Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 5, 2026, noon

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
226791 4.3 警告 The phpMyAdmin Project - TYPO3 用の phpMyAdmin エクステンションにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2008-3032 2012-12-20 18:52 2008-07-7 Show GitHub Exploit DB Packet Storm
226792 7.5 危険 Thomas Abeel - Simple PHP Agenda の index.php におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2008-3031 2012-12-20 18:52 2008-07-7 Show GitHub Exploit DB Packet Storm
226793 4.3 警告 Web-Empowered Church Team - TYPO3 用の WEC Discussion Forum エクステンションにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2008-3029 2012-12-20 18:52 2008-07-7 Show GitHub Exploit DB Packet Storm
226794 4.3 警告 TYPO3 Association - TYPO3 用の Send-A-Card エクステンションにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2008-3028 2012-12-20 18:52 2008-07-7 Show GitHub Exploit DB Packet Storm
226795 7.5 危険 vangogh web cms - VanGogh Web CMS の get_article.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-3027 2012-12-20 18:52 2008-07-7 Show GitHub Exploit DB Packet Storm
226796 7.5 危険 plx web studio - plx Ad Trader の ad.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-3025 2012-12-20 18:52 2008-07-7 Show GitHub Exploit DB Packet Storm
226797 6.9 警告 QNX Software Systems - QNX Momentics の phgrafx におけるスタックベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2008-3024 2012-12-20 18:52 2008-07-7 Show GitHub Exploit DB Packet Storm
226798 7.5 危険 phpbbportal - PHPortal の sablonlar/gunaysoft/gunaysoft.php における PHP リモートファイルインクルージョンの脆弱性 CWE-94
コード・インジェクション 		CVE-2008-3022 2012-12-20 18:52 2008-07-7 Show GitHub Exploit DB Packet Storm
226799 7.5 危険 phpeasydata - PHPEasyData における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-2995 2012-12-20 18:52 2008-07-3 Show GitHub Exploit DB Packet Storm
226800 4.3 警告 phpeasydata - PHPEasyData におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2008-2994 2012-12-20 18:52 2008-07-3 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 5, 2026, 4:51 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
212951 5.5 MEDIUM
Local 		apple mac_os_x
iphone_os 		This issue was addressed with improved checks. This issue is fixed in iOS 12.2, macOS Mojave 10.14.4. A malicious application may be able to overwrite arbitrary files. NVD-CWE-noinfo
CVE-2019-8521 2024-11-21 13:49 2019-12-19 Show GitHub Exploit DB Packet Storm
212952 5.5 MEDIUM
Local 		apple mac_os_x An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in macOS Mojave 10.14.4. A malicious application may be able to read restricted memory. CWE-125
Out-of-bounds Read 		CVE-2019-8520 2024-11-21 13:49 2019-12-19 Show GitHub Exploit DB Packet Storm
212953 5.5 MEDIUM
Local 		apple mac_os_x An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in macOS Mojave 10.14.4. An application may be able to read restricted memory. CWE-125
Out-of-bounds Read 		CVE-2019-8519 2024-11-21 13:49 2019-12-19 Show GitHub Exploit DB Packet Storm
212954 8.8 HIGH
Network 		apple iphone_os
watchos
tvos
icloud
itunes
safari 		Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 12.2, tvOS 12.2, watchOS 5.2, Safari 12.1, iTunes 12.9.4 for Windows, iCloud for Windows 7.1… CWE-787
 Out-of-bounds Write 		CVE-2019-8518 2024-11-21 13:49 2019-12-19 Show GitHub Exploit DB Packet Storm
212955 6.5 MEDIUM
Network 		apple mac_os_x
iphone_os
watchos
tvos 		An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in iOS 12.2, macOS Mojave 10.14.4, tvOS 12.2, watchOS 5.2. Processing a maliciously crafted font may result in t… CWE-125
Out-of-bounds Read 		CVE-2019-8517 2024-11-21 13:49 2019-12-19 Show GitHub Exploit DB Packet Storm
212956 7.5 HIGH
Network 		apple mac_os_x
iphone_os
watchos
tvos 		A validation issue was addressed with improved logic. This issue is fixed in iOS 12.2, macOS Mojave 10.14.4, tvOS 12.2, watchOS 5.2. Processing a maliciously crafted string may lead to a denial of se… CWE-20
 Improper Input Validation  		CVE-2019-8516 2024-11-21 13:49 2019-12-19 Show GitHub Exploit DB Packet Storm
212957 6.5 MEDIUM
Network 		apple iphone_os
tvos
icloud
itunes
safari 		A cross-origin issue existed with the fetch API. This was addressed with improved input validation. This issue is fixed in iOS 12.2, tvOS 12.2, Safari 12.1, iTunes 12.9.4 for Windows, iCloud for Wind… CWE-20
 Improper Input Validation  		CVE-2019-8515 2024-11-21 13:49 2019-12-19 Show GitHub Exploit DB Packet Storm
212958 7.8 HIGH
Local 		apple mac_os_x
iphone_os
watchos
tvos 		A logic issue was addressed with improved state management. This issue is fixed in iOS 12.2, macOS Mojave 10.14.4, tvOS 12.2, watchOS 5.2. An application may be able to gain elevated privileges. NVD-CWE-noinfo
CVE-2019-8514 2024-11-21 13:49 2019-12-19 Show GitHub Exploit DB Packet Storm
212959 7.8 HIGH
Local 		apple mac_os_x This issue was addressed with improved checks. This issue is fixed in macOS Mojave 10.14.4. A local user may be able to execute arbitrary shell commands. CWE-78
OS Command  		CVE-2019-8513 2024-11-21 13:49 2019-12-19 Show GitHub Exploit DB Packet Storm
212960 5.7 MEDIUM
Network 		apple iphone_os This issue was addressed with improved transparency. This issue is fixed in iOS 12.2. A user may authorize an enterprise administrator to remotely wipe their device without appropriate disclosure. CWE-863
 Incorrect Authorization 		CVE-2019-8512 2024-11-21 13:49 2019-12-19 Show GitHub Exploit DB Packet Storm