Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 9, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
227271	4.3	警告	webcms	-	webCMS Portal Edition の index.php におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2008-4184	2012-12-20 18:52	2008-09-23	Show	GitHub Exploit DB Packet Storm

227272	7.5	危険	PreProject.com	-	Pre Real Estate Listings の search.php における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2008-4177	2012-12-20 18:52	2008-09-23	Show	GitHub Exploit DB Packet Storm

227273	7.5	危険	proarcadescript	-	ProArcadeScript における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2008-4173	2012-12-20 18:52	2008-09-22	Show	GitHub Exploit DB Packet Storm

227274	7.5	危険	rfaah	-	Cars & Vehicle の page.php における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2008-4172	2012-12-20 18:52	2008-09-22	Show	GitHub Exploit DB Packet Storm

227275	4.3	警告	pro2col	-	Pro2col Stingray FTS の verify_login.jsp におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2008-4168	2012-12-20 18:52	2008-09-22	Show	GitHub Exploit DB Packet Storm

227276	7.5	危険	zanfi solutions	-	Zanfi CMS lite および Jaw Portal の index.php における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2008-4159	2012-12-20 18:52	2008-09-22	Show	GitHub Exploit DB Packet Storm

227277	6.8	警告	zanfi solutions	-	Zanfi CMS lite の index.php におけるディレクトリトラバーサルの脆弱性	CWE-22 パス・トラバーサル	CVE-2008-4158	2012-12-20 18:52	2008-09-22	Show	GitHub Exploit DB Packet Storm

227278	7.5	危険	Vastal I-Tech & Co.	-	Vastal I-Tech phpVID の groups.php における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2008-4157	2012-12-20 18:52	2008-09-22	Show	GitHub Exploit DB Packet Storm

227279	7.5	危険	razorecommerce	-	RazorCommerce Shopping Cart の category_search.php における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2008-4143	2012-12-20 18:52	2008-09-24	Show	GitHub Exploit DB Packet Storm

227280	7.5	危険	x10media	-	x10Media x10 Automatic MP3 Script における PHP リモートファイルインクルージョンの脆弱性	CWE-94 コード・インジェクション	CVE-2008-4141	2012-12-20 18:52	2008-09-24	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 9, 2026, 5:07 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
223941	6.5	MEDIUM Adjacent	tianocore debian	edk2 debian_linux	Logic issue EDK II may allow an unauthenticated user to potentially enable denial of service via adjacent access.	NVD-CWE-noinfo	CVE-2019-14587	2024-11-21 13:26	2020-11-24	Show	GitHub Exploit DB Packet Storm

223942	8.0	HIGH Adjacent	tianocore debian	edk2 debian_linux	Use after free vulnerability in EDK II may allow an authenticated user to potentially enable escalation of privilege, information disclosure and/or denial of service via adjacent access.	CWE-416 Use After Free	CVE-2019-14586	2024-11-21 13:26	2020-11-24	Show	GitHub Exploit DB Packet Storm

223943	7.8	HIGH Local	tianocore debian	edk2 debian_linux	Logic issue in DxeImageVerificationHandler() for EDK II may allow an authenticated user to potentially enable escalation of privilege via local access.	NVD-CWE-noinfo	CVE-2019-14575	2024-11-21 13:26	2020-11-24	Show	GitHub Exploit DB Packet Storm

223944	7.8	HIGH Local	tianocore debian	edk2 debian_linux	Integer truncation in EDK II may allow an authenticated user to potentially enable escalation of privilege via local access.	CWE-787 CWE-681 Out-of-bounds Write Incorrect Conversion between Numeric Types	CVE-2019-14563	2024-11-21 13:26	2020-11-24	Show	GitHub Exploit DB Packet Storm

223945	5.5	MEDIUM Local	tianocore debian	edk2 debian_linux	Integer overflow in DxeImageVerificationHandler() EDK II may allow an authenticated user to potentially enable denial of service via local access.	CWE-190 Integer Overflow or Wraparound	CVE-2019-14562	2024-11-21 13:26	2020-11-24	Show	GitHub Exploit DB Packet Storm

223946	7.5	HIGH Network	tianocore	edk2	Uncontrolled resource consumption in EDK II may allow an unauthenticated user to potentially enable denial of service via network access.	CWE-401 Missing Release of Memory after Effective Lifetime	CVE-2019-14559	2024-11-21 13:26	2020-11-24	Show	GitHub Exploit DB Packet Storm

223947	4.9	MEDIUM Network	tianocore	edk2	Improper authentication in EDK II may allow a privileged user to potentially enable information disclosure via network access.	CWE-287 Improper Authentication	CVE-2019-14553	2024-11-21 13:26	2020-11-24	Show	GitHub Exploit DB Packet Storm

223948	5.7	MEDIUM Adjacent	intel debian	bios debian_linux	Insufficient control flow management in BIOS firmware for 8th, 9th, 10th Generation Intel(R) Core(TM), Intel(R) Celeron(R) Processor 4000 & 5000 Series Processors may allow an authenticated user to p…	NVD-CWE-Other	CVE-2019-14558	2024-11-21 13:26	2020-10-5	Show	GitHub Exploit DB Packet Storm

223949	8.0	HIGH Adjacent	intel	bios	Buffer overflow in BIOS firmware for 8th, 9th, 10th Generation Intel(R) Core(TM), Intel(R) Celeron(R) Processor 4000 & 5000 Series Processors may allow an authenticated user to potentially enable ele…	CWE-120 Classic Buffer Overflow	CVE-2019-14557	2024-11-21 13:26	2020-10-5	Show	GitHub Exploit DB Packet Storm

223950	4.4	MEDIUM Local	intel	bios	Improper initialization in BIOS firmware for 8th, 9th, 10th Generation Intel(R) Core(TM), Intel(R) Celeron(R) Processor 4000 & 5000 Series Processors may allow a privileged user to potentially enable…	CWE-665 Improper Initialization	CVE-2019-14556	2024-11-21 13:26	2020-10-5	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed