Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 19, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
229581 9.3 危険 reality - PHPizabi の image.php における任意のコードを実行される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2008-0805 2012-12-20 18:34 2008-02-18 Show GitHub Exploit DB Packet Storm
229582 6.8 警告 Thecus - Thecus N5200Pro NAS Server の usrgetform.html における PHP リモートファイルインクルージョンの脆弱性 CWE-94
コード・インジェクション 		CVE-2008-0804 2012-12-20 18:34 2008-02-18 Show GitHub Exploit DB Packet Storm
229583 7.5 危険 VWar - VWar の calendar.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-0753 2012-12-20 18:34 2008-02-13 Show GitHub Exploit DB Packet Storm
229584 10 危険 ソニー・コンピュータエンタテインメント - Sony ImageStation 用の SonyISUpload.cab におけるバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2008-0748 2012-12-20 18:34 2008-02-13 Show GitHub Exploit DB Packet Storm
229585 7.5 危険 PreProject.com - PreProjects.com Pre Hotels & Resorts Management System の user_login.asp における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-0744 2012-12-20 18:34 2008-02-12 Show GitHub Exploit DB Packet Storm
229586 7.5 危険 powerscripts - PowerScripts PowerNews におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2008-0742 2012-12-20 18:34 2008-02-12 Show GitHub Exploit DB Packet Storm
229587 7.5 危険 shoppingtree - CP の admin/SA_shipFedExMeter.asp における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-0739 2012-12-20 18:34 2008-02-12 Show GitHub Exploit DB Packet Storm
229588 7.5 危険 shoppingtree - CP における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-0738 2012-12-20 18:34 2008-02-12 Show GitHub Exploit DB Packet Storm
229589 7.5 危険 shoppingtree - CP の admin/utilities_ConfigHelp.asp における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-0737 2012-12-20 18:34 2008-02-12 Show GitHub Exploit DB Packet Storm
229590 5 警告 shoppingtree - CP の admin/SA_shipFedExMeter.asp におけるパスを取得される脆弱性 CWE-200
情報漏えい 		CVE-2008-0736 2012-12-20 18:34 2008-02-12 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 20, 2026, 4:14 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
312041 6.1 MEDIUM
Network 		projectcaruso flaming_forms The Flaming Forms WordPress plugin through 1.0.1 does not sanitise and escape some parameters, which could allow unauthenticated users to perform Cross-Site Scripting attacks against administrators. CWE-79
Cross-site Scripting 		CVE-2024-7691 2024-10-5 02:15 2024-09-2 Show GitHub Exploit DB Packet Storm
312042 7.5 HIGH
Network 		oceanicsoft valeapp Cleartext Storage of Sensitive Information in a Cookie vulnerability in Oceanic Software ValeApp allows Protocol Manipulation, : JSON Hijacking (aka JavaScript Hijacking).This issue affects ValeApp: … CWE-312
 Cleartext Storage of Sensitive Information 		CVE-2024-8644 2024-10-5 02:14 2024-09-27 Show GitHub Exploit DB Packet Storm
312043 9.8 CRITICAL
Network 		oceanicsoft valeapp Session Fixation vulnerability in Oceanic Software ValeApp allows Brute Force, Session Hijacking.This issue affects ValeApp: before v2.0.0. CWE-384
 Session Fixation 		CVE-2024-8643 2024-10-5 02:14 2024-09-27 Show GitHub Exploit DB Packet Storm
312044 6.1 MEDIUM
Network 		projectcaruso flaming_forms The Flaming Forms WordPress plugin through 1.0.1 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used agains… CWE-79
Cross-site Scripting 		CVE-2024-7692 2024-10-5 02:14 2024-09-2 Show GitHub Exploit DB Packet Storm
312045 7.5 HIGH
Network 		oceanicsoft valeapp Insertion of Sensitive Information into Log File vulnerability in Oceanic Software ValeApp allows Query System for Information.This issue affects ValeApp: before v2.0.0. CWE-532
 Inclusion of Sensitive Information in Log Files 		CVE-2024-8609 2024-10-5 02:12 2024-09-27 Show GitHub Exploit DB Packet Storm
312046 9.8 CRITICAL
Network 		oceanicsoft valeapp Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Oceanic Software ValeApp allows SQL Injection.This issue affects ValeApp: before v2.0.0. CWE-89
SQL Injection 		CVE-2024-8607 2024-10-5 02:12 2024-09-27 Show GitHub Exploit DB Packet Storm
312047 5.5 MEDIUM
Local 		linux linux_kernel In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: the warning dereferencing obj for nbio_v7_4 if ras_manager obj null, don't print NBIO err data CWE-476
 NULL Pointer Dereference 		CVE-2024-46819 2024-10-5 02:11 2024-09-27 Show GitHub Exploit DB Packet Storm
312048 5.4 MEDIUM
Network 		oceanicsoft valeapp Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Oceanic Software ValeApp allows Stored XSS.This issue affects ValeApp: before v2.0.0. CWE-79
Cross-site Scripting 		CVE-2024-8608 2024-10-5 02:11 2024-09-27 Show GitHub Exploit DB Packet Storm
312049 7.8 HIGH
Local 		linux linux_kernel In the Linux kernel, the following vulnerability has been resolved: drm/amd/pm: Fix negative array index read Avoid using the negative values for clk_idex as an index into an array pptable->DpmDesc… CWE-129
 Improper Validation of Array Index 		CVE-2024-46821 2024-10-5 02:06 2024-09-27 Show GitHub Exploit DB Packet Storm
312050 5.5 MEDIUM
Local 		linux linux_kernel In the Linux kernel, the following vulnerability has been resolved: usb: gadget: core: Check for unset descriptor Make sure the descriptor has been set before looking at maxpacket. This fixes a nul… CWE-476
 NULL Pointer Dereference 		CVE-2024-44960 2024-10-5 01:44 2024-09-5 Show GitHub Exploit DB Packet Storm