Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 8, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
227191 7.5 危険 portalapp - PortalApp におけるトピックなどを作成および削除される脆弱性 CWE-287
不適切な認証 		CVE-2008-4614 2012-12-20 18:52 2008-10-20 Show GitHub Exploit DB Packet Storm
227192 7.5 危険 portalapp - PortalApp の forums.asp における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-4613 2012-12-20 18:52 2008-10-20 Show GitHub Exploit DB Packet Storm
227193 4.3 警告 portalapp - PortalApp におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2008-4612 2012-12-20 18:52 2008-10-20 Show GitHub Exploit DB Packet Storm
227194 6.5 警告 qualityunit - Post Affiliate Pro の index.php におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2008-4602 2012-12-20 18:52 2008-10-17 Show GitHub Exploit DB Packet Storm
227195 7.5 危険 steve dawson - PokerMax Poker League Tournament Script の configure.php における認証を回避される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2008-4600 2012-12-20 18:52 2008-10-17 Show GitHub Exploit DB Packet Storm
227196 10 危険 slaytanic scripts - Slaytanic Scripts Content Plus における脆弱性 CWE-noinfo
情報不足 		CVE-2008-4595 2012-12-20 18:52 2008-10-17 Show GitHub Exploit DB Packet Storm
227197 10 危険 sportspanel - Sports Clubs Web Panel の index.php におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2008-4592 2012-12-20 18:52 2008-10-16 Show GitHub Exploit DB Packet Storm
227198 4.3 警告 phpwebgallery - PhpWebGallery の admin/include/isadmin.inc.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2008-4591 2012-12-20 18:52 2008-10-16 Show GitHub Exploit DB Packet Storm
227199 7.5 危険 stash - Stash における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-4590 2012-12-20 18:52 2008-10-16 Show GitHub Exploit DB Packet Storm
227200 5 警告 Matthias Wandel - jhead の DoCommand 関数におけるバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2008-4575 2012-12-20 18:52 2008-10-15 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 8, 2026, 4:54 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
222871 7.8 HIGH
Local 		tecno-mobile camon_iclick_2_firmware The Tecno Camon iClick 2 Android device with a build fingerprint of TECNO/H622/TECNO-ID6:8.1.0/O11019/F-180824V116:user/release-keys contains a pre-installed platform app with a package name of com.l… CWE-78
OS Command  		CVE-2019-15347 2024-11-21 13:28 2019-11-15 Show GitHub Exploit DB Packet Storm
222872 7.8 HIGH
Local 		tecno-mobile camon_iclick_2_firmware The Tecno Camon iClick 2 Android device with a build fingerprint of TECNO/H622/TECNO-ID6:8.1.0/O11019/F-180824V116:user/release-keys contains a pre-installed platform app with a package name of com.l… CWE-668
 Exposure of Resource to Wrong Sphere 		CVE-2019-15346 2024-11-21 13:28 2019-11-15 Show GitHub Exploit DB Packet Storm
222873 3.3 LOW
Local 		lavamobiles iris_88_firmware The Lava Iris 88 Lite Android device with a build fingerprint of LAVA/iris88_lite/iris88_lite:8.1.0/O11019/1536323070:user/release-keys contains a pre-installed app with a package name of com.android… CWE-732
 Incorrect Permission Assignment for Critical Resource 		CVE-2019-15338 2024-11-21 13:28 2019-11-15 Show GitHub Exploit DB Packet Storm
222874 3.3 LOW
Local 		lavamobiles z81_firmware The Lava Z81 Android device with a build fingerprint of LAVA/Z81/Z81:8.1.0/O11019/1532317309:user/release-keys contains a pre-installed app with a package name of com.android.lava.powersave app (vers… CWE-732
 Incorrect Permission Assignment for Critical Resource 		CVE-2019-15337 2024-11-21 13:28 2019-11-15 Show GitHub Exploit DB Packet Storm
222875 3.3 LOW
Local 		lavamobiles z61_firmware The Lava Z61 Turbo Android device with a build fingerprint of LAVA/Z61_Turbo/Z61_Turbo:8.1.0/O11019/1536917928:user/release-keys contains a pre-installed app with a package name of com.android.lava.p… CWE-732
 Incorrect Permission Assignment for Critical Resource 		CVE-2019-15336 2024-11-21 13:28 2019-11-15 Show GitHub Exploit DB Packet Storm
222876 3.3 LOW
Local 		lavamobiles z92_firmware The Lava Z92 Android device with a build fingerprint of LAVA/Z92/Z92:8.1.0/O11019/1535088037:user/release-keys contains a pre-installed app with a package name of com.android.lava.powersave app (vers… CWE-732
 Incorrect Permission Assignment for Critical Resource 		CVE-2019-15335 2024-11-21 13:28 2019-11-15 Show GitHub Exploit DB Packet Storm
222877 7.8 HIGH
Local 		tecno-mobile camon_iclick_firmware The Tecno Camon iClick Android device with a build fingerprint of TECNO/H633/TECNO-IN6:8.1.0/O11019/A-180409V96:user/release-keys contains a pre-installed platform app with a package name of com.love… CWE-668
 Exposure of Resource to Wrong Sphere 		CVE-2019-15345 2024-11-21 13:28 2019-11-15 Show GitHub Exploit DB Packet Storm
222878 8.1 HIGH
Network 		tecno-mobile camon_iclick_firmware The Tecno Camon iClick Android device with a build fingerprint of TECNO/H633/TECNO-IN6:8.1.0/O11019/A-180409V96:user/release-keys contains a pre-installed platform app with a package name of com.love… NVD-CWE-noinfo
CVE-2019-15344 2024-11-21 13:28 2019-11-15 Show GitHub Exploit DB Packet Storm
222879 7.8 HIGH
Local 		tecno-mobile camon_iclick_firmware The Tecno Camon iClick Android device with a build fingerprint of TECNO/H633/TECNO-IN6:8.1.0/O11019/A-180409V96:user/release-keys contains a pre-installed platform app with a package name of com.love… CWE-78
OS Command  		CVE-2019-15343 2024-11-21 13:28 2019-11-15 Show GitHub Exploit DB Packet Storm
222880 3.3 LOW
Local 		lavamobiles iris_88_firmware The Lava Iris 88 Go Android device with a build fingerprint of LAVA/iris88_go/iris88_go:8.1.0/O11019/1538188945:user/release-keys contains a pre-installed app with a package name of com.android.lava.… CWE-732
 Incorrect Permission Assignment for Critical Resource 		CVE-2019-15334 2024-11-21 13:28 2019-11-15 Show GitHub Exploit DB Packet Storm