Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 9, 2026, 10 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
227061 7.5 危険 PHP-Fusion - PHP-Fusion 用の Freshlinks モジュールにおける SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-5074 2012-12-20 18:52 2008-11-14 Show GitHub Exploit DB Packet Storm
227062 9 危険 yoxel - Yoxel の itpm_estimate.php における任意の PHP コードを実行される脆弱性 CWE-94
コード・インジェクション 		CVE-2008-5071 2012-12-20 18:52 2008-11-14 Show GitHub Exploit DB Packet Storm
227063 7.5 危険 Pro Chat Rooms - Pro Chat Rooms における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-5070 2012-12-20 18:52 2008-11-14 Show GitHub Exploit DB Packet Storm
227064 5 警告 smolinari - mwcal の php/cal_pdf.php におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2008-5062 2012-12-20 18:52 2008-11-13 Show GitHub Exploit DB Packet Storm
227065 4.3 警告 smolinari - mwcal の php/cal_default.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2008-5061 2012-12-20 18:52 2008-11-13 Show GitHub Exploit DB Packet Storm
227066 7.5 危険 PreProject.com - Pre Simple CMS の siteadmin/loginsucess.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-5058 2012-12-20 18:52 2008-11-13 Show GitHub Exploit DB Packet Storm
227067 7.5 危険 zeeways - Zeeways PhotoVideoTube における認証を回避される脆弱性 CWE-287
不適切な認証 		CVE-2008-5042 2012-12-20 18:52 2008-11-12 Show GitHub Exploit DB Packet Storm
227068 7.5 危険 Sweex - Sweex RO002 Router におけるアクセス権を取得される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2008-5041 2012-12-20 18:52 2008-11-12 Show GitHub Exploit DB Packet Storm
227069 4.3 警告 PHPNUKE - PHP-Nuke 用の League モジュールにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2008-5039 2012-12-20 18:52 2008-11-12 Show GitHub Exploit DB Packet Storm
227070 5 警告 University of Washington - University of Washington IMAP Toolkit の c-client ライブラリにおけるサービス運用妨害 (DoS) の脆弱性 CWE-399
リソース管理の問題 		CVE-2008-5006 2012-12-20 18:52 2008-11-10 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 9, 2026, 5:07 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
222991 8.8 HIGH
Network 		totaljs total.js_cms An issue was discovered in Total.js CMS 12.0.0. An authenticated user with limited privileges can get access to a resource that they do not own by calling the associated API. The product correctly ma… CWE-862
 Missing Authorization 		CVE-2019-15953 2024-11-21 13:29 2019-09-6 Show GitHub Exploit DB Packet Storm
222992 9.9 CRITICAL
Network 		totaljs total.js_cms An issue was discovered in Total.js CMS 12.0.0. An authenticated user with the widgets privilege can gain achieve Remote Command Execution (RCE) on the remote server by creating a malicious widget wi… CWE-862
 Missing Authorization 		CVE-2019-15954 2024-11-21 13:29 2019-09-6 Show GitHub Exploit DB Packet Storm
222993 8.8 HIGH
Network 		totaljs total.js_cms An issue was discovered in Total.js CMS 12.0.0. An authenticated user with the Pages privilege can conduct a path traversal attack (../) to include .html files that are outside the permitted director… CWE-22
Path Traversal 		CVE-2019-15952 2024-11-21 13:29 2019-09-6 Show GitHub Exploit DB Packet Storm
222994 7.5 HIGH
Network 		bitcoin bitcoin_core In Bitcoin Core 0.18.0, bitcoin-qt stores wallet.dat data unencrypted in memory. Upon a crash, it may dump a core file. If a user were to mishandle a core file, an attacker can reconstruct the user's… CWE-312
 Cleartext Storage of Sensitive Information 		CVE-2019-15947 2024-11-21 13:29 2019-09-6 Show GitHub Exploit DB Packet Storm
222995 6.4 MEDIUM
Physics 		opensc_project
debian
fedoraproject 		opensc
debian_linux
fedora 		OpenSC before 0.20.0-rc1 has an out-of-bounds access of an ASN.1 Octet string in asn1_decode_entry in libopensc/asn1.c. CWE-119
Incorrect Access of Indexable Resource ('Range Error')  		CVE-2019-15946 2024-11-21 13:29 2019-09-6 Show GitHub Exploit DB Packet Storm
222996 6.4 MEDIUM
Physics 		opensc_project
debian
fedoraproject 		opensc
debian_linux
fedora 		OpenSC before 0.20.0-rc1 has an out-of-bounds access of an ASN.1 Bitstring in decode_bit_string in libopensc/asn1.c. CWE-119
Incorrect Access of Indexable Resource ('Range Error')  		CVE-2019-15945 2024-11-21 13:29 2019-09-6 Show GitHub Exploit DB Packet Storm
222997 8.8 HIGH
Network 		ffmpeg ffmpeg FFmpeg through 4.2 has a "Conditional jump or move depends on uninitialised value" issue in h2645_parse because alloc_rbsp_buffer in libavcodec/h2645_parse.c mishandles rbsp_buffer. CWE-252
 Unchecked Return Value 		CVE-2019-15942 2024-11-21 13:29 2019-09-6 Show GitHub Exploit DB Packet Storm
222998 5.9 MEDIUM
Network 		opencv
opensuse
debian 		opencv
leap
debian_linux 		An issue was discovered in OpenCV 4.1.0. There is a divide-by-zero error in cv::HOGDescriptor::getDescriptorSize in modules/objdetect/src/hog.cpp. CWE-369
 Divide By Zero 		CVE-2019-15939 2024-11-21 13:29 2019-09-6 Show GitHub Exploit DB Packet Storm
222999 9.8 CRITICAL
Network 		pengutronix barebox Pengutronix barebox through 2019.08.1 has a remote buffer overflow in nfs_readlink_req in fs/nfs.c because a length field is directly used for a memcpy. CWE-787
 Out-of-bounds Write 		CVE-2019-15938 2024-11-21 13:29 2019-09-6 Show GitHub Exploit DB Packet Storm
223000 9.8 CRITICAL
Network 		pengutronix barebox Pengutronix barebox through 2019.08.1 has a remote buffer overflow in nfs_readlink_reply in net/nfs.c because a length field is directly used for a memcpy. CWE-787
 Out-of-bounds Write 		CVE-2019-15937 2024-11-21 13:29 2019-09-6 Show GitHub Exploit DB Packet Storm