Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 13, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
227041	7.5	危険	XOOPS	-	XOOPS 用の Uploader モジュールにおけるディレクトリトラバーサルの脆弱性	CWE-22 パス・トラバーサル	CVE-2008-7178	2012-12-20 19:10	2009-09-8	Show	GitHub Exploit DB Packet Storm

227042	7.5	危険	yanick bourbeau	-	LNP における管理者権限を取得される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2008-7172	2012-12-20 19:10	2009-09-8	Show	GitHub Exploit DB Packet Storm

227043	4.3	警告	yanick bourbeau	-	LNP におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2008-7171	2012-12-20 19:10	2009-09-8	Show	GitHub Exploit DB Packet Storm

227044	9.3	危険	uusee	-	UUSee UUUpgrade ActiveX コントロールにおける任意のファイルを強制的にダウンロードされる脆弱性	CWE-Other その他	CVE-2008-7168	2012-12-20 19:10	2009-09-8	Show	GitHub Exploit DB Packet Storm

227045	7.5	危険	sami ekblad	-	Page Manager の upload.php における任意のコードを実行される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2008-7167	2012-12-20 19:10	2009-09-8	Show	GitHub Exploit DB Packet Storm

227046	10	危険	ryo-oh-ki	-	Shareaza における脆弱性	CWE-noinfo 情報不足	CVE-2008-7164	2012-12-20 19:10	2009-09-4	Show	GitHub Exploit DB Packet Storm

227047	6.8	警告	sinecms	-	SineCMS の mods/Integrated/index.php におけるディレクトリトラバーサルの脆弱性	CWE-22 パス・トラバーサル	CVE-2008-7163	2012-12-20 19:10	2009-09-4	Show	GitHub Exploit DB Packet Storm

227048	6.8	警告	Ruby on Rails project	-	Ruby on Rails におけるクロスサイトリクエストフォージェリ (CSRF) 保護を回避される脆弱性	CWE-20 不適切な入力確認	CVE-2008-7248	2012-12-20 19:10	2008-11-18	Show	GitHub Exploit DB Packet Storm

227049	5.8	警告	silcnet	-	SILC Toolkit の silcd におけるスタック領域を上書きされる脆弱性	CWE-134 書式文字列の問題	CVE-2008-7160	2012-12-20 19:10	2009-09-10	Show	GitHub Exploit DB Packet Storm

227050	5.8	警告	silcnet	-	SILC Toolkit の lib/silcasn1/silcasn1_encode.c におけるスタック領域を上書きされる脆弱性	CWE-134 書式文字列の問題	CVE-2008-7159	2012-12-20 19:10	2009-09-10	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 13, 2026, 5:05 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
222351	8.8	HIGH Network	western_digital	my_cloud_ex2_ultra_firmware	Western Digital My Cloud EX2 Ultra firmware 2.31.195 allows a Buffer Overflow with Extended Instruction Pointer (EIP) control via crafted GET/POST parameters.	CWE-120 Classic Buffer Overflow	CVE-2019-18931	2024-11-21 13:33	2019-11-14	Show	GitHub Exploit DB Packet Storm

222352	8.8	HIGH Network	western_digital	my_cloud_ex2_ultra_firmware	Western Digital My Cloud EX2 Ultra firmware 2.31.183 allows web users (including guest account) to remotely execute arbitrary code via a stack-based buffer overflow. There is no size verification log…	CWE-787 Out-of-bounds Write	CVE-2019-18930	2024-11-21 13:33	2019-11-14	Show	GitHub Exploit DB Packet Storm

222353	8.8	HIGH Network	western_digital	my_cloud_ex2_ultra_firmware	Western Digital My Cloud EX2 Ultra firmware 2.31.183 allows web users (including guest accounts) to remotely execute arbitrary code via a download_mgr.cgi stack-based buffer overflow.	CWE-787 Out-of-bounds Write	CVE-2019-18929	2024-11-21 13:33	2019-11-14	Show	GitHub Exploit DB Packet Storm

222354	9.0	CRITICAL Network	fudforum	fudforum	FUDForum 3.0.9 is vulnerable to Stored XSS via the nlogin parameter. This may result in remote code execution. An attacker can use a user account to fully compromise the system using a POST request. …	CWE-79 CWE-78 Cross-site Scripting OS Command	CVE-2019-18839	2024-11-21 13:33	2019-11-14	Show	GitHub Exploit DB Packet Storm

222355	7.8	HIGH Local	gnu debian	fribidi debian_linux	A buffer overflow in the fribidi_get_par_embedding_levels_ex() function in lib/fribidi-bidi.c of GNU FriBidi through 1.0.7 allows an attacker to cause a denial of service or possibly execute arbitrar…	CWE-120 Classic Buffer Overflow	CVE-2019-18397	2024-11-21 13:33	2019-11-13	Show	GitHub Exploit DB Packet Storm

222356	6.1	MEDIUM Network	systematicinc	iris_standards_management	Systematic IRIS Standards Management (ISM) v2.1 SP1 89 is vulnerable to unauthenticated reflected Cross Site Scripting (XSS). A user input (related to dialog information) is reflected directly in the…	CWE-79 Cross-site Scripting	CVE-2019-18926	2024-11-21 13:33	2019-11-13	Show	GitHub Exploit DB Packet Storm

222357	9.8	CRITICAL Network	systematic	iris_webforms	Systematic IRIS WebForms 5.4 and its functionalities can be accessed and used without any form of authentication.	CWE-306 Missing Authentication for Critical Function	CVE-2019-18925	2024-11-21 13:33	2019-11-13	Show	GitHub Exploit DB Packet Storm

222358	5.3	MEDIUM Network	systematic	iris_webforms	Systematic IRIS WebForms 5.4 is vulnerable to directory traversal. By manipulating variables that reference files with ../ (and variations), it is possible to list all the directories and check if a …	CWE-22 Path Traversal	CVE-2019-18924	2024-11-21 13:33	2019-11-13	Show	GitHub Exploit DB Packet Storm

222359	9.8	CRITICAL Network	upredsun	file_sharing_wizard	File Sharing Wizard version 1.5.0 build 2008 is affected by a Structured Exception Handler based buffer overflow vulnerability. An unauthenticated attacker is able to perform remote command execution…	CWE-787 Out-of-bounds Write	CVE-2019-18655	2024-11-21 13:33	2019-11-13	Show	GitHub Exploit DB Packet Storm

222360	7.5	HIGH Network	json-jwt_project debian	json-jwt debian_linux	The json-jwt gem before 1.11.0 for Ruby lacks an element count during the splitting of a JWE string.	CWE-287 Improper Authentication	CVE-2019-18848	2024-11-21 13:33	2019-11-13	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed