Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 7, 2026, 10 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
227261	7.5	危険	レッドハット	-	Red Hat Directory Server で使用されている Red Hat Administration Server における管理者操作を実行される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2008-0893	2012-12-20 18:34	2008-04-15	Show	GitHub Exploit DB Packet Storm

227262	4.6	警告	レッドハット	-	Red Hat Directory Server における JAR ファイルを変更される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2008-0890	2012-12-20 18:34	2008-03-11	Show	GitHub Exploit DB Packet Storm

227263	2.1	注意	レッドハット	-	Red Hat Directory Server における任意のコードを実行される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2008-0889	2012-12-20 18:34	2008-03-19	Show	GitHub Exploit DB Packet Storm

227264	7.5	危険	PHPNUKE	-	PHP-Nuke 用の Okul モジュールにおける SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2008-0881	2012-12-20 18:34	2008-02-21	Show	GitHub Exploit DB Packet Storm

227265	7.5	危険	PHPNUKE	-	PHP-Nuke 用の EasyContent モジュールにおける SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2008-0880	2012-12-20 18:34	2008-02-21	Show	GitHub Exploit DB Packet Storm

227266	7.5	危険	PHPNUKE	-	PHP-Nuke 用の Web_Links モジュールにおける SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2008-0879	2012-12-20 18:34	2008-02-21	Show	GitHub Exploit DB Packet Storm

227267	7.5	危険	runcms	-	RunCMS 用の MyAnnonces モジュールにおける SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2008-0878	2012-12-20 18:34	2008-02-21	Show	GitHub Exploit DB Packet Storm

227268	4.3	警告	SmarterTools Inc.	-	SmarterTools SmarterMail Enterprise におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2008-0872	2012-12-20 18:34	2008-02-21	Show	GitHub Exploit DB Packet Storm

227269	7.5	危険	woltlab	-	WoltLab Burning Board の index.php における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2008-0857	2012-12-20 18:34	2008-02-20	Show	GitHub Exploit DB Packet Storm

227270	7.5	危険	WordPress.org	-	WordPress 用の Dean Logan WP-People プラグインにおける SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2008-0845	2012-12-20 18:34	2008-02-20	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 7, 2026, 4:22 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
222941	9.8	CRITICAL Network	mitsubishielectric inea	smartrtu_firmware me-rtu_firmware	An issue was discovered on Mitsubishi Electric Europe B.V. ME-RTU devices through 2.02 and INEA ME-RTU devices through 3.0. Stored cleartext passwords could allow an unauthenticated attacker to obtai…	CWE-522 Insufficiently Protected Credentials	CVE-2019-14929	2024-11-21 13:27	2019-10-28	Show	GitHub Exploit DB Packet Storm

222942	5.4	MEDIUM Network	mitsubishielectric inea	smartrtu_firmware me-rtu_firmware	An issue was discovered on Mitsubishi Electric Europe B.V. ME-RTU devices through 2.02 and INEA ME-RTU devices through 3.0. A number of stored cross-site script (XSS) vulnerabilities allow an attacke…	CWE-79 Cross-site Scripting	CVE-2019-14928	2024-11-21 13:27	2019-10-28	Show	GitHub Exploit DB Packet Storm

222943	7.5	HIGH Network	mitsubishielectric inea	smartrtu_firmware me-rtu_firmware	An issue was discovered on Mitsubishi Electric Europe B.V. ME-RTU devices through 2.02 and INEA ME-RTU devices through 3.0. An unauthenticated remote configuration download vulnerability allows an at…	CWE-306 CWE-425 Missing Authentication for Critical Function Direct Request ('Forced Browsing')	CVE-2019-14927	2024-11-21 13:27	2019-10-28	Show	GitHub Exploit DB Packet Storm

222944	6.5	MEDIUM Network	mitsubishielectric inea	smartrtu_firmware me-rtu_firmware	An issue was discovered on Mitsubishi Electric Europe B.V. ME-RTU devices through 2.02 and INEA ME-RTU devices through 3.0. A world-readable /usr/smartrtu/init/settings.xml configuration file on the …	CWE-276 Incorrect Default Permissions	CVE-2019-14925	2024-11-21 13:27	2019-10-28	Show	GitHub Exploit DB Packet Storm

222945	9.8	CRITICAL Network	mitsubishielectric inea	smartrtu_firmware me-rtu_firmware	An issue was discovered on Mitsubishi Electric Europe B.V. ME-RTU devices through 2.02 and INEA ME-RTU devices through 3.0. Hard-coded SSH keys allow an attacker to gain unauthorised access or disclo…	CWE-798 Use of Hard-coded Credentials	CVE-2019-14926	2024-11-21 13:27	2019-10-28	Show	GitHub Exploit DB Packet Storm

222946	9.8	CRITICAL Network	hinet	gpon_firmware	An “invalid command” handler issue was discovered in HiNet GPON firmware < I040GWR190731. It allows an attacker to execute arbitrary command through port 6998. CVSS 3.0 Base score 10.0. CVSS vector: …	NVD-CWE-noinfo	CVE-2019-15066	2024-11-21 13:27	2019-10-18	Show	GitHub Exploit DB Packet Storm

222947	7.5	HIGH Network	hinet	gpon_firmware	A service which is hosted on port 6998 in HiNet GPON firmware < I040GWR190731 allows an attacker to execute a specific command to read arbitrary files. CVSS 3.0 Base score 9.3. CVSS vector: (CVSS:3.0…	NVD-CWE-noinfo	CVE-2019-15065	2024-11-21 13:27	2019-10-18	Show	GitHub Exploit DB Packet Storm

222948	9.8	CRITICAL Network	hinet	gpon_firmware	HiNet GPON firmware version < I040GWR190731 allows an attacker login to device without any authentication.	CWE-306 Missing Authentication for Critical Function	CVE-2019-15064	2024-11-21 13:27	2019-10-18	Show	GitHub Exploit DB Packet Storm

222949	7.5	HIGH Network	redhat	keycloak	A flaw was found in the Keycloak REST API before version 8.0.0 where it would permit user access from a realm the user was not configured. An authenticated attacker with knowledge of a user id could …	CWE-863 Incorrect Authorization	CVE-2019-14832	2024-11-21 13:27	2019-10-16	Show	GitHub Exploit DB Packet Storm

222950	7.8	HIGH Local	ubisoft	uplay	Ubisoft Uplay 92.0.0.6280 has Insecure Permissions.	CWE-276 Incorrect Default Permissions	CVE-2019-14737	2024-11-21 13:27	2019-10-15	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed