Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":June 7, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
245421	9.3	危険	Dart Communications	-	ActiveX 用の Dart Communications PowerTCP FTP の ActiveX コントロールにおけるバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2008-4652	2012-06-26 16:02	2008-10-21	Show	GitHub Exploit DB Packet Storm

245422	7.5	危険	Elxis	-	Elxis CMS におけるセッションをハイジャックされる脆弱性	CWE-287 不適切な認証	CVE-2008-4649	2012-06-26 16:02	2008-10-21	Show	GitHub Exploit DB Packet Storm

245423	4.3	警告	Elxis	-	Elxis CMS の index.php におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2008-4648	2012-06-26 16:02	2008-10-21	Show	GitHub Exploit DB Packet Storm

245424	7.5	危険	astrospaces	-	AstroSPACES の profile.php における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2008-4642	2012-06-26 16:02	2008-10-21	Show	GitHub Exploit DB Packet Storm

245425	4.3	警告	cpcommerce	-	cpCommerce におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2008-4637	2012-06-26 16:02	2008-10-21	Show	GitHub Exploit DB Packet Storm

245426	9.3	危険	ftrsoft	-	Fast Click SQL Lite の init.php における PHP リモートファイルインクルージョンの脆弱性	CWE-94 コード・インジェクション	CVE-2008-4624	2012-06-26 16:02	2008-10-20	Show	GitHub Exploit DB Packet Storm

245427	7.5	危険	cafeengine	-	CafeEngine における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2008-4605	2012-06-26 16:02	2008-10-17	Show	GitHub Exploit DB Packet Storm

245428	7.5	危険	cafeengine	-	Easy CafeEngine の index.php における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2008-4604	2012-06-26 16:02	2008-10-17	Show	GitHub Exploit DB Packet Storm

245429	7.5	危険	Drupal	-	Drupal 用の Shindig-Integrator モジュールにおける詳細不明な脆弱性	CWE-noinfo 情報不足	CVE-2008-4598	2012-06-26 16:02	2008-10-15	Show	GitHub Exploit DB Packet Storm

245430	1.2	注意	アップル	-	Apple iPhone の 5F136 ファームウェアにおける重要情報を取得される脆弱性	CWE-200 情報漏えい	CVE-2008-4593	2012-06-26 16:02	2008-10-17	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:June 7, 2026, 4:13 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
252561	6.5	MEDIUM Local	qemu debian redhat	qemu debian_linux openstack	Memory leak in the keyboard input event handlers support in QEMU (aka Quick Emulator) allows local guest OS privileged users to cause a denial of service (host memory consumption) by rapidly generati…	CWE-772 Missing Release of Resource after Effective Lifetime	CVE-2017-8379	2024-11-21 12:33	2017-05-23	Show	GitHub Exploit DB Packet Storm

252562	7.5	HIGH Network	qemu debian redhat	qemu debian_linux openstack	Memory leak in the audio/audio.c in QEMU (aka Quick Emulator) allows remote attackers to cause a denial of service (memory consumption) by repeatedly starting and stopping audio capture.	CWE-772 Missing Release of Resource after Effective Lifetime	CVE-2017-8309	2024-11-21 12:33	2017-05-23	Show	GitHub Exploit DB Packet Storm

252563	7.8	HIGH Local	schneider-electric	wonderware_indusoft_web_studio	An Incorrect Default Permissions issue was discovered in Schneider Electric Wonderware InduSoft Web Studio v8.0 Patch 3 and prior versions. Upon installation, Wonderware InduSoft Web Studio creates a…	CWE-276 Incorrect Default Permissions	CVE-2017-7968	2024-11-21 12:33	2017-05-20	Show	GitHub Exploit DB Packet Storm

252564	4.0	MEDIUM Network	phoenix_contact_gmbh	mguard_firmware	An Improper Authentication issue was discovered in Phoenix Contact GmbH mGuard firmware versions 8.3.0 to 8.4.2. An attacker may be able to gain unauthorized access to the user firewall when RADIUS s…	CWE-287 Improper Authentication	CVE-2017-7937	2024-11-21 12:33	2017-05-19	Show	GitHub Exploit DB Packet Storm

252565	7.5	HIGH Network	mikrotik	routeros	A vulnerability in MikroTik Version 6.38.5 could allow an unauthenticated remote attacker to exhaust all available CPU via a flood of UDP packets on port 500 (used for L2TP over IPsec), preventing th…	CWE-400 Uncontrolled Resource Consumption	CVE-2017-8338	2024-11-21 12:33	2017-05-18	Show	GitHub Exploit DB Packet Storm

252566	4.5	MEDIUM Network	admidio	admidio	admidio 3.2.8 has CSRF in adm_program/modules/members/members_function.php with an impact of deleting arbitrary user accounts.	CWE-352 Origin Validation Error	CVE-2017-8382	2024-11-21 12:33	2017-05-16	Show	GitHub Exploit DB Packet Storm

252567	5.4	MEDIUM Network	infor	enterprise_asset_management	INFOR EAM V11.0 Build 201410 has XSS via comment fields.	CWE-79 Cross-site Scripting	CVE-2017-7953	2024-11-21 12:33	2017-05-16	Show	GitHub Exploit DB Packet Storm

252568	8.8	HIGH Network	infor	enterprise_asset_management	INFOR EAM V11.0 Build 201410 has SQL injection via search fields, related to the filtervalue parameter.	CWE-89 SQL Injection	CVE-2017-7952	2024-11-21 12:33	2017-05-16	Show	GitHub Exploit DB Packet Storm

252569	7.8	HIGH Local	google	android	In function msm_pcm_playback_close() in all Android releases from CAF using the Linux kernel, prtd is assigned substream->runtime->private_data. Later, prtd is freed. However, prtd is not sanitized a…	CWE-416 Use After Free	CVE-2017-8246	2024-11-21 12:33	2017-05-13	Show	GitHub Exploit DB Packet Storm

252570	7.8	HIGH Local	google	android	In all Android releases from CAF using the Linux kernel, while processing a voice SVC request which is nonstandard by specifying a payload size that will overflow its own declared size, an out of bou…	CWE-119 Incorrect Access of Indexable Resource ('Range Error')	CVE-2017-8245	2024-11-21 12:33	2017-05-13	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed