Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 6, 2026, 6 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
241421 6.8 警告 experts - Experts の answer.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2008-5267 2012-06-26 16:03 2008-11-28 Show GitHub Exploit DB Packet Storm
241422 7.5 危険 airvae - Airvae Commerce における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2008-5223 2012-06-26 16:03 2008-11-25 Show GitHub Exploit DB Packet Storm
241423 7.5 危険 dvbbs - Dvbbs の login.asp における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2008-5222 2012-06-26 16:03 2008-11-25 Show GitHub Exploit DB Packet Storm
241424 7.5 危険 aj square - AJ Square ZeusCart の category_list.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2008-5216 2012-06-26 16:03 2008-11-24 Show GitHub Exploit DB Packet Storm
241425 7.5 危険 clanlite - ClanLite の service/profil.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2008-5215 2012-06-26 16:03 2008-11-24 Show GitHub Exploit DB Packet Storm
241426 4.3 警告 clanlite - ClanLite の service/calendrier.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2008-5214 2012-06-26 16:03 2008-11-24 Show GitHub Exploit DB Packet Storm
241427 7.5 危険 aj square - AJ Article の featured_article.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2008-5213 2012-06-26 16:03 2008-11-24 Show GitHub Exploit DB Packet Storm
241428 7.5 危険 aj square - AJ Auction の classifide_ad.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2008-5212 2012-06-26 16:03 2008-11-24 Show GitHub Exploit DB Packet Storm
241429 5 警告 Admidio - Admidio の modules/download/get_file.php におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル
CVE-2008-5209 2012-06-26 16:03 2008-11-24 Show GitHub Exploit DB Packet Storm
241430 7.5 危険 eshop100 - eSHOP100 の index.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2008-5190 2012-06-26 16:03 2008-11-21 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 6, 2026, 4:08 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
267871 8.8 HIGH
Network
adobe flash_player
air
air_sdk
air_sdk_\&_compiler
Use-after-free vulnerability in Adobe Flash Player before 18.0.0.324 and 19.x and 20.x before 20.0.0.267 on Windows and OS X and before 11.2.202.559 on Linux, Adobe AIR before 20.0.0.233, Adobe AIR S… NVD-CWE-Other
CVE-2015-8640 2024-11-21 11:38 2015-12-29 Show GitHub Exploit DB Packet Storm
267872 8.8 HIGH
Network
adobe flash_player
air
air_sdk
air_sdk_\&_compiler
Use-after-free vulnerability in Adobe Flash Player before 18.0.0.324 and 19.x and 20.x before 20.0.0.267 on Windows and OS X and before 11.2.202.559 on Linux, Adobe AIR before 20.0.0.233, Adobe AIR S… NVD-CWE-Other
CVE-2015-8639 2024-11-21 11:38 2015-12-29 Show GitHub Exploit DB Packet Storm
267873 8.8 HIGH
Network
adobe flash_player
air_sdk
air_sdk_\&_compiler
air
Adobe Flash Player before 18.0.0.324 and 19.x and 20.x before 20.0.0.267 on Windows and OS X and before 11.2.202.559 on Linux, Adobe AIR before 20.0.0.233, Adobe AIR SDK before 20.0.0.233, and Adobe … CWE-119
Incorrect Access of Indexable Resource ('Range Error') 
CVE-2015-8460 2024-11-21 11:38 2015-12-29 Show GitHub Exploit DB Packet Storm
267874 10.0 CRITICAL
Network
adobe air_sdk
air_sdk_\&_compiler
air
flash_player
Adobe Flash Player before 18.0.0.324 and 19.x and 20.x before 20.0.0.267 on Windows and OS X and before 11.2.202.559 on Linux, Adobe AIR before 20.0.0.233, Adobe AIR SDK before 20.0.0.233, and Adobe … CWE-119
Incorrect Access of Indexable Resource ('Range Error') 
CVE-2015-8459 2024-11-21 11:38 2015-12-29 Show GitHub Exploit DB Packet Storm
267875 8.8 HIGH
Network
adobe flash_player
air_sdk
air_sdk_\&_compiler
air
Use-after-free vulnerability in Adobe Flash Player before 18.0.0.324 and 19.x and 20.x before 20.0.0.267 on Windows and OS X and before 11.2.202.559 on Linux, Adobe AIR before 20.0.0.233, Adobe AIR S… NVD-CWE-Other
CVE-2015-8638 2024-11-21 11:38 2015-12-29 Show GitHub Exploit DB Packet Storm
267876 8.8 HIGH
Network
adobe flash_player
air
air_sdk
air_sdk_\&_compiler
Use-after-free vulnerability in Adobe Flash Player before 18.0.0.324 and 19.x and 20.x before 20.0.0.267 on Windows and OS X and before 11.2.202.559 on Linux, Adobe AIR before 20.0.0.233, Adobe AIR S… NVD-CWE-Other
CVE-2015-8635 2024-11-21 11:38 2015-12-29 Show GitHub Exploit DB Packet Storm
267877 8.8 HIGH
Network
adobe flash_player
air_sdk
air_sdk_\&_compiler
air
Use-after-free vulnerability in Adobe Flash Player before 18.0.0.324 and 19.x and 20.x before 20.0.0.267 on Windows and OS X and before 11.2.202.559 on Linux, Adobe AIR before 20.0.0.233, Adobe AIR S… NVD-CWE-Other
CVE-2015-8634 2024-11-21 11:38 2015-12-29 Show GitHub Exploit DB Packet Storm
267878 6.7 MEDIUM
Local
linux linux_kernel The ovl_setattr function in fs/overlayfs/inode.c in the Linux kernel through 4.3.3 attempts to merge distinct setattr operations, which allows local users to bypass intended access restrictions and m… CWE-264
Permissions, Privileges, and Access Controls
CVE-2015-8660 2024-11-21 11:38 2015-12-28 Show GitHub Exploit DB Packet Storm
267879 2.3 LOW
Local
linux linux_kernel The (1) pptp_bind and (2) pptp_connect functions in drivers/net/ppp/pptp.c in the Linux kernel through 4.3.3 do not verify an address length, which allows local users to obtain sensitive information … CWE-200
Information Exposure
CVE-2015-8569 2024-11-21 11:38 2015-12-28 Show GitHub Exploit DB Packet Storm
267880 7.0 HIGH
Local
linux linux_kernel The networking implementation in the Linux kernel through 4.3.3, as used in Android and other products, does not validate protocol identifiers for certain protocol families, which allows local users … NVD-CWE-Other
CVE-2015-8543 2024-11-21 11:38 2015-12-28 Show GitHub Exploit DB Packet Storm