Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 9, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
226961	9.3	危険	ソフォス	-	Sophos Anti-Virus における HTML 文書内のマルウェアの検出を回避される脆弱性	CWE-20 不適切な入力確認	CVE-2008-5541	2012-12-20 18:52	2008-12-12	Show	GitHub Exploit DB Packet Storm

226962	9.3	危険	securecomputing	-	Secure Computing Secure Web Gateway における HTML ドキュメント内のマルウェアの検出を回避される脆弱性	CWE-20 不適切な入力確認	CVE-2008-5540	2012-12-20 18:52	2008-12-12	Show	GitHub Exploit DB Packet Storm

226963	9.3	危険	Beijing Rising International Software	-	RISING Antivirus における HTML 文書内のマルウェアの検出を回避される脆弱性	CWE-20 不適切な入力確認	CVE-2008-5539	2012-12-20 18:52	2008-12-12	Show	GitHub Exploit DB Packet Storm

226964	9.3	危険	ウェブルート株式会社	-	Prevx Prevx における HTML 文書内のマルウェアの検知を回避される脆弱性	CWE-20 不適切な入力確認	CVE-2008-5538	2012-12-20 18:52	2008-12-12	Show	GitHub Exploit DB Packet Storm

226965	9.3	危険	クイックヒール・テクノロジーズ・ジャパン株式会社	-	CAT-QuickHeal におけるマルウェアの検知を回避される脆弱性	CWE-20 不適切な入力確認	CVE-2008-5524	2012-12-20 18:52	2008-12-12	Show	GitHub Exploit DB Packet Storm

226966	7.5	危険	pozscripts	-	PozScripts Business Directory Script の showcategory.php における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2008-5496	2012-12-20 18:52	2008-12-12	Show	GitHub Exploit DB Packet Storm

226967	7.5	危険	phpstore	-	PHPStore Wholesales の track.php における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2008-5493	2012-12-20 18:52	2008-12-12	Show	GitHub Exploit DB Packet Storm

226968	9.3	危険	verypdf	-	VeryDOC PDF Viewer OCX Control の pdfview.ocx におけるヒープベースのバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2008-5492	2012-12-20 18:52	2008-12-12	Show	GitHub Exploit DB Packet Storm

226969	7.5	危険	slimcms	-	SlimCMS の edit.php における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2008-5491	2012-12-20 18:52	2008-12-12	Show	GitHub Exploit DB Packet Storm

226970	7.5	危険	phpstore	-	PHPStore Yahoo Answers の index.php における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2008-5490	2012-12-20 18:52	2008-12-12	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 10, 2026, 4:58 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
223091	8.8	HIGH Network	totaljs	total.js_cms	An issue was discovered in Total.js CMS 12.0.0. An authenticated user with limited privileges can get access to a resource that they do not own by calling the associated API. The product correctly ma…	CWE-862 Missing Authorization	CVE-2019-15953	2024-11-21 13:29	2019-09-6	Show	GitHub Exploit DB Packet Storm

223092	9.9	CRITICAL Network	totaljs	total.js_cms	An issue was discovered in Total.js CMS 12.0.0. An authenticated user with the widgets privilege can gain achieve Remote Command Execution (RCE) on the remote server by creating a malicious widget wi…	CWE-862 Missing Authorization	CVE-2019-15954	2024-11-21 13:29	2019-09-6	Show	GitHub Exploit DB Packet Storm

223093	8.8	HIGH Network	totaljs	total.js_cms	An issue was discovered in Total.js CMS 12.0.0. An authenticated user with the Pages privilege can conduct a path traversal attack (../) to include .html files that are outside the permitted director…	CWE-22 Path Traversal	CVE-2019-15952	2024-11-21 13:29	2019-09-6	Show	GitHub Exploit DB Packet Storm

223094	7.5	HIGH Network	bitcoin	bitcoin_core	In Bitcoin Core 0.18.0, bitcoin-qt stores wallet.dat data unencrypted in memory. Upon a crash, it may dump a core file. If a user were to mishandle a core file, an attacker can reconstruct the user's…	CWE-312 Cleartext Storage of Sensitive Information	CVE-2019-15947	2024-11-21 13:29	2019-09-6	Show	GitHub Exploit DB Packet Storm

223095	6.4	MEDIUM Physics	opensc_project debian fedoraproject	opensc debian_linux fedora	OpenSC before 0.20.0-rc1 has an out-of-bounds access of an ASN.1 Octet string in asn1_decode_entry in libopensc/asn1.c.	CWE-119 Incorrect Access of Indexable Resource ('Range Error')	CVE-2019-15946	2024-11-21 13:29	2019-09-6	Show	GitHub Exploit DB Packet Storm

223096	6.4	MEDIUM Physics	opensc_project debian fedoraproject	opensc debian_linux fedora	OpenSC before 0.20.0-rc1 has an out-of-bounds access of an ASN.1 Bitstring in decode_bit_string in libopensc/asn1.c.	CWE-119 Incorrect Access of Indexable Resource ('Range Error')	CVE-2019-15945	2024-11-21 13:29	2019-09-6	Show	GitHub Exploit DB Packet Storm

223097	8.8	HIGH Network	ffmpeg	ffmpeg	FFmpeg through 4.2 has a "Conditional jump or move depends on uninitialised value" issue in h2645_parse because alloc_rbsp_buffer in libavcodec/h2645_parse.c mishandles rbsp_buffer.	CWE-252 Unchecked Return Value	CVE-2019-15942	2024-11-21 13:29	2019-09-6	Show	GitHub Exploit DB Packet Storm

223098	5.9	MEDIUM Network	opencv opensuse debian	opencv leap debian_linux	An issue was discovered in OpenCV 4.1.0. There is a divide-by-zero error in cv::HOGDescriptor::getDescriptorSize in modules/objdetect/src/hog.cpp.	CWE-369 Divide By Zero	CVE-2019-15939	2024-11-21 13:29	2019-09-6	Show	GitHub Exploit DB Packet Storm

223099	9.8	CRITICAL Network	pengutronix	barebox	Pengutronix barebox through 2019.08.1 has a remote buffer overflow in nfs_readlink_req in fs/nfs.c because a length field is directly used for a memcpy.	CWE-787 Out-of-bounds Write	CVE-2019-15938	2024-11-21 13:29	2019-09-6	Show	GitHub Exploit DB Packet Storm

223100	9.8	CRITICAL Network	pengutronix	barebox	Pengutronix barebox through 2019.08.1 has a remote buffer overflow in nfs_readlink_reply in net/nfs.c because a length field is directly used for a memcpy.	CWE-787 Out-of-bounds Write	CVE-2019-15937	2024-11-21 13:29	2019-09-6	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed