Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 9, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
227191 7.5 危険 portalapp - PortalApp におけるトピックなどを作成および削除される脆弱性 CWE-287
不適切な認証 		CVE-2008-4614 2012-12-20 18:52 2008-10-20 Show GitHub Exploit DB Packet Storm
227192 7.5 危険 portalapp - PortalApp の forums.asp における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-4613 2012-12-20 18:52 2008-10-20 Show GitHub Exploit DB Packet Storm
227193 4.3 警告 portalapp - PortalApp におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2008-4612 2012-12-20 18:52 2008-10-20 Show GitHub Exploit DB Packet Storm
227194 6.5 警告 qualityunit - Post Affiliate Pro の index.php におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2008-4602 2012-12-20 18:52 2008-10-17 Show GitHub Exploit DB Packet Storm
227195 7.5 危険 steve dawson - PokerMax Poker League Tournament Script の configure.php における認証を回避される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2008-4600 2012-12-20 18:52 2008-10-17 Show GitHub Exploit DB Packet Storm
227196 10 危険 slaytanic scripts - Slaytanic Scripts Content Plus における脆弱性 CWE-noinfo
情報不足 		CVE-2008-4595 2012-12-20 18:52 2008-10-17 Show GitHub Exploit DB Packet Storm
227197 10 危険 sportspanel - Sports Clubs Web Panel の index.php におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2008-4592 2012-12-20 18:52 2008-10-16 Show GitHub Exploit DB Packet Storm
227198 4.3 警告 phpwebgallery - PhpWebGallery の admin/include/isadmin.inc.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2008-4591 2012-12-20 18:52 2008-10-16 Show GitHub Exploit DB Packet Storm
227199 7.5 危険 stash - Stash における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-4590 2012-12-20 18:52 2008-10-16 Show GitHub Exploit DB Packet Storm
227200 5 警告 Matthias Wandel - jhead の DoCommand 関数におけるバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2008-4575 2012-12-20 18:52 2008-10-15 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 9, 2026, 5:07 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
222741 9.8 CRITICAL
Network 		freebsd
netapp 		freebsd
clustered_data_ontap 		In FreeBSD 12.1-STABLE before r356035, 12.1-RELEASE before 12.1-RELEASE-p4, 11.3-STABLE before r356036, and 11.3-RELEASE before 11.3-RELEASE-p8, incomplete packet data validation may result in memory… CWE-20
CWE-416
 Improper Input Validation 
 Use After Free 		CVE-2019-15874 2024-11-21 13:29 2020-04-29 Show GitHub Exploit DB Packet Storm
222742 5.5 MEDIUM
Local 		freebsd freebsd In FreeBSD 12.1-STABLE before r356606 and 12.1-RELEASE before 12.1-RELEASE-p3, driver specific ioctl command handlers in the ixl network driver failed to check whether the caller has sufficient privi… CWE-862
 Missing Authorization 		CVE-2019-15877 2024-11-21 13:29 2020-04-29 Show GitHub Exploit DB Packet Storm
222743 5.5 MEDIUM
Local 		freebsd freebsd In FreeBSD 12.1-STABLE before r356089, 12.1-RELEASE before 12.1-RELEASE-p3, 11.3-STABLE before r356090, and 11.3-RELEASE before 11.3-RELEASE-p7, driver specific ioctl command handlers in the oce netw… CWE-862
 Missing Authorization 		CVE-2019-15876 2024-11-21 13:29 2020-04-29 Show GitHub Exploit DB Packet Storm
222744 3.3 LOW
Local 		apport_project
canonical 		apport
ubuntu_linux 		Apport reads and writes information on a crashed process to /proc/pid with elevated privileges. Apport then determines which user the crashed process belongs to by reading /proc/pid through get_pid_i… CWE-269
 Improper Privilege Management 		CVE-2019-15790 2024-11-21 13:29 2020-04-28 Show GitHub Exploit DB Packet Storm
222745 6.7 MEDIUM
Local 		linux
canonical 		linux_kernel
ubuntu_linux 		Overlayfs in the Linux kernel and shiftfs, a non-upstream patch to the Linux kernel included in the Ubuntu 5.0 and 5.3 kernel series, both replace vma->vm_file in their mmap handlers. On error the or… CWE-672
 Operation on a Resource after Expiration or Release 		CVE-2019-15794 2024-11-21 13:29 2020-04-24 Show GitHub Exploit DB Packet Storm
222746 8.8 HIGH
Local 		linux
canonical 		linux_kernel
ubuntu_linux 		In shiftfs, a non-upstream patch to the Linux kernel included in the Ubuntu 5.0 and 5.3 kernel series, several locations which shift ids translate user/group ids before performing operations in the l… CWE-276
Incorrect Default Permissions  		CVE-2019-15793 2024-11-21 13:29 2020-04-24 Show GitHub Exploit DB Packet Storm
222747 7.8 HIGH
Local 		linux
canonical 		linux_kernel
ubuntu_linux 		In shiftfs, a non-upstream patch to the Linux kernel included in the Ubuntu 5.0 and 5.3 kernel series, shiftfs_btrfs_ioctl_fd_replace() calls fdget(oldfd), then without further checks passes the resu… CWE-843
Type Confusion 		CVE-2019-15792 2024-11-21 13:29 2020-04-24 Show GitHub Exploit DB Packet Storm
222748 7.8 HIGH
Local 		linux
canonical 		linux_kernel
ubuntu_linux 		In shiftfs, a non-upstream patch to the Linux kernel included in the Ubuntu 5.0 and 5.3 kernel series, shiftfs_btrfs_ioctl_fd_replace() installs an fd referencing a file from the lower filesystem wit… CWE-191
 Integer Underflow (Wrap or Wraparound) 		CVE-2019-15791 2024-11-21 13:29 2020-04-24 Show GitHub Exploit DB Packet Storm
222749 7.8 HIGH
Local 		canonical microk8s Privilege escalation vulnerability in MicroK8s allows a low privilege user with local access to obtain root access to the host by provisioning a privileged container. Fixed in MicroK8s 1.15.3. NVD-CWE-noinfo
CVE-2019-15789 2024-11-21 13:29 2020-04-8 Show GitHub Exploit DB Packet Storm
222750 4.7 MEDIUM
Network 		ubuntu
debian 		python-apt Python-apt doesn't check if hashes are signed in `Version.fetch_binary()` and `Version.fetch_source()` of apt/package.py or in `_fetch_archives()` of apt/cache.py in version 1.9.3ubuntu2 and earlier.… CWE-347
 Improper Verification of Cryptographic Signature 		CVE-2019-15796 2024-11-21 13:29 2020-03-26 Show GitHub Exploit DB Packet Storm