Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 7, 2026, 12:09 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
252381 10 危険 CA Technologies - Windows 上で稼働する CA ARCserve Backup の LDBserver サービスにおける任意のコードを実行される脆弱性 CWE-DesignError
CVE-2008-5415 2010-12-24 11:50 2008-12-10 Show GitHub Exploit DB Packet Storm
252382 5 警告 CA Technologies - CA ARCserve Backup の asdbapi.dll におけるサービス運用妨害 (DoS) の脆弱性 CWE-20
不適切な入力確認
CVE-2008-4400 2010-12-24 11:48 2008-10-9 Show GitHub Exploit DB Packet Storm
252383 5 警告 CA Technologies - CA ARCserve Backup の asdbapi.dll のデータベースエンジンサービスにおけるサービス運用妨害 (DoS) の脆弱性 CWE-20
不適切な入力確認
CVE-2008-4399 2010-12-24 11:48 2008-10-9 Show GitHub Exploit DB Packet Storm
252384 5 警告 CA Technologies - CA ARCserve Backup の asdbapi.dll のテープエンジンサービスにおけるサービス運用妨害 (DoS) の脆弱性 CWE-20
CWE-noinfo
CVE-2008-4398 2010-12-24 11:47 2008-10-9 Show GitHub Exploit DB Packet Storm
252385 10 危険 CA Technologies - CA ARCserve Backup の RPC インターフェイスにおけるディレクトリトラバーサルの脆弱性 CWE-20
CWE-22
CVE-2008-4397 2010-12-24 11:47 2008-10-9 Show GitHub Exploit DB Packet Storm
252386 4.3 警告 CA Technologies - CA Service Desk および CMDB におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2008-4119 2010-12-24 11:43 2008-09-24 Show GitHub Exploit DB Packet Storm
252387 10 危険 CA Technologies - CA ARCserve Backup for Laptops and Desktops の LGServer サービスにおける整数オーバーフローの脆弱性 CWE-189
数値処理の問題
CVE-2008-3175 2010-12-24 11:42 2008-07-31 Show GitHub Exploit DB Packet Storm
252388 7.2 危険 CA Technologies - CA Host-Based Intrusion Prevention System の kmxfw.sys ドライバにおける権限を取得される脆弱性 CWE-20
不適切な入力確認
CVE-2008-2926 2010-12-24 11:42 2008-08-12 Show GitHub Exploit DB Packet Storm
252389 10 危険 CA Technologies - CA eTrust Secure Content Manager の HTTP Gateway Service におけるスタックベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー
CVE-2008-2541 2010-12-24 11:41 2008-06-3 Show GitHub Exploit DB Packet Storm
252390 9.3 危険 CA Technologies - CA Internet Security Suite の UmxEventCli.dll におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル
CVE-2008-2511 2010-12-24 11:41 2008-06-2 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 7, 2026, 4:22 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
257661 7.5 HIGH
Network
torproject
debian
tor
debian_linux
The hidden-service feature in Tor before 0.3.0.8 allows a denial of service (assertion failure and daemon exit) in the connection_edge_process_relay_cell function via a BEGIN_DIR cell on a rendezvous… CWE-617
 Reachable Assertion
CVE-2017-0376 2024-11-21 12:02 2017-06-10 Show GitHub Exploit DB Packet Storm
257662 7.5 HIGH
Network
torproject tor The hidden-service feature in Tor before 0.3.0.8 allows a denial of service (assertion failure and daemon exit) in the relay_send_end_cell_from_edge_ function via a malformed BEGIN cell. CWE-617
 Reachable Assertion
CVE-2017-0375 2024-11-21 12:02 2017-06-10 Show GitHub Exploit DB Packet Storm
257663 8.0 HIGH
Network
ibm sterling_selling_and_fulfillment_foundation IBM Sterling Order Management 9.2 through 9.5 is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions transmitted from a user that the … CWE-352
 Origin Validation Error
CVE-2016-9991 2024-11-21 12:02 2017-06-9 Show GitHub Exploit DB Packet Storm
257664 8.8 HIGH
Network
ibm maximo_asset_management
maximo_asset_management_essentials
IBM Maximo Asset Management 7.1, 7.5, and 7.6 could allow a remote attacker to hijack a user's session, caused by the failure to invalidate an existing session identifier. An attacker could exploit t… CWE-20
 Improper Input Validation 
CVE-2016-9977 2024-11-21 12:02 2017-06-8 Show GitHub Exploit DB Packet Storm
257665 9.8 CRITICAL
Network
game-music-emu_project
fedoraproject
opensuse_project
opensuse
novell
game-music-emu
fedora
leap
suse_linux_enterprise_software_development_kit
suse_linux_enterprise_desktop
suse_linux_enterprise_server
game-music-emu before 0.6.1 mishandles unspecified integer values. CWE-189
Numeric Errors
CVE-2016-9961 2024-11-21 12:02 2017-06-7 Show GitHub Exploit DB Packet Storm
257666 5.5 MEDIUM
Local
game-music-emu_project
fedoraproject
opensuse_project
opensuse
novell
game-music-emu
fedora
leap
suse_linux_enterprise_software_development_kit
suse_linux_enterprise_desktop
suse_linux_enterprise_server
game-music-emu before 0.6.1 allows local users to cause a denial of service (divide by zero and process crash). CWE-369
 Divide By Zero
CVE-2016-9960 2024-11-21 12:02 2017-06-7 Show GitHub Exploit DB Packet Storm
257667 7.8 HIGH
Local
config-model_project config-model lib/Config/Model.pm in Config-Model (aka libconfig-model-perl) before 2.102 allows local users to gain privileges via a crafted model in the current working directory, related to use of . with the IN… NVD-CWE-noinfo
CVE-2017-0374 2024-11-21 12:02 2017-05-24 Show GitHub Exploit DB Packet Storm
257668 7.3 HIGH
Local
config-model_project config-model The gen_class_pod implementation in lib/Config/Model/Utils/GenClassPod.pm in Config-Model (aka libconfig-model-perl) before 2.102 has a dangerous "use lib" line, which allows remote attackers to have… CWE-20
 Improper Input Validation 
CVE-2017-0373 2024-11-21 12:02 2017-05-24 Show GitHub Exploit DB Packet Storm
257669 9.8 CRITICAL
Network
microsoft edge A remote code execution vulnerability exists in Microsoft Chakra Core in the way JavaScript engines render when handling objects in memory. aka "Scripting Engine Memory Corruption Vulnerability". Thi… CWE-119
Incorrect Access of Indexable Resource ('Range Error') 
CVE-2017-0252 2024-11-21 12:02 2017-05-16 Show GitHub Exploit DB Packet Storm
257670 9.8 CRITICAL
Network
microsoft edge A remote code execution vulnerability exists in Microsoft Chakra Core in the way JavaScript engines render when handling objects in memory. aka "Scripting Engine Memory Corruption Vulnerability". Thi… CWE-119
Incorrect Access of Indexable Resource ('Range Error') 
CVE-2017-0223 2024-11-21 12:02 2017-05-16 Show GitHub Exploit DB Packet Storm