Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 31, 2026, 4 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
230281 4.3 警告 telephone - Telephone Directory 2008 の edit1.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2008-2677 2012-12-20 18:52 2008-06-12 Show GitHub Exploit DB Packet Storm
230282 4.3 警告 softcomplex - PHP Image Gallery の index.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2008-2675 2012-12-20 18:52 2008-06-12 Show GitHub Exploit DB Packet Storm
230283 7.5 危険 Powie - Powie pNews の index.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2008-2673 2012-12-20 18:52 2008-06-12 Show GitHub Exploit DB Packet Storm
230284 7.5 危険 y-blog - yBlog における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2008-2669 2012-12-20 18:52 2008-06-11 Show GitHub Exploit DB Packet Storm
230285 4.3 警告 y-blog - yBlog におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2008-2668 2012-12-20 18:52 2008-06-11 Show GitHub Exploit DB Packet Storm
230286 7.5 危険 smeweb - SMEWeb の catalog.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2008-2652 2012-12-20 18:52 2008-06-10 Show GitHub Exploit DB Packet Storm
230287 4.3 警告 smeweb - SMEWeb における任意の Web スクリプトまたは HTML を挿入される脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2008-2644 2012-12-20 18:52 2008-06-10 Show GitHub Exploit DB Packet Storm
230288 7.5 危険 theflashblog - FlashBlog の php/leer_comentarios.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2008-2572 2012-12-20 18:52 2008-06-6 Show GitHub Exploit DB Packet Storm
230289 4.3 警告 samtodo - SamTodo の dsp_main.php などにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2008-2563 2012-12-20 18:52 2008-06-6 Show GitHub Exploit DB Packet Storm
230290 6.5 警告 powerphlogger - PowerPhlogger の edCss.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2008-2562 2012-12-20 18:52 2008-06-6 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 31, 2026, 4:16 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
3051 7.8 HIGH
Local
- - Out-of-bounds write vulnerability in Samsung Open Source Escargot allows Overflow Buffers. This issue affects Escargot: 590345cc6258317c5da850d846ce6baaf2afc2d3. CWE-787
 Out-of-bounds Write
CVE-2026-47314 2026-05-19 23:25 2026-05-19 Show GitHub Exploit DB Packet Storm
3052 5.5 MEDIUM
Local
- - Improper Check for Unusual or Exceptional Conditions vulnerability in Samsung Open Source Escargot allows Input Data Manipulation. This issue affects Escargot: 590345cc6258317c5da850d846ce6baaf2afc2… CWE-754
 Improper Check for Unusual or Exceptional Conditions
CVE-2026-47315 2026-05-19 23:25 2026-05-19 Show GitHub Exploit DB Packet Storm
3053 5.5 MEDIUM
Local
- - Improper Check or Handling of Exceptional Conditions vulnerability in Samsung Open Source Escargot allows Input Data Manipulation. This issue affects Escargot: 590345cc6258317c5da850d846ce6baaf2afc2… CWE-703
 Improper Check or Handling of Exceptional Conditions
CVE-2026-47316 2026-05-19 23:25 2026-05-19 Show GitHub Exploit DB Packet Storm
3054 5.5 MEDIUM
Local
- - Uncontrolled Recursion vulnerability in Samsung Open Source Escargot allows Excessive Allocation. This issue affects Escargot: 590345cc6258317c5da850d846ce6baaf2afc2d3. CWE-674
 Uncontrolled Recursion
CVE-2026-47317 2026-05-19 23:25 2026-05-19 Show GitHub Exploit DB Packet Storm
3055 5.4 MEDIUM
Network
- - A flaw was found in Keycloak. When both realm-level and client-level `notBefore` revocation policies are configured, Keycloak's OpenID Connect (OIDC) Introspection feature fails to properly honor the… CWE-303
 Incorrect Implementation of Authentication Algorithm
CVE-2026-8922 2026-05-19 23:25 2026-05-19 Show GitHub Exploit DB Packet Storm
3056 8.1 HIGH
Network
- - in OpenHarmony v6.0 and prior versions allow a remote attacker arbitrary code execution in pre-installed apps. CWE-364
 Signal Handler Race Condition
CVE-2026-24792 2026-05-19 23:25 2026-05-19 Show GitHub Exploit DB Packet Storm
3057 3.3 LOW
Local
- - in OpenHarmony v6.0 and prior versions allow a local attacker cause DOS. CWE-476
 NULL Pointer Dereference
CVE-2026-25110 2026-05-19 23:25 2026-05-19 Show GitHub Exploit DB Packet Storm
3058 8.4 HIGH
Local
- - in OpenHarmony v6.0 and prior versions allow a local attacker cause DOS and it cannot be recovered. CWE-787
 Out-of-bounds Write
CVE-2026-25781 2026-05-19 23:25 2026-05-19 Show GitHub Exploit DB Packet Storm
3059 5.5 MEDIUM
Local
- - in OpenHarmony v6.0 and prior versions allow a local attacker cause information leak CWE-281
 Improper Preservation of Permissions
CVE-2026-25850 2026-05-19 23:25 2026-05-19 Show GitHub Exploit DB Packet Storm
3060 8.8 HIGH
Network
- - in OpenHarmony v6.0 and prior versions allow a remote attacker arbitrary code execution in pre-installed apps. CWE-787
 Out-of-bounds Write
CVE-2026-27648 2026-05-19 23:25 2026-05-19 Show GitHub Exploit DB Packet Storm