Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 3, 2026, 6:08 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
230401 6 警告 tuxplanet - BilboBlog の admin/delete.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-3302 2012-12-20 18:52 2008-07-25 Show GitHub Exploit DB Packet Storm
230402 3.5 注意 tuxplanet - BilboBlog におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2008-3301 2012-12-20 18:52 2008-07-25 Show GitHub Exploit DB Packet Storm
230403 6 警告 socialengine - SE における任意の PHP コードを実行される脆弱性 CWE-94
コード・インジェクション 		CVE-2008-3298 2012-12-20 18:52 2008-07-25 Show GitHub Exploit DB Packet Storm
230404 7.5 危険 socialengine - SE における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-3297 2012-12-20 18:52 2008-07-25 Show GitHub Exploit DB Packet Storm
230405 5 警告 sierra - SWAT におけるサービス運用妨害 (DoS) の脆弱性 CWE-20
不適切な入力確認 		CVE-2008-3286 2012-12-20 18:52 2008-07-24 Show GitHub Exploit DB Packet Storm
230406 5 警告 レッドハット - Red Hat Enterprise IPA および FreeIPA のデフォルト設定における Kerberos マスターキーを取得される脆弱性 CWE-200
情報漏えい 		CVE-2008-3274 2012-12-20 18:52 2008-09-10 Show GitHub Exploit DB Packet Storm
230407 5 警告 winsoftmagic - WinSoftMagic WRPC Lite におけるサービス運用妨害 (DoS) の脆弱性 CWE-399
リソース管理の問題 		CVE-2008-3269 2012-12-20 18:52 2008-07-24 Show GitHub Exploit DB Packet Storm
230408 7.5 危険 softacid - SoftAcid HRS Multi の picture_pic_bv.asp における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-3266 2012-12-20 18:52 2008-07-24 Show GitHub Exploit DB Packet Storm
230409 7.5 危険 Zoph - Zoph における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-3258 2012-12-20 18:52 2008-07-22 Show GitHub Exploit DB Packet Storm
230410 7.5 危険 siteframe - Siteframe CMS の folder.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-3256 2012-12-20 18:52 2008-07-22 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 3, 2026, 4:18 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
3171 7.8 HIGH
Local 		- - A file descriptor can be closed while a thread is blocked in a poll(2) or select(2) call waiting for that descriptor. Because the blocked thread does not hold a reference to the underlying object, t… CWE-416
 Use After Free 		CVE-2026-45251 2026-05-22 00:16 2026-05-21 Show GitHub Exploit DB Packet Storm
3172 8.8 HIGH
Local 		- - libcasper(3) communicates with helper processes via UNIX domain sockets, and uses the select(2) system call to wait for data to become available. However, it does not verify that its socket descript… CWE-121
Stack-based Buffer Overflow 		CVE-2026-39461 2026-05-22 00:16 2026-05-21 Show GitHub Exploit DB Packet Storm
3173 7.8 HIGH
Local 		- - An origin validation error vulnerability in the Trend Micro Apex One (mac) agent self-protection mechanism could allow a local attacker to escalate privileges on affected installations. Please not… CWE-346
 Origin Validation Error 		CVE-2025-71217 2026-05-22 00:16 2026-05-21 Show GitHub Exploit DB Packet Storm
3174 7.8 HIGH
Local 		- - A time-of-check time-of-use vulnerability in the Trend Micro Apex One (mac) agent cache mechanism could allow a local attacker to escalate privileges on affected installations. Please note: an att… CWE-367
 Time-of-check Time-of-use (TOCTOU) Race Condition 		CVE-2025-71216 2026-05-22 00:16 2026-05-21 Show GitHub Exploit DB Packet Storm
3175 7.0 HIGH
Local 		- - A time-of-check time-of-use vulnerability in the Trend Micro Apex One (mac) agent iCore service signature verification could allow a local attacker to escalate privileges on affected installations. … CWE-367
 Time-of-check Time-of-use (TOCTOU) Race Condition 		CVE-2025-71215 2026-05-22 00:16 2026-05-21 Show GitHub Exploit DB Packet Storm
3176 7.8 HIGH
Local 		- - An origin validation error vulnerability in the Trend Micro Apex One (mac) agent iCore service could allow a local attacker to escalate privileges on affected installations. Please note: an attack… CWE-346
 Origin Validation Error 		CVE-2025-71214 2026-05-22 00:16 2026-05-21 Show GitHub Exploit DB Packet Storm
3177 7.8 HIGH
Local 		- - MediaArea MediaInfoLib LXF element parsing heap-based buffer overflow vulnerability CWE-823
 Use of Out-of-range Pointer Offset 		CVE-2026-28764 2026-05-22 00:05 2026-05-21 Show GitHub Exploit DB Packet Storm
3178 7.5 HIGH
Network 		- - In Splunk Enterprise versions below 10.2.2 and 10.0.5, and Splunk Cloud Platform versions below 10.3.2512.8, 10.2.2510.11, 10.1.2507.21, and 10.0.2503.13, a user with a role that has access to the `_… CWE-532
 Inclusion of Sensitive Information in Log Files 		CVE-2026-20239 2026-05-22 00:00 2026-05-21 Show GitHub Exploit DB Packet Storm
3179 6.5 MEDIUM
Network 		- - In Splunk Enterprise versions below 10.2.2, 10.0.5, 9.4.11, and 9.3.12, and Splunk Cloud Platform versions below 10.4.2603.1, 10.3.2512.9, 10.2.2510.11, 10.1.2507.21, 10.0.2503.13, and 9.3.2411.129, … CWE-20
 Improper Input Validation  		CVE-2026-20240 2026-05-22 00:00 2026-05-21 Show GitHub Exploit DB Packet Storm
3180 7.1 HIGH
Local 		- - In the Linux kernel, the following vulnerability has been resolved: ptrace: slightly saner 'get_dumpable()' logic The 'dumpability' of a task is fundamentally about the memory image of the task - t… CWE-269
 Improper Privilege Management 		CVE-2026-46333 2026-05-21 23:16 2026-05-15 Show GitHub Exploit DB Packet Storm