Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Feb. 9, 2026, 12:59 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
241131 7.5 危険 ASP indir - Dora Emlak の default.asp における SQL インジェクションの脆弱性 - CVE-2007-3990 2012-06-26 15:54 2007-07-25 Show GitHub Exploit DB Packet Storm
241132 4.3 警告 ASP indir - Dora Emlak の default.asp におけるクロスサイトスクリプティングの脆弱性 - CVE-2007-3989 2012-06-26 15:54 2007-07-25 Show GitHub Exploit DB Packet Storm
241133 5 警告 datadynamics - ActiveReports Professional Edition の Data Dynamics DDActiveReports2.ActiveReport.2 ActiveX コントロールにおける絶対パストラバーサルの脆弱性 - CVE-2007-3983 2012-06-26 15:54 2007-07-25 Show GitHub Exploit DB Packet Storm
241134 5 警告 datadynamics - Data Dynamics ActiveReport ActiveX コントロールにおける絶対パストラバーサルの脆弱性 - CVE-2007-3982 2012-06-26 15:54 2007-07-25 Show GitHub Exploit DB Packet Storm
241135 4.3 警告 bwired - bwired におけるセッションをハイジャックされる脆弱性 CWE-255
証明書・パスワード管理 		CVE-2007-3978 2012-06-26 15:54 2007-07-25 Show GitHub Exploit DB Packet Storm
241136 4.3 警告 bwired - bwired におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2007-3977 2012-06-26 15:54 2007-07-25 Show GitHub Exploit DB Packet Storm
241137 7.5 危険 bwired - bwired の index.php における SQL インジェクションの脆弱性 - CVE-2007-3976 2012-06-26 15:54 2007-07-25 Show GitHub Exploit DB Packet Storm
241138 4.3 警告 elite forum - Elite Forum の index.php におけるクロスサイトスクリプティングの脆弱性 - CVE-2007-3975 2012-06-26 15:54 2007-07-25 Show GitHub Exploit DB Packet Storm
241139 5 警告 ESET - ESET NOD32 Antivirus におけるサービス運用妨害 (DoS) の脆弱性 - CVE-2007-3972 2012-06-26 15:54 2007-07-25 Show GitHub Exploit DB Packet Storm
241140 5 警告 ESET - ESET NOD32 Antivirus における整数オーバーフローの脆弱性 - CVE-2007-3971 2012-06-26 15:54 2007-07-25 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:April 19, 2026, 4:09 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
272571 - ruby-lang ruby httputils.rb in WEBrick in Ruby 1.8.1 and 1.8.5, as used in Red Hat Enterprise Linux 4 and 5, allows remote attackers to cause a denial of service (CPU consumption) via a crafted HTTP request. NOTE:… CWE-399
 Resource Management Errors 		CVE-2008-4310 2023-11-7 11:02 2008-12-9 Show GitHub Exploit DB Packet Storm
272572 - ubuntu
linux 		linux_kernel Multiple buffer overflows in the ndiswrapper module 1.53 for the Linux kernel 2.6 allow remote attackers to execute arbitrary code by sending packets over a local wireless network that specify long E… CWE-119
Incorrect Access of Indexable Resource ('Range Error')  		CVE-2008-4395 2023-11-7 11:02 2008-11-7 Show GitHub Exploit DB Packet Storm
272573 - linux
debian
canonical 		linux_kernel
debian_linux
ubuntu_linux 		The hfsplus_block_allocate function in fs/hfsplus/bitmap.c in the Linux kernel before 2.6.28-rc1 does not check a certain return value from the read_mapping_page function before calling kmap, which a… CWE-20
 Improper Input Validation  		CVE-2008-4934 2023-11-7 11:02 2008-11-6 Show GitHub Exploit DB Packet Storm
272574 - linux linux_kernel Buffer overflow in the hfsplus_find_cat function in fs/hfsplus/catalog.c in the Linux kernel before 2.6.28-rc1 allows attackers to cause a denial of service (memory corruption or system crash) via an… CWE-119
Incorrect Access of Indexable Resource ('Range Error')  		CVE-2008-4933 2023-11-7 11:02 2008-11-6 Show GitHub Exploit DB Packet Storm
272575 - - - Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: None. Reason: this candidate was based on an incorrect claim regarding a directory issue in Agavi. The vendor has disputed the issue … - CVE-2008-4920 2023-11-7 11:02 2008-11-5 Show GitHub Exploit DB Packet Storm
272576 - net-snmp net-snmp Integer overflow in the netsnmp_create_subtree_cache function in agent/snmp_agent.c in net-snmp 5.4 before 5.4.2.1, 5.3 before 5.3.2.3, and 5.2 before 5.2.5.1 allows remote attackers to cause a denia… CWE-20
 Improper Input Validation  		CVE-2008-4309 2023-11-7 11:02 2008-11-1 Show GitHub Exploit DB Packet Storm
272577 - videolan vlc_media_player Multiple integer overflows in ty.c in the TY demux plugin (aka the TiVo demuxer) in VideoLAN VLC media player, probably 0.9.4, might allow remote attackers to execute arbitrary code via a crafted .ty… CWE-189
Numeric Errors 		CVE-2008-4686 2023-11-7 11:02 2008-10-23 Show GitHub Exploit DB Packet Storm
272578 - videolan vlc_media_player Stack-based buffer overflow in the parse_master function in the Ty demux plugin (modules/demux/ty.c) in VLC Media Player 0.9.0 through 0.9.4 allows remote attackers to execute arbitrary code via a Ti… CWE-119
Incorrect Access of Indexable Resource ('Range Error')  		CVE-2008-4654 2023-11-7 11:02 2008-10-22 Show GitHub Exploit DB Packet Storm
272579 - linux linux_kernel The Stream Control Transmission Protocol (sctp) implementation in the Linux kernel before 2.6.27 does not properly handle a protocol violation in which a parameter has an invalid length, which allows… CWE-20
NVD-CWE-noinfo
 Improper Input Validation  		CVE-2008-4618 2023-11-7 11:02 2008-10-21 Show GitHub Exploit DB Packet Storm
272580 - linux linux_kernel The do_splice_from function in fs/splice.c in the Linux kernel before 2.6.27 does not reject file descriptors that have the O_APPEND flag set, which allows local users to bypass append mode and make … CWE-264
NVD-CWE-noinfo
Permissions, Privileges, and Access Controls 		CVE-2008-4554 2023-11-7 11:02 2008-10-16 Show GitHub Exploit DB Packet Storm