Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 6, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
241921 7.5 危険 elinestudio - ESC における絶対パストラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2008-2863 2012-06-26 16:02 2008-06-25 Show GitHub Exploit DB Packet Storm
241922 7.5 危険 elinestudio - ESC における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-2862 2012-06-26 16:02 2008-06-25 Show GitHub Exploit DB Packet Storm
241923 4.3 警告 elinestudio - ESC におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2008-2861 2012-06-26 16:02 2008-06-25 Show GitHub Exploit DB Packet Storm
241924 7.5 危険 aj square - AJSquare AJ Auction Pro Web の category.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-2860 2012-06-26 16:02 2008-06-25 Show GitHub Exploit DB Packet Storm
241925 5 警告 AlstraSoft - AlstraSoft AskMe Pro における重要な情報を取得される脆弱性 CWE-255
証明書・パスワード管理 		CVE-2008-2857 2012-06-26 16:02 2008-06-25 Show GitHub Exploit DB Packet Storm
241926 7.5 危険 easy webstore - Easy Webstore の index.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-2853 2012-06-26 16:02 2008-06-25 Show GitHub Exploit DB Packet Storm
241927 7.5 危険 boatscripts - BoatScripts Classifieds の index.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-2846 2012-06-26 16:02 2008-06-25 Show GitHub Exploit DB Packet Storm
241928 7.5 危険 carscripts - Carscripts Classifieds の index.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-2844 2012-06-26 16:02 2008-06-25 Show GitHub Exploit DB Packet Storm
241929 7.5 危険 doitlive - doITLive CMS における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-2843 2012-06-26 16:02 2008-06-25 Show GitHub Exploit DB Packet Storm
241930 4.3 警告 doitlive - doITLive CMS の edit/showmedia.asp におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2008-2842 2012-06-26 16:02 2008-06-25 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 7, 2026, 4:22 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
267841 5.1 MEDIUM
Local 		openshift origin openshift-node in OpenShift Origin 1.1.6 and earlier improperly stores router credentials as envvars in the pod when the --credentials option is used, which allows local users to obtain sensitive pri… CWE-255
Credentials Management 		CVE-2015-8945 2024-11-21 11:39 2016-08-6 Show GitHub Exploit DB Packet Storm
267842 3.3 LOW
Local 		canonical
ecryptfs 		ubuntu_linux
ecryptfs-utils 		ecryptfs-setup-swap in eCryptfs before 111 does not prevent the unencrypted swap partition from activating during boot when using GPT partitioning and certain versions of systemd, which allows local … CWE-20
 Improper Input Validation  		CVE-2015-8946 2024-11-21 11:39 2016-07-22 Show GitHub Exploit DB Packet Storm
267843 7.6 HIGH
Network 		harfbuzz_project harfbuzz hb-ot-layout-gpos-table.hh in HarfBuzz before 1.0.5 allows remote attackers to cause a denial of service (buffer over-read) or possibly have unspecified other impact via crafted data, a different vul… CWE-119
Incorrect Access of Indexable Resource ('Range Error')  		CVE-2015-8947 2024-11-21 11:39 2016-07-19 Show GitHub Exploit DB Packet Storm
267844 5.5 MEDIUM
Local 		graphicsmagick
suse
fedoraproject 		graphicsmagick
studio_onsite
linux_enterprise_software_development_kit
linux_enterprise_debuginfo
fedora 		The DecodeImage function in coders/gif.c in GraphicsMagick 1.3.18 allows remote attackers to cause a denial of service (uninitialized memory access) via a crafted GIF file. CWE-119
Incorrect Access of Indexable Resource ('Range Error')  		CVE-2015-8808 2024-11-21 11:39 2016-07-14 Show GitHub Exploit DB Packet Storm
267845 5.5 MEDIUM
Local 		google android app/aboot/aboot.c in the Qualcomm bootloader in Android before 2016-07-05 on Nexus 5 and 7 (2013) devices allows attackers to cause a denial of service (OS outage or buffer over-read) via a crafted a… CWE-119
Incorrect Access of Indexable Resource ('Range Error')  		CVE-2015-8893 2024-11-21 11:39 2016-07-11 Show GitHub Exploit DB Packet Storm
267846 7.8 HIGH
Local 		google android platform/msm_shared/boot_verifier.c in the Qualcomm components in Android before 2016-07-05 on Nexus 5X and 6P devices allows attackers to bypass intended access restrictions via a digest with traili… CWE-264
Permissions, Privileges, and Access Controls 		CVE-2015-8892 2024-11-21 11:39 2016-07-11 Show GitHub Exploit DB Packet Storm
267847 7.8 HIGH
Local 		google android Multiple integer overflows in app/aboot/aboot.c in the Qualcomm components in Android before 2016-07-05 on Nexus 5 and 7 (2013) devices allow attackers to bypass intended access restrictions via a cr… CWE-189
Numeric Errors 		CVE-2015-8891 2024-11-21 11:39 2016-07-11 Show GitHub Exploit DB Packet Storm
267848 7.8 HIGH
Local 		google android platform/msm_shared/partition_parser.c in the Qualcomm components in Android before 2016-07-05 on Nexus 5 and 7 (2013) devices does not validate certain GUID Partition Table (GPT) data, which allows … CWE-264
Permissions, Privileges, and Access Controls 		CVE-2015-8890 2024-11-21 11:39 2016-07-11 Show GitHub Exploit DB Packet Storm
267849 7.8 HIGH
Local 		google android The aboot implementation in the Qualcomm components in Android before 2016-07-05 on Nexus 6P devices omits the recovery PIN feature, which has unspecified impact and attack vectors, aka Android inter… CWE-264
Permissions, Privileges, and Access Controls 		CVE-2015-8889 2024-11-21 11:39 2016-07-11 Show GitHub Exploit DB Packet Storm
267850 7.8 HIGH
Local 		google android Integer overflow in app/aboot/aboot.c in the Qualcomm components in Android before 2016-07-05 on Nexus 5 devices allows attackers to bypass intended access restrictions via a crafted block count and … CWE-264
CWE-189
Permissions, Privileges, and Access Controls
Numeric Errors 		CVE-2015-8888 2024-11-21 11:39 2016-07-11 Show GitHub Exploit DB Packet Storm