Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 4, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
226421 7.5 危険 sweetcms - sweetCMS の index.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-4647 2012-12-20 18:52 2008-10-21 Show GitHub Exploit DB Packet Storm
226422 2.1 注意 ウェブセンス - Websense Enterprise の Websense Reporter Module におけるデータベースへの権限を取得される脆弱性 CWE-255
証明書・パスワード管理 		CVE-2008-4646 2012-12-20 18:52 2008-10-21 Show GitHub Exploit DB Packet Storm
226423 9 危険 phpwebgallery - PhpWebGallery の plugins/event_tracer/event_list.php における任意の PHP コードを実行される脆弱性 CWE-94
コード・インジェクション 		CVE-2008-4645 2012-12-20 18:52 2008-10-21 Show GitHub Exploit DB Packet Storm
226424 10 危険 Matthias Wandel - Matthias Wandel jhead の jhead.c における任意のコマンドを実行される脆弱性 CWE-20
不適切な入力確認 		CVE-2008-4641 2012-12-20 18:52 2008-10-21 Show GitHub Exploit DB Packet Storm
226425 3.6 注意 Matthias Wandel - Matthias Wandel jhead の jhead.c における任意のファイルを削除される脆弱性 CWE-20
不適切な入力確認 		CVE-2008-4640 2012-12-20 18:52 2008-10-21 Show GitHub Exploit DB Packet Storm
226426 4.6 警告 Matthias Wandel - Matthias Wandel jhead の jhead.c における任意のファイルを上書きされる脆弱性 CWE-59
リンク解釈の問題 		CVE-2008-4639 2012-12-20 18:52 2008-10-21 Show GitHub Exploit DB Packet Storm
226427 7.5 危険 rgallery - WBB 用の rGallery プラグインにおける SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-4627 2012-12-20 18:52 2008-10-20 Show GitHub Exploit DB Packet Storm
226428 6.8 警告 zirkon box - Fritz Berger yappa-ng の yappa-ng におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2008-4626 2012-12-20 18:52 2008-10-20 Show GitHub Exploit DB Packet Storm
226429 7.5 危険 shiftthis - WordPress 用の ShiftThis Newsletter プラグインにおける SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-4625 2012-12-20 18:52 2008-10-20 Show GitHub Exploit DB Packet Storm
226430 5 警告 Wireshark - Wireshark の Bluetooth ACL 解析子におけるサービス運用妨害 (DoS) の脆弱性 CWE-399
リソース管理の問題 		CVE-2008-4683 2012-12-20 18:52 2007-04-4 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 4, 2026, 4:06 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
211811 5.5 MEDIUM
Local 		cron_project
debian
fedoraproject 		cron
debian_linux
fedora 		Vixie Cron before the 3.0pl1-133 Debian package allows local users to cause a denial of service (memory consumption) via a large crontab file because an unlimited number of lines is accepted. CWE-770
 Allocation of Resources Without Limits or Throttling 		CVE-2019-9705 2024-11-21 13:52 2019-03-12 Show GitHub Exploit DB Packet Storm
211812 5.5 MEDIUM
Local 		cron_project
fedoraproject
debian 		cron
fedora
debian_linux 		Vixie Cron before the 3.0pl1-133 Debian package allows local users to cause a denial of service (daemon crash) via a large crontab file because the calloc return value is not checked. CWE-476
CWE-252
 NULL Pointer Dereference
 Unchecked Return Value 		CVE-2019-9704 2024-11-21 13:52 2019-03-12 Show GitHub Exploit DB Packet Storm
211813 8.8 HIGH
Network 		cmsmadesimple cms_made_simple In CMS Made Simple (CMSMS) before 2.2.10, an authenticated user can achieve SQL Injection in class.showtime2_data.php via the functions _updateshow (parameter show_id), _inputshow (parameter show_id)… CWE-89
SQL Injection 		CVE-2019-9693 2024-11-21 13:52 2019-03-12 Show GitHub Exploit DB Packet Storm
211814 6.5 MEDIUM
Network 		cmsmadesimple cms_made_simple class.showtime2_image.php in CMS Made Simple (CMSMS) before 2.2.10 does not ensure that a watermark file has a standard image file extension (GIF, JPG, JPEG, or PNG). CWE-434
 Unrestricted Upload of File with Dangerous Type  		CVE-2019-9692 2024-11-21 13:52 2019-03-12 Show GitHub Exploit DB Packet Storm
211815 8.8 HIGH
Network 		sftnow sftnow sftnow through 2018-12-29 allows index.php?g=Admin&m=User&a=add_post CSRF to add an admin account. CWE-352
 Origin Validation Error 		CVE-2019-9688 2024-11-21 13:52 2019-03-12 Show GitHub Exploit DB Packet Storm
211816 9.8 CRITICAL
Network 		podofo_project
fedoraproject 		podofo
fedora 		PoDoFo 0.9.6 has a heap-based buffer overflow in PdfString::ConvertUTF16toUTF8 in base/PdfString.cpp. CWE-787
 Out-of-bounds Write 		CVE-2019-9687 2024-11-21 13:52 2019-03-12 Show GitHub Exploit DB Packet Storm
211817 8.1 HIGH
Network 		php
canonical
opensuse 		php
ubuntu_linux
leap 		An issue was discovered in PHP 7.x before 7.1.27 and 7.3.x before 7.3.3. phar_tar_writeheaders_int in ext/phar/tar.c has a buffer overflow via a long link value. NOTE: The vendor indicates that the l… CWE-119
Incorrect Access of Indexable Resource ('Range Error')  		CVE-2019-9675 2024-11-21 13:52 2019-03-11 Show GitHub Exploit DB Packet Storm
211818 7.5 HIGH
Network 		jtbc jtbc_php An issue was discovered in JTBC(PHP) 3.0.1.8. Its cache management module is flawed. An arbitrary file ending in "inc.php" can be deleted via a console/cache/manage.php?type=action&action=batch&batch… CWE-22
Path Traversal 		CVE-2019-9662 2024-11-21 13:52 2019-03-11 Show GitHub Exploit DB Packet Storm
211819 8.8 HIGH
Network 		pacman_project pacman pacman before 5.1.3 allows directory traversal when installing a remote package via a specified URL "pacman -U <url>" due to an unsanitized file name received from a Content-Disposition header. pacma… CWE-22
Path Traversal 		CVE-2019-9686 2024-11-21 13:52 2019-03-12 Show GitHub Exploit DB Packet Storm
211820 4.8 MEDIUM
Network 		yzmcms yzmcms Stored XSS exists in YzmCMS 5.2 via the admin/system_manage/user_config_edit.html "value" parameter, CWE-79
Cross-site Scripting 		CVE-2019-9661 2024-11-21 13:52 2019-03-11 Show GitHub Exploit DB Packet Storm