Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 27, 2026, 4 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
244161 10 危険 Baidu, Inc. - Baidu Hi IM の CSTransfer.dll におけるスタックベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2008-6444 2012-06-26 16:10 2009-03-9 Show GitHub Exploit DB Packet Storm
244162 9.3 危険 epic games - ゲーム製品で使用される Epic Games Unreal エンジンクライアントにおけるフォーマットストリングの脆弱性 CWE-134
書式文字列の問題 		CVE-2008-6441 2012-06-26 16:10 2009-03-9 Show GitHub Exploit DB Packet Storm
244163 5 警告 Cerberus, LLC - Cerberus Helpdesk における重要な情報を取得される脆弱性 CWE-287
不適切な認証 		CVE-2008-6440 2012-06-26 16:10 2009-03-6 Show GitHub Exploit DB Packet Storm
244164 4.3 警告 abledating - ABK-Soft AbleDating の search_results.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2008-6439 2012-06-26 16:10 2009-03-6 Show GitHub Exploit DB Packet Storm
244165 7.5 危険 e107.org
e107coders		 - e107 用 MacGuru BLOG Engine プラグイン のmacgurublog_menu/macgurublog.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-6438 2012-06-26 16:10 2009-03-6 Show GitHub Exploit DB Packet Storm
244166 7.5 危険 Blue River - Blue River Interactive Group Sava CMS の index.cfm における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-6434 2012-06-26 16:10 2009-03-6 Show GitHub Exploit DB Packet Storm
244167 4.3 警告 Blue River - Blue River Interactive Group Sava CMS の index.cfm におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2008-6433 2012-06-26 16:10 2009-03-6 Show GitHub Exploit DB Packet Storm
244168 4.3 警告 bmforum - BMForum におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2008-6431 2012-06-26 16:10 2009-03-6 Show GitHub Exploit DB Packet Storm
244169 7.5 危険 comicshout - ComicShout の news.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-6425 2012-06-26 16:10 2009-03-6 Show GitHub Exploit DB Packet Storm
244170 5 警告 greensql - GreenSQL-Console における"インストールディレクトリ" を取得される脆弱性 CWE-noinfo
情報不足 		CVE-2008-6417 2012-06-26 16:10 2009-03-6 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 27, 2026, 4:52 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
501 8.8 HIGH
Network 		- - A vulnerability was found in Edimax EW-7438RPn up to 1.31. Affected by this vulnerability is an unknown functionality of the file /goform/mp of the component webs. The manipulation of the argument we… CWE-119
CWE-121
Incorrect Access of Indexable Resource ('Range Error') 
Stack-based Buffer Overflow 		CVE-2026-9348 2026-05-24 13:16 2026-05-24 Show GitHub Exploit DB Packet Storm
502 7.5 HIGH
Network 		- - In GNU SASL before 2.2.3, DIGEST-MD5 has a NULL pointer dereference affecting both clients and servers, via a known token with no accompanying = character. This occurs in lib/digest-md5/getsubopt.c. CWE-476
 NULL Pointer Dereference 		CVE-2026-48829 2026-05-24 13:16 2026-05-24 Show GitHub Exploit DB Packet Storm
503 6.3 MEDIUM
Network 		- - A vulnerability has been found in Edimax EW-7438RPn up to 1.31. Affected is the function formWizSurvey of the file /goform/formWizSurvey of the component webs. The manipulation of the argument ip/mas… CWE-77
CWE-78
Command Injection
OS Command  		CVE-2026-9347 2026-05-24 11:16 2026-05-24 Show GitHub Exploit DB Packet Storm
504 8.8 HIGH
Network 		- - A flaw has been found in Edimax EW-7438RPn up to 1.31. This impacts the function formWirelessTbl of the file /goform/formWirelessTbl of the component webs. Executing a manipulation of the argument su… CWE-119
CWE-120
Incorrect Access of Indexable Resource ('Range Error') 
Classic Buffer Overflow 		CVE-2026-9346 2026-05-24 11:16 2026-05-24 Show GitHub Exploit DB Packet Storm
505 8.8 HIGH
Network 		- - A vulnerability was detected in Edimax EW-7438RPn up to 1.31. This affects the function formWizSurvey of the file /goform/formWizSurvey of the component webs. Performing a manipulation of the argumen… CWE-119
CWE-120
Incorrect Access of Indexable Resource ('Range Error') 
Classic Buffer Overflow 		CVE-2026-9345 2026-05-24 11:16 2026-05-24 Show GitHub Exploit DB Packet Storm
506 8.8 HIGH
Network 		- - A security vulnerability has been detected in Edimax EW-7438RPn up to 1.31. The impacted element is an unknown function of the file /goform/formWpsStart of the component webs. Such manipulation of th… CWE-119
CWE-121
Incorrect Access of Indexable Resource ('Range Error') 
Stack-based Buffer Overflow 		CVE-2026-9344 2026-05-24 10:16 2026-05-24 Show GitHub Exploit DB Packet Storm
507 6.3 MEDIUM
Network 		- - A weakness has been identified in Edimax EW-7438RPn up to 1.31. The affected element is the function formWpsStart of the file /goform/formWpsStart of the component webs. This manipulation of the argu… CWE-77
CWE-78
Command Injection
OS Command  		CVE-2026-9343 2026-05-24 08:16 2026-05-24 Show GitHub Exploit DB Packet Storm
508 7.5 HIGH
Network 		- - D-Link DIR601 2.02NA contains a credential disclosure vulnerability that allows unauthenticated attackers to retrieve sensitive configuration data by manipulating the table_name parameter in POST req… CWE-497
 Exposure of Sensitive System Information to an Unauthorized Control Sphere 		CVE-2018-25358 2026-05-24 04:16 2026-05-24 Show GitHub Exploit DB Packet Storm
509 8.4 HIGH
Local 		- - SIPp 3.6 and earlier contains a local buffer overflow vulnerability in command-line argument handling that allows local attackers to crash the application or execute arbitrary code. Attackers can tri… CWE-120
Classic Buffer Overflow 		CVE-2018-25356 2026-05-24 04:16 2026-05-24 Show GitHub Exploit DB Packet Storm
510 8.4 HIGH
Local 		- - Audiograbber 1.83 contains a local buffer overflow vulnerability that allows attackers to execute arbitrary code by exploiting structured exception handling mechanisms. Attackers can craft malicious … CWE-120
Classic Buffer Overflow 		CVE-2018-25355 2026-05-24 04:16 2026-05-24 Show GitHub Exploit DB Packet Storm