Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 13, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
226771 5 警告 webfileexplorer - Web File Explorer におけるデータベースをダウンロードされる脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2009-1495 2012-12-20 19:10 2009-05-1 Show GitHub Exploit DB Packet Storm
226772 5 警告 Sendmail Consortium - Sendmail におけるヒープベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2009-1490 2012-12-20 19:10 2009-05-5 Show GitHub Exploit DB Packet Storm
226773 7.5 危険 rens rikkerink - Fungamez の includes/user.php における認証を回避される脆弱性 CWE-287
不適切な認証 		CVE-2009-1489 2012-12-20 19:10 2009-04-29 Show GitHub Exploit DB Packet Storm
226774 6.8 警告 rens rikkerink - FunGamez の admin/load.php におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2009-1488 2012-12-20 19:10 2009-04-29 Show GitHub Exploit DB Packet Storm
226775 7.5 危険 rens rikkerink - FunGamez の pages/login.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2009-1487 2012-12-20 19:10 2009-04-29 Show GitHub Exploit DB Packet Storm
226776 6.8 警告 studiolounge - index2.php から到達可能な Adam Patterson Studio Lounge Address Book における任意のコードを実行される脆弱性 CWE-Other
その他 		CVE-2009-1483 2012-12-20 19:10 2009-04-29 Show GitHub Exploit DB Packet Storm
226777 7.5 危険 pjhome - PJBlog3 の action.asp における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2009-1481 2012-12-20 19:10 2009-04-29 Show GitHub Exploit DB Packet Storm
226778 7.5 危険 Pragyan CMS Project - index.php Pragyan CMS における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2009-1480 2012-12-20 19:10 2009-04-29 Show GitHub Exploit DB Packet Storm
226779 7.5 危険 razorCMS - razorCMS における任意のページへ任意の PHP コードを挿入される脆弱性 CWE-94
コード・インジェクション 		CVE-2009-1463 2012-12-20 19:10 2009-04-20 Show GitHub Exploit DB Packet Storm
226780 7.2 危険 razorCMS - razorCMS の Security Manager における脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2009-1462 2012-12-20 19:10 2009-04-20 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 14, 2026, 4 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
222871 7.0 HIGH
Local 		xen
debian 		xen
debian_linux 		An issue was discovered in Xen through 4.11.x allowing x86 PV guest OS users to cause a denial of service or gain privileges by leveraging a race condition that arose when XENMEM_exchange was introdu… CWE-362
Race Condition 		CVE-2019-17342 2024-11-21 13:32 2019-10-8 Show GitHub Exploit DB Packet Storm
222872 7.8 HIGH
Local 		xen
debian 		xen
debian_linux 		An issue was discovered in Xen through 4.11.x allowing x86 PV guest OS users to cause a denial of service or gain privileges by leveraging a page-writability race condition during addition of a passe… CWE-362
Race Condition 		CVE-2019-17341 2024-11-21 13:32 2019-10-8 Show GitHub Exploit DB Packet Storm
222873 8.8 HIGH
Local 		xen
debian 		xen
debian_linux 		An issue was discovered in Xen through 4.11.x allowing x86 guest OS users to cause a denial of service or gain privileges because grant-table transfer requests are mishandled. CWE-401
 Missing Release of Memory after Effective Lifetime 		CVE-2019-17340 2024-11-21 13:32 2019-10-8 Show GitHub Exploit DB Packet Storm
222874 6.5 MEDIUM
Local 		xen
linux 		xen
linux_kernel 		An issue was discovered in drivers/xen/balloon.c in the Linux kernel before 5.2.3, as used in Xen through 4.12.x, allowing guest OS users to cause a denial of service because of unrestricted resource… CWE-770
 Allocation of Resources Without Limits or Throttling 		CVE-2019-17351 2024-11-21 13:32 2019-10-8 Show GitHub Exploit DB Packet Storm
222875 5.5 MEDIUM
Local 		xen
debian 		xen
debian_linux 		An issue was discovered in Xen through 4.12.x allowing Arm domU attackers to cause a denial of service (infinite loop) involving a compare-and-exchange operation. CWE-835
 Loop with Unreachable Exit Condition ('Infinite Loop') 		CVE-2019-17350 2024-11-21 13:32 2019-10-8 Show GitHub Exploit DB Packet Storm
222876 7.2 HIGH
Network 		sugarcrm sugarcrm SugarCRM before 8.0.4 and 9.x before 9.0.2 allows directory traversal in the Configurator module by an Admin user. CWE-22
Path Traversal 		CVE-2019-17314 2024-11-21 13:32 2019-10-8 Show GitHub Exploit DB Packet Storm
222877 8.8 HIGH
Network 		sugarcrm sugarcrm SugarCRM before 8.0.4 and 9.x before 9.0.2 allows directory traversal in the Studio module by a Developer user. CWE-22
Path Traversal 		CVE-2019-17313 2024-11-21 13:32 2019-10-8 Show GitHub Exploit DB Packet Storm
222878 8.8 HIGH
Network 		sugarcrm sugarcrm SugarCRM before 8.0.4 and 9.x before 9.0.2 allows directory traversal in the file function by a Regular user. CWE-22
Path Traversal 		CVE-2019-17312 2024-11-21 13:32 2019-10-8 Show GitHub Exploit DB Packet Storm
222879 8.8 HIGH
Network 		sugarcrm sugarcrm SugarCRM before 8.0.4 and 9.x before 9.0.2 allows directory traversal in the attachment function by a Regular user. CWE-22
Path Traversal 		CVE-2019-17311 2024-11-21 13:32 2019-10-8 Show GitHub Exploit DB Packet Storm
222880 7.2 HIGH
Network 		sugarcrm sugarcrm SugarCRM before 8.0.4 and 9.x before 9.0.2 allows PHP code injection in the Campaigns module by an Admin user. CWE-94
Code Injection 		CVE-2019-17310 2024-11-21 13:32 2019-10-8 Show GitHub Exploit DB Packet Storm