Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 7, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
241501 6.2 警告 compiz - Compiz Fusion の Expo プラグインにおけるロックされたデスクトップへアクセスされる脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2008-6514 2012-06-26 16:10 2009-03-24 Show GitHub Exploit DB Packet Storm
241502 6.8 警告 Andy's PHP Knowledgebase Project - Andy's PHP Knowledgebase の saa.php における任意のコードを実行される脆弱性 CWE-94
コード・インジェクション 		CVE-2008-6513 2012-06-26 16:10 2009-03-24 Show GitHub Exploit DB Packet Storm
241503 6.8 警告 Google - Google Gears の WorkerPool API における同一送信元ポリシーを回避される脆弱性 CWE-Other
その他 		CVE-2008-6512 2012-06-26 16:10 2009-03-24 Show GitHub Exploit DB Packet Storm
241504 4.3 警告 codetoad - CodeToad ASP Shopping Cart Script におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2008-6500 2012-06-26 16:10 2009-03-20 Show GitHub Exploit DB Packet Storm
241505 5.5 警告 Apache Friends - XAMPP の security/xamppsecurity.php における重要な変数を偽装される脆弱性 CWE-94
コード・インジェクション 		CVE-2008-6499 2012-06-26 16:10 2009-03-19 Show GitHub Exploit DB Packet Storm
241506 6.8 警告 Apache Friends - XAMPP の security/xamppsecurity.php におけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反 		CVE-2008-6498 2012-06-26 16:10 2009-03-19 Show GitHub Exploit DB Packet Storm
241507 5 警告 easy-news - Easy Content Management Publishing におけるデータベースをダウンロードされる脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2008-6493 2012-06-26 16:10 2009-03-19 Show GitHub Exploit DB Packet Storm
241508 7.5 危険 denis moinel - PHPGKit における PHP リモートファイルインクルージョンの脆弱性 CWE-94
コード・インジェクション 		CVE-2008-6491 2012-06-26 16:10 2009-03-19 Show GitHub Exploit DB Packet Storm
241509 7.5 危険 flysforum - FLABER の function/update_xml.php における任意のファイルを上書きされる脆弱性 CWE-20
不適切な入力確認 		CVE-2008-6490 2012-06-26 16:10 2009-03-19 Show GitHub Exploit DB Packet Storm
241510 7.5 危険 digiappz - Digiappz DigiAffiliate の login.asp における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-6487 2012-06-26 16:10 2009-03-18 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 7, 2026, 4:22 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
267891 6.1 MEDIUM
Network 		fedoraproject
horde
debian 		fedora
groupware
debian_linux 		Cross-site scripting (XSS) vulnerability in the _renderVarInput_number function in horde/framework/Core/lib/Horde/Core/Ui/VarRenderer/Html.php in Horde Groupware before 5.2.12 and Horde Groupware Web… CWE-79
Cross-site Scripting 		CVE-2015-8807 2024-11-21 11:39 2016-04-14 Show GitHub Exploit DB Packet Storm
267892 7.4 HIGH
Local 		foxitsoftware foxit_reader The Foxit Cloud Update Service (FoxitCloudUpdateService) in Foxit Reader 6.1 through 6.2.x and 7.x before 7.2.2, when an update to the Cloud plugin is available, allows local users to gain privileges… CWE-119
Incorrect Access of Indexable Resource ('Range Error')  		CVE-2015-8843 2024-11-21 11:39 2016-04-14 Show GitHub Exploit DB Packet Storm
267893 9.8 CRITICAL
Network 		eset nod32 Heap-based buffer overflow in the Archive support module in ESET NOD32 before update 11861 allows remote attackers to execute arbitrary code via a large number of languages in an EPOC installation fi… CWE-787
 Out-of-bounds Write 		CVE-2015-8841 2024-11-21 11:39 2016-04-12 Show GitHub Exploit DB Packet Storm
267894 9.8 CRITICAL
Network 		cypherpunks pidgin-otr Use-after-free vulnerability in the create_smp_dialog function in gtk-dialog.c in the Off-the-Record Messaging (OTR) pidgin-otr plugin before 4.0.2 for Pidgin allows remote attackers to execute arbit… NVD-CWE-Other
CVE-2015-8833 2024-11-21 11:39 2016-04-12 Show GitHub Exploit DB Packet Storm
267895 9.8 CRITICAL
Network 		xmlsoft
debian 		libxml2
debian_linux 		The htmlParseComment function in HTMLparser.c in libxml2 allows attackers to obtain sensitive information, cause a denial of service (out-of-bounds heap memory access and application crash), or possi… CWE-119
Incorrect Access of Indexable Resource ('Range Error')  		CVE-2015-8710 2024-11-21 11:39 2016-04-12 Show GitHub Exploit DB Packet Storm
267896 7.3 HIGH
Network 		claws-mail claws-mail Stack-based buffer overflow in the conv_euctojis function in codeconv.c in Claws Mail 3.13.1 allows remote attackers to have unspecified impact via a crafted email, involving Japanese character set c… CWE-119
Incorrect Access of Indexable Resource ('Range Error')  		CVE-2015-8708 2024-11-21 11:39 2016-04-12 Show GitHub Exploit DB Packet Storm
267897 8.8 HIGH
Network 		sap netweaver_application_server_java The XML Data Archiving Service (XML DAS) in SAP NetWeaver AS Java does not check authorization, which allows remote authenticated users to obtain sensitive information, gain privileges, or possibly h… CWE-862
 Missing Authorization 		CVE-2015-8840 2024-11-21 11:39 2016-04-8 Show GitHub Exploit DB Packet Storm
267898 7.3 HIGH
Local 		fuseiso_project
debian
fedoraproject 		fuseiso
debian_linux
fedora 		Stack-based buffer overflow in the isofs_real_readdir function in isofs.c in FuseISO 20070708 allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary co… CWE-119
Incorrect Access of Indexable Resource ('Range Error')  		CVE-2015-8837 2024-11-21 11:39 2016-03-30 Show GitHub Exploit DB Packet Storm
267899 7.3 HIGH
Local 		fedoraproject
fuseiso_project 		fedora
fuseiso 		Integer overflow in the isofs_real_read_zf function in isofs.c in FuseISO 20070708 might allow remote attackers to cause a denial of service (application crash) or possibly have unspecified other imp… CWE-119
Incorrect Access of Indexable Resource ('Range Error')  		CVE-2015-8836 2024-11-21 11:39 2016-03-30 Show GitHub Exploit DB Packet Storm
267900 8.8 HIGH
Network 		adobe flash_player
flash_player_desktop_runtime
air_desktop_runtime
air_sdk
air_sdk_\&_compiler
air 		Use-after-free vulnerability in Adobe Flash Player before 18.0.0.268 and 19.x and 20.x before 20.0.0.228 on Windows and OS X and before 11.2.202.554 on Linux, Adobe AIR before 20.0.0.204, Adobe AIR S… CWE-416
 Use After Free 		CVE-2015-8822 2024-11-21 11:39 2016-03-5 Show GitHub Exploit DB Packet Storm