Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 12, 2026, 6 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
246791 7.5 危険 chilkat software - ChilkatCert.dll における任意のファイルを上書きされる脆弱性 CWE-Other
その他
CVE-2008-4583 2012-06-26 16:02 2008-10-15 Show GitHub Exploit DB Packet Storm
246792 7.2 危険 Gentoo Linux - fence で使用される fence_manual における任意のファイルを変更される脆弱性 CWE-59
リンク解釈の問題
CVE-2008-4580 2012-06-26 16:02 2008-10-8 Show GitHub Exploit DB Packet Storm
246793 5 警告 Timo Sirainen - Dovecot の ACL プラグインにおけるアクセス制限を回避される脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2008-4578 2012-06-26 16:02 2008-10-5 Show GitHub Exploit DB Packet Storm
246794 7.5 危険 ASP indir - Ayco Okul Portali の default.asp における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2008-4574 2012-06-26 16:02 2008-10-15 Show GitHub Exploit DB Packet Storm
246795 7.5 危険 ASP indir - MunzurSoft Wep Portal W3 の kategori.asp における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2008-4573 2012-06-26 16:02 2008-10-15 Show GitHub Exploit DB Packet Storm
246796 10 危険 CutePHP - CuteNews.ru の plugins/wacko/highlight/html.php における任意の PHP コードを実行される脆弱性 CWE-94
コード・インジェクション
CVE-2008-4557 2012-06-26 16:02 2008-10-14 Show GitHub Exploit DB Packet Storm
246797 8.5 危険 Graphviz - Graphviz の parser.y (lib/graph/parser.c) の push_subg 関数におけるスタックベースのバッファーオーバーフローの脆弱性 CWE-119
バッファエラー
CVE-2008-4555 2012-06-26 16:02 2008-10-14 Show GitHub Exploit DB Packet Storm
246798 9.3 危険 dvrstation - DVRHOST Web CMS OCX のpdvratl.dll におけるヒープベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー
CVE-2008-4547 2012-06-26 16:02 2008-10-14 Show GitHub Exploit DB Packet Storm
246799 7.5 危険 asicms - asiCMS alpha における PHP リモートファイルインクルージョンの脆弱性 CWE-94
コード・インジェクション
CVE-2008-4529 2012-06-26 16:02 2008-10-9 Show GitHub Exploit DB Packet Storm
246800 10 危険 customcms - CCMS におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル
CVE-2008-4526 2012-06-26 16:02 2008-10-9 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 13, 2026, 4:20 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
2701 - - - The device encrypts data using AES-CBC with static zero-filled Initialization Vectors (IVs), making it susceptible to replay attacks and known-plaintext decryption. CWE-200
Information Exposure
CVE-2026-50210 2026-06-5 00:10 2026-06-4 Show GitHub Exploit DB Packet Storm
2702 - - - Leftover engineering diagnostics and factory-level diagnostic software remain exposed on retail builds, giving malicious apps write privileges to internal NVRAM registers. CWE-134
Use of Externally-Controlled Format String
CVE-2026-50211 2026-06-5 00:10 2026-06-4 Show GitHub Exploit DB Packet Storm
2703 - - - Weak validation logic within device dissociation API routines allows a remote entity to forcefully unbind unrelated user endpoints, causing severe denial of service. CWE-400
 Uncontrolled Resource Consumption
CVE-2026-50212 2026-06-5 00:10 2026-06-4 Show GitHub Exploit DB Packet Storm
2704 - - - The account validation endpoint /v1/User/validate returns comprehensive user profile data sheets, which can be crawled by iterating predictable identification strings. CWE-798
 Use of Hard-coded Credentials
CVE-2026-50213 2026-06-5 00:10 2026-06-4 Show GitHub Exploit DB Packet Storm
2705 8.2 HIGH
Network
- - All in One Video Downloader 1.2 contains an SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary SQL queries by injecting malicious code through the id parameter. At… CWE-89
SQL Injection
CVE-2019-25726 2026-06-5 00:00 2026-06-4 Show GitHub Exploit DB Packet Storm
2706 9.8 CRITICAL
Network
- - WordPress Plugin ad manager wd 1.0.11 contains an arbitrary file download vulnerability that allows unauthenticated attackers to download sensitive files by manipulating the path parameter. Attackers… CWE-22
Path Traversal
CVE-2019-25727 2026-06-5 00:00 2026-06-4 Show GitHub Exploit DB Packet Storm
2707 8.2 HIGH
Network
- - Care2x 2.7 contains multiple SQL injection vulnerabilities that allow unauthenticated attackers to execute arbitrary SQL commands by manipulating the ck_config cookie parameter. Attackers can inject … CWE-89
SQL Injection
CVE-2019-25728 2026-06-5 00:00 2026-06-4 Show GitHub Exploit DB Packet Storm
2708 9.8 CRITICAL
Network
- - PDF Signer 3.0 contains a server-side template injection vulnerability that allows unauthenticated attackers to execute arbitrary code by injecting PHP commands through the CSRF-TOKEN cookie paramete… CWE-352
 Origin Validation Error
CVE-2019-25729 2026-06-5 00:00 2026-06-4 Show GitHub Exploit DB Packet Storm
2709 8.2 HIGH
Network
- - Listing Hub CMS 1.0 contains a SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary SQL queries by injecting malicious code through the id parameter. Attackers can s… CWE-89
SQL Injection
CVE-2019-25730 2026-06-5 00:00 2026-06-4 Show GitHub Exploit DB Packet Storm
2710 8.2 HIGH
Network
- - PHP EI-Tube Script 3 contains an SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary SQL queries by injecting malicious code through the search parameter. Attackers… CWE-89
SQL Injection
CVE-2019-25732 2026-06-5 00:00 2026-06-4 Show GitHub Exploit DB Packet Storm