Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 9, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
227141	7.5	危険	tufat	-	MyCard の gallery.php における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2008-4738	2012-12-20 18:52	2008-10-24	Show	GitHub Exploit DB Packet Storm

227142	7.5	危険	pressography	-	WordPress 用の WP Comment Remix プラグインにおけるクロスサイトリクエストフォージェリの脆弱性	CWE-352 同一生成元ポリシー違反	CVE-2008-4734	2012-12-20 18:52	2008-10-24	Show	GitHub Exploit DB Packet Storm

227143	4.3	警告	pressography	-	WordPress 用の WP Comment Remix プラグインにおけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2008-4733	2012-12-20 18:52	2008-10-24	Show	GitHub Exploit DB Packet Storm

227144	7.5	危険	pressography	-	WordPress 用の WP Comment Remix プラグインにおける SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2008-4732	2012-12-20 18:52	2008-10-24	Show	GitHub Exploit DB Packet Storm

227145	4.3	警告	CJ Niemira	-	phpMyID の MyID.php におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2008-4730	2012-12-20 18:52	2008-10-24	Show	GitHub Exploit DB Packet Storm

227146	4.3	警告	sungard	-	SunGard Banner Student のコンタクトアップデートページにおけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2008-4727	2012-12-20 18:52	2008-10-23	Show	GitHub Exploit DB Packet Storm

227147	7.5	危険	X7 Group	-	X7 Chat の help/mini.php におけるディレクトリトラバーサルの脆弱性	CWE-22 パス・トラバーサル	CVE-2008-4718	2012-12-20 18:52	2008-10-23	Show	GitHub Exploit DB Packet Storm

227148	7.5	危険	zeeways	-	ZEELYRICS の bannerclick.php における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2008-4717	2012-12-20 18:52	2008-10-23	Show	GitHub Exploit DB Packet Storm

227149	7.5	危険	scriptdemo	-	BitmixSoft PHP-Lance の show.php における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2008-4716	2012-12-20 18:52	2008-10-23	Show	GitHub Exploit DB Packet Storm

227150	7.5	危険	pilotgroup	-	PG eTraining の news_read.php における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2008-4709	2012-12-20 18:52	2008-10-23	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 9, 2026, 5:07 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
222871	7.8	HIGH Local	copadata	zenon	COPA-DATA zenone32 zenon Editor through 8.10 has an Uncontrolled Search Path Element.	CWE-427 Uncontrolled Search Path Element	CVE-2019-15638	2024-11-21 13:29	2019-12-5	Show	GitHub Exploit DB Packet Storm

222872	6.7	MEDIUM Local	kaspersky	total_security secure_connection kaspersky_internet_security security_cloud	Kaspersky Secure Connection, Kaspersky Internet Security, Kaspersky Total Security, Kaspersky Security Cloud prior to version 2020 patch E have bug that allows a local user to execute arbitrary code …	CWE-668 Exposure of Resource to Wrong Sphere	CVE-2019-15689	2024-11-21 13:29	2019-12-3	Show	GitHub Exploit DB Packet Storm

222873	7.8	HIGH Local	trendmicro	antivirus_\+_security_2020 internet_security_2020 maximum_security_2020 premium_security_2020	Trend Micro Security (Consumer) 2020 (v16.0.1221 and below) is affected by a DLL hijacking vulnerability that could allow an attacker to use a specific service as an execution and/or persistence mech…	CWE-426 Untrusted Search Path	CVE-2019-15628	2024-11-21 13:29	2019-12-3	Show	GitHub Exploit DB Packet Storm

222874	9.8	CRITICAL Network	mulesoft	mule_runtime api_gateway	Remote Code Execution vulnerability in MuleSoft Mule CE/EE 3.x and API Gateway 2.x released before October 31, 2019 allows remote attackers to execute arbitrary code.	NVD-CWE-noinfo	CVE-2019-15631	2024-11-21 13:29	2019-12-2	Show	GitHub Exploit DB Packet Storm

222875	7.5	HIGH Network	fortinet	fortios	An Improper Input Validation vulnerability in the SSL VPN portal of FortiOS versions 6.2.1 and below, and 6.0.6 and below may allow an unauthenticated remote attacker to crash the SSL VPN service by …	CWE-20 Improper Input Validation	CVE-2019-15705	2024-11-21 13:29	2019-11-28	Show	GitHub Exploit DB Packet Storm

222876	6.5	MEDIUM Network	ruby-lang canonical	ruby ubuntu_linux	Ruby through 2.4.7, 2.5.x through 2.5.6, and 2.6.x through 2.6.4 mishandles path checking within File.fnmatch functions.	NVD-CWE-noinfo	CVE-2019-15845	2024-11-21 13:29	2019-11-27	Show	GitHub Exploit DB Packet Storm

222877	6.1	MEDIUM Network	kaspersky	anti-virus internet_security total_security security_cloud small_office_security	Kaspersky Anti-Virus, Kaspersky Internet Security, Kaspersky Total Security, Kaspersky Free Anti-Virus, Kaspersky Small Office Security, Kaspersky Security Cloud up to 2020, the web protection compon…	CWE-601 Open Redirect	CVE-2019-15688	2024-11-21 13:29	2019-11-27	Show	GitHub Exploit DB Packet Storm

222878	6.5	MEDIUM Network	kaspersky	anti-virus internet_security total_security security_cloud small_office_security	Kaspersky Anti-Virus, Kaspersky Internet Security, Kaspersky Total Security, Kaspersky Free Anti-Virus, Kaspersky Small Office Security, Kaspersky Security Cloud up to 2020, the web protection compon…	NVD-CWE-noinfo	CVE-2019-15687	2024-11-21 13:29	2019-11-27	Show	GitHub Exploit DB Packet Storm

222879	4.3	MEDIUM Network	kaspersky	anti-virus internet_security total_security security_cloud small_office_security	Kaspersky Anti-Virus, Kaspersky Internet Security, Kaspersky Total Security, Kaspersky Free Anti-Virus, Kaspersky Small Office Security, Kaspersky Security Cloud up to 2020, the web protection compon…	NVD-CWE-noinfo	CVE-2019-15686	2024-11-21 13:29	2019-11-27	Show	GitHub Exploit DB Packet Storm

222880	4.3	MEDIUM Network	kaspersky	anti-virus internet_security total_security security_cloud small_office_security	Kaspersky Anti-Virus, Kaspersky Internet Security, Kaspersky Total Security, Kaspersky Free Anti-Virus, Kaspersky Small Office Security, Kaspersky Security Cloud up to 2020, the web protection compon…	NVD-CWE-noinfo	CVE-2019-15685	2024-11-21 13:29	2019-11-27	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed