Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 13, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
232671 4.3 警告 php-stats - Michael Wagner phpstats の phpstats.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2008-0125 2012-12-20 18:34 2008-03-24 Show GitHub Exploit DB Packet Storm
232672 4.3 警告 s9y - S9Y におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2008-0124 2012-12-20 18:34 2008-02-25 Show GitHub Exploit DB Packet Storm
232673 7.5 危険 ourproject.org - White_Dune の DuneApp.cpp におけるフォーマットストリングの脆弱性 CWE-20
不適切な入力確認 		CVE-2008-0101 2012-12-20 18:34 2008-01-7 Show GitHub Exploit DB Packet Storm
232674 7.5 危険 ourproject.org - White_Dune の Scene.cpp におけるスタックベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2008-0100 2012-12-20 18:34 2008-01-7 Show GitHub Exploit DB Packet Storm
232675 10 危険 リアルネットワークス - RealPlayer におけるバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2008-0098 2012-12-20 18:34 2008-01-7 Show GitHub Exploit DB Packet Storm
232676 4.3 警告 phpWebSite - Appalachian State University phpWebSite の search モジュールの index.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2008-0092 2012-12-20 18:34 2008-01-3 Show GitHub Exploit DB Packet Storm
232677 6.8 警告 Xine - xine-lib の input/libreal/sdpplin.c における任意のコードを実行される脆弱性 CWE-189
数値処理の問題 		CVE-2008-0073 2012-12-20 18:34 2008-03-24 Show GitHub Exploit DB Packet Storm
232678 6.8 警告 pierreegougelet - XnView におけるスタックベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2008-0069 2012-12-20 18:34 2008-04-2 Show GitHub Exploit DB Packet Storm
232679 10 危険 Winamp - Winamp の in_mp3.dll におけるスタックベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2008-0065 2012-12-20 18:34 2008-01-22 Show GitHub Exploit DB Packet Storm
232680 9.3 危険 pierreegougelet - Windows 上で稼動する GFL SDK の Pierre-emmanuel Gougelet XnView などにおけるスタックベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2008-0064 2012-12-20 18:34 2008-01-31 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 14, 2026, 4:12 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
313951 9.8 CRITICAL
Network 		dlink di-8003_firmware A vulnerability was found in D-Link DI-8003 16.07.16A1. It has been declared as critical. Affected by this vulnerability is the function upgrade_filter_asp of the file /upgrade_filter.asp. The manipu… CWE-119
CWE-121
Incorrect Access of Indexable Resource ('Range Error') 
Stack-based Buffer Overflow 		CVE-2024-11047 2024-11-14 05:56 2024-11-10 Show GitHub Exploit DB Packet Storm
313952 9.8 CRITICAL
Network 		dlink di-8003_firmware A vulnerability was found in D-Link DI-8003 16.07.16A1. It has been rated as critical. Affected by this issue is the function dbsrv_asp of the file /dbsrv.asp. The manipulation of the argument str le… CWE-119
CWE-121
Incorrect Access of Indexable Resource ('Range Error') 
Stack-based Buffer Overflow 		CVE-2024-11048 2024-11-14 05:53 2024-11-10 Show GitHub Exploit DB Packet Storm
313953 7.2 HIGH
Network 		salesagility suitecrm SuiteCRM is an open-source, enterprise-ready Customer Relationship Management (CRM) software application. SuiteCRM relies on the blacklist of functions/methods to prevent installation of malicious ML… NVD-CWE-noinfo
CVE-2024-49774 2024-11-14 05:40 2024-11-6 Show GitHub Exploit DB Packet Storm
313954 8.8 HIGH
Network 		zohocorp manageengine_admanager_plus Zohocorp ManageEngine ADManager Plus versions 7203 and prior are vulnerable to Privilege Escalation in the Modify Computers option. NVD-CWE-noinfo
CVE-2024-24409 2024-11-14 05:35 2024-11-8 Show GitHub Exploit DB Packet Storm
313955 5.4 MEDIUM
Network 		mycred mycred The myCred – Loyalty Points and Rewards plugin for WordPress and WooCommerce – Give Points, Ranks, Badges, Cashback, WooCommerce rewards, and WooCommerce credits for Gamification plugin for WordPress… CWE-79
Cross-site Scripting 		CVE-2024-10187 2024-11-14 05:31 2024-11-8 Show GitHub Exploit DB Packet Storm
313956 6.5 MEDIUM
Network 		salesagility suitecrm SuiteCRM is an open-source, enterprise-ready Customer Relationship Management (CRM) software application. Poor input validation in export allows authenticated user do a SQL injection attack. User-con… CWE-89
SQL Injection 		CVE-2024-49773 2024-11-14 05:29 2024-11-6 Show GitHub Exploit DB Packet Storm
313957 8.1 HIGH
Network 		zohocorp manageengine_sharepoint_manager_plus Zohocorp ManageEngine SharePoint Manager Plus versions 4503 and prior are vulnerable to authenticated XML External Entity (XXE) in the Management option. CWE-611
XXE 		CVE-2024-10839 2024-11-14 05:19 2024-11-8 Show GitHub Exploit DB Packet Storm
313958 8.8 HIGH
Network 		salesagility suitecrm SuiteCRM is an open-source, enterprise-ready Customer Relationship Management (CRM) software application. In SuiteCRM versions 7.14.4, poor input validation allows authenticated user do a SQL injecti… CWE-89
SQL Injection 		CVE-2024-49772 2024-11-14 05:19 2024-11-6 Show GitHub Exploit DB Packet Storm
313959 8.8 HIGH
Network 		salesagility suitecrm SuiteCRM is an open-source, enterprise-ready Customer Relationship Management (CRM) software application. User input is not validated and is written to the filesystem. The ParserLabel::addLabels() fu… NVD-CWE-noinfo
CVE-2024-50333 2024-11-14 05:10 2024-11-6 Show GitHub Exploit DB Packet Storm
313960 5.4 MEDIUM
Network 		brainstormforce elementor_header_\&_footer_builder The Elementor Header & Footer Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via REST API SVG File uploads in all versions up to, and including, 1.6.45 due to insufficient … CWE-79
Cross-site Scripting 		CVE-2024-10325 2024-11-14 05:01 2024-11-8 Show GitHub Exploit DB Packet Storm