Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 28, 2026, noon

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
229991 6.8 警告 torrenttrader - TorrentTrader Classic における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-2428 2012-12-20 18:52 2008-06-18 Show GitHub Exploit DB Packet Storm
229992 7.5 危険 webslider - Web Slider の index.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-2422 2012-12-20 18:52 2008-05-23 Show GitHub Exploit DB Packet Storm
229993 4.3 警告 SAP - SAP WAS などの Web GUI におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2008-2421 2012-12-20 18:52 2008-05-23 Show GitHub Exploit DB Packet Storm
229994 6.8 警告 stunnel - stunnel の OCSP 関数におけるアクセス制限を回避される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2008-2420 2012-12-20 18:52 2008-05-23 Show GitHub Exploit DB Packet Storm
229995 6.8 警告 sazcart - SazCart の index.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-2411 2012-12-20 18:52 2008-05-22 Show GitHub Exploit DB Packet Storm
229996 7.5 危険 サン・マイクロシステムズ - Sun Java ASP Server の管理アプリケーションサーバにおける認証を回避される脆弱性 CWE-287
不適切な認証 		CVE-2008-2406 2012-12-20 18:52 2008-06-3 Show GitHub Exploit DB Packet Storm
229997 7.5 危険 サン・マイクロシステムズ - Sun Java ASP Server における任意のコマンドを実行される脆弱性 CWE-20
不適切な入力確認 		CVE-2008-2405 2012-12-20 18:52 2008-06-3 Show GitHub Exploit DB Packet Storm
229998 10 危険 サン・マイクロシステムズ - Sun Java ASP Server のリクエスト処理実装におけるスタックベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2008-2404 2012-12-20 18:52 2008-06-3 Show GitHub Exploit DB Packet Storm
229999 5 警告 サン・マイクロシステムズ - Sun Java ASP Server の Admin Server におけるパスワードハッシュを読まれる脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2008-2402 2012-12-20 18:52 2008-06-3 Show GitHub Exploit DB Packet Storm
230000 7.5 危険 サン・マイクロシステムズ - Sun Java ASP Server の Admin Server における任意の新規ファイルにアペンドされる脆弱性 CWE-20
不適切な入力確認 		CVE-2008-2401 2012-12-20 18:52 2008-06-3 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 28, 2026, 4:16 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
311911 7.8 HIGH
Local 		linux linux_kernel In the Linux kernel, the following vulnerability has been resolved: drm/shmem-helper: Remove errant put in error path drm_gem_shmem_mmap() doesn't own this reference, resulting in the GEM object ge… CWE-416
 Use After Free 		CVE-2022-48981 2024-10-26 03:33 2024-10-22 Show GitHub Exploit DB Packet Storm
311912 8.1 HIGH
Network 		microsoft windows_server_2012
windows_10_1507
windows_server_2016
windows_server_2022_23h2
windows_10_21h2
windows_10_22h2
windows_11_23h2
windows_10_1607
windows_server_2019
windows… 		Windows MSHTML Platform Spoofing Vulnerability NVD-CWE-noinfo
CVE-2024-43573 2024-10-26 03:17 2024-10-9 Show GitHub Exploit DB Packet Storm
311913 7.8 HIGH
Local 		microsoft windows_server_2008
windows_server_2012
windows_10_1507
windows_server_2016
windows_server_2022_23h2
windows_10_21h2
windows_10_22h2
windows_11_23h2
windows_10_1607
windows… 		Microsoft Management Console Remote Code Execution Vulnerability NVD-CWE-noinfo
CVE-2024-43572 2024-10-26 03:17 2024-10-9 Show GitHub Exploit DB Packet Storm
311914 5.5 MEDIUM
Local 		linux linux_kernel In the Linux kernel, the following vulnerability has been resolved: Bluetooth: Fix crash when replugging CSR fake controllers It seems fake CSR 5.0 clones can cause the suspend notifier to be regis… NVD-CWE-noinfo
CVE-2022-48982 2024-10-26 03:12 2024-10-22 Show GitHub Exploit DB Packet Storm
311915 - - - In lwis_device_event_states_clear_locked of lwis_event.c, there is a possible privilege escalation due to a double free. This could lead to local escalation of privilege with no additional execution … - CVE-2024-44098 2024-10-26 02:35 2024-10-25 Show GitHub Exploit DB Packet Storm
311916 - - - Nagios XI before 2024R1 was discovered to improperly handle API keys generation (randomly-generated), allowing attackers to possibly generate the same set of API keys for all users and utilize them t… - CVE-2023-48082 2024-10-26 02:15 2024-10-15 Show GitHub Exploit DB Packet Storm
311917 8.1 HIGH
Network 		google chrome Inappropriate implementation in Extensions in Google Chrome prior to 130.0.6723.69 allowed a remote attacker to bypass site isolation via a crafted Chrome Extension. (Chromium security severity: High) NVD-CWE-noinfo
CVE-2024-10229 2024-10-26 02:04 2024-10-23 Show GitHub Exploit DB Packet Storm
311918 9.8 CRITICAL
Network 		keith-cullen freecoap Null Pointer Dereference in `coap_client_exchange_blockwise2` function in Keith Cullen FreeCoAP 1.0 allows remote attackers to cause a denial of service and potentially execute arbitrary code via a s… CWE-476
 NULL Pointer Dereference 		CVE-2024-40493 2024-10-26 02:01 2024-10-23 Show GitHub Exploit DB Packet Storm
311919 8.8 HIGH
Network 		google chrome Type Confusion in V8 in Google Chrome prior to 130.0.6723.69 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High) CWE-843
Type Confusion 		CVE-2024-10231 2024-10-26 02:01 2024-10-23 Show GitHub Exploit DB Packet Storm
311920 9.8 CRITICAL
Network 		janobe online_complaint_site SQL Injection vulnerability in Online Complaint Site v.1.0 allows a remote attacker to escalate privileges via the username and password parameters in the /admin.index.php component. CWE-89
SQL Injection 		CVE-2024-44812 2024-10-26 01:56 2024-10-23 Show GitHub Exploit DB Packet Storm