Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Feb. 9, 2026, 12:59 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
239821 5 警告 AlstraSoft - AlstraSoft AskMe Pro における重要な情報を取得される脆弱性 CWE-255
証明書・パスワード管理 		CVE-2008-2857 2012-06-26 16:02 2008-06-25 Show GitHub Exploit DB Packet Storm
239822 7.5 危険 easy webstore - Easy Webstore の index.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-2853 2012-06-26 16:02 2008-06-25 Show GitHub Exploit DB Packet Storm
239823 7.5 危険 boatscripts - BoatScripts Classifieds の index.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-2846 2012-06-26 16:02 2008-06-25 Show GitHub Exploit DB Packet Storm
239824 7.5 危険 carscripts - Carscripts Classifieds の index.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-2844 2012-06-26 16:02 2008-06-25 Show GitHub Exploit DB Packet Storm
239825 7.5 危険 doitlive - doITLive CMS における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-2843 2012-06-26 16:02 2008-06-25 Show GitHub Exploit DB Packet Storm
239826 4.3 警告 doitlive - doITLive CMS の edit/showmedia.asp におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2008-2842 2012-06-26 16:02 2008-06-25 Show GitHub Exploit DB Packet Storm
239827 6.8 警告 exerocms - Exero CMS におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2008-2840 2012-06-26 16:02 2008-06-24 Show GitHub Exploit DB Packet Storm
239828 7.5 危険 cms.brdconcept - CMS-BRD の index.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-2837 2012-06-26 16:02 2008-06-24 Show GitHub Exploit DB Packet Storm
239829 10 危険 fullrevolution - Full Revolution aspWebCalendar の calendar_admin.asp における任意のコードを実行される脆弱性 CWE-94
コード・インジェクション 		CVE-2008-2832 2012-06-26 16:02 2008-06-24 Show GitHub Exploit DB Packet Storm
239830 9.3 危険 3dftp - 3D-FTP Client の FTP クライアントにおけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2008-2822 2012-06-26 16:02 2008-06-23 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:April 20, 2026, 4:09 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
256631 - - - In the Linux kernel, the following vulnerability has been resolved: f2fs: assign CURSEG_ALL_DATA_ATGC if blkaddr is valid mkdir /mnt/test/comp f2fs_io setflags compression /mnt/test/comp dd if=/dev… - CVE-2024-42273 2024-08-19 21:59 2024-08-17 Show GitHub Exploit DB Packet Storm
256632 - - - In the Linux kernel, the following vulnerability has been resolved: drm/v3d: Validate passed in drm syncobj handles in the performance extension If userspace provides an unknown or invalid handle a… - CVE-2024-42260 2024-08-19 21:59 2024-08-17 Show GitHub Exploit DB Packet Storm
256633 - - - In the Linux kernel, the following vulnerability has been resolved: btrfs: make cow_file_range_inline() honor locked_page on error The btrfs buffered write path runs through __extent_writepage() wh… - CVE-2024-42266 2024-08-19 21:59 2024-08-17 Show GitHub Exploit DB Packet Storm
256634 - - - Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none. - CVE-2024-42675 2024-08-19 18:15 2024-08-19 Show GitHub Exploit DB Packet Storm
256635 - php
canonical 		php
ubuntu_linux 		The soap extension in PHP calls php_rand_r with an uninitialized seed variable, which has unknown impact and attack vectors, a related issue to the mcrypt_create_iv issue covered by CVE-2007-2727. No… NVD-CWE-noinfo
CVE-2007-2728 2024-08-17 06:15 2007-05-17 Show GitHub Exploit DB Packet Storm
256636 - asterisk
sangoma 		opensource
open_source
asterisk
appliance_s800i 		The IAX2 protocol implementation in Asterisk Open Source 1.2.x before 1.2.35, 1.4.x before 1.4.26.2, 1.6.0.x before 1.6.0.15, and 1.6.1.x before 1.6.1.6; Business Edition B.x.x before B.2.5.10, C.2.x… CWE-119
Incorrect Access of Indexable Resource ('Range Error')  		CVE-2009-2346 2024-08-15 21:44 2009-09-9 Show GitHub Exploit DB Packet Storm
256637 6.1 MEDIUM
Network 		10web form_maker Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in 10Web Form Builder Team Form Maker by 10Web allows Reflected XSS.This issue affects Form M… CWE-79
Cross-site Scripting 		CVE-2024-43220 2024-08-13 21:58 2024-08-13 Show GitHub Exploit DB Packet Storm
256638 7.8 HIGH
Local 		dell peripheral_manager Dell Peripheral Manager, versions prior to 1.7.6, contain an uncontrolled search path element vulnerability. An attacker could potentially exploit this vulnerability through preloading malicious DLL … CWE-427
 Uncontrolled Search Path Element 		CVE-2024-37142 2024-08-9 06:17 2024-07-31 Show GitHub Exploit DB Packet Storm
256639 7.8 HIGH
Local 		dell peripheral_manager Dell Peripheral Manager, versions prior to 1.7.6, contain an uncontrolled search path element vulnerability. An attacker could potentially exploit this vulnerability through preloading malicious DLL… CWE-427
 Uncontrolled Search Path Element 		CVE-2024-32857 2024-08-9 06:10 2024-07-31 Show GitHub Exploit DB Packet Storm
256640 7.5 HIGH
Network 		janobe school_attendence_monitoring_system
school_event_management_system
paypal
credit_card
debit_card_payment 		SQL injection vulnerability in PayPal, Credit Card and Debit Card Payment affecting version 1.0. An attacker could exploit this vulnerability by sending a specially crafted query to the server and re… CWE-89
SQL Injection 		CVE-2024-33959 2024-08-9 06:02 2024-08-6 Show GitHub Exploit DB Packet Storm