Vulnerability Search Top

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

Vulnerability Information Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 13, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
242441	4.3	警告	6rbscript	-	6rbScript の section.php におけるディレクトリトラバーサルの脆弱性	CWE-22 パス・トラバーサル	CVE-2008-6453	2012-06-26 16:10	2009-03-13	Show	GitHub Exploit DB Packet Storm

242442	7.5	危険	geniuscyber	-	CMS MAXSITE の Guestbook コンポーネントにおける guestbook に任意の PHP コードを挿入される脆弱性	CWE-94 コード・インジェクション	CVE-2008-6446	2012-06-26 16:10	2009-03-9	Show	GitHub Exploit DB Packet Storm

242443	10	危険	Baidu, Inc.	-	Baidu Hi IM の CSTransfer.dll におけるスタックベースのバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2008-6444	2012-06-26 16:10	2009-03-9	Show	GitHub Exploit DB Packet Storm

242444	9.3	危険	epic games	-	ゲーム製品で使用される Epic Games Unreal エンジンクライアントにおけるフォーマットストリングの脆弱性	CWE-134 書式文字列の問題	CVE-2008-6441	2012-06-26 16:10	2009-03-9	Show	GitHub Exploit DB Packet Storm

242445	5	警告	Cerberus, LLC	-	Cerberus Helpdesk における重要な情報を取得される脆弱性	CWE-287 不適切な認証	CVE-2008-6440	2012-06-26 16:10	2009-03-6	Show	GitHub Exploit DB Packet Storm

242446	4.3	警告	abledating	-	ABK-Soft AbleDating の search_results.php におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2008-6439	2012-06-26 16:10	2009-03-6	Show	GitHub Exploit DB Packet Storm

242447	7.5	危険	e107.org e107coders	-	e107 用 MacGuru BLOG Engine プラグインのmacgurublog_menu/macgurublog.php における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2008-6438	2012-06-26 16:10	2009-03-6	Show	GitHub Exploit DB Packet Storm

242448	7.5	危険	Blue River	-	Blue River Interactive Group Sava CMS の index.cfm における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2008-6434	2012-06-26 16:10	2009-03-6	Show	GitHub Exploit DB Packet Storm

242449	4.3	警告	Blue River	-	Blue River Interactive Group Sava CMS の index.cfm におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2008-6433	2012-06-26 16:10	2009-03-6	Show	GitHub Exploit DB Packet Storm

242450	4.3	警告	bmforum	-	BMForum におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2008-6431	2012-06-26 16:10	2009-03-6	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 13, 2026, 5:05 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
267811	7.5	HIGH Network	debian libevent_project	debian_linux libevent	The search_make_new function in evdns.c in libevent before 2.1.6-beta allows attackers to cause a denial of service (out-of-bounds read) via an empty hostname.	CWE-125 Out-of-bounds Read	CVE-2016-10197	2024-11-21 11:43	2017-03-16	Show	GitHub Exploit DB Packet Storm

267812	7.5	HIGH Network	debian libevent_project mozilla	debian_linux libevent thunderbird firefox firefox_esr	Stack-based buffer overflow in the evutil_parse_sockaddr_port function in evutil.c in libevent before 2.1.6-beta allows attackers to cause a denial of service (segmentation fault) via vectors involvi…	CWE-787 Out-of-bounds Write	CVE-2016-10196	2024-11-21 11:43	2017-03-16	Show	GitHub Exploit DB Packet Storm

267813	9.8	CRITICAL Network	libevent_project debian	libevent debian_linux	The name_parse function in evdns.c in libevent before 2.1.6-beta allows remote attackers to have unspecified impact via vectors involving the label_len variable, which triggers an out-of-bounds stack…	CWE-125 Out-of-bounds Read	CVE-2016-10195	2024-11-21 11:43	2017-03-16	Show	GitHub Exploit DB Packet Storm

267814	7.8	HIGH Local	libgd	libgd	Integer overflow in gd_io.c in the GD Graphics Library (aka libgd) before 2.2.4 allows remote attackers to have unspecified impact via vectors involving the number of horizontal and vertical chunks i…	CWE-190 Integer Overflow or Wraparound	CVE-2016-10168	2024-11-21 11:43	2017-03-16	Show	GitHub Exploit DB Packet Storm

267815	5.5	MEDIUM Local	libgd	libgd	The gdImageCreateFromGd2Ctx function in gd_gd2.c in the GD Graphics Library (aka libgd) before 2.2.4 allows remote attackers to cause a denial of service (application crash) via a crafted image file.	CWE-20 Improper Input Validation	CVE-2016-10167	2024-11-21 11:43	2017-03-16	Show	GitHub Exploit DB Packet Storm

267816	9.8	CRITICAL Network	libgd	libgd	Integer underflow in the _gdContributionsAlloc function in gd_interpolation.c in the GD Graphics Library (aka libgd) before 2.2.4 allows remote attackers to have unspecified impact via vectors relate…	CWE-191 Integer Underflow (Wrap or Wraparound)	CVE-2016-10166	2024-11-21 11:43	2017-03-16	Show	GitHub Exploit DB Packet Storm

267817	6.5	MEDIUM Local	virglrenderer_project	virglrenderer	Memory leak in the vrend_renderer_context_create_internal function in vrend_decode.c in virglrenderer before 0.6.0 allows local guest OS users to cause a denial of service (host memory consumption) b…	CWE-399 Resource Management Errors	CVE-2016-10163	2024-11-21 11:43	2017-03-16	Show	GitHub Exploit DB Packet Storm

267818	6.0	MEDIUM Local	qemu debian	qemu debian_linux	Memory leak in hw/watchdog/wdt_i6300esb.c in QEMU (aka Quick Emulator) allows local guest OS privileged users to cause a denial of service (host memory consumption and QEMU process crash) via a large…	CWE-401 Missing Release of Memory after Effective Lifetime	CVE-2016-10155	2024-11-21 11:43	2017-03-16	Show	GitHub Exploit DB Packet Storm

267819	7.8	HIGH Local	jasper_project	jasper	Integer overflow in the jpc_pi_nextcprl function in jpc_t2cod.c in JasPer before 1.900.20 allows remote attackers to have unspecified impact via a crafted file, which triggers use of an uninitialized…	CWE-190 Integer Overflow or Wraparound	CVE-2016-10251	2024-11-21 11:43	2017-03-15	Show	GitHub Exploit DB Packet Storm

267820	7.5	HIGH Network	jasper_project	jasper	The jp2_colr_destroy function in jp2_cod.c in JasPer before 1.900.13 allows remote attackers to cause a denial of service (NULL pointer dereference) by leveraging incorrect cleanup of JP2 box data on…	CWE-476 NULL Pointer Dereference	CVE-2016-10250	2024-11-21 11:43	2017-03-15	Show	GitHub Exploit DB Packet Storm