Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 7, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
227241 7.5 危険 PreProject.com - Pre Job Board の jobseekers/JobSearch.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-2915 2012-12-20 18:52 2008-06-30 Show GitHub Exploit DB Packet Storm
227242 7.5 危険 PreProject.com - PHP JOBWEBSITE PRO の jobseekers/JobSearch3.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-2914 2012-12-20 18:52 2008-06-30 Show GitHub Exploit DB Packet Storm
227243 6.8 警告 webchamado - WebChamado の admin/index.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-2907 2012-12-20 18:52 2008-06-30 Show GitHub Exploit DB Packet Storm
227244 6.8 警告 webchamado - WebChamado の lista_anexos.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-2906 2012-12-20 18:52 2008-06-30 Show GitHub Exploit DB Packet Storm
227245 7.5 危険 phpmycart - Conkurent PHPMyCart の shop.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-2904 2012-12-20 18:52 2008-06-30 Show GitHub Exploit DB Packet Storm
227246 7.5 危険 phpauction - PHPAuction の item.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-2900 2012-12-20 18:52 2008-06-27 Show GitHub Exploit DB Packet Storm
227247 6.8 警告 wise-ftp - AceBIT WISE-FTP の FTP クライアントにおけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2008-2889 2012-12-20 18:52 2008-06-27 Show GitHub Exploit DB Packet Storm
227248 9.3 危険 rss aggregator - RSS-aggregator の display.php における PHP リモートファイルインクルージョンの脆弱性 CWE-94
コード・インジェクション 		CVE-2008-2884 2012-12-20 18:52 2008-06-27 Show GitHub Exploit DB Packet Storm
227249 5 警告 relative real estate systems - Relative Real Estate Systems における重要な情報を取得される脆弱性 CWE-200
情報漏えい 		CVE-2008-2881 2012-12-20 18:52 2008-06-26 Show GitHub Exploit DB Packet Storm
227250 6.4 警告 yektaweb - AWT YEKTA の rss_getfile.php におけるオープンリダイレクトの脆弱性 CWE-Other
その他 		CVE-2008-2878 2012-12-20 18:52 2008-06-26 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 7, 2026, 4:22 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
2151 9.8 CRITICAL
Network 		- - A remote code execution (RCE) vulnerability in the /devserver/start endpoint of leonvanzyl autocoder commit 79d02a allows attackers to execute arbitrary code via providing a crafted command parameter. CWE-77
Command Injection 		CVE-2026-30352 2026-04-28 03:57 2026-04-28 Show GitHub Exploit DB Packet Storm
2152 8.8 HIGH
Local 		- - The Fan Control application V251 contains an improper privilege handling vulnerability in its Open File Dialog. The dialog processes user-supplied paths with elevated permissions, which can be exploi… CWE-269
 Improper Privilege Management 		CVE-2025-69689 2026-04-28 03:57 2026-04-28 Show GitHub Exploit DB Packet Storm
2153 6.2 MEDIUM
Local 		- - TransMac 12.2 contains a buffer overflow vulnerability in the license key input field that allows local attackers to crash the application by submitting an oversized string. Attackers can generate a … CWE-120
Classic Buffer Overflow 		CVE-2018-25264 2026-04-28 03:55 2026-04-27 Show GitHub Exploit DB Packet Storm
2154 6.2 MEDIUM
Local 		- - CrossFont 7.5 contains a buffer overflow vulnerability that allows local attackers to crash the application by submitting an oversized payload in the License Key field. Attackers can generate a malic… CWE-120
Classic Buffer Overflow 		CVE-2018-25273 2026-04-28 03:55 2026-04-27 Show GitHub Exploit DB Packet Storm
2155 6.2 MEDIUM
Local 		- - InfraRecorder 0.53 contains a denial of service vulnerability that allows local attackers to crash the application by importing a maliciously crafted text file. Attackers can create a text file conta… CWE-789
 Memory Allocation with Excessive Size Value 		CVE-2018-25274 2026-04-28 03:55 2026-04-27 Show GitHub Exploit DB Packet Storm
2156 5.5 MEDIUM
Local 		- - RoboImport 1.2.0.72 contains a denial of service vulnerability that allows local attackers to crash the application by submitting oversized input to registration fields. Attackers can paste a 6000-by… CWE-120
Classic Buffer Overflow 		CVE-2018-25276 2026-04-28 03:55 2026-04-27 Show GitHub Exploit DB Packet Storm
2157 6.2 MEDIUM
Local 		- - PixGPS 1.1.8 contains a buffer overflow vulnerability that allows local attackers to crash the application by supplying an oversized string to the folder path input field. Attackers can craft a paylo… CWE-120
Classic Buffer Overflow 		CVE-2018-25277 2026-04-28 03:55 2026-04-27 Show GitHub Exploit DB Packet Storm
2158 6.2 MEDIUM
Local 		- - PicaJet FX 2.6.5 contains a denial of service vulnerability that allows local attackers to crash the application by submitting oversized input to registration fields. Attackers can paste a 6000-byte … CWE-120
Classic Buffer Overflow 		CVE-2018-25278 2026-04-28 03:55 2026-04-27 Show GitHub Exploit DB Packet Storm
2159 6.2 MEDIUM
Local 		- - jiNa OCR Image to Text 1.0 contains a denial of service vulnerability that allows local attackers to crash the application by processing a malformed PNG file. Attackers can create a specially crafted… CWE-789
 Memory Allocation with Excessive Size Value 		CVE-2018-25279 2026-04-28 03:55 2026-04-27 Show GitHub Exploit DB Packet Storm
2160 5.5 MEDIUM
Local 		- - Infiltrator Network Security Scanner 4.6 contains a buffer overflow vulnerability that allows local attackers to crash the application by supplying an oversized input string. Attackers can paste a 60… CWE-120
Classic Buffer Overflow 		CVE-2018-25280 2026-04-28 03:55 2026-04-27 Show GitHub Exploit DB Packet Storm