Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 20, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
257981 5 警告 CA Technologies - CA ARCserve Backup の asdbapi.dll のテープエンジンサービスにおけるサービス運用妨害 (DoS) の脆弱性 CWE-20
CWE-noinfo
CVE-2008-4398 2010-12-24 11:47 2008-10-9 Show GitHub Exploit DB Packet Storm
257982 10 危険 CA Technologies - CA ARCserve Backup の RPC インターフェイスにおけるディレクトリトラバーサルの脆弱性 CWE-20
CWE-22
CVE-2008-4397 2010-12-24 11:47 2008-10-9 Show GitHub Exploit DB Packet Storm
257983 4.3 警告 CA Technologies - CA Service Desk および CMDB におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2008-4119 2010-12-24 11:43 2008-09-24 Show GitHub Exploit DB Packet Storm
257984 10 危険 CA Technologies - CA ARCserve Backup for Laptops and Desktops の LGServer サービスにおける整数オーバーフローの脆弱性 CWE-189
数値処理の問題 		CVE-2008-3175 2010-12-24 11:42 2008-07-31 Show GitHub Exploit DB Packet Storm
257985 7.2 危険 CA Technologies - CA Host-Based Intrusion Prevention System の kmxfw.sys ドライバにおける権限を取得される脆弱性 CWE-20
不適切な入力確認 		CVE-2008-2926 2010-12-24 11:42 2008-08-12 Show GitHub Exploit DB Packet Storm
257986 10 危険 CA Technologies - CA eTrust Secure Content Manager の HTTP Gateway Service におけるスタックベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2008-2541 2010-12-24 11:41 2008-06-3 Show GitHub Exploit DB Packet Storm
257987 9.3 危険 CA Technologies - CA Internet Security Suite の UmxEventCli.dll におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2008-2511 2010-12-24 11:41 2008-06-2 Show GitHub Exploit DB Packet Storm
257988 7.5 危険 CA Technologies - CA BrightStor ARCServe Backup のサーバ内の xdr 関数におけるバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2008-2242 2010-12-24 11:41 2008-05-19 Show GitHub Exploit DB Packet Storm
257989 10 危険 CA Technologies - CA BrightStor ARCServe Backup の caloggerd におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2008-2241 2010-12-24 11:40 2008-05-19 Show GitHub Exploit DB Packet Storm
257990 7.8 危険 CA Technologies - CA Secure Content Manager の eTrust Common Services Daemon におけるサービス運用妨害 (DoS) の脆弱性 CWE-399
リソース管理の問題 		CVE-2008-1984 2010-12-24 11:40 2008-04-27 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 21, 2026, 4:01 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
272181 8.1 HIGH
Network 		zabbix zabbix The mysql user parameter configuration script (userparameter_mysql.conf) in the agent in Zabbix before 2.0.18, 2.2.x before 2.2.13, and 3.0.x before 3.0.3, when used with a shell other than bash, all… CWE-89
SQL Injection 		CVE-2016-4338 2024-11-21 11:51 2017-01-24 Show GitHub Exploit DB Packet Storm
272182 6.1 MEDIUM
Network 		typo3 typo3 Cross-site scripting (XSS) vulnerability in the Backend component in TYPO3 6.2.x before 6.2.19 allows remote attackers to inject arbitrary web script or HTML via the module parameter when creating a … CWE-79
Cross-site Scripting 		CVE-2016-4056 2024-11-21 11:51 2017-01-24 Show GitHub Exploit DB Packet Storm
272183 6.5 MEDIUM
Network 		momentjs
tenable
oracle 		moment
nessus
primavera_unifier 		The duration function in the moment package before 2.11.2 for Node.js allows remote attackers to cause a denial of service (CPU consumption) via a long string, aka a "regular expression Denial of Ser… CWE-400
 Uncontrolled Resource Consumption 		CVE-2016-4055 2024-11-21 11:51 2017-01-24 Show GitHub Exploit DB Packet Storm
272184 9.8 CRITICAL
Network 		magento magento Magento CE and EE before 2.0.6 allows remote attackers to conduct PHP objection injection attacks and execute arbitrary PHP code via crafted serialized shopping cart data. CWE-74
Injection 		CVE-2016-4010 2024-11-21 11:51 2017-01-24 Show GitHub Exploit DB Packet Storm
272185 7.5 HIGH
Network 		synacor zimbra_collaboration_suite Unspecified vulnerability in Zimbra Collaboration before 8.7.0 allows remote attackers to affect integrity via unknown vectors, aka bug 104477. NVD-CWE-noinfo
CVE-2016-4019 2024-11-21 11:51 2017-01-19 Show GitHub Exploit DB Packet Storm
272186 6.1 MEDIUM
Network 		synacor zimbra_collaboration_suite Multiple cross-site scripting (XSS) vulnerabilities in Zimbra Collaboration before 8.7.0 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors, aka bugs 104552 and 104… CWE-79
Cross-site Scripting 		CVE-2016-3999 2024-11-21 11:51 2017-01-19 Show GitHub Exploit DB Packet Storm
272187 9.8 CRITICAL
Network 		lexmark perceptive_document_filters An exploitable out-of-bounds write exists in the Bzip2 parsing of the Lexmark Perspective Document Filters conversion functionality. A crafted Bzip2 document can lead to a stack-based buffer overflow… CWE-787
 Out-of-bounds Write 		CVE-2016-4336 2024-11-21 11:51 2017-01-7 Show GitHub Exploit DB Packet Storm
272188 8.4 HIGH
Local 		lexmark perceptive_document_filters An exploitable buffer overflow exists in the XLS parsing of the Lexmark Perspective Document Filters conversion functionality. A crafted XLS document can lead to a stack based buffer overflow resulti… CWE-119
Incorrect Access of Indexable Resource ('Range Error')  		CVE-2016-4335 2024-11-21 11:51 2017-01-7 Show GitHub Exploit DB Packet Storm
272189 5.5 MEDIUM
Local 		kaspersky internet_security
total_security
anti-virus 		A local denial of service vulnerability exists in window broadcast message handling functionality of Kaspersky Anti-Virus software. Sending certain unhandled window messages, an attacker can cause ap… CWE-20
 Improper Input Validation  		CVE-2016-4329 2024-11-21 11:51 2017-01-7 Show GitHub Exploit DB Packet Storm
272190 3.7 LOW
Network 		pidgin
canonical
debian 		pidgin
ubuntu_linux
debian_linux 		A directory traversal exists in the handling of the MXIT protocol in Pidgin. Specially crafted MXIT data sent from the server could potentially result in an overwrite of files. A malicious server or … CWE-22
Path Traversal 		CVE-2016-4323 2024-11-21 11:51 2017-01-7 Show GitHub Exploit DB Packet Storm