Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 9, 2026, 4 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
242071	9.3	危険	BulletProof Software	-	BulletProof FTP Client におけるスタックベースのバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2008-5754	2012-06-26 16:03	2008-12-30	Show	GitHub Exploit DB Packet Storm

242072	9.3	危険	BulletProof Software	-	BulletProof FTP Client におけるスタックベースのバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2008-5753	2012-06-26 16:03	2008-12-30	Show	GitHub Exploit DB Packet Storm

242073	7.5	危険	AlstraSoft	-	ESE の index.php における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2008-5751	2012-06-26 16:03	2008-12-30	Show	GitHub Exploit DB Packet Storm

242074	4.3	警告	bloofox	-	BloofoxCMS の plugins/spaw2/dialogs/dialog.php におけるディレクトリトラバーサルの脆弱性	CWE-22 パス・トラバーサル	CVE-2008-5748	2012-06-26 16:03	2008-12-29	Show	GitHub Exploit DB Packet Storm

242075	5	警告	FRISK Software International	-	GNU/Linux の F-Prot におけるアンチウイルス保護を回避される脆弱性	CWE-399 リソース管理の問題	CVE-2008-5747	2012-06-26 16:03	2008-12-29	Show	GitHub Exploit DB Packet Storm

242076	7.2	危険	Digium	-	Zaptel の dahdi/tor2.c ドライバにおけるカーネルメモリの整数値を上書きされる脆弱性	CWE-189 数値処理の問題	CVE-2008-5744	2012-06-26 16:03	2008-12-26	Show	GitHub Exploit DB Packet Storm

242077	7.2	危険	FreeBSD	-	FreeBSD における権限を取得される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2008-5736	2012-06-26 16:03	2008-12-23	Show	GitHub Exploit DB Packet Storm

242078	9.3	危険	coolplayer	-	CoolPlayer の skin.c におけるスタックベースのバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2008-5735	2012-06-26 16:03	2008-12-26	Show	GitHub Exploit DB Packet Storm

242079	7.2	危険	entechtaiwan	-	EnTech Taiwan PowerStrip の NT カーネルモードドライバにおける権限を取得される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2008-5725	2012-06-26 16:03	2008-12-26	Show	GitHub Exploit DB Packet Storm

242080	7.2	危険	ESET	-	Personal Firewall ドライバおよび ESET Smart Security における権限を取得される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2008-5724	2012-06-26 16:03	2008-12-26	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 9, 2026, 5:07 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
267921	7.5	HIGH Network	freeradius debian canonical	pam_radius debian_linux ubuntu_linux	add_password in pam_radius_auth.c in pam_radius 1.4.0 does not correctly check the length of the input password, and is vulnerable to a stack-based buffer overflow during memcpy(). An attacker could …	CWE-787 Out-of-bounds Write	CVE-2015-9542	2024-11-21 11:40	2020-02-25	Show	GitHub Exploit DB Packet Storm

267922	3.3	LOW Local	openstack	nova	An issue was discovered in OpenStack Nova before 18.2.4, 19.x before 19.1.0, and 20.x before 20.1.0. It can leak consoleauth tokens into log files. An attacker with read access to the service's logs …	CWE-200 Information Exposure	CVE-2015-9543	2024-11-21 11:40	2020-02-19	Show	GitHub Exploit DB Packet Storm

267923	7.5	HIGH Network	qt fedoraproject	qt fedora	Qt through 5.14 allows an exponential XML entity expansion attack via a crafted SVG document that is mishandled in QXmlStreamReader, a related issue to CVE-2003-1564.	CWE-776 XML Entity Expansion	CVE-2015-9541	2024-11-21 11:40	2020-01-25	Show	GitHub Exploit DB Packet Storm

267924	6.1	MEDIUM Network	chamilo	chamilo_lms	Chamilo LMS through 1.9.10.2 allows a link_goto.php?link_url= open redirect, a related issue to CVE-2015-5503.	CWE-601 Open Redirect	CVE-2015-9540	2024-11-21 11:40	2020-01-4	Show	GitHub Exploit DB Packet Storm

267925	6.1	MEDIUM Network	fast_secure_contact_form_project	fast_secure_contact_form	The Fast Secure Contact Form plugin before 4.0.38 for WordPress allows fs_contact_form1[welcome] XSS.	CWE-79 Cross-site Scripting	CVE-2015-9539	2024-11-21 11:40	2019-11-27	Show	GitHub Exploit DB Packet Storm

267926	6.5	MEDIUM Network	imagely	nextgen_gallery	The NextGEN Gallery plugin before 2.1.15 for WordPress allows ../ Directory Traversal in path selection.	CWE-22 Path Traversal	CVE-2015-9538	2024-11-21 11:40	2019-11-27	Show	GitHub Exploit DB Packet Storm

267927	5.4	MEDIUM Network	imagely	nextgen_gallery	The NextGEN Gallery plugin before 2.1.10 for WordPress has multiple XSS issues involving thumbnail_width, thumbnail_height, thumbwidth, thumbheight, wmXpos, and wmYpos, and template.	CWE-79 Cross-site Scripting	CVE-2015-9537	2024-11-21 11:40	2019-11-27	Show	GitHub Exploit DB Packet Storm

267928	6.1	MEDIUM Network	sandhillsdev easydigitaldownloads	easy_digital_downloads recount_earnings	The Easy Digital Downloads (EDD) Recount Earnings extension for WordPress, as used with EDD 1.8.x before 1.8.7, 1.9.x before 1.9.10, 2.0.x before 2.0.5, 2.1.x before 2.1.11, 2.2.x before 2.2.9, and 2…	CWE-79 Cross-site Scripting	CVE-2015-9524	2024-11-21 11:40	2019-10-24	Show	GitHub Exploit DB Packet Storm

267929	6.1	MEDIUM Network	sandhillsdev easydigitaldownloads	easy_digital_downloads recommended_products	The Easy Digital Downloads (EDD) Recommended Products extension for WordPress, as used with EDD 1.8.x before 1.8.7, 1.9.x before 1.9.10, 2.0.x before 2.0.5, 2.1.x before 2.1.11, 2.2.x before 2.2.9, a…	CWE-79 Cross-site Scripting	CVE-2015-9523	2024-11-21 11:40	2019-10-24	Show	GitHub Exploit DB Packet Storm

267930	6.1	MEDIUM Network	sandhillsdev easydigitaldownloads	easy_digital_downloads qr_code	The Easy Digital Downloads (EDD) QR Code extension for WordPress, as used with EDD 1.8.x before 1.8.7, 1.9.x before 1.9.10, 2.0.x before 2.0.5, 2.1.x before 2.1.11, 2.2.x before 2.2.9, and 2.3.x befo…	CWE-79 Cross-site Scripting	CVE-2015-9522	2024-11-21 11:40	2019-10-24	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed