Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 11, 2026, 6:01 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
226821 7.5 危険 riotpix - RiotPix の index.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2009-0109 2012-12-20 19:10 2009-01-9 Show GitHub Exploit DB Packet Storm
226822 7.5 危険 phpauctions - PHPAuctions における管理者アクセス権を取得される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2009-0108 2012-12-20 19:10 2009-01-9 Show GitHub Exploit DB Packet Storm
226823 4.3 警告 phpauctions - PHPAuctions の profile.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2009-0107 2012-12-20 19:10 2009-01-9 Show GitHub Exploit DB Packet Storm
226824 7.5 危険 phpauctions - PHPAuctions の profile.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2009-0106 2012-12-20 19:10 2009-01-9 Show GitHub Exploit DB Packet Storm
226825 4.3 警告 se-ed - EZpack の index.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2009-0105 2012-12-20 19:10 2009-01-9 Show GitHub Exploit DB Packet Storm
226826 7.5 危険 se-ed - EZpack の index.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2009-0104 2012-12-20 19:10 2009-01-9 Show GitHub Exploit DB Packet Storm
226827 7.5 危険 playSMS - playSMS における PHP リモートファイルインクルージョンの脆弱性 CWE-94
コード・インジェクション 		CVE-2009-0103 2012-12-20 19:10 2009-01-9 Show GitHub Exploit DB Packet Storm
226828 10 危険 The phpMyAdmin Project - phpMyAdmin の libraries/File.class.php における脆弱性 CWE-310
暗号の問題 		CVE-2008-7252 2012-12-20 19:10 2010-01-15 Show GitHub Exploit DB Packet Storm
226829 10 危険 The phpMyAdmin Project - phpMyAdmin の libraries/File.class.php における脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2008-7251 2012-12-20 19:10 2010-01-19 Show GitHub Exploit DB Packet Storm
226830 9 危険 シマンテック - Symantec Brightmail Gateway Appliance の Control Center における権限を取得される脆弱性 CWE-noinfo
情報不足 		CVE-2009-0064 2012-12-20 19:10 2009-04-23 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 12, 2026, 5:06 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
223061 6.1 MEDIUM
Network 		wordpress
debian 		wordpress
debian_linux 		WordPress before 5.2.3 allows XSS in media uploads because wp_ajax_upload_attachment is mishandled. CWE-79
Cross-site Scripting 		CVE-2019-16217 2024-11-21 13:30 2019-09-11 Show GitHub Exploit DB Packet Storm
223062 5.4 MEDIUM
Network 		esri arcgis_enterprise In ArcGIS Enterprise 10.6.1, a crafted IFRAME element can be used to trigger a Cross Frame Scripting (XFS) attack through the EDIT MY PROFILE feature. CWE-79
Cross-site Scripting 		CVE-2019-16193 2024-11-21 13:30 2019-09-11 Show GitHub Exploit DB Packet Storm
223063 5.7 MEDIUM
Network 		libra libra_core Libra Core before 2019-09-03 has an erroneous regular expression for inline comments, which makes it easier for attackers to interfere with code auditing by using a nonstandard line-break character f… NVD-CWE-noinfo
CVE-2019-16214 2024-11-21 13:30 2019-09-11 Show GitHub Exploit DB Packet Storm
223064 7.5 HIGH
Network 		humanica humatrix The Recruitment module in Humanica Humatrix 7 1.0.0.203 and 1.0.0.681 allows an unauthenticated attacker to change the password of any user via the recruitment_online/personalData/act_acounttab.cfm t… CWE-276
Incorrect Default Permissions  		CVE-2019-16106 2024-11-21 13:30 2019-09-11 Show GitHub Exploit DB Packet Storm
223065 6.5 MEDIUM
Network 		misp misp MISP before 2.4.115 allows privilege escalation in certain situations. After updating to 2.4.115, escalation attempts are blocked by the __checkLoggedActions function with a "This could be an indicat… CWE-269
 Improper Privilege Management 		CVE-2019-16202 2024-11-21 13:30 2019-09-10 Show GitHub Exploit DB Packet Storm
223066 9.8 CRITICAL
Network 		doccms doccms upload_model() in /admini/controllers/system/managemodel.php in DocCms 2016.5.17 allow remote attackers to execute arbitrary PHP code through module management files, as demonstrated by a .php file i… CWE-434
 Unrestricted Upload of File with Dangerous Type  		CVE-2019-16192 2024-11-21 13:30 2019-09-10 Show GitHub Exploit DB Packet Storm
223067 7.5 HIGH
Network 		limesurvey limesurvey Limesurvey before 3.17.14 uses an anti-CSRF cookie without the HttpOnly flag, which allows attackers to access a cookie value via a client-side script. CWE-732
 Incorrect Permission Assignment for Critical Resource 		CVE-2019-16187 2024-11-21 13:30 2019-09-10 Show GitHub Exploit DB Packet Storm
223068 7.2 HIGH
Network 		limesurvey limesurvey In Limesurvey before 3.17.14, admin users can access the plugin manager without proper permissions. CWE-276
Incorrect Default Permissions  		CVE-2019-16186 2024-11-21 13:30 2019-09-10 Show GitHub Exploit DB Packet Storm
223069 7.2 HIGH
Network 		limesurvey limesurvey In Limesurvey before 3.17.14, admin users can view, update, or delete reserved menu entries without proper permissions. CWE-276
Incorrect Default Permissions  		CVE-2019-16185 2024-11-21 13:30 2019-09-10 Show GitHub Exploit DB Packet Storm
223070 9.8 CRITICAL
Network 		limesurvey limesurvey A CSV injection vulnerability was found in Limesurvey before 3.17.14 that allows survey participants to inject commands via their survey responses that will be included in the export CSV file. CWE-1236
 Improper Neutralization of Formula Elements in a CSV File 		CVE-2019-16184 2024-11-21 13:30 2019-09-10 Show GitHub Exploit DB Packet Storm