Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 9, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
227121 2.6 注意 The phpMyAdmin Project - phpMyAdmin の pmd_pdf.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2008-4775 2012-12-20 18:52 2008-10-28 Show GitHub Exploit DB Packet Storm
227122 4.3 警告 questwork - QuestCMS の main/main.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2008-4774 2012-12-20 18:52 2008-10-28 Show GitHub Exploit DB Packet Storm
227123 5 警告 questwork - QuestCMS の main/main.php におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2008-4773 2012-12-20 18:52 2008-10-28 Show GitHub Exploit DB Packet Storm
227124 7.5 危険 questwork - QuestCMS の main/main.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-4772 2012-12-20 18:52 2008-10-28 Show GitHub Exploit DB Packet Storm
227125 9.3 危険 WordPress.org - WordPress の wp-includes/theme.php におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2008-4769 2012-12-20 18:52 2008-04-2 Show GitHub Exploit DB Packet Storm
227126 7.5 危険 tlm cms - TLM CMS における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-4768 2012-12-20 18:52 2008-10-28 Show GitHub Exploit DB Packet Storm
227127 9 危険 PHPNUKE - PHP-Nuke の DownloadsPlus モジュールにおける任意のコードを実行される脆弱性 CWE-20
不適切な入力確認 		CVE-2008-4767 2012-12-20 18:52 2008-10-28 Show GitHub Exploit DB Packet Storm
227128 4.3 警告 wikidsystems - WiKID wClient-PHP の sample.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2008-4763 2012-12-20 18:52 2008-10-27 Show GitHub Exploit DB Packet Storm
227129 5 警告 php-daily - PHP-Daily の download_file.php におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2008-4758 2012-12-20 18:52 2008-10-27 Show GitHub Exploit DB Packet Storm
227130 7.5 危険 php-daily - PHP-Daily における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-4757 2012-12-20 18:52 2008-10-27 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 10, 2026, 4:58 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
222841 9.8 CRITICAL
Network 		freebsd
netapp 		freebsd
clustered_data_ontap 		In FreeBSD 12.1-STABLE before r356035, 12.1-RELEASE before 12.1-RELEASE-p4, 11.3-STABLE before r356036, and 11.3-RELEASE before 11.3-RELEASE-p8, incomplete packet data validation may result in memory… CWE-20
CWE-416
 Improper Input Validation 
 Use After Free 		CVE-2019-15874 2024-11-21 13:29 2020-04-29 Show GitHub Exploit DB Packet Storm
222842 5.5 MEDIUM
Local 		freebsd freebsd In FreeBSD 12.1-STABLE before r356606 and 12.1-RELEASE before 12.1-RELEASE-p3, driver specific ioctl command handlers in the ixl network driver failed to check whether the caller has sufficient privi… CWE-862
 Missing Authorization 		CVE-2019-15877 2024-11-21 13:29 2020-04-29 Show GitHub Exploit DB Packet Storm
222843 5.5 MEDIUM
Local 		freebsd freebsd In FreeBSD 12.1-STABLE before r356089, 12.1-RELEASE before 12.1-RELEASE-p3, 11.3-STABLE before r356090, and 11.3-RELEASE before 11.3-RELEASE-p7, driver specific ioctl command handlers in the oce netw… CWE-862
 Missing Authorization 		CVE-2019-15876 2024-11-21 13:29 2020-04-29 Show GitHub Exploit DB Packet Storm
222844 3.3 LOW
Local 		apport_project
canonical 		apport
ubuntu_linux 		Apport reads and writes information on a crashed process to /proc/pid with elevated privileges. Apport then determines which user the crashed process belongs to by reading /proc/pid through get_pid_i… CWE-269
 Improper Privilege Management 		CVE-2019-15790 2024-11-21 13:29 2020-04-28 Show GitHub Exploit DB Packet Storm
222845 6.7 MEDIUM
Local 		linux
canonical 		linux_kernel
ubuntu_linux 		Overlayfs in the Linux kernel and shiftfs, a non-upstream patch to the Linux kernel included in the Ubuntu 5.0 and 5.3 kernel series, both replace vma->vm_file in their mmap handlers. On error the or… CWE-672
 Operation on a Resource after Expiration or Release 		CVE-2019-15794 2024-11-21 13:29 2020-04-24 Show GitHub Exploit DB Packet Storm
222846 8.8 HIGH
Local 		linux
canonical 		linux_kernel
ubuntu_linux 		In shiftfs, a non-upstream patch to the Linux kernel included in the Ubuntu 5.0 and 5.3 kernel series, several locations which shift ids translate user/group ids before performing operations in the l… CWE-276
Incorrect Default Permissions  		CVE-2019-15793 2024-11-21 13:29 2020-04-24 Show GitHub Exploit DB Packet Storm
222847 7.8 HIGH
Local 		linux
canonical 		linux_kernel
ubuntu_linux 		In shiftfs, a non-upstream patch to the Linux kernel included in the Ubuntu 5.0 and 5.3 kernel series, shiftfs_btrfs_ioctl_fd_replace() calls fdget(oldfd), then without further checks passes the resu… CWE-843
Type Confusion 		CVE-2019-15792 2024-11-21 13:29 2020-04-24 Show GitHub Exploit DB Packet Storm
222848 7.8 HIGH
Local 		linux
canonical 		linux_kernel
ubuntu_linux 		In shiftfs, a non-upstream patch to the Linux kernel included in the Ubuntu 5.0 and 5.3 kernel series, shiftfs_btrfs_ioctl_fd_replace() installs an fd referencing a file from the lower filesystem wit… CWE-191
 Integer Underflow (Wrap or Wraparound) 		CVE-2019-15791 2024-11-21 13:29 2020-04-24 Show GitHub Exploit DB Packet Storm
222849 7.8 HIGH
Local 		canonical microk8s Privilege escalation vulnerability in MicroK8s allows a low privilege user with local access to obtain root access to the host by provisioning a privileged container. Fixed in MicroK8s 1.15.3. NVD-CWE-noinfo
CVE-2019-15789 2024-11-21 13:29 2020-04-8 Show GitHub Exploit DB Packet Storm
222850 4.7 MEDIUM
Network 		ubuntu
debian 		python-apt Python-apt doesn't check if hashes are signed in `Version.fetch_binary()` and `Version.fetch_source()` of apt/package.py or in `_fetch_archives()` of apt/cache.py in version 1.9.3ubuntu2 and earlier.… CWE-347
 Improper Verification of Cryptographic Signature 		CVE-2019-15796 2024-11-21 13:29 2020-03-26 Show GitHub Exploit DB Packet Storm