Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 7, 2026, 2:09 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
226551 7.5 危険 phpalumni - phpAlumni の Acomment.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-5815 2012-12-20 19:10 2009-01-2 Show GitHub Exploit DB Packet Storm
226552 7.5 危険 SPIP - SPIP の inc/rubriques.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-5813 2012-12-20 19:10 2008-12-24 Show GitHub Exploit DB Packet Storm
226553 10 危険 SPIP - SPIP における脆弱性 CWE-noinfo
情報不足 		CVE-2008-5812 2012-12-20 19:10 2008-12-24 Show GitHub Exploit DB Packet Storm
226554 4.3 警告 TestLink Development Team - TestLink におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2008-5807 2012-12-20 19:10 2008-12-31 Show GitHub Exploit DB Packet Storm
226555 10 危険 TYPO3 Association - TYPO3 用の Dictionary エクステンションにおける任意のコードを実行される脆弱性 CWE-94
コード・インジェクション 		CVE-2008-5801 2012-12-20 19:10 2008-12-31 Show GitHub Exploit DB Packet Storm
226556 7.5 危険 TYPO3 Association - TYPO3 用の fsmi_people エクステンションにおける SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-5800 2012-12-20 19:10 2008-12-31 Show GitHub Exploit DB Packet Storm
226557 4.3 警告 TYPO3 Association - TYPO3 用の Wir ber uns エクステンションにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2008-5799 2012-12-20 19:10 2008-12-31 Show GitHub Exploit DB Packet Storm
226558 7.5 危険 TYPO3 Association - TYPO3 用の CMS Poll system エクステンションにおける SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-5798 2012-12-20 19:10 2008-12-31 Show GitHub Exploit DB Packet Storm
226559 7.5 危険 TYPO3 Association - TYPO3 用の advCalendar エクステンションにおける SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-5797 2012-12-20 19:10 2008-12-31 Show GitHub Exploit DB Packet Storm
226560 7.5 危険 TYPO3 Association - TYPO3 用の eluna Page Comments エクステンションにおける SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-5796 2012-12-20 19:10 2008-12-31 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 7, 2026, 4:22 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
212991 7.8 HIGH
Local 		sublimetext sublime_text_3 DLL hijacking is possible in Sublime Text 3 version 3.1.1 build 3176 on 32-bit Windows platforms because a Trojan horse api-ms-win-core-fibers-l1-1-1.dll or api-ms-win-core-localization-l1-2-1.dll fi… CWE-427
 Uncontrolled Search Path Element 		CVE-2019-9116 2024-11-21 13:51 2019-02-25 Show GitHub Exploit DB Packet Storm
212992 8.8 HIGH
Network 		dlink dir-825_rev.b_firmware An issue was discovered on D-Link DIR-825 Rev.B 2.10 devices. They allow remote attackers to execute arbitrary commands via the ntp_server parameter in an ntp_sync.cgi POST request. NVD-CWE-noinfo
CVE-2019-9122 2024-11-21 13:51 2019-02-25 Show GitHub Exploit DB Packet Storm
212993 9.8 CRITICAL
Network 		irisnet irisnet-crypto In irisnet-crypto before 1.1.7 for IRISnet, the util/utils.js file allows code execution because of unsafe eval usage. CWE-94
Code Injection 		CVE-2019-9115 2024-11-21 13:51 2019-02-25 Show GitHub Exploit DB Packet Storm
212994 8.8 HIGH
Network 		libming ming Ming (aka libming) 0.4.8 has an out of bounds write vulnerability in the function strcpyext() in the decompile.c file in libutil.a. CWE-787
 Out-of-bounds Write 		CVE-2019-9114 2024-11-21 13:51 2019-02-25 Show GitHub Exploit DB Packet Storm
212995 8.8 HIGH
Network 		libming ming Ming (aka libming) 0.4.8 has a NULL pointer dereference in the function getString() in the decompile.c file in libutil.a. CWE-476
 NULL Pointer Dereference 		CVE-2019-9113 2024-11-21 13:51 2019-02-25 Show GitHub Exploit DB Packet Storm
212996 5.5 MEDIUM
Local 		micode xiaomi_perseus-p-oss The msm gpu driver for custom Linux kernels on the Xiaomi perseus-p-oss MIX 3 device through 2018-11-26 has an integer overflow and OOPS because of missing checks of the count argument in _sde_debugf… CWE-190
 Integer Overflow or Wraparound 		CVE-2019-9112 2024-11-21 13:51 2019-02-25 Show GitHub Exploit DB Packet Storm
212997 5.5 MEDIUM
Local 		micode xiaomi_perseus-p-oss The msm gpu driver for custom Linux kernels on the Xiaomi perseus-p-oss MIX 3 device through 2018-11-26 has an integer overflow and OOPS because of missing checks of the count argument in sde_evtlog_… CWE-190
 Integer Overflow or Wraparound 		CVE-2019-9111 2024-11-21 13:51 2019-02-25 Show GitHub Exploit DB Packet Storm
212998 6.1 MEDIUM
Network 		wuzhicms wuzhi_cms XSS exists in WUZHI CMS 4.1.0 via index.php?m=content&f=postinfo&v=listing&set_iframe=[XSS] to coreframe/app/content/postinfo.php. CWE-79
Cross-site Scripting 		CVE-2019-9110 2024-11-21 13:51 2019-02-25 Show GitHub Exploit DB Packet Storm
212999 6.1 MEDIUM
Network 		wuzhicms wuzhi_cms XSS exists in WUZHI CMS 4.1.0 via index.php?m=message&f=message&v=add&username=[XSS] to coreframe/app/message/message.php. CWE-79
Cross-site Scripting 		CVE-2019-9109 2024-11-21 13:51 2019-02-25 Show GitHub Exploit DB Packet Storm
213000 7.5 HIGH
Network 		flexera flexnet_publisher A Denial of Service (DoS) vulnerability was discovered in FlexNet Publisher's lmadmin 11.16.5, when doing a crafted POST request on lmadmin using the web-based tool. NVD-CWE-noinfo
CVE-2019-8963 2024-11-21 13:50 2023-03-30 Show GitHub Exploit DB Packet Storm