Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":Feb. 9, 2026, 12:59 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
239981	4.3	警告	ASP indir	-	Angelo-Emlak の hpz/admin/Default.asp におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2008-2048	2012-06-26 16:02	2008-05-1	Show	GitHub Exploit DB Packet Storm

239982	7.5	危険	ASP indir	-	Angelo-Emlak における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2008-2047	2012-06-26 16:02	2008-05-1	Show	GitHub Exploit DB Packet Storm

239983	4.3	警告	cPanel	-	cPanel におけるクロスサイトリクエストフォージェリの脆弱性	CWE-352 同一生成元ポリシー違反	CVE-2008-2043	2012-06-26 16:02	2008-05-1	Show	GitHub Exploit DB Packet Storm

239984	10	危険	EGroupware	-	eGroupWare における詳細不明な脆弱性	CWE-94 コード・インジェクション	CVE-2008-2041	2012-06-26 16:02	2008-04-30	Show	GitHub Exploit DB Packet Storm

239985	3.5	注意	editeurscripts	-	EditeurScripts EsContacts におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2008-2037	2012-06-26 16:02	2008-04-30	Show	GitHub Exploit DB Packet Storm

239986	7.5	危険	dream4	-	dream4 Koobi Pro の index.php における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2008-2036	2012-06-26 16:02	2008-04-30	Show	GitHub Exploit DB Packet Storm

239987	5	警告	acritum	-	Acritum Femitter Server の FTP サービスにおけるサービス運用妨害 (DoS) の脆弱性	CWE-20 不適切な入力確認	CVE-2008-2032	2012-06-26 16:02	2008-04-30	Show	GitHub Exploit DB Packet Storm

239988	4.3	警告	F5 Networks	-	F5 FirePass 4100 SSL VPN の installControl.php3 におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2008-2030	2012-06-26 16:02	2008-04-30	Show	GitHub Exploit DB Packet Storm

239989	6.8	警告	e107.org webze opendb labgab TorrentFlux PHPNUKE my123tkshop phpmybittorrent	-	Francisco Burzi PHP-Nuke などの製品で使用される CAPTCHA における CAPTCHA 検証を通過する脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2008-2020	2012-06-26 16:02	2008-04-29	Show	GitHub Exploit DB Packet Storm

239990	7.5	危険	chilkat software	-	Chilek Content Management System におけるディレクトリトラバーサルの脆弱性	CWE-22 パス・トラバーサル	CVE-2008-2017	2012-06-26 16:02	2008-04-29	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:April 26, 2026, 4:08 a.m.

No	CVSS	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
292171	-	winasm	winasm_studio	Buffer overflow in WinAsm Studio 5.1.5.0 allows user-assisted remote attackers to execute arbitrary code via a crafted project (.wap) file.	CWE-119 Incorrect Access of Indexable Resource ('Range Error')	CVE-2009-1040	2017-09-29 10:34	2009-03-21	Show	GitHub Exploit DB Packet Storm

292172	-	freebsd	freebsd	The ktimer feature (sys/kern/kern_time.c) in FreeBSD 7.0, 7.1, and 7.2 allows local users to overwrite arbitrary kernel memory via an out-of-bounds timer value.	CWE-119 Incorrect Access of Indexable Resource ('Range Error')	CVE-2009-1041	2017-09-29 10:34	2009-03-26	Show	GitHub Exploit DB Packet Storm

292173	-	videolan	vlc_media_player	requests/status.xml in VLC 0.9.8a allows remote attackers to cause a denial of service (stack consumption and crash) via a long input argument in an in_play action.	CWE-20 Improper Input Validation	CVE-2009-1045	2017-09-29 10:34	2009-03-24	Show	GitHub Exploit DB Packet Storm

292174	-	kamads	bloginator	SQL injection vulnerability in articleCall.php in Bloginator 1A allows remote attackers to execute arbitrary SQL commands via the id parameter.	CWE-89 SQL Injection	CVE-2009-1049	2017-09-29 10:34	2009-03-24	Show	GitHub Exploit DB Packet Storm

292175	-	kamads	bloginator	Bloginator 1A allows remote attackers to bypass authentication and gain administrative access by setting the identifyYourself cookie.	CWE-287 Improper Authentication	CVE-2009-1050	2017-09-29 10:34	2009-03-24	Show	GitHub Exploit DB Packet Storm

292176	-	microsmarts	zipitfast\!	MicroSmarts Enterprise ZipItFast! 3.0 allows remote attackers to execute arbitrary code via a crafted .zip file that triggers memory corruption, related to a "format string buffer overflow." NOTE: CV…	CWE-119 Incorrect Access of Indexable Resource ('Range Error')	CVE-2009-1057	2017-09-29 10:34	2009-03-24	Show	GitHub Exploit DB Packet Storm

292177	-	zipgenius	zipgenius	Stack-based buffer overflow in ZipGenius might allow remote attackers to execute arbitrary code via a crafted .zip file that triggers an SEH overwrite. NOTE: it is possible that this overlaps CVE-20…	CWE-119 Incorrect Access of Indexable Resource ('Range Error')	CVE-2009-1058	2017-09-29 10:34	2009-03-24	Show	GitHub Exploit DB Packet Storm

292178	-	powerzip	powerzip	Stack-based buffer overflow in Trident PowerZip 7.2 might allow remote attackers to execute arbitrary code via a crafted .zip file. NOTE: CVE has not investigated whether the specified file.zip file…	CWE-119 Incorrect Access of Indexable Resource ('Range Error')	CVE-2009-1059	2017-09-29 10:34	2009-03-24	Show	GitHub Exploit DB Packet Storm

292179	-	brother_soft	exescope	Buffer overflow in eXeScope 6.50 allows user-assisted remote attackers to execute arbitrary code via a crafted executable (.exe) file.	CWE-119 Incorrect Access of Indexable Resource ('Range Error')	CVE-2009-1063	2017-09-29 10:34	2009-03-26	Show	GitHub Exploit DB Packet Storm

292180	-	orbit_downloader orbitdownloader	orbit_downloader	Argument injection vulnerability in orbitmxt.dll 2.1.0.2 in the Orbit Downloader 2.8.7 and earlier ActiveX control allows remote attackers to overwrite arbitrary files via whitespace and a command-li…	CWE-94 Code Injection	CVE-2009-1064	2017-09-29 10:34	2009-03-26	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed