Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 3, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
226731 9.3 危険 pragyan - Pragyan CMS の cms/modules/form.lib.php における PHP リモートファイルインクルージョンの脆弱性 CWE-94
コード・インジェクション 		CVE-2008-3207 2012-12-20 18:52 2008-07-18 Show GitHub Exploit DB Packet Storm
226732 4.3 警告 xomol - Xomol CMS の index.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2008-3202 2012-12-20 18:52 2008-07-17 Show GitHub Exploit DB Packet Storm
226733 7.8 危険 reSIProcate - ReSIProcate におけるサービス運用妨害 (DoS) の脆弱性 CWE-20
不適切な入力確認 		CVE-2008-3199 2012-12-20 18:52 2008-07-14 Show GitHub Exploit DB Packet Storm
226734 3.5 注意 The phpMyAdmin Project - phpMyAdmin におけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反 		CVE-2008-3197 2012-12-20 18:52 2008-07-15 Show GitHub Exploit DB Packet Storm
226735 7.8 危険 yacc - yacc 内の skeleton.c における範囲外メモリのスタックにアクセスされる脆弱性 CWE-399
リソース管理の問題 		CVE-2008-3196 2012-12-20 18:52 2008-07-16 Show GitHub Exploit DB Packet Storm
226736 6.8 警告 TWiki - TWiki の bin/configure におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2008-3195 2012-12-20 18:52 2008-08-5 Show GitHub Exploit DB Packet Storm
226737 6.8 警告 Pluck CMS - pluck の data/inc/themes/predefined_variables.php におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2008-3194 2012-12-20 18:52 2008-07-16 Show GitHub Exploit DB Packet Storm
226738 7.5 危険 Sclek - jSite における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-3193 2012-12-20 18:52 2008-07-16 Show GitHub Exploit DB Packet Storm
226739 6.8 警告 Sclek - jSite の index.php におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2008-3192 2012-12-20 18:52 2008-07-16 Show GitHub Exploit DB Packet Storm
226740 6.8 警告 vclcomponents - Relative Real Estate Systems の index.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-3185 2012-12-20 18:52 2008-07-15 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 4, 2026, 4:06 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
212261 5.3 MEDIUM
Network 		misp misp In MISP 2.4.102, an authenticated user can view sightings that they should not be eligible for. Exploiting this requires access to the event that has received the sighting. The issue affects instance… CWE-862
 Missing Authorization 		CVE-2019-9482 2024-11-21 13:51 2019-03-1 Show GitHub Exploit DB Packet Storm
212262 9.8 CRITICAL
Network 		baigo baigo_cms An issue was discovered in baigo CMS 2.1.1. There is a vulnerability that allows remote attackers to execute arbitrary code. A BG_SITE_NAME parameter with malicious code can be written into the opt_b… CWE-94
Code Injection 		CVE-2019-9227 2024-11-21 13:51 2019-02-28 Show GitHub Exploit DB Packet Storm
212263 6.1 MEDIUM
Network 		baigo baigo_cms An issue was discovered in baigo CMS 2.1.1. There is a persistent XSS vulnerability that allows remote attackers to inject arbitrary web script or HTML via the opt[base][BG_SITE_NAME] parameter to th… CWE-79
Cross-site Scripting 		CVE-2019-9226 2024-11-21 13:51 2019-02-28 Show GitHub Exploit DB Packet Storm
212264 9.8 CRITICAL
Network 		live555
opensuse
debian 		streaming_media
leap
backports_sle
debian_linux 		In Live555 before 2019.02.27, malformed headers lead to invalid memory access in the parseAuthorizationHeader function. NVD-CWE-noinfo
CVE-2019-9215 2024-11-21 13:51 2019-02-28 Show GitHub Exploit DB Packet Storm
212265 7.5 HIGH
Network 		wireshark
debian 		wireshark
debian_linux 		In Wireshark 2.4.0 to 2.4.12 and 2.6.0 to 2.6.6, the RPCAP dissector could crash. This was addressed in epan/dissectors/packet-rpcap.c by avoiding an attempted dereference of a NULL conversation. CWE-476
 NULL Pointer Dereference 		CVE-2019-9214 2024-11-21 13:51 2019-02-28 Show GitHub Exploit DB Packet Storm
212266 5.5 MEDIUM
Local 		wireshark
debian
canonical
opensuse 		wireshark
debian_linux
ubuntu_linux
leap 		In Wireshark 2.4.0 to 2.4.12 and 2.6.0 to 2.6.6, the ASN.1 BER and related dissectors could crash. This was addressed in epan/dissectors/packet-ber.c by preventing a buffer overflow associated with e… CWE-787
CWE-193
 Out-of-bounds Write
 Off-by-one Error 		CVE-2019-9209 2024-11-21 13:51 2019-02-28 Show GitHub Exploit DB Packet Storm
212267 7.5 HIGH
Network 		wireshark
debian 		wireshark
debian_linux 		In Wireshark 2.4.0 to 2.4.12 and 2.6.0 to 2.6.6, the TCAP dissector could crash. This was addressed in epan/dissectors/asn1/tcap/tcap.cnf by avoiding NULL pointer dereferences. CWE-476
 NULL Pointer Dereference 		CVE-2019-9208 2024-11-21 13:51 2019-02-28 Show GitHub Exploit DB Packet Storm
212268 6.5 MEDIUM
Network 		gnu
fedoraproject
suse 		pspp
fedora
backports 		There is a reachable assertion abort in the function write_long_string_missing_values() in data/sys-file-writer.c in libdata.a in GNU PSPP 1.2.0 that will lead to denial of service. CWE-617
 Reachable Assertion 		CVE-2019-9211 2024-11-21 13:51 2019-02-28 Show GitHub Exploit DB Packet Storm
212269 9.8 CRITICAL
Network 		antfin sofa-hessian SOFA-Hessian through 4.0.2 allows remote attackers to execute arbitrary commands via a crafted serialized Hessian object because blacklisting of com.caucho.naming.QName and com.sun.org.apache.xpath.i… CWE-184
CWE-502
 Incomplete Blacklist
 Deserialization of Untrusted Data 		CVE-2019-9212 2024-11-21 13:51 2019-02-28 Show GitHub Exploit DB Packet Storm
212270 7.8 HIGH
Local 		advancemame
debian
canonical
fedoraproject 		advancecomp
debian_linux
ubuntu_linux
fedora 		In AdvanceCOMP 2.1, png_compress in pngex.cc in advpng has an integer overflow upon encountering an invalid PNG size, which results in an attempted memcpy to write into a buffer that is too small. (T… CWE-125
CWE-190
Out-of-bounds Read
 Integer Overflow or Wraparound 		CVE-2019-9210 2024-11-21 13:51 2019-02-27 Show GitHub Exploit DB Packet Storm