Vulnerability Search Top

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

Vulnerability Information Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 11, 2026, 10 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
227211	7.8	危険	tonec inc.	-	Tonec Internet Download Manager のファイル解析関数におけるスタックベースのバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2008-4508	2012-12-20 18:52	2008-10-9	Show	GitHub Exploit DB Packet Storm

227212	9	危険	Rhino Software	-	Serv-U の FTP サーバにおけるディレクトリトラバーサルの脆弱性	CWE-22 パス・トラバーサル	CVE-2008-4501	2012-12-20 18:52	2008-10-8	Show	GitHub Exploit DB Packet Storm

227213	4.3	警告	Plone Foundation	-	Plone の LiveSearch モジュールにおけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2008-4571	2012-12-20 18:52	2007-10-7	Show	GitHub Exploit DB Packet Storm

227214	4	警告	Rhino Software	-	Serv-U におけるサービス運用妨害 (DoS) の脆弱性	CWE-20 不適切な入力確認	CVE-2008-4500	2012-12-20 18:52	2008-10-8	Show	GitHub Exploit DB Packet Storm

227215	7.5	危険	phpautos	-	PHP Autos の searchresults.php における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2008-4498	2012-12-20 18:52	2008-10-8	Show	GitHub Exploit DB Packet Storm

227216	7.5	危険	select development solutions	-	PHP Realtor の view_cat.php における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2008-4496	2012-12-20 18:52	2008-10-8	Show	GitHub Exploit DB Packet Storm

227217	7.5	危険	select development solutions	-	PHP Auto Dealer の view_cat.php における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2008-4495	2012-12-20 18:52	2008-10-8	Show	GitHub Exploit DB Packet Storm

227218	7.5	危険	torrenttrader	-	TorrentTrader Classic の completed-advance.php における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2008-4494	2012-12-20 18:52	2008-10-8	Show	GitHub Exploit DB Packet Storm

227219	7.5	危険	yourownbux	-	YourOwnBux の referrals.php における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2008-4492	2012-12-20 18:52	2008-10-8	Show	GitHub Exploit DB Packet Storm

227220	10	危険	yerba	-	Yerba で使用される SACphp の index.php におけるディレクトリトラバーサルの脆弱性	CWE-22 パス・トラバーサル	CVE-2008-4486	2012-12-20 18:52	2008-10-7	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 11, 2026, 4:09 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
222461	7.2	HIGH Network	metinfo	metinfo	In Metinfo 7.0.0beta, a SQL Injection was discovered in app/system/language/admin/language_general.class.php via the admin/?n=language&c=language_general&a=doExportPack appno parameter.	CWE-89 SQL Injection	CVE-2019-16997	2024-11-21 13:31	2019-09-30	Show	GitHub Exploit DB Packet Storm

222462	7.2	HIGH Network	metinfo	metinfo	In Metinfo 7.0.0beta, a SQL Injection was discovered in app/system/product/admin/product_admin.class.php via the admin/?n=product&c=product_admin&a=dopara&app_type=shop id parameter.	CWE-89 SQL Injection	CVE-2019-16996	2024-11-21 13:31	2019-09-30	Show	GitHub Exploit DB Packet Storm

222463	4.7	MEDIUM Local	linux redhat opensuse	linux_kernel enterprise_linux leap	In the Linux kernel before 5.0, a memory leak exists in sit_init_net() in net/ipv6/sit.c when register_netdev() fails to register sitn->fb_tunnel_dev, which may cause denial of service, aka CID-07f12…	CWE-401 Missing Release of Memory after Effective Lifetime	CVE-2019-16994	2024-11-21 13:31	2019-09-30	Show	GitHub Exploit DB Packet Storm

222464	8.8	HIGH Network	ebrigade	ebrigade	eBrigade before 5.0 has evenement_choice.php chxCal SQL Injection.	CWE-89 SQL Injection	CVE-2019-16745	2024-11-21 13:31	2019-09-30	Show	GitHub Exploit DB Packet Storm

222465	8.8	HIGH Network	ebrigade	ebrigade	eBrigade before 5.0 has evenements.php cid SQL Injection.	CWE-89 SQL Injection	CVE-2019-16744	2024-11-21 13:31	2019-09-30	Show	GitHub Exploit DB Packet Storm

222466	8.8	HIGH Network	ebrigade	ebrigade	eBrigade before 5.0 has evenement_ical.php evenement SQL Injection.	CWE-89 SQL Injection	CVE-2019-16743	2024-11-21 13:31	2019-09-30	Show	GitHub Exploit DB Packet Storm

222467	8.8	HIGH Network	phpbb debian	phpbb debian_linux	In phpBB before 3.1.7-PL1, includes/acp/acp_bbcodes.php has improper verification of a CSRF token on the BBCode page in the Administration Control Panel. An actual CSRF attack is possible if an attac…	CWE-352 Origin Validation Error	CVE-2019-16993	2024-11-21 13:31	2019-09-30	Show	GitHub Exploit DB Packet Storm

222468	7.5	HIGH Network	keybase	keybase	The Keybase app 2.13.2 for iOS provides potentially insufficient notice that it is employing a user's private key to sign a certain cryptocurrency attestation (that an address at keybase.io can be us…	CWE-347 Improper Verification of Cryptographic Signature	CVE-2019-16992	2024-11-21 13:31	2019-09-30	Show	GitHub Exploit DB Packet Storm

222469	7.5	HIGH Network	linux opensuse netapp	linux_kernel leap aff_a700s_firmware h300s_firmware h500s_firmware h700s_firmware h300e_firmware h500e_firmware h700e_firmware h410s_firmware h410c_firmware h610s_fir…	In the Linux kernel before 5.0.3, a memory leak exits in hsr_dev_finalize() in net/hsr/hsr_device.c if hsr_add_port fails to add a port, which may cause denial of service, aka CID-6caabe7f197d.	CWE-401 Missing Release of Memory after Effective Lifetime	CVE-2019-16995	2024-11-21 13:31	2019-09-30	Show	GitHub Exploit DB Packet Storm

222470	5.3	MEDIUM Network	z.cash	zcash	Zcashd in Zcash before 2.0.7-3 allows discovery of the IP address of a full node that owns a shielded address, related to mishandling of exceptions during deserialization of note plaintexts. This aff…	CWE-755 Improper Handling of Exceptional Conditions	CVE-2019-16930	2024-11-21 13:31	2019-09-29	Show	GitHub Exploit DB Packet Storm