Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 6, 2026, 2 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
241801 5 警告 Linux
calacode
- CalaCode @Mail における重要な情報を取得される脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2008-3395 2012-06-26 16:02 2008-07-31 Show GitHub Exploit DB Packet Storm
241802 7.5 危険 easy-script - Def-Blog における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2008-3388 2012-06-26 16:02 2008-07-30 Show GitHub Exploit DB Packet Storm
241803 7.5 危険 AlstraSoft - AlstraSoft Video Share Enterprise の album.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2008-3386 2012-06-26 16:02 2008-07-30 Show GitHub Exploit DB Packet Storm
241804 7.5 危険 cce-interact - Interact Learning Community Environment Interact の help/help.php におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル
CVE-2008-3384 2012-06-26 16:02 2008-07-30 Show GitHub Exploit DB Packet Storm
241805 7.5 危険 fizzmedia negativekarma - Fizzmedia の comment.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2008-3378 2012-06-26 16:02 2008-07-30 Show GitHub Exploit DB Packet Storm
241806 7.5 危険 brandon tallent - phpTest の picture.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2008-3377 2012-06-26 16:02 2008-07-30 Show GitHub Exploit DB Packet Storm
241807 7.5 危険 gregarius - Gregarius の ajax.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2008-3374 2012-06-26 16:02 2008-07-30 Show GitHub Exploit DB Packet Storm
241808 5 警告 grisoft - Grisoft AVG Anti-Virus のファイル解析エンジンにおけるサービス運用妨害 (DoS) の脆弱性 CWE-189
数値処理の問題
CVE-2008-3373 2012-06-26 16:02 2008-07-30 Show GitHub Exploit DB Packet Storm
241809 7.5 危険 greatclone - Getacoder Clone の search_form.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2008-3372 2012-06-26 16:02 2008-07-30 Show GitHub Exploit DB Packet Storm
241810 7.5 危険 DELL EMC (旧 EMC Corporation) - MC CUA の CUA Login モジュールにおける SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2008-3370 2012-06-26 16:02 2008-07-30 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 6, 2026, 4:08 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
267851 3.1 LOW
Network
atlassian jira_core
jira_server
jira_service_desk
Atlassian JIRA Software 7.0.3, JIRA Core 7.0.3, and the bundled JIRA Service Desk 3.0.3 installer attaches the wrong image to e-mail notifications when a user views an issue with inline wiki markup r… CWE-200
Information Exposure
CVE-2015-8481 2024-11-21 11:38 2016-01-9 Show GitHub Exploit DB Packet Storm
267852 4.0 MEDIUM
Local
huawei document_security_management Huawei Document Security Management (DSM) with software before V100R002C05SPC661 does not clear the clipboard when closing a secure file, which allows local users to obtain sensitive information by p… CWE-200
Information Exposure
CVE-2015-8303 2024-11-21 11:38 2016-01-9 Show GitHub Exploit DB Packet Storm
267853 5.5 MEDIUM
Local
huawei gem-703l_firmware
ale_firmware
The Joint Photographic Experts Group Processing Unit (JPU) driver in Huawei ALE smartphones with software before ALE-UL00C00B220 and ALE-TL00C01B220 and GEM-703L smartphones with software before V100… CWE-20
 Improper Input Validation 
CVE-2015-8226 2024-11-21 11:38 2016-01-9 Show GitHub Exploit DB Packet Storm
267854 5.5 MEDIUM
Local
huawei gem-703l_firmware
ale_firmware
The Joint Photographic Experts Group Processing Unit (JPU) driver in Huawei ALE smartphones with software before ALE-UL00C00B220 and ALE-TL00C01B220 and GEM-703L smartphones with software before V100… CWE-20
 Improper Input Validation 
CVE-2015-8225 2024-11-21 11:38 2016-01-9 Show GitHub Exploit DB Packet Storm
267855 9.8 CRITICAL
Network
progress whatsup_gold The DroneDeleteOldMeasurements implementation in Ipswitch WhatsUp Gold before 16.4 does not properly validate serialized XML objects, which allows remote attackers to conduct SQL injection attacks vi… CWE-89
SQL Injection
CVE-2015-8261 2024-11-21 11:38 2016-01-8 Show GitHub Exploit DB Packet Storm
267856 3.5 LOW
Network
mozilla bugzilla Template.pm in Bugzilla 2.x, 3.x, and 4.x before 4.2.16, 4.3.x and 4.4.x before 4.4.11, and 4.5.x and 5.0.x before 5.0.2 does not properly construct CSV files, which allows remote attackers to obtain… CWE-200
Information Exposure
CVE-2015-8509 2024-11-21 11:38 2016-01-3 Show GitHub Exploit DB Packet Storm
267857 4.7 MEDIUM
Network
mozilla bugzilla Cross-site scripting (XSS) vulnerability in showdependencygraph.cgi in Bugzilla 2.x, 3.x, and 4.x before 4.2.16, 4.3.x and 4.4.x before 4.4.11, and 4.5.x and 5.0.x before 5.0.2, when a local dot conf… CWE-79
Cross-site Scripting
CVE-2015-8508 2024-11-21 11:38 2016-01-3 Show GitHub Exploit DB Packet Storm
267858 6.5 MEDIUM
Network
zte zxhn_h108n_r1a_firmware
zxv10_w300_firmware
ZTE ZXHN H108N R1A devices before ZTE.bhs.ZXHNH108NR1A.k_PE and ZXV10 W300 devices W300V1.0.0f_ER1_PE allow remote authenticated users to bypass intended access restrictions, and discover credentials… CWE-200
Information Exposure
CVE-2015-8703 2024-11-21 11:38 2015-12-30 Show GitHub Exploit DB Packet Storm
267859 7.5 HIGH
Network
samba
debian
canonical
samba
debian_linux
ubuntu_linux
The samldb_check_user_account_control_acl function in dsdb/samdb/ldb_modules/samldb.c in Samba 4.x before 4.1.22, 4.2.x before 4.2.7, and 4.3.x before 4.3.3 does not properly check for administrative… CWE-269
 Improper Privilege Management
CVE-2015-8467 2024-11-21 11:38 2015-12-30 Show GitHub Exploit DB Packet Storm
267860 8.8 HIGH
Network
adobe air_sdk
air_sdk_\&_compiler
flash_player
air
Use-after-free vulnerability in Adobe Flash Player before 18.0.0.324 and 19.x and 20.x before 20.0.0.267 on Windows and OS X and before 11.2.202.559 on Linux, Adobe AIR before 20.0.0.233, Adobe AIR S… NVD-CWE-Other
CVE-2015-8650 2024-11-21 11:38 2015-12-29 Show GitHub Exploit DB Packet Storm