbitrary folder deletion, which could lead to Privilege Escalation or D… CWE-59
Link Following 		CVE-2023-43078 2024-08-28 15:15 2024-08-28 Show GitHub Exploit DB Packet Storm
255892 5.3 MEDIUM
Network 		- - The Mollie Payments for WooCommerce plugin for WordPress is vulnerable to information exposure in all versions up to, and including, 7.7.0. This is due to the error reporting being enabled by default… CWE-200
Information Exposure 		CVE-2024-6448 2024-08-28 13:15 2024-08-28 Show GitHub Exploit DB Packet Storm
255893 5.3 MEDIUM
Network 		- - The Relevanssi Live Ajax Search plugin for WordPress is vulnerable to argument injection in all versions up to, and including, 2.4. This is due to insufficient validation of input supplied via POST d… - CVE-2024-7573 2024-08-28 12:15 2024-08-28 Show GitHub Exploit DB Packet Storm
255894 9.8 CRITICAL
Network 		- - The Ultimate Store Kit Elementor Addons, Woocommerce Builder, EDD Builder, Elementor Store Builder, Product Grid, Product Table, Woocommerce Slider plugin is vulnerable to PHP Object Injection via de… - CVE-2024-8030 2024-08-28 12:15 2024-08-28 Show GitHub Exploit DB Packet Storm
255895 - - - A Reflected Cross Site Scripting (XSS) vulnerability was found in "/music/controller.php?page=test" in Kashipara Music Management System v1.0. This vulnerability allows remote attackers to execute ar… - CVE-2024-42789 2024-08-28 05:35 2024-08-27 Show GitHub Exploit DB Packet Storm
255896 - - - A SQL Injection vulnerability exists in the Graph Template component in Centreon Web 24.04.x before 24.04.3, 23.10.x before 23.10.13, 23.04.x before 23.04.19, and 22.10.x before 22.10.23. - CVE-2024-33854 2024-08-28 05:35 2024-08-24 Show GitHub Exploit DB Packet Storm
255897 4.3 MEDIUM
Network 		google chrome Inappropriate implementation in WebApp Installs in Google Chrome on Windows prior to 128.0.6613.84 allowed an attacker who convinced a user to install a malicious application to perform UI spoofing v… NVD-CWE-noinfo
CVE-2024-8033 2024-08-28 04:39 2024-08-22 Show GitHub Exploit DB Packet Storm
255898 - progress whatsup_gold Buffer overflow in MIBEXTRA.EXE in Ipswitch WhatsUp Gold 11 allows attackers to cause a denial of service (application crash) or execute arbitrary code via a long MIB filename argument. NOTE: If the… NVD-CWE-Other
CVE-2007-2602 2024-08-28 02:48 2007-05-11 Show GitHub Exploit DB Packet Storm
255899 - progress whatsup_gold Buffer overflow in the _maincfgret.cgi script for Ipswitch WhatsUp Gold before 8.03 Hotfix 1 allows remote attackers to execute arbitrary code via a long instancename parameter. NVD-CWE-Other
CVE-2004-0798 2024-08-28 02:48 2004-10-20 Show GitHub Exploit DB Packet Storm
255900 - ipswitch
progress 		whatsup_gold The HTTP daemon in Ipswitch WhatsUp Gold 8.03 and 8.03 Hotfix 1 allows remote attackers to cause a denial of service (server crash) via a GET request containing an MS-DOS device name, as demonstrated… NVD-CWE-Other
CVE-2004-0799 2024-08-28 02:48 2004-10-20 Show GitHub Exploit DB Packet Storm