Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":April 30, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
227211	7.5	危険	VideoLAN	-	VideoLAN VLC の modules/demux/subtitle.c におけるスタックベースのバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2007-6681	2012-12-20 18:34	2008-01-16	Show	GitHub Exploit DB Packet Storm

227212	5	警告	uber uploader	-	UU の初期設定におけるアップロードに危険な拡張子を使用される脆弱性	CWE-16 環境設定	CVE-2007-6676	2012-12-20 18:34	2008-01-8	Show	GitHub Exploit DB Packet Storm

227213	4.3	警告	rapidshare	-	RapidShare Database の Default.asp におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2007-6674	2012-12-20 18:34	2008-01-8	Show	GitHub Exploit DB Packet Storm

227214	7.5	危険	phpcredo	-	PHCDownload の search.php における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2007-6670	2012-12-20 18:34	2008-01-7	Show	GitHub Exploit DB Packet Storm

227215	4.3	警告	phpcredo	-	PHCDownload の search.php におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2007-6669	2012-12-20 18:34	2008-01-7	Show	GitHub Exploit DB Packet Storm

227216	7.5	危険	Zenphoto	-	Zenphoto の rss.php における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2007-6666	2012-12-20 18:34	2008-01-4	Show	GitHub Exploit DB Packet Storm

227217	7.5	危険	webportal	-	WebPortal CMS の index.php における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2007-6664	2012-12-20 18:34	2008-01-4	Show	GitHub Exploit DB Packet Storm

227218	7.5	危険	pragmaticutopia	-	Joomla! 用の Pragmatic Utopia PU Arcade コンポーネントにおける SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2007-6663	2012-12-20 18:34	2008-01-4	Show	GitHub Exploit DB Packet Storm

227219	7.5	危険	xcms	-	XCMS の cpie.php における静的コードを直接挿入する攻撃を実行される脆弱性	CWE-94 コード・インジェクション	CVE-2007-6652	2012-12-20 18:34	2008-01-4	Show	GitHub Exploit DB Packet Storm

227220	5	警告	sanybee gallery	-	SanyBee Gallery の index.php におけるディレクトリトラバーサルの脆弱性	CWE-22 パス・トラバーサル	CVE-2007-6648	2012-12-20 18:34	2008-01-4	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:April 30, 2026, 4:58 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
212371	4.3	MEDIUM Network	adobe	acrobat_dc acrobat_reader_dc	Adobe Acrobat and Reader versions , 2019.012.20040 and earlier, 2017.011.30148 and earlier, 2017.011.30148 and earlier, 2015.006.30503 and earlier, and 2015.006.30503 and earlier have an out-of-bound…	CWE-125 Out-of-bounds Read	CVE-2019-8064	2024-11-21 13:49	2019-10-18	Show	GitHub Exploit DB Packet Storm

212372	9.8	CRITICAL Network	adobe	download_manager	Adobe Download Manager versions 2.0.0.363 have an insecure file permissions vulnerability. Successful exploitation could lead to privilege escalation.	CWE-732 Incorrect Permission Assignment for Critical Resource	CVE-2019-8071	2024-11-21 13:49	2019-10-18	Show	GitHub Exploit DB Packet Storm

212373	7.5	HIGH Network	checkpoint	security_gateway	In a rare scenario, Check Point R80.30 Security Gateway before JHF Take 50 managed by Check Point R80.30 Management crashes with a unique configuration of enhanced logging.	CWE-755 Improper Handling of Exceptional Conditions	CVE-2019-8462	2024-11-21 13:49	2019-10-3	Show	GitHub Exploit DB Packet Storm

212374	5.3	MEDIUM Network	online_store_system_project	online_store_system	Online Store System v1.0 delete_product.php doesn't check to see if a user authtenticated or has administrative rights allowing arbitrary product deletion.	CWE-306 Missing Authentication for Critical Function	CVE-2019-8292	2024-11-21 13:49	2019-10-2	Show	GitHub Exploit DB Packet Storm

212375	7.5	HIGH Network	online_store_system_project	online_store_system	Online Store System v1.0 delete_file.php doesn't check to see if a user has administrative rights nor does it check for path traversal.	CWE-22 Path Traversal	CVE-2019-8291	2024-11-21 13:49	2019-10-2	Show	GitHub Exploit DB Packet Storm

212376	6.1	MEDIUM Network	online_store_system_project	online_store_system	Vulnerability in Online Store v1.0, The registration form requirements for the member email format can be bypassed by posting directly to sent_register.php allowing special characters to be included …	CWE-79 Cross-site Scripting	CVE-2019-8290	2024-11-21 13:49	2019-10-2	Show	GitHub Exploit DB Packet Storm

212377	5.4	MEDIUM Network	online_store_system_project	online_store_system	Vulnerability in Online Store v1.0, stored XSS in admin/user_view.php adidas_member_email variable	CWE-79 Cross-site Scripting	CVE-2019-8289	2024-11-21 13:49	2019-10-2	Show	GitHub Exploit DB Packet Storm

212378	5.4	MEDIUM Network	online_store_system_project	online_store_system	Vulnerability in Online Store v1.0, Stored XSS in user_view.php where adidas_member_user variable is not sanitized.	CWE-79 Cross-site Scripting	CVE-2019-8288	2024-11-21 13:49	2019-10-2	Show	GitHub Exploit DB Packet Storm

212379	7.5	HIGH Network	adobe google debian fedoraproject	flash_player_desktop_runtime flash_player chrome debian_linux fedora	Adobe Flash Player version 32.0.0.192 and earlier versions have a Same Origin Policy Bypass vulnerability. Successful exploitation could lead to Information Disclosure in the context of the current u…	NVD-CWE-noinfo	CVE-2019-8075	2024-11-21 13:49	2019-09-28	Show	GitHub Exploit DB Packet Storm

212380	9.8	CRITICAL Network	adobe	coldfusion	ColdFusion 2018- update 4 and earlier and ColdFusion 2016- update 11 and earlier have a Path Traversal vulnerability. Successful exploitation could lead to Access Control Bypass in the context of the…	CWE-22 Path Traversal	CVE-2019-8074	2024-11-21 13:49	2019-09-28	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed