Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 9, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
227041	7.5	危険	PHP-Fusion	-	PHP-Fusion の classifieds.php における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2008-5197	2012-12-20 18:52	2008-11-21	Show	GitHub Exploit DB Packet Storm

227042	7.5	危険	PHP-Fusion	-	PHP-Fusion 用の Kroax モジュールにおける SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2008-5196	2012-12-20 18:52	2008-11-21	Show	GitHub Exploit DB Packet Storm

227043	7.5	危険	sebrac	-	SebracCMS における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2008-5195	2012-12-20 18:52	2008-11-21	Show	GitHub Exploit DB Packet Storm

227044	7.5	危険	softvisions software	-	SoftVisions Software obm の checkavail.php における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2008-5194	2012-12-20 18:52	2008-11-21	Show	GitHub Exploit DB Packet Storm

227045	7.5	危険	seportal	-	SePortal における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2008-5191	2012-12-20 18:52	2008-11-21	Show	GitHub Exploit DB Packet Storm

227046	5	警告	Ruby on Rails project	-	Ruby on Rails における CRLF インジェクションの脆弱性	CWE-352 同一生成元ポリシー違反	CVE-2008-5189	2012-12-20 18:52	2008-10-19	Show	GitHub Exploit DB Packet Storm

227047	9.3	危険	visicommedia	-	AceFTP Freeware および AceFTP Pro の FTP クライアントにおけるディレクトリトラバーサルの脆弱性	CWE-22 パス・トラバーサル	CVE-2008-5175	2012-12-20 18:52	2008-11-19	Show	GitHub Exploit DB Packet Storm

227048	9	危険	testmaker	-	testMaker における任意の PHP コードを実行される脆弱性	CWE-94 コード・インジェクション	CVE-2008-5173	2012-12-20 18:52	2008-11-19	Show	GitHub Exploit DB Packet Storm

227049	9.3	危険	phpblaster	-	phpBLASTER CMS の admin/minibb/index.php におけるディレクトリトラバーサルの脆弱性	CWE-22 パス・トラバーサル	CVE-2008-5171	2012-12-20 18:52	2008-11-19	Show	GitHub Exploit DB Packet Storm

227050	4.3	警告	theratstudios	-	The Rat CMS におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2008-5164	2012-12-20 18:52	2008-11-19	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 10, 2026, 4:58 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
223711	6.5	MEDIUM Network	dimo-crm	yellowbox_crm	Path Traversal in the file browser of DIMO YellowBox CRM before 6.3.4 allows a standard authenticated user to browse the server filesystem.	CWE-22 Path Traversal	CVE-2019-14766	2024-11-21 13:27	2020-01-22	Show	GitHub Exploit DB Packet Storm

223712	8.8	HIGH Network	dimo-crm	yellowbox_crm	Incorrect Access Control in AfficheExplorateurParam() in DIMO YellowBox CRM before 6.3.4 allows a standard authenticated user to use administrative controllers.	NVD-CWE-noinfo	CVE-2019-14765	2024-11-21 13:27	2020-01-22	Show	GitHub Exploit DB Packet Storm

223713	5.5	MEDIUM Local	intel	data_analytics_acceleration_library	Improper permissions in Intel(R) DAAL before version 2020 Gold may allow an authenticated user to potentially enable information disclosure via local access.	CWE-732 Incorrect Permission Assignment for Critical Resource	CVE-2019-14629	2024-11-21 13:27	2020-01-18	Show	GitHub Exploit DB Packet Storm

223714	5.5	MEDIUM Local	canonical intel	ubuntu_linux celeron_n celeron celeron_g4900t celeron_g4920 celeron_g4930 celeron_g4930t celeron_g4950 celeron_j atom_x5-z8330 atom_x5-z8500 atom_x7-z8700 atom_x5-…	Insufficient control flow in certain data structures for some Intel(R) Processors with Intel(R) Processor Graphics may allow an unauthenticated user to potentially enable information disclosure via l…	NVD-CWE-noinfo	CVE-2019-14615	2024-11-21 13:27	2020-01-18	Show	GitHub Exploit DB Packet Storm

223715	7.8	HIGH Local	intel	vtune_profiler	Improper access control in driver for Intel(R) VTune(TM) Amplifier for Windows* before update 8 may allow an authenticated user to potentially enable escalation of privilege via local access.	NVD-CWE-noinfo	CVE-2019-14613	2024-11-21 13:27	2020-01-18	Show	GitHub Exploit DB Packet Storm

223716	7.8	HIGH Local	intel	raid_web_console_3	Improper permissions in the installer for Intel(R) RWC 3 for Windows before version 7.010.009.000 may allow an authenticated user to potentially enable escalation of privilege via local access.	CWE-276 Incorrect Default Permissions	CVE-2019-14601	2024-11-21 13:27	2020-01-18	Show	GitHub Exploit DB Packet Storm

223717	6.7	MEDIUM Local	intel	snmp_subagent_stand-alone	Uncontrolled search path element in the installer for Intel(R) SNMP Subagent Stand-Alone for Windows* may allow an authenticated user to potentially enable escalation of privilege via local access.	CWE-427 Uncontrolled Search Path Element	CVE-2019-14600	2024-11-21 13:27	2020-01-18	Show	GitHub Exploit DB Packet Storm

223718	8.8	HIGH Network	atlassian	bitbucket	Bitbucket Server and Bitbucket Data Center from version 4.13. before 5.16.11, from version 6.0.0 before 6.0.11, from version 6.1.0 before 6.1.9, from version 6.2.0 before 6.2.7, from version 6.3.0 be…	CWE-269 Improper Privilege Management	CVE-2019-15012	2024-11-21 13:27	2020-01-16	Show	GitHub Exploit DB Packet Storm

223719	8.8	HIGH Network	atlassian	bitbucket	Bitbucket Server and Bitbucket Data Center versions starting from version 3.0.0 before version 5.16.11, from version 6.0.0 before 6.0.11, from version 6.1.0 before 6.1.9, from version 6.2.0 before 6.…	CWE-77 Command Injection	CVE-2019-15010	2024-11-21 13:27	2020-01-16	Show	GitHub Exploit DB Packet Storm

223720	8.8	HIGH Network	billion	sg600_r2_firmware	Billion Smart Energy Router SG600R2 Firmware v3.02.rc6 allows an authenticated attacker to gain root execution privileges over the device via a hidden etc_ro/web/adm/system_command.asp shell feature.	NVD-CWE-noinfo	CVE-2019-14920	2024-11-21 13:27	2020-01-10	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed