Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 5, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
241351	7.5	危険	bpowerhouse	-	Mini Blog の index.php におけるディレクトリトラバーサルの脆弱性	CWE-22 パス・トラバーサル	CVE-2008-5594	2012-06-26 16:03	2008-12-16	Show	GitHub Exploit DB Packet Storm

241352	7.5	危険	bpowerhouse	-	Mini CMS の index.php におけるディレクトリトラバーサルの脆弱性	CWE-22 パス・トラバーサル	CVE-2008-5593	2012-06-26 16:03	2008-12-16	Show	GitHub Exploit DB Packet Storm

241353	6.8	警告	check up	-	Check Up New Generation の findoffice.php における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2008-5586	2012-06-26 16:03	2008-12-16	Show	GitHub Exploit DB Packet Storm

241354	7.5	危険	adcomplete	-	Poll Pro のログイン機能における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2008-5573	2012-06-26 16:03	2008-12-15	Show	GitHub Exploit DB Packet Storm

241355	5	警告	dotnetindex	-	Professional Download Assistant におけるデータベースファイルをダウンロードされる脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2008-5572	2012-06-26 16:03	2008-12-15	Show	GitHub Exploit DB Packet Storm

241356	7.5	危険	dotnetindex	-	Professional Download Assistant の admin/login.asp における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2008-5571	2012-06-26 16:03	2008-12-15	Show	GitHub Exploit DB Packet Storm

241357	7.5	危険	Activewebsoftwares	-	Active eWebquiz の start.asp における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2008-5631	2012-06-26 16:03	2008-12-17	Show	GitHub Exploit DB Packet Storm

241358	7.5	危険	Activewebsoftwares	-	Active Trade の account.asp における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2008-5627	2012-06-26 16:03	2008-12-17	Show	GitHub Exploit DB Packet Storm

241359	4	警告	dxmsoft	-	XM Easy Personal FTP Server におけるサービス運用妨害 (DoS) の脆弱性	CWE-399 リソース管理の問題	CVE-2008-5626	2012-06-26 16:03	2008-12-17	Show	GitHub Exploit DB Packet Storm

241360	5	警告	aspapps	-	ASP AutoDealer におけるデータベースをダウンロードされる脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2008-5608	2012-06-26 16:03	2008-12-16	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 6, 2026, 4:08 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
267721	7.5	HIGH Network	netgear	d3600_firmware d6000_firmware	The password-recovery feature on NETGEAR D3600 devices with firmware 1.0.0.49 and D6000 devices with firmware 1.0.0.49 and earlier allows remote attackers to discover the cleartext administrator pass…	CWE-255 CWE-200 Credentials Management Information Exposure	CVE-2015-8289	2024-11-21 11:38	2016-06-20	Show	GitHub Exploit DB Packet Storm

267722	5.9	MEDIUM Network	netgear	d3600_firmware d6000_firmware	NETGEAR D3600 devices with firmware 1.0.0.49 and D6000 devices with firmware 1.0.0.49 and earlier use the same hardcoded private key across different customers' installations, which allows remote att…	NVD-CWE-Other	CVE-2015-8288	2024-11-21 11:38	2016-06-20	Show	GitHub Exploit DB Packet Storm

267723	7.5	HIGH Network	idera	uptime_infrastructure_monitor	The up.time agent in Idera Uptime Infrastructure Monitor 7.5 and 7.6 on Linux allows remote attackers to read arbitrary files via unspecified vectors.	CWE-200 Information Exposure	CVE-2015-8268	2024-11-21 11:38	2016-06-10	Show	GitHub Exploit DB Packet Storm

267724	8.8	HIGH Network	broadcom	symantec_data_center_security_server symantec_critical_system_protection symantec_embedded_security_critical_system_protection symantec_data_center_security_server_and_agents symantec_emb…	SQL injection vulnerability in the Management Server in Symantec Embedded Security: Critical System Protection (SES:CSP) 1.0.x before 1.0 MP5, Embedded Security: Critical System Protection for Contro…	CWE-89 SQL Injection	CVE-2015-8157	2024-11-21 11:38	2016-06-8	Show	GitHub Exploit DB Packet Storm

267725	5.5	MEDIUM Local	qemu debian	qemu debian_linux	The ehci_process_itd function in hw/usb/hcd-ehci.c in QEMU allows local guest OS administrators to cause a denial of service (infinite loop and CPU consumption) via a circular isochronous transfer de…	CWE-835 Loop with Unreachable Exit Condition ('Infinite Loop')	CVE-2015-8558	2024-11-21 11:38	2016-05-24	Show	GitHub Exploit DB Packet Storm

267726	6.5	MEDIUM Network	ibm	spss_statistics	Stack-based buffer overflow in the Initialize function in an ActiveX control in IBM SPSS Statistics 19 and 20 before 20.0.0.2-IF0008, 21 before 21.0.0.2-IF0010, 22 before 22.0.0.2-IF0011, 23 before 2…	CWE-119 Incorrect Access of Indexable Resource ('Range Error')	CVE-2015-8530	2024-11-21 11:38	2016-05-15	Show	GitHub Exploit DB Packet Storm

267727	7.8	HIGH Local	symantec	endpoint_encryption	Unquoted Windows search path vulnerability in EEDService in Symantec Endpoint Encryption (SEE) 11.x before 11.1.1 allows local users to gain privileges via a Trojan horse executable file in the %SYST…	NVD-CWE-Other	CVE-2015-8156	2024-11-21 11:38	2016-05-14	Show	GitHub Exploit DB Packet Storm

267728	7.8	HIGH Local	openafs debian	openafs debian_linux	Off-by-one error in afs_pioctl.c in OpenAFS before 1.6.16 might allow local users to cause a denial of service (memory overwrite and system crash) via a pioctl with an input buffer size of 4096 bytes.	CWE-189 Numeric Errors	CVE-2015-8312	2024-11-21 11:38	2016-05-14	Show	GitHub Exploit DB Packet Storm

267729	5.9	MEDIUM Network	f5	big-ip_access_policy_manager big-ip_wan_optimization_manager big-ip_application_security_manager big-ip_link_controller big-ip_analytics big-ip_advanced_firewall_manager big-ip_prot…	F5 BIG-IP LTM, AFM, Analytics, APM, ASM, Link Controller, and PEM 11.3.x, 11.4.x before 11.4.1 HF10, 11.5.x before 11.5.4, 11.6.x before 11.6.1, and 12.x before 12.0.0 HF1; BIG-IP AAM 11.4.x before 1…	CWE-20 Improper Input Validation	CVE-2015-8099	2024-11-21 11:38	2016-05-14	Show	GitHub Exploit DB Packet Storm

267730	4.6	MEDIUM Physics	linux	linux_kernel	The ext4 implementation in the Linux kernel before 2.6.34 does not properly track the initialization of certain data structures, which allows physically proximate attackers to cause a denial of servi…	NVD-CWE-Other	CVE-2015-8324	2024-11-21 11:38	2016-05-2	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed