Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 9, 2026, 6 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
226971 4.3 警告 turnkeyforms - TurnkeyForms Text Link Sales の admin.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2008-5487 2012-12-20 18:52 2008-12-12 Show GitHub Exploit DB Packet Storm
226972 7.5 危険 turnkeyforms - TurnkeyForms Text Link Sales の admin.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2008-5486 2012-12-20 18:52 2008-12-12 Show GitHub Exploit DB Packet Storm
226973 4.3 警告 PunBB - PunBB の moderate.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2008-5435 2012-12-20 18:52 2008-12-11 Show GitHub Exploit DB Packet Storm
226974 6.5 警告 PunBB - PunBB における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2008-5434 2012-12-20 18:52 2008-12-11 Show GitHub Exploit DB Packet Storm
226975 4.3 警告 PunBB - PunBB の login.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2008-5433 2012-12-20 18:52 2008-12-11 Show GitHub Exploit DB Packet Storm
226976 4.3 警告 シマンテック - Norton Internet Security の Norton Antivirus におけるサービス運用妨害 (DoS) の脆弱性 CWE-399
リソース管理の問題
CVE-2008-5427 2012-12-20 18:52 2008-12-11 Show GitHub Exploit DB Packet Storm
226977 4.3 警告 サン・マイクロシステムズ - Sun Sun Ray Server Software などにおける Sun Ray 管理者パスワードを特定される脆弱性 CWE-200
情報漏えい
CVE-2008-5423 2012-12-20 18:52 2008-12-4 Show GitHub Exploit DB Packet Storm
226978 7.5 危険 サン・マイクロシステムズ - Sun Sun Ray Server Software における Sun Ray 管理者パスワードを特定される脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2008-5422 2012-12-20 18:52 2008-12-4 Show GitHub Exploit DB Packet Storm
226979 9.3 危険 The Tor Project - Tor における脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2008-5398 2012-12-20 18:52 2008-12-8 Show GitHub Exploit DB Packet Storm
226980 7.2 危険 The Tor Project - Tor における権限を取得される脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2008-5397 2012-12-20 18:52 2008-12-8 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 9, 2026, 5:07 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
223501 8.8 HIGH
Network
schine.games mw-oauth2client In the OAuth2 Client extension before 0.4 for MediaWiki, a CSRF vulnerability exists due to the OAuth2 state parameter not being checked in the callback function. CWE-352
 Origin Validation Error
CVE-2019-15150 2024-11-21 13:28 2019-08-19 Show GitHub Exploit DB Packet Storm
223502 9.8 CRITICAL
Network
adplug_project
fedoraproject
adplug
fedora
AdPlug 2.3.1 has a double free in the Cu6mPlayer class in u6m.h. CWE-415
 Double Free
CVE-2019-15151 2024-11-21 13:28 2019-08-19 Show GitHub Exploit DB Packet Storm
223503 6.5 MEDIUM
Network
gopro gpmf-parser GoPro GPMF-parser 1.2.2 has an out-of-bounds write in OpenMP4Source in demo/GPMF_mp4reader.c. CWE-787
 Out-of-bounds Write
CVE-2019-15148 2024-11-21 13:28 2019-08-19 Show GitHub Exploit DB Packet Storm
223504 6.5 MEDIUM
Network
gopro gpmf-parser GoPro GPMF-parser 1.2.2 has an out-of-bounds read and SEGV in GPMF_Next in GPMF_parser.c. CWE-125
Out-of-bounds Read
CVE-2019-15147 2024-11-21 13:28 2019-08-19 Show GitHub Exploit DB Packet Storm
223505 6.5 MEDIUM
Network
gopro gpmf-parser GoPro GPMF-parser 1.2.2 has a heap-based buffer over-read (4 bytes) in GPMF_Next in GPMF_parser.c. CWE-125
Out-of-bounds Read
CVE-2019-15146 2024-11-21 13:28 2019-08-19 Show GitHub Exploit DB Packet Storm
223506 5.5 MEDIUM
Local
djvulibre_project
debian
fedoraproject
canonical
opensuse
djvulibre
debian_linux
fedora
ubuntu_linux
leap
DjVuLibre 3.5.27 allows attackers to cause a denial-of-service attack (application crash via an out-of-bounds read) by crafting a corrupted JB2 image file that is mishandled in JB2Dict::JB2Codec::get… CWE-125
Out-of-bounds Read
CVE-2019-15145 2024-11-21 13:28 2019-08-19 Show GitHub Exploit DB Packet Storm
223507 9.8 CRITICAL
Network
networkgenomics mitogen core.py in Mitogen before 0.2.8 has a typo that drops the unidirectional-routing protection mechanism in the case of a child that is initiated by another child. The Ansible extension is unaffected. N… CWE-254
 7PK - Security Features
CVE-2019-15149 2024-11-21 13:28 2019-08-19 Show GitHub Exploit DB Packet Storm
223508 5.5 MEDIUM
Local
djvulibre_project
debian
fedoraproject
canonical
opensuse
djvulibre
debian_linux
fedora
ubuntu_linux
leap
In DjVuLibre 3.5.27, the sorting functionality (aka GArrayTemplate<TYPE>::sort) allows attackers to cause a denial-of-service (application crash due to an Uncontrolled Recursion) by crafting a PBM im… CWE-674
 Uncontrolled Recursion
CVE-2019-15144 2024-11-21 13:28 2019-08-19 Show GitHub Exploit DB Packet Storm
223509 5.5 MEDIUM
Local
djvulibre_project
debian
fedoraproject
canonical
opensuse
djvulibre
debian_linux
fedora
ubuntu_linux
leap
In DjVuLibre 3.5.27, the bitmap reader component allows attackers to cause a denial-of-service error (resource exhaustion caused by a GBitmap::read_rle_raw infinite loop) by crafting a corrupted imag… CWE-835
 Loop with Unreachable Exit Condition ('Infinite Loop')
CVE-2019-15143 2024-11-21 13:28 2019-08-19 Show GitHub Exploit DB Packet Storm
223510 5.5 MEDIUM
Local
djvulibre_project
debian
fedoraproject
canonical
opensuse
djvulibre
debian_linux
fedora
ubuntu_linux
leap
In DjVuLibre 3.5.27, DjVmDir.cpp in the DJVU reader component allows attackers to cause a denial-of-service (application crash in GStringRep::strdup in libdjvu/GString.cpp caused by a heap-based buff… CWE-125
Out-of-bounds Read
CVE-2019-15142 2024-11-21 13:28 2019-08-19 Show GitHub Exploit DB Packet Storm