Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 4, 2026, noon

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
227301 7.5 危険 WordPress.org - WordPress 用の st_newsletter プラグインにおける SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-0683 2012-12-20 18:34 2008-02-11 Show GitHub Exploit DB Packet Storm
227302 7.5 危険 WordPress.org - WordPress 用の Wordspew プラグインにおける SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-0682 2012-12-20 18:34 2008-02-11 Show GitHub Exploit DB Packet Storm
227303 6.8 警告 phpshop - PHPShop の index.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-0681 2012-12-20 18:34 2008-02-11 Show GitHub Exploit DB Packet Storm
227304 7.5 危険 the everything development company - The Everything Development System の The Everything Development Engine における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-0675 2012-12-20 18:34 2008-02-11 Show GitHub Exploit DB Packet Storm
227305 7.5 危険 tintin - TinTin++ および WinTin++ におけるホームディレクトリの一番上のレベルにある任意のファイルを切り捨てられる脆弱性 CWE-DesignError
CVE-2008-0673 2012-12-20 18:34 2008-02-11 Show GitHub Exploit DB Packet Storm
227306 5 警告 tintin - TinTin++ および WinTin++ の process_chat_input 関数におけるサービス運用妨害 (DoS) の脆弱性 CWE-20
不適切な入力確認 		CVE-2008-0672 2012-12-20 18:34 2008-02-11 Show GitHub Exploit DB Packet Storm
227307 10 危険 tintin - TinTin++ および WinTin++ の add_line_buffer 関数におけるスタックベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2008-0671 2012-12-20 18:34 2008-02-11 Show GitHub Exploit DB Packet Storm
227308 4.3 警告 sift - Sift Unity の search.cgi におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2008-0669 2012-12-20 18:34 2008-02-11 Show GitHub Exploit DB Packet Storm
227309 3.6 注意 website meta language - WML における任意のファイルを上書きされる脆弱性 CWE-59
リンク解釈の問題 		CVE-2008-0666 2012-12-20 18:34 2008-02-11 Show GitHub Exploit DB Packet Storm
227310 3.6 注意 website meta language - WML の wml_backend/p1_ipp/ipp.src における任意のファイルを上書きされる脆弱性 CWE-59
リンク解釈の問題 		CVE-2008-0665 2012-12-20 18:34 2008-02-11 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 4, 2026, 4:06 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
213361 7.8 HIGH
Local 		johnsoncontrols exacqvision_server ExacqVision Server’s services 'exacqVisionServer', 'dvrdhcpserver' and 'mdnsresponder' have an unquoted service path. If an authenticated user is able to insert code in their system root path it pote… CWE-428
 Unquoted Search Path or Element 		CVE-2019-7590 2024-11-21 13:48 2019-07-20 Show GitHub Exploit DB Packet Storm
213362 7.5 HIGH
Network 		adobe campaign Adobe Campaign Classic version 18.10.5-8984 and earlier versions have an Information Exposure Through an Error Message vulnerability. Successful exploitation could lead to Information Disclosure in t… CWE-209
Information Exposure Through an Error Message 		CVE-2019-7941 2024-11-21 13:48 2019-07-19 Show GitHub Exploit DB Packet Storm
213363 9.8 CRITICAL
Network 		adobe campaign Adobe Campaign Classic version 18.10.5-8984 and earlier versions have a Command injection vulnerability. Successful exploitation could lead to Arbitrary Code Execution in the context of the current u… CWE-77
Command Injection 		CVE-2019-7850 2024-11-21 13:48 2019-07-19 Show GitHub Exploit DB Packet Storm
213364 7.5 HIGH
Network 		adobe campaign Adobe Campaign Classic version 18.10.5-8984 and earlier versions have an Inadequate access control vulnerability. Successful exploitation could lead to Information Disclosure in the context of the cu… NVD-CWE-noinfo
CVE-2019-7848 2024-11-21 13:48 2019-07-19 Show GitHub Exploit DB Packet Storm
213365 7.5 HIGH
Network 		adobe campaign Adobe Campaign Classic version 18.10.5-8984 and earlier versions have an Improper Restriction of XML External Entity Reference ('XXE') vulnerability. Successful exploitation could lead to Arbitrary r… CWE-611
XXE 		CVE-2019-7847 2024-11-21 13:48 2019-07-19 Show GitHub Exploit DB Packet Storm
213366 7.5 HIGH
Network 		adobe campaign Adobe Campaign Classic version 18.10.5-8984 and earlier versions have an Improper error handling vulnerability. Successful exploitation could lead to Information Disclosure in the context of the curr… CWE-755
 Improper Handling of Exceptional Conditions 		CVE-2019-7846 2024-11-21 13:48 2019-07-19 Show GitHub Exploit DB Packet Storm
213367 7.5 HIGH
Network 		adobe campaign Adobe Campaign Classic version 18.10.5-8984 and earlier versions have an Insufficient input validation vulnerability. Successful exploitation could lead to Information Disclosure in the context of th… CWE-20
 Improper Input Validation  		CVE-2019-7843 2024-11-21 13:48 2019-07-19 Show GitHub Exploit DB Packet Storm
213368 7.2 HIGH
Network 		primasystems flexair Prima Systems FlexAir, Versions 2.3.38 and prior. The application incorrectly neutralizes special elements that could modify the intended OS command when it is sent to a downstream component, which c… CWE-78
OS Command  		CVE-2019-7670 2024-11-21 13:48 2019-07-2 Show GitHub Exploit DB Packet Storm
213369 8.8 HIGH
Network 		primasystems flexair Prima Systems FlexAir, Versions 2.3.38 and prior. Improper validation of file extensions when uploading files could allow a remote authenticated attacker to upload and execute malicious applications … CWE-434
 Unrestricted Upload of File with Dangerous Type  		CVE-2019-7669 2024-11-21 13:48 2019-07-2 Show GitHub Exploit DB Packet Storm
213370 9.8 CRITICAL
Network 		primasystems flexair Prima Systems FlexAir devices have Default Credentials. CWE-1188
 Insecure Default Initialization of Resource 		CVE-2019-7668 2024-11-21 13:48 2019-07-2 Show GitHub Exploit DB Packet Storm