Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 11, 2026, 6:01 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
227611 5 警告 designplace - ASP/MS Access Shoutbox における重要な情報を取得される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2008-4512 2012-12-20 18:52 2008-10-9 Show GitHub Exploit DB Packet Storm
227612 5 警告 toddwoolums - Todd Woolums ASP News Management における重要な情報を取得される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2008-4511 2012-12-20 18:52 2008-10-9 Show GitHub Exploit DB Packet Storm
227613 7.8 危険 tonec inc. - Tonec Internet Download Manager のファイル解析関数におけるスタックベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2008-4508 2012-12-20 18:52 2008-10-9 Show GitHub Exploit DB Packet Storm
227614 9 危険 Rhino Software - Serv-U の FTP サーバにおけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2008-4501 2012-12-20 18:52 2008-10-8 Show GitHub Exploit DB Packet Storm
227615 4.3 警告 Plone Foundation - Plone の LiveSearch モジュールにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2008-4571 2012-12-20 18:52 2007-10-7 Show GitHub Exploit DB Packet Storm
227616 4 警告 Rhino Software - Serv-U におけるサービス運用妨害 (DoS) の脆弱性 CWE-20
不適切な入力確認 		CVE-2008-4500 2012-12-20 18:52 2008-10-8 Show GitHub Exploit DB Packet Storm
227617 7.5 危険 phpautos - PHP Autos の searchresults.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-4498 2012-12-20 18:52 2008-10-8 Show GitHub Exploit DB Packet Storm
227618 7.5 危険 select development solutions - PHP Realtor の view_cat.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-4496 2012-12-20 18:52 2008-10-8 Show GitHub Exploit DB Packet Storm
227619 7.5 危険 select development solutions - PHP Auto Dealer の view_cat.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-4495 2012-12-20 18:52 2008-10-8 Show GitHub Exploit DB Packet Storm
227620 7.5 危険 torrenttrader - TorrentTrader Classic の completed-advance.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-4494 2012-12-20 18:52 2008-10-8 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 12, 2026, 5:06 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
312121 5.5 MEDIUM
Local 		linux linux_kernel In the Linux kernel, the following vulnerability has been resolved: net/smc: fix connection leak There's a potential leak issue under following execution sequence : smc_release smc_connect_wo… CWE-401
 Missing Release of Memory after Effective Lifetime 		CVE-2022-48909 2024-09-12 22:36 2024-08-22 Show GitHub Exploit DB Packet Storm
312122 5.5 MEDIUM
Local 		linux linux_kernel In the Linux kernel, the following vulnerability has been resolved: auxdisplay: lcd2s: Fix memory leak in ->remove() Once allocated the struct lcd2s_data is never freed. Fix the memory leak by swit… CWE-401
 Missing Release of Memory after Effective Lifetime 		CVE-2022-48907 2024-09-12 22:33 2024-08-22 Show GitHub Exploit DB Packet Storm
312123 5.3 MEDIUM
Network 		sap document_builder SAP Document Builder does not perform necessary authorization checks for one of the function modules resulting in escalation of privileges causing low impact on confidentiality of the application. CWE-862
 Missing Authorization 		CVE-2024-39591 2024-09-12 22:29 2024-08-13 Show GitHub Exploit DB Packet Storm
312124 4.3 MEDIUM
Network 		sap netweaver_application_server_abap Due to missing authorization check in SAP NetWeaver Application Server ABAP and ABAP Platform, an authenticated attacker could call an underlying transaction, which leads to disclosure of user relate… CWE-862
 Missing Authorization 		CVE-2024-41734 2024-09-12 22:28 2024-08-13 Show GitHub Exploit DB Packet Storm
312125 5.5 MEDIUM
Local 		linux linux_kernel In the Linux kernel, the following vulnerability has been resolved: xen/netfront: destroy queues before real_num_tx_queues is zeroed xennet_destroy_queues() relies on info->netdev->real_num_tx_queu… CWE-476
 NULL Pointer Dereference 		CVE-2022-48914 2024-09-12 22:27 2024-08-22 Show GitHub Exploit DB Packet Storm
312126 5.4 MEDIUM
Network 		sap student_life_cycle_management SAP Student Life Cycle Management (SLcM) fails to conduct proper authorization checks for authenticated users, leading to the potential escalation of privileges. On successful exploitation it could a… CWE-862
 Missing Authorization 		CVE-2024-42373 2024-09-12 22:26 2024-08-13 Show GitHub Exploit DB Packet Storm
312127 5.5 MEDIUM
Local 		linux linux_kernel In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_queue: fix possible use-after-free Eric Dumazet says: The sock_hold() side seems suspect, because there is no gua… CWE-416
 Use After Free 		CVE-2022-48911 2024-09-12 22:24 2024-08-22 Show GitHub Exploit DB Packet Storm
312128 - - - Deserialization of untrusted data can occur in versions 2.4.0 or newer of the Cleanlab project, enabling a maliciously crafted datalab.pkl file to run arbitrary code on an end user’s system when the … - CVE-2024-45857 2024-09-12 22:15 2024-09-12 Show GitHub Exploit DB Packet Storm
312129 5.5 MEDIUM
Local 		linux linux_kernel In the Linux kernel, the following vulnerability has been resolved: iommu/vt-d: Fix double list_add when enabling VMD in scalable mode When enabling VMD and IOMMU scalable mode, the following kerne… NVD-CWE-noinfo
CVE-2022-48916 2024-09-12 22:11 2024-08-22 Show GitHub Exploit DB Packet Storm
312130 5.5 MEDIUM
Local 		linux linux_kernel In the Linux kernel, the following vulnerability has been resolved: ASoC: ops: Shift tested values in snd_soc_put_volsw() by +min While the $val/$val2 values passed in from userspace are always >= … NVD-CWE-noinfo
CVE-2022-48917 2024-09-12 22:07 2024-08-22 Show GitHub Exploit DB Packet Storm