Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 7, 2026, noon

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
245621 5 警告 flagship industries - Flagship Industries Ventrilo の decryption 関数におけるサービス運用妨害 (DoS) の脆弱性 CWE-20
不適切な入力確認
CVE-2008-3680 2012-06-26 16:02 2008-08-14 Show GitHub Exploit DB Packet Storm
245622 4.3 警告 damian hickey - Freeway の admin/search_links.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2008-3678 2012-06-26 16:02 2008-08-14 Show GitHub Exploit DB Packet Storm
245623 5 警告 gelatocms - Gelato の classes/imgsize.php におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル
CVE-2008-3675 2012-06-26 16:02 2008-08-14 Show GitHub Exploit DB Packet Storm
245624 5 警告 Linux
Acronis International GmbH
- Acronis True Image Echo Server における重要な情報を取得される脆弱性 CWE-310
暗号の問題
CVE-2008-3671 2012-06-26 16:02 2008-08-13 Show GitHub Exploit DB Packet Storm
245625 6.8 警告 articlefriendly - Article Friendly Pro の authordetail.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2008-3670 2012-06-26 16:02 2008-08-13 Show GitHub Exploit DB Packet Storm
245626 5 警告 Bharat Mediratta - Gallery におけるクッキーをキャプチャされる脆弱性 CWE-310
暗号の問題
CVE-2008-3662 2012-06-26 16:02 2008-09-18 Show GitHub Exploit DB Packet Storm
245627 6.8 警告 articlefriendly - Article Friendly Standard の categorydetail.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2008-3649 2012-06-26 16:02 2008-08-12 Show GitHub Exploit DB Packet Storm
245628 8.5 危険 21degrees - Twentyone Degrees Symphony の File Manager における任意のコードを実行される脆弱性 CWE-94
コード・インジェクション
CVE-2008-3592 2012-06-26 16:02 2008-08-11 Show GitHub Exploit DB Packet Storm
245629 7.5 危険 21degrees - 212cafeBoard の lib/class.admin.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2008-3591 2012-06-26 16:02 2008-08-11 Show GitHub Exploit DB Packet Storm
245630 7.5 危険 egi zaberl - E. Z. Poll の admin/login.asp における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2008-3590 2012-06-26 16:02 2008-08-11 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 7, 2026, 4:13 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
253341 6.1 MEDIUM
Network
humaxdigital hg100r_firmware An issue was discovered on Humax Digital HG100R 2.0.6 devices. There is XSS on the 404 page. CWE-79
Cross-site Scripting
CVE-2017-7316 2024-11-21 12:31 2017-07-4 Show GitHub Exploit DB Packet Storm
253342 9.8 CRITICAL
Network
humaxdigital hg100r_firmware An issue was discovered on Humax Digital HG100R 2.0.6 devices. To download the backup file it's not necessary to use credentials, and the router credentials are stored in plaintext inside the backup,… CWE-306
CWE-522
Missing Authentication for Critical Function
 Insufficiently Protected Credentials
CVE-2017-7315 2024-11-21 12:31 2017-07-4 Show GitHub Exploit DB Packet Storm
253343 7.5 HIGH
Network
ntop ntopng The NetworkInterface::getHost function in NetworkInterface.cpp in ntopng before 3.0 allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via an empty … CWE-476
 NULL Pointer Dereference
CVE-2017-7458 2024-11-21 12:31 2017-06-27 Show GitHub Exploit DB Packet Storm
253344 7.5 HIGH
Network
ntop ntopng ntopng before 3.0 allows HTTP Response Splitting. CWE-74
Injection
CVE-2017-7459 2024-11-21 12:31 2017-06-26 Show GitHub Exploit DB Packet Storm
253345 6.1 MEDIUM
Network
ntop ntopng ntopng before 3.0 allows XSS because GET and POST parameters are improperly validated. CWE-79
Cross-site Scripting
CVE-2017-7416 2024-11-21 12:31 2017-06-26 Show GitHub Exploit DB Packet Storm
253346 7.8 HIGH
Local
google android In all Android releases from CAF using the Linux kernel, a double free vulnerability exists in a display driver. CWE-415
 Double Free
CVE-2017-7373 2024-11-21 12:31 2017-06-14 Show GitHub Exploit DB Packet Storm
253347 7.0 HIGH
Local
google android In all Android releases from CAF using the Linux kernel, a race condition exists in a video driver potentially leading to buffer overflow or write to arbitrary pointer location. CWE-119
CWE-362
Incorrect Access of Indexable Resource ('Range Error') 
Race Condition
CVE-2017-7372 2024-11-21 12:31 2017-06-14 Show GitHub Exploit DB Packet Storm
253348 7.8 HIGH
Local
google android In all Android releases from CAF using the Linux kernel, a data pointer is potentially used after it has been freed when SLIMbus is turned off by Bluetooth. CWE-416
 Use After Free
CVE-2017-7371 2024-11-21 12:31 2017-06-14 Show GitHub Exploit DB Packet Storm
253349 7.0 HIGH
Local
google android In all Android releases from CAF using the Linux kernel, a race condition exists in a video driver potentially leading to a use-after-free condition. CWE-416
 Use After Free
CVE-2017-7370 2024-11-21 12:31 2017-06-14 Show GitHub Exploit DB Packet Storm
253350 7.8 HIGH
Local
google android In all Android releases from CAF using the Linux kernel, an array index in an ALSA routine is not properly validating potentially leading to kernel stack corruption. CWE-20
 Improper Input Validation 
CVE-2017-7369 2024-11-21 12:31 2017-06-14 Show GitHub Exploit DB Packet Storm