Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 8, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
241631 4.3 警告 alexguestbook - @lex Guestbook におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2008-7140 2012-06-26 16:10 2009-09-1 Show GitHub Exploit DB Packet Storm
241632 6.8 警告 eye.fi - Eye-Fi の WS-Proxy におけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反 		CVE-2008-7139 2012-06-26 16:10 2009-09-1 Show GitHub Exploit DB Packet Storm
241633 5 警告 eye.fi - Eye-Fi の Manager における任意のイメージをアップロードされる脆弱性 CWE-310
暗号の問題 		CVE-2008-7138 2012-06-26 16:10 2009-09-1 Show GitHub Exploit DB Packet Storm
241634 5 警告 eye.fi - Eye-Fi の WS-Proxy におけるサービス運用妨害 (DoS) の脆弱性 CWE-Other
その他 		CVE-2008-7137 2012-06-26 16:10 2009-09-1 Show GitHub Exploit DB Packet Storm
241635 9 危険 ariadne-cms - Ariadne の pphoto における任意のシェルコマンドを実行される脆弱性 CWE-78
OSコマンド・インジェクション 		CVE-2008-7125 2012-06-26 16:10 2009-08-31 Show GitHub Exploit DB Packet Storm
241636 4.3 警告 ber kessels
Drupal		 - Drupal のモジュールの Taxonomy による Refine におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2008-7150 2012-06-26 16:10 2008-05-5 Show GitHub Exploit DB Packet Storm
241637 10 危険 evansprogramming - Evans Programming Registry Pro の (epRegPro.ocx) における重要なレジストリキーを変更される脆弱性 CWE-noinfo
情報不足 		CVE-2008-7122 2012-06-26 16:10 2009-08-31 Show GitHub Exploit DB Packet Storm
241638 10 危険 Belkin International - Belkin Wireless G ルータ の Web インターフェースにおける管理者権限を取得される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2008-7115 2012-06-26 16:10 2009-08-28 Show GitHub Exploit DB Packet Storm
241639 7.2 危険 ESET - ESET Smart Security の easdrv.sys におけるサービス運用妨害 (DoS) の脆弱性 CWE-20
不適切な入力確認 		CVE-2008-7107 2012-06-26 16:10 2009-08-28 Show GitHub Exploit DB Packet Storm
241640 7.8 危険 アルバネットワークス株式会社 - Aruba Mobility Controller の ArubaOS の SNMP デーモンにおける SNMPv3 ユーザ名を読まれる脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2008-7095 2012-06-26 16:10 2009-08-27 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 8, 2026, 4:54 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
268201 8.8 HIGH
Network 		adobe flash_player
air
air_sdk
air_sdk_\&_compiler
flash_player_desktop_runtime 		Use-after-free vulnerability in the TextField object implementation in Adobe Flash Player before 18.0.0.268 and 19.x and 20.x before 20.0.0.228 on Windows and OS X and before 11.2.202.554 on Linux, A… CWE-416
 Use After Free 		CVE-2015-8823 2024-11-21 11:39 2016-04-23 Show GitHub Exploit DB Packet Storm
268202 3.3 LOW
Local 		opensuse opensuse tmpfiles.d/systemd.conf in systemd before 229 uses weak permissions for /var/log/journal/%m/system.journal, which allows local users to obtain sensitive information by reading the file. CWE-264
Permissions, Privileges, and Access Controls 		CVE-2015-8842 2024-11-21 11:39 2016-04-21 Show GitHub Exploit DB Packet Storm
268203 9.8 CRITICAL
Network 		suse
opensuse
canonical
debian
gnu
fedoraproject 		linux_enterprise_server
linux_enterprise_desktop
linux_enterprise_debuginfo
linux_enterprise_software_development_kit
opensuse
suse_linux_enterprise_server
ubuntu_linux
debian_li… 		Stack-based buffer overflow in the catopen function in the GNU C Library (aka glibc or libc6) before 2.23 allows context-dependent attackers to cause a denial of service (application crash) or possib… CWE-119
Incorrect Access of Indexable Resource ('Range Error')  		CVE-2015-8779 2024-11-21 11:39 2016-04-20 Show GitHub Exploit DB Packet Storm
268204 9.8 CRITICAL
Network 		fedoraproject
debian
canonical
gnu
suse
opensuse 		fedora
debian_linux
ubuntu_linux
glibc
linux_enterprise_server
linux_enterprise_desktop
linux_enterprise_debuginfo
linux_enterprise_software_development_kit
opensuse
suse_l… 		Integer overflow in the GNU C Library (aka glibc or libc6) before 2.23 allows context-dependent attackers to cause a denial of service (application crash) or possibly execute arbitrary code via the s… CWE-119
Incorrect Access of Indexable Resource ('Range Error')  		CVE-2015-8778 2024-11-21 11:39 2016-04-20 Show GitHub Exploit DB Packet Storm
268205 9.1 CRITICAL
Network 		suse
opensuse
canonical
debian
fedoraproject
gnu 		linux_enterprise_server
linux_enterprise_desktop
linux_enterprise_debuginfo
linux_enterprise_software_development_kit
opensuse
suse_linux_enterprise_server
ubuntu_linux
debian_li… 		The strftime function in the GNU C Library (aka glibc or libc6) before 2.23 allows context-dependent attackers to cause a denial of service (application crash) or possibly obtain sensitive informatio… CWE-189
Numeric Errors 		CVE-2015-8776 2024-11-21 11:39 2016-04-20 Show GitHub Exploit DB Packet Storm
268206 7.5 HIGH
Network 		xmlsoft
canonical
debian 		libxml2
ubuntu_linux
debian_linux 		dict.c in libxml2 allows remote attackers to cause a denial of service (heap-based buffer over-read and application crash) via an unexpected character immediately after the "<!DOCTYPE html" substring… NVD-CWE-noinfo
CVE-2015-8806 2024-11-21 11:39 2016-04-14 Show GitHub Exploit DB Packet Storm
268207 6.5 MEDIUM
Network 		libtiff
debian 		libtiff
debian_linux 		The NeXTDecode function in tif_next.c in LibTIFF allows remote attackers to cause a denial of service (out-of-bounds write) via a crafted TIFF image, as demonstrated by libtiff5.tif. CWE-787
 Out-of-bounds Write 		CVE-2015-8784 2024-11-21 11:39 2016-04-14 Show GitHub Exploit DB Packet Storm
268208 6.1 MEDIUM
Network 		fedoraproject
horde
debian 		fedora
groupware
debian_linux 		Cross-site scripting (XSS) vulnerability in the _renderVarInput_number function in horde/framework/Core/lib/Horde/Core/Ui/VarRenderer/Html.php in Horde Groupware before 5.2.12 and Horde Groupware Web… CWE-79
Cross-site Scripting 		CVE-2015-8807 2024-11-21 11:39 2016-04-14 Show GitHub Exploit DB Packet Storm
268209 7.4 HIGH
Local 		foxitsoftware foxit_reader The Foxit Cloud Update Service (FoxitCloudUpdateService) in Foxit Reader 6.1 through 6.2.x and 7.x before 7.2.2, when an update to the Cloud plugin is available, allows local users to gain privileges… CWE-119
Incorrect Access of Indexable Resource ('Range Error')  		CVE-2015-8843 2024-11-21 11:39 2016-04-14 Show GitHub Exploit DB Packet Storm
268210 9.8 CRITICAL
Network 		eset nod32 Heap-based buffer overflow in the Archive support module in ESET NOD32 before update 11861 allows remote attackers to execute arbitrary code via a large number of languages in an EPOC installation fi… CWE-787
 Out-of-bounds Write 		CVE-2015-8841 2024-11-21 11:39 2016-04-12 Show GitHub Exploit DB Packet Storm