Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 19, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
239841 7.5 危険 mr. cgi guy - Mr. CGI Guy Hot Links SQL-PHP の report.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-4378 2012-09-25 17:17 2008-10-1 Show GitHub Exploit DB Packet Storm
239842 7.5 危険 livetvscript - Live TV Script の index.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-4376 2012-09-25 17:17 2008-10-1 Show GitHub Exploit DB Packet Storm
239843 7.5 危険 parsagostar - ParsaGostar ParsaWeb CMS の default.aspx における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-4364 2012-09-25 17:17 2008-09-30 Show GitHub Exploit DB Packet Storm
239844 7.8 危険 LIGHTTPD - lighttpd の mod_userdir におけるアクセス制限を回避される脆弱性 CWE-200
情報漏えい 		CVE-2008-4360 2012-09-25 17:17 2008-10-3 Show GitHub Exploit DB Packet Storm
239845 7.5 危険 LIGHTTPD - lighttpd におけるデータを変更される脆弱性 CWE-200
情報漏えい 		CVE-2008-4359 2012-09-25 17:17 2008-10-3 Show GitHub Exploit DB Packet Storm
239846 7.5 危険 KASSELER CMS - Kasseler CMS における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-4356 2012-09-25 17:17 2008-09-30 Show GitHub Exploit DB Packet Storm
239847 7.5 危険 NetArt Media - NetArt Media iBoutique の製品モジュールにおける SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-4354 2012-09-25 17:17 2008-09-30 Show GitHub Exploit DB Packet Storm
239848 7.5 危険 linkarity - Linkarity の link.php モジュールにおける SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-4353 2012-09-25 17:17 2008-09-30 Show GitHub Exploit DB Packet Storm
239849 7.5 危険 outshine - PHPortfolio の include/urights.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-4348 2012-09-25 17:17 2008-09-30 Show GitHub Exploit DB Packet Storm
239850 7.5 危険 myblog - MyBlog の add.php における管理者のアクセス権を取得される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2008-4341 2012-09-25 17:17 2008-09-30 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 20, 2026, 4:01 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
268141 7.2 HIGH
Network 		sophos web_appliance The Sophos Web Appliance Remote / Secure Web Gateway server (version 4.2.1.3) is vulnerable to a Remote Command Injection vulnerability in its web administrative interface. These vulnerabilities occu… CWE-77
Command Injection 		CVE-2016-9554 2024-11-21 12:01 2017-01-28 Show GitHub Exploit DB Packet Storm
268142 7.2 HIGH
Network 		sophos web_appliance The Sophos Web Appliance (version 4.2.1.3) is vulnerable to two Remote Command Injection vulnerabilities affecting its web administrative interface. These vulnerabilities occur in the MgrReport.php (… CWE-77
Command Injection 		CVE-2016-9553 2024-11-21 12:01 2017-01-28 Show GitHub Exploit DB Packet Storm
268143 9.8 CRITICAL
Network 		gstreamer
redhat
debian 		gstreamer
enterprise_linux_hpc_node
enterprise_linux_desktop
enterprise_linux_server
enterprise_linux_workstation
debian_linux 		Heap-based buffer overflow in the flx_decode_delta_fli function in gst/flx/gstflxdec.c in the FLIC decoder in GStreamer before 1.10.2 allows remote attackers to execute arbitrary code or cause a deni… CWE-119
Incorrect Access of Indexable Resource ('Range Error')  		CVE-2016-9636 2024-11-21 12:01 2017-01-28 Show GitHub Exploit DB Packet Storm
268144 9.8 CRITICAL
Network 		gstreamer
redhat
debian 		gstreamer
enterprise_linux_hpc_node
enterprise_linux_desktop
enterprise_linux_server
enterprise_linux_workstation
debian_linux 		Heap-based buffer overflow in the flx_decode_delta_fli function in gst/flx/gstflxdec.c in the FLIC decoder in GStreamer before 1.10.2 allows remote attackers to execute arbitrary code or cause a deni… CWE-119
Incorrect Access of Indexable Resource ('Range Error')  		CVE-2016-9635 2024-11-21 12:01 2017-01-28 Show GitHub Exploit DB Packet Storm
268145 9.8 CRITICAL
Network 		gstreamer
redhat
debian 		gstreamer
enterprise_linux_hpc_node
enterprise_linux_desktop
enterprise_linux_server
enterprise_linux_workstation
debian_linux 		Heap-based buffer overflow in the flx_decode_delta_fli function in gst/flx/gstflxdec.c in the FLIC decoder in GStreamer before 1.10.2 allows remote attackers to execute arbitrary code or cause a deni… CWE-119
Incorrect Access of Indexable Resource ('Range Error')  		CVE-2016-9634 2024-11-21 12:01 2017-01-28 Show GitHub Exploit DB Packet Storm
268146 7.8 HIGH
Local 		libtiff
opensuse
debian 		libtiff
opensuse
debian_linux 		The t2p_readwrite_pdf_image_tile function in LibTIFF allows remote attackers to cause a denial of service (out-of-bounds write and crash) or possibly execute arbitrary code via a JPEG file with a TIF… CWE-787
 Out-of-bounds Write 		CVE-2016-9453 2024-11-21 12:01 2017-01-28 Show GitHub Exploit DB Packet Storm
268147 7.5 HIGH
Network 		libtiff
opensuse 		libtiff
opensuse 		The TIFFFetchNormalTag function in LibTiff 4.0.6 allows remote attackers to cause a denial of service (NULL pointer dereference and crash) by setting the tags TIFF_SETGET_C16ASCII or TIFF_SETGET_C32_… CWE-476
 NULL Pointer Dereference 		CVE-2016-9448 2024-11-21 12:01 2017-01-28 Show GitHub Exploit DB Packet Storm
268148 7.8 HIGH
Local 		gstreamer_project gstreamer The ROM mappings in the NSF decoder in gstreamer 0.10.x allow remote attackers to cause a denial of service (out-of-bounds read or write) and possibly execute arbitrary code via a crafted NSF music f… CWE-125
CWE-787
Out-of-bounds Read
 Out-of-bounds Write 		CVE-2016-9447 2024-11-21 12:01 2017-01-24 Show GitHub Exploit DB Packet Storm
268149 7.5 HIGH
Network 		gstreamer_project
redhat
fedoraproject 		gstreamer
enterprise_linux_desktop
enterprise_linux_workstation
enterprise_linux_server
enterprise_linux_server_aus
enterprise_linux_eus
enterprise_linux_server_tus
fedora 		The vmnc decoder in the gstreamer does not initialize the render canvas, which allows remote attackers to obtain sensitive information as demonstrated by thumbnailing a simple 1 frame vmnc movie that… CWE-665
 Improper Initialization 		CVE-2016-9446 2024-11-21 12:01 2017-01-24 Show GitHub Exploit DB Packet Storm
268150 7.5 HIGH
Network 		gstreamer_project gstreamer Integer overflow in the vmnc decoder in the gstreamer allows remote attackers to cause a denial of service (crash) via large width and height values, which triggers a buffer overflow. CWE-190
 Integer Overflow or Wraparound 		CVE-2016-9445 2024-11-21 12:01 2017-01-24 Show GitHub Exploit DB Packet Storm