Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 5, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
241691 7.5 危険 aj square - AJ Square AJ HYIP Acme における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-4043 2012-06-26 16:02 2008-09-11 Show GitHub Exploit DB Packet Storm
241692 9.3 危険 gmanedit2 - gmanedit の open_man_file 関数におけるヒープベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2008-3971 2012-06-26 16:02 2008-09-10 Show GitHub Exploit DB Packet Storm
241693 7.5 危険 bitlbee - BitlBee における既存のアカウントを "上書き" される脆弱性 CWE-264
CWE-399
CVE-2008-3969 2012-06-26 16:02 2008-09-10 Show GitHub Exploit DB Packet Storm
241694 7.5 危険 AlstraSoft - AlstraSoft Forum Pay Per Post Exchange の index.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-3954 2012-06-26 16:02 2008-09-10 Show GitHub Exploit DB Packet Storm
241695 7.5 危険 editeurscripts - EsFaq の questions.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-3952 2012-06-26 16:02 2008-09-10 Show GitHub Exploit DB Packet Storm
241696 5 警告 アップル - Apple iPhone の _web_drawInRect:withFont:ellipsis:alignment:measureOnly 関数におけるサービス運用妨害 (DoS) の脆弱性 CWE-189
数値処理の問題 		CVE-2008-3950 2012-06-26 16:02 2008-09-16 Show GitHub Exploit DB Packet Storm
241697 7.5 危険 discountedscripts - ACG-PTP の index.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-3944 2012-06-26 16:02 2008-09-5 Show GitHub Exploit DB Packet Storm
241698 7.5 危険 ezonescripts - eZoneScripts Living Local の listtest.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-3943 2012-06-26 16:02 2008-09-5 Show GitHub Exploit DB Packet Storm
241699 4.3 警告 bizdirectory - BizDirectory におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2008-3941 2012-06-26 16:02 2008-09-5 Show GitHub Exploit DB Packet Storm
241700 5 警告 AVTECH - AVTECH PageR Enterprise の Web インターフェースにおけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2008-3939 2012-06-26 16:02 2008-09-5 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 6, 2026, 4:08 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
267451 7.3 HIGH
Local 		linux
google 		linux_kernel
android 		arch/arm64/kernel/perf_event.c in the Linux kernel before 4.1 on arm64 platforms allows local users to gain privileges or cause a denial of service (invalid pointer dereference) via vectors involving… CWE-264
Permissions, Privileges, and Access Controls 		CVE-2015-8955 2024-11-21 11:39 2016-10-10 Show GitHub Exploit DB Packet Storm
267452 7.8 HIGH
Local 		google android Multiple use-after-free vulnerabilities in sound/soc/msm/qdsp6v2/msm-lsm-client.c in the Qualcomm sound driver in Android before 2016-10-05 on Nexus 5X, Nexus 6P, and Android One devices allow attack… CWE-264
Permissions, Privileges, and Access Controls 		CVE-2015-8951 2024-11-21 11:39 2016-10-10 Show GitHub Exploit DB Packet Storm
267453 5.5 MEDIUM
Local 		linux linux_kernel arch/arm64/mm/dma-mapping.c in the Linux kernel before 4.0.3, as used in the ION subsystem in Android and other products, does not initialize certain data structures, which allows local users to obta… CWE-200
Information Exposure 		CVE-2015-8950 2024-11-21 11:39 2016-10-10 Show GitHub Exploit DB Packet Storm
267454 9.8 CRITICAL
Network 		debian
uclouvain 		debian_linux
openjpeg 		Use-after-free vulnerability in the opj_j2k_write_mco function in j2k.c in OpenJPEG before 2.1.1 allows remote attackers to have unspecified impact via unknown vectors. CWE-416
 Use After Free 		CVE-2015-8871 2024-11-21 11:39 2016-09-21 Show GitHub Exploit DB Packet Storm
267455 8.1 HIGH
Network 		ietf
netapp 		transport_layer_security
snap_creator_framework
data_ontap_edge
snapdrive
snapmanager
smi-s_provider
host_agent
clustered_data_ontap_antivirus_connector
solidfire_\&_hci_m… 		The TLS protocol 1.2 and earlier supports the rsa_fixed_dh, dss_fixed_dh, rsa_fixed_ecdh, and ecdsa_fixed_ecdh values for ClientCertificateType but does not directly document the ability to compute t… CWE-295
Improper Certificate Validation  		CVE-2015-8960 2024-11-21 11:39 2016-09-21 Show GitHub Exploit DB Packet Storm
267456 5.5 MEDIUM
Local 		suse
canonical
libarchive 		linux_enterprise_software_development_kit
linux_enterprise_server
linux_enterprise_desktop
ubuntu_linux
libarchive 		The copy_from_lzss_window function in archive_read_support_format_rar.c in libarchive 3.2.0 and earlier allows remote attackers to cause a denial of service (out-of-bounds heap read) via a crafted ra… CWE-125
Out-of-bounds Read 		CVE-2015-8934 2024-11-21 11:39 2016-09-20 Show GitHub Exploit DB Packet Storm
267457 5.5 MEDIUM
Local 		libarchive
suse
canonical 		libarchive
linux_enterprise_software_development_kit
linux_enterprise_server
linux_enterprise_desktop
ubuntu_linux 		Integer overflow in the archive_read_format_tar_skip function in archive_read_support_format_tar.c in libarchive before 3.2.0 allows remote attackers to cause a denial of service (crash) via a crafte… CWE-190
 Integer Overflow or Wraparound 		CVE-2015-8933 2024-11-21 11:39 2016-09-20 Show GitHub Exploit DB Packet Storm
267458 5.5 MEDIUM
Local 		canonical
debian
suse
libarchive 		ubuntu_linux
debian_linux
linux_enterprise_software_development_kit
linux_enterprise_server
linux_enterprise_desktop
libarchive 		The compress_bidder_init function in archive_read_support_filter_compress.c in libarchive before 3.2.0 allows remote attackers to cause a denial of service (crash) via a crafted tar file, which trigg… CWE-20
 Improper Input Validation  		CVE-2015-8932 2024-11-21 11:39 2016-09-20 Show GitHub Exploit DB Packet Storm
267459 7.8 HIGH
Local 		libarchive
suse
canonical
debian 		libarchive
linux_enterprise_software_development_kit
linux_enterprise_server
linux_enterprise_desktop
ubuntu_linux
debian_linux 		Multiple integer overflows in the (1) get_time_t_max and (2) get_time_t_min functions in archive_read_support_format_mtree.c in libarchive before 3.2.0 allow remote attackers to have unspecified impa… CWE-190
 Integer Overflow or Wraparound 		CVE-2015-8931 2024-11-21 11:39 2016-09-20 Show GitHub Exploit DB Packet Storm
267460 7.5 HIGH
Network 		suse
libarchive
canonical 		linux_enterprise_software_development_kit
linux_enterprise_server
linux_enterprise_desktop
libarchive
ubuntu_linux 		bsdtar in libarchive before 3.2.0 allows remote attackers to cause a denial of service (infinite loop) via an ISO with a directory that is a member of itself. CWE-20
 Improper Input Validation  		CVE-2015-8930 2024-11-21 11:39 2016-09-20 Show GitHub Exploit DB Packet Storm