Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 7, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
241591 7.5 危険 Activewebsoftwares - Active Newsletter の SubscriberStart.asp における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-6286 2012-06-26 16:10 2009-02-25 Show GitHub Exploit DB Packet Storm
241592 7.5 危険 businessvein - PHP TV Portal の index.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-6285 2012-06-26 16:10 2009-02-25 Show GitHub Exploit DB Packet Storm
241593 7.5 危険 1scripts - Z1Exchange の edit.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-6284 2012-06-26 16:10 2009-02-25 Show GitHub Exploit DB Packet Storm
241594 7.5 危険 bluocms - Bluo CMS の index.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-6281 2012-06-26 16:10 2009-02-25 Show GitHub Exploit DB Packet Storm
241595 7.5 危険 appstate - Appalachian State University phpWebSite の links.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-6266 2012-06-26 16:10 2009-02-25 Show GitHub Exploit DB Packet Storm
241596 6.8 警告 cyberfolio - Cyberfolio の portfolio/css.php におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2008-6265 2012-06-26 16:10 2009-02-24 Show GitHub Exploit DB Packet Storm
241597 7.5 危険 e-topbiz - E-topbiz Slide Popups の admin/admin.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-6264 2012-06-26 16:10 2009-02-24 Show GitHub Exploit DB Packet Storm
241598 7.5 危険 e-topbiz - E-topbiz AdManager の view.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-6261 2012-06-26 16:10 2009-02-24 Show GitHub Exploit DB Packet Storm
241599 6.8 警告 comdev - Comdev Web Blogger における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-6250 2012-06-26 16:10 2009-02-23 Show GitHub Exploit DB Packet Storm
241600 4.3 警告 galatolo - Galatolo WebManager の all.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2008-6248 2012-06-26 16:10 2009-02-23 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 7, 2026, 4:22 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
268131 8.8 HIGH
Network 		adobe flash_player
flash_player_desktop_runtime
air_desktop_runtime
air_sdk
air_sdk_\&_compiler
air 		Adobe Flash Player before 18.0.0.268 and 19.x and 20.x before 20.0.0.228 on Windows and OS X and before 11.2.202.554 on Linux, Adobe AIR before 20.0.0.204, Adobe AIR SDK before 20.0.0.204, and Adobe … CWE-787
 Out-of-bounds Write 		CVE-2015-8657 2024-11-21 11:38 2016-03-5 Show GitHub Exploit DB Packet Storm
268132 8.8 HIGH
Network 		adobe flash_player
flash_player_desktop_runtime
air_desktop_runtime
air_sdk
air_sdk_\&_compiler
air 		Adobe Flash Player before 18.0.0.268 and 19.x and 20.x before 20.0.0.228 on Windows and OS X and before 11.2.202.554 on Linux, Adobe AIR before 20.0.0.204, Adobe AIR SDK before 20.0.0.204, and Adobe … CWE-787
 Out-of-bounds Write 		CVE-2015-8656 2024-11-21 11:38 2016-03-5 Show GitHub Exploit DB Packet Storm
268133 8.8 HIGH
Network 		adobe flash_player
flash_player_desktop_runtime
air_desktop_runtime
air_sdk
air_sdk_\&_compiler
air 		Use-after-free vulnerability in Adobe Flash Player before 18.0.0.268 and 19.x and 20.x before 20.0.0.228 on Windows and OS X and before 11.2.202.554 on Linux, Adobe AIR before 20.0.0.204, Adobe AIR S… CWE-416
 Use After Free 		CVE-2015-8655 2024-11-21 11:38 2016-03-5 Show GitHub Exploit DB Packet Storm
268134 8.8 HIGH
Network 		adobe flash_player
flash_player_desktop_runtime
air_desktop_runtime
air_sdk
air_sdk_\&_compiler
air 		Adobe Flash Player before 18.0.0.268 and 19.x and 20.x before 20.0.0.228 on Windows and OS X and before 11.2.202.554 on Linux, Adobe AIR before 20.0.0.204, Adobe AIR SDK before 20.0.0.204, and Adobe … CWE-787
 Out-of-bounds Write 		CVE-2015-8654 2024-11-21 11:38 2016-03-5 Show GitHub Exploit DB Packet Storm
268135 8.8 HIGH
Network 		adobe flash_player
flash_player_desktop_runtime
air_desktop_runtime
air_sdk
air_sdk_\&_compiler
air 		Use-after-free vulnerability in Adobe Flash Player before 18.0.0.268 and 19.x and 20.x before 20.0.0.228 on Windows and OS X and before 11.2.202.554 on Linux, Adobe AIR before 20.0.0.204, Adobe AIR S… CWE-416
 Use After Free 		CVE-2015-8653 2024-11-21 11:38 2016-03-5 Show GitHub Exploit DB Packet Storm
268136 8.8 HIGH
Network 		adobe flash_player
flash_player_desktop_runtime
air_desktop_runtime
air_sdk
air_sdk_\&_compiler
air 		Adobe Flash Player before 18.0.0.268 and 19.x and 20.x before 20.0.0.228 on Windows and OS X and before 11.2.202.554 on Linux, Adobe AIR before 20.0.0.204, Adobe AIR SDK before 20.0.0.204, and Adobe … CWE-787
 Out-of-bounds Write 		CVE-2015-8652 2024-11-21 11:38 2016-03-5 Show GitHub Exploit DB Packet Storm
268137 6.1 MEDIUM
Network 		ibm business_process_manager Cross-site scripting (XSS) vulnerability in Process Portal in IBM Business Process Manager 8.5.0.x through 8.5.0.2, 8.5.5.x through 8.5.5.0, and 8.5.6.x through 8.5.6.2 allows remote attackers to inj… CWE-79
Cross-site Scripting 		CVE-2015-8524 2024-11-21 11:38 2016-02-29 Show GitHub Exploit DB Packet Storm
268138 9.8 CRITICAL
Network 		flexerasoftware flexnet_publisher Multiple buffer overflows in (1) lmgrd and (2) Vendor Daemon in Flexera FlexNet Publisher before 11.13.1.2 Security Update 1 allow remote attackers to execute arbitrary code via a crafted packet with… CWE-119
Incorrect Access of Indexable Resource ('Range Error')  		CVE-2015-8277 2024-11-21 11:38 2016-02-24 Show GitHub Exploit DB Packet Storm
268139 9.1 CRITICAL
Network 		symantec encryption_management_server Symantec Encryption Management Server (SEMS) 3.3.2 before MP12 allows remote authenticated users to execute arbitrary OS commands by leveraging console administrator access. CWE-78
OS Command  		CVE-2015-8151 2024-11-21 11:38 2016-02-19 Show GitHub Exploit DB Packet Storm
268140 7.8 HIGH
Local 		symantec encryption_management_server Symantec Encryption Management Server (SEMS) 3.3.2 before MP12 allows local users to obtain root access by modifying a batch file. CWE-264
Permissions, Privileges, and Access Controls 		CVE-2015-8150 2024-11-21 11:38 2016-02-19 Show GitHub Exploit DB Packet Storm