Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 9, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
226951 7.5 危険 proclanmanager - Pro Clan Manager におけるセッションをハイジャックされる脆弱性 CWE-287
不適切な認証 		CVE-2008-5575 2012-12-20 18:52 2008-12-15 Show GitHub Exploit DB Packet Storm
226952 7.5 危険 unscripts - Webmaster Marketplace の member.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-5574 2012-12-20 18:52 2008-12-15 Show GitHub Exploit DB Packet Storm
226953 4.3 警告 phpeppershop - PHPepperShop におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2008-5569 2012-12-20 18:52 2008-12-15 Show GitHub Exploit DB Packet Storm
226954 4.3 警告 php multiple newsletters - Triangle Solutions PHP Multiple Newsletters の index.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2008-5566 2012-12-20 18:52 2008-12-15 Show GitHub Exploit DB Packet Storm
226955 5 警告 サン・マイクロシステムズ - Sun Java System Portal Server の Sun Java Web Console コンポーネントにおけるローカルファイルをアクセスされる脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2008-5549 2012-12-20 18:52 2008-12-5 Show GitHub Exploit DB Packet Storm
226956 9.3 危険 VirusBuster - VirusBuster における HTML 文書内のマルウェアの検出を回避される脆弱性 CWE-20
不適切な入力確認 		CVE-2008-5548 2012-12-20 18:52 2008-12-12 Show GitHub Exploit DB Packet Storm
226957 9.3 危険 VirusBlokAda Ltd. - VirusBlokAda VBA32 における HTML 文書内のマルウェアの検出を回避される脆弱性 CWE-20
不適切な入力確認 		CVE-2008-5546 2012-12-20 18:52 2008-12-12 Show GitHub Exploit DB Packet Storm
226958 9.3 危険 トレンドマイクロ - Trend Micro AntiVirus の Trend Micro VSAPI における HTML 文書内のマルウェアの検出を回避される脆弱性 CWE-20
不適切な入力確認 		CVE-2008-5545 2012-12-20 18:52 2008-12-12 Show GitHub Exploit DB Packet Storm
226959 9.3 危険 シマンテック - SAV における HTML ドキュメント内のマルウェアの検出を回避される脆弱性 CWE-20
不適切な入力確認 		CVE-2008-5543 2012-12-20 18:52 2008-12-12 Show GitHub Exploit DB Packet Storm
226960 9.3 危険 ThreatTrack Security, Inc. - Subbelt VIPRE における HTML 文書内のマルウエアの検出を回避される脆弱性 CWE-20
不適切な入力確認 		CVE-2008-5542 2012-12-20 18:52 2008-12-12 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 9, 2026, 5:07 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
223471 6.1 MEDIUM
Network 		stellarwp the_events_calendar The the-events-calendar plugin before 4.8.2 for WordPress has XSS via the tribe_paged URL parameter. CWE-79
Cross-site Scripting 		CVE-2019-15109 2024-11-21 13:28 2019-08-21 Show GitHub Exploit DB Packet Storm
223472 7.8 HIGH
Local 		audiocoding
debian 		freeware_advanced_audio_decoder_2
debian_linux 		An issue was discovered in Freeware Advanced Audio Decoder 2 (FAAD2) 2.8.8. The faad_resetbits function in libfaad/bits.c is affected by a buffer overflow vulnerability. The number of bits to be read… CWE-119
Incorrect Access of Indexable Resource ('Range Error')  		CVE-2019-15296 2024-11-21 13:28 2019-08-21 Show GitHub Exploit DB Packet Storm
223473 7.8 HIGH
Local 		acdsee photo_studio An issue was discovered in ACDSee Photo Studio Standard 22.1 Build 1159. There is a User Mode Write AV starting at IDE_ACDStd!IEP_ShowPlugInDialog+0x000000000023d060. NVD-CWE-noinfo
CVE-2019-15293 2024-11-21 13:28 2019-08-21 Show GitHub Exploit DB Packet Storm
223474 4.7 MEDIUM
Local 		linux
debian
canonical 		linux_kernel
debian_linux
ubuntu_linux 		An issue was discovered in the Linux kernel before 5.0.9. There is a use-after-free in atalk_proc_exit, related to net/appletalk/atalk_proc.c, net/appletalk/ddp.c, and net/appletalk/sysctl_net_atalk.… CWE-416
 Use After Free 		CVE-2019-15292 2024-11-21 13:28 2019-08-21 Show GitHub Exploit DB Packet Storm
223475 8.8 HIGH
Network 		cformsii_project cformsii The cforms2 plugin before 15.0.2 for WordPress has CSRF related to the IP address field. CWE-352
 Origin Validation Error 		CVE-2019-15238 2024-11-21 13:28 2019-08-21 Show GitHub Exploit DB Packet Storm
223476 4.6 MEDIUM
Physics 		linux linux_kernel An issue was discovered in the Linux kernel through 5.2.9. There is a NULL pointer dereference caused by a malicious USB device in the flexcop_usb_probe function in the drivers/media/usb/b2c2/flexcop… CWE-476
 NULL Pointer Dereference 		CVE-2019-15291 2024-11-21 13:28 2019-08-20 Show GitHub Exploit DB Packet Storm
223477 6.1 MEDIUM
Network 		oldstreetsolutions live_input_macros The Live:Text Box macro in the Old Street Live Input Macros app before 2.11 for Confluence has XSS, leading to theft of the Administrator Session Cookie. CWE-79
Cross-site Scripting 		CVE-2019-15233 2024-11-21 13:28 2019-08-20 Show GitHub Exploit DB Packet Storm
223478 6.1 MEDIUM
Network 		yofla 360_product_rotation The 360-product-rotation plugin before 1.4.8 for WordPress has reflected XSS. CWE-79
Cross-site Scripting 		CVE-2019-15082 2024-11-21 13:28 2019-08-20 Show GitHub Exploit DB Packet Storm
223479 7.8 HIGH
Local 		linux
debian 		linux_kernel
debian_linux 		In the Linux kernel, a certain net/ipv4/tcp_output.c change, which was properly incorporated into 4.16.12, was incorrectly backported to the earlier longterm kernels, introducing a new vulnerability … CWE-416
 Use After Free 		CVE-2019-15239 2024-11-21 13:28 2019-08-20 Show GitHub Exploit DB Packet Storm
223480 6.1 MEDIUM
Network 		getflightpath flightpath FlightPath 4.8.3 has XSS in the Content, Edit urgent message, and Users sections of the Admin Console. This could lead to cookie stealing and other malicious actions. CWE-79
Cross-site Scripting 		CVE-2019-15227 2024-11-21 13:28 2019-08-20 Show GitHub Exploit DB Packet Storm