Vulnerability Search Top

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

Vulnerability Information Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 5, 2026, noon

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
241471	4.3	警告	activecampaign	-	ActiveCampaign TrioLive の department_offline_context.php におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2008-5056	2012-06-26 16:03	2008-11-11	Show	GitHub Exploit DB Packet Storm

241472	7.5	危険	activecampaign	-	ActiveCampaign TrioLive の department_offline_context.php における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2008-5055	2012-06-26 16:03	2008-11-11	Show	GitHub Exploit DB Packet Storm

241473	7.5	危険	developiteasy	-	Develop It Easy Membership System における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2008-5054	2012-06-26 16:03	2008-11-13	Show	GitHub Exploit DB Packet Storm

241474	7.5	危険	graphiks	-	Graphiks MyForum における管理者用アクセス権を取得される脆弱性	CWE-287 不適切な認証	CVE-2008-5040	2012-06-26 16:03	2008-11-12	Show	GitHub Exploit DB Packet Storm

241475	7.5	危険	elkagroup	-	ElkaGroup Image Gallery の view.php における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2008-5037	2012-06-26 16:03	2008-11-12	Show	GitHub Exploit DB Packet Storm

241476	9.3	危険	chilkat software	-	Chilkat Crypt ActiveX コンポーネントの ChilkatCrypt2.dll における任意のファイルを上書きされる脆弱性	CWE-20 不適切な入力確認	CVE-2008-5002	2012-06-26 16:03	2008-11-10	Show	GitHub Exploit DB Packet Storm

241477	6.9	警告	georges khaznadar	-	wims における任意のファイルを上書きされる脆弱性	CWE-59 リンク解釈の問題	CVE-2008-4986	2012-06-26 16:03	2008-08-24	Show	GitHub Exploit DB Packet Storm

241478	6.9	警告	tvdr	-	Video Disk Recorder の vdrleaktest における任意のファイルを上書きされる脆弱性	CWE-59 リンク解釈の問題	CVE-2008-4985	2012-06-26 16:03	2008-11-6	Show	GitHub Exploit DB Packet Storm

241479	6.9	警告	freedesktop.org	-	scratchbox2 における任意のファイルを上書きされる脆弱性	CWE-59 リンク解釈の問題	CVE-2008-4984	2012-06-26 16:03	2008-11-6	Show	GitHub Exploit DB Packet Storm

241480	6.9	警告	alan woodland	-	ogle における任意のファイルを上書きされる脆弱性	CWE-59 リンク解釈の問題	CVE-2008-4976	2012-06-26 16:03	2008-11-6	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 5, 2026, 4:51 a.m.

No	CVSS	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
267711	-	token_insert_entity_project	token_insert_entity	The Token Insert Entity module 7.x-1.x before 7.x-1.1 for Drupal does not properly check permissions, which allows remote authenticated users with certain permissions to bypass intended access restri…	CWE-200 Information Exposure	CVE-2015-8602	2024-11-21 11:38	2015-12-18	Show	GitHub Exploit DB Packet Storm

267712	-	chat_room_project	chat_room	The Chat Room module 7.x-2.x before 7.x-2.2 for Drupal does not properly check permissions when setting up a websocket for chat messages, which allows remote attackers to bypass intended access restr…	CWE-200 Information Exposure	CVE-2015-8601	2024-11-21 11:38	2015-12-18	Show	GitHub Exploit DB Packet Storm

267713	-	sap	mobile_platform	The SysAdminWebTool servlets in SAP Mobile Platform allow remote attackers to bypass authentication and obtain sensitive information, gain privileges, or have unspecified other impact via unknown vec…	CWE-264 Permissions, Privileges, and Access Controls	CVE-2015-8600	2024-11-21 11:38	2015-12-18	Show	GitHub Exploit DB Packet Storm

267714	-	cacti	cacti	SQL injection vulnerability in include/top_graph_header.php in Cacti 0.8.8f and earlier allows remote attackers to execute arbitrary SQL commands via the rra_id parameter in a properties action to gr…	CWE-89 SQL Injection	CVE-2015-8369	2024-11-21 11:38	2015-12-18	Show	GitHub Exploit DB Packet Storm

267715	-	ntop	ntopng	ntopng (aka ntop) before 2.2 allows remote authenticated users to change the login context and gain privileges via the user cookie and username parameter to admin/password_reset.lua.	CWE-254 7PK - Security Features	CVE-2015-8368	2024-11-21 11:38	2015-12-18	Show	GitHub Exploit DB Packet Storm

267716	-	xen	xen	The libxl toolstack library in Xen 4.1.x through 4.6.x does not properly release mappings of files used as kernels and initial ramdisks when managing multiple domains in the same process, which allow…	CWE-399 Resource Management Errors	CVE-2015-8341	2024-11-21 11:38	2015-12-18	Show	GitHub Exploit DB Packet Storm

267717	-	xen	xen	The memory_exchange function in common/memory.c in Xen 3.2.x through 4.6.x does not properly release locks, which might allow guest OS administrators to cause a denial of service (deadlock or host cr…	CWE-17 Code	CVE-2015-8340	2024-11-21 11:38	2015-12-18	Show	GitHub Exploit DB Packet Storm

267718	-	xen	xen	The memory_exchange function in common/memory.c in Xen 3.2.x through 4.6.x does not properly hand back pages to a domain, which might allow guest OS administrators to cause a denial of service (host …	CWE-19 Data Processing Errors	CVE-2015-8339	2024-11-21 11:38	2015-12-18	Show	GitHub Exploit DB Packet Storm

267719	-	xen	xen	Xen 4.6.x and earlier does not properly enforce limits on page order inputs for the (1) XENMEM_increase_reservation, (2) XENMEM_populate_physmap, (3) XENMEM_exchange, and possibly other HYPERVISOR_me…	CWE-254 7PK - Security Features	CVE-2015-8338	2024-11-21 11:38	2015-12-18	Show	GitHub Exploit DB Packet Storm

267720	-	redhat linuxfoundation canonical debian	enterprise_linux_server_eus enterprise_linux_hpc_node enterprise_linux_desktop enterprise_linux_server enterprise_linux_workstation foomatic-filters ubuntu_linux cups-filters …	Incomplete blacklist vulnerability in util.c in foomatic-rip in cups-filters 1.0.42 before 1.2.0 and in foomatic-filters in Foomatic 4.0.x allows remote attackers to execute arbitrary commands via ` …	NVD-CWE-Other	CVE-2015-8327	2024-11-21 11:38	2015-12-18	Show	GitHub Exploit DB Packet Storm