Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 31, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
245071	4	警告	Bharat Mediratta	-	Gallery におけるディレクトリトラバーサル攻撃の脆弱性	CWE-22 パス・トラバーサル	CVE-2008-4129	2012-06-26 16:02	2008-09-18	Show	GitHub Exploit DB Packet Storm

245072	6.4	警告	Debian	-	Debian GNU/Linux の PyDNS における DNS レスポンスを偽装される脆弱性	CWE-16 環境設定	CVE-2008-4126	2012-06-26 16:02	2008-07-10	Show	GitHub Exploit DB Packet Storm

245073	4.3	警告	cpcommerce	-	cpCommerce におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2008-4121	2012-06-26 16:02	2008-10-21	Show	GitHub Exploit DB Packet Storm

245074	4.3	警告	FlatPress	-	FlatPress におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2008-4120	2012-06-26 16:02	2008-09-29	Show	GitHub Exploit DB Packet Storm

245075	9.3	危険	アップル	-	Apple QuickTime および iTunes におけるバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2008-4116	2012-06-26 16:02	2008-09-18	Show	GitHub Exploit DB Packet Storm

245076	6.4	警告	GNU Project	-	GNU adns における DNS 応答を偽装される脆弱性	CWE-16 環境設定	CVE-2008-4100	2012-06-26 16:02	2008-09-18	Show	GitHub Exploit DB Packet Storm

245077	6.4	警告	Debian	-	Debian GNU/Linux の PyDNS における DNS レスポンスを偽装される脆弱性	CWE-16 環境設定	CVE-2008-4099	2012-06-26 16:02	2008-07-10	Show	GitHub Exploit DB Packet Storm

245078	10	危険	flip4mac	-	Flip4Mac WMV の Importer における詳細不明な脆弱性	CWE-noinfo 情報不足	CVE-2008-4095	2012-06-26 16:02	2008-09-16	Show	GitHub Exploit DB Packet Storm

245079	7.5	危険	couponscript	-	PHP Coupon Script の index.php における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2008-4090	2012-06-26 16:02	2008-09-15	Show	GitHub Exploit DB Packet Storm

245080	6.8	警告	acoustica	-	Acoustica Beatcraft におけるスタックベースのバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2008-4087	2012-06-26 16:02	2008-09-15	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 31, 2026, 4:16 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
252921	7.8	HIGH Local	podofo_project	podofo	Heap-based buffer overflow in the PoDoFo::PdfTokenizer::GetNextToken function in PdfTokenizer.cpp in PoDoFo 0.9.4 allows remote attackers to have unspecified impact via a crafted file.	CWE-119 Incorrect Access of Indexable Resource ('Range Error')	CVE-2017-5886	2024-11-21 12:28	2017-03-2	Show	GitHub Exploit DB Packet Storm

252922	5.5	MEDIUM Local	podofo_project	podofo	The PoDoFo::PdfParser::ReadXRefSubsection function in PdfParser.cpp in PoDoFo 0.9.4 allows remote attackers to cause a denial of service (NULL pointer dereference) via a crafted file.	CWE-476 NULL Pointer Dereference	CVE-2017-5855	2024-11-21 12:28	2017-03-2	Show	GitHub Exploit DB Packet Storm

252923	5.5	MEDIUM Local	podofo_project	podofo	base/PdfOutputStream.cpp in PoDoFo 0.9.4 allows remote attackers to cause a denial of service (NULL pointer dereference and crash) via a crafted file.	CWE-476 NULL Pointer Dereference	CVE-2017-5854	2024-11-21 12:28	2017-03-2	Show	GitHub Exploit DB Packet Storm

252924	7.8	HIGH Local	podofo_project	podofo	Integer overflow in base/PdfParser.cpp in PoDoFo 0.9.4 allows remote attackers to have unspecified impact via a crafted file.	CWE-190 Integer Overflow or Wraparound	CVE-2017-5853	2024-11-21 12:28	2017-03-2	Show	GitHub Exploit DB Packet Storm

252925	5.5	MEDIUM Local	podofo_project	podofo	The PoDoFo::PdfPage::GetInheritedKeyFromObject function in base/PdfVariant.cpp in PoDoFo 0.9.4 allows remote attackers to cause a denial of service (infinite loop) via a crafted file.	CWE-835 Loop with Unreachable Exit Condition ('Infinite Loop')	CVE-2017-5852	2024-11-21 12:28	2017-03-2	Show	GitHub Exploit DB Packet Storm

252926	5.5	MEDIUM Local	mp3splt_project	mp3splt	The free_options function in options_manager.c in mp3splt 2.6.2 allows remote attackers to cause a denial of service (NULL pointer dereference and crash) via a crafted file. NOTE: this typically has…	CWE-476 NULL Pointer Dereference	CVE-2017-5851	2024-11-21 12:28	2017-03-2	Show	GitHub Exploit DB Packet Storm

252927	5.5	MEDIUM Local	mp3splt_project	mp3splt	The free_options function in options_manager.c in mp3splt 2.6.2 allows remote attackers to cause a denial of service (invalid free and crash) via a crafted file.	CWE-416 Use After Free	CVE-2017-5666	2024-11-21 12:28	2017-03-2	Show	GitHub Exploit DB Packet Storm

252928	5.5	MEDIUM Local	libmp3splt_project	libmp3splt	The splt_cue_export_to_file function in cue.c in libmp3splt 0.9.2 allows remote attackers to cause a denial of service (NULL pointer dereference and crash) via a crafted file.	CWE-476 NULL Pointer Dereference	CVE-2017-5665	2024-11-21 12:28	2017-03-2	Show	GitHub Exploit DB Packet Storm

252929	7.3	HIGH Local	intel	system_studio parallel_studio_xe data_analytics_acceleration_library integrated_performance_primitives vtune_amplifier math_kernel_library trace_analyzer_and_collector advisor	Intel PSET Application Install wrapper of Intel Parallel Studio XE, Intel System Studio, Intel VTune Amplifier, Intel Inspector, Intel Advisor, Intel MPI Library, Intel Trace Analyzer and Collector, …	NVD-CWE-noinfo	CVE-2017-5682	2024-11-21 12:28	2017-03-1	Show	GitHub Exploit DB Packet Storm

252930	7.5	HIGH Network	kodi	kodi	Directory traversal vulnerability in the Chorus2 2.4.2 add-on for Kodi allows remote attackers to read arbitrary files via a %2E%2E%252e (encoded dot dot slash) in the image path, as demonstrated by …	CWE-22 Path Traversal	CVE-2017-5982	2024-11-21 12:28	2017-03-1	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed