Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 6, 2026, 2 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
227311 6.4 警告 WordPress.org - WordPress の XML-RPC 実装における他のブログユーザの投稿を編集される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2008-0664 2012-12-20 18:34 2008-02-5 Show GitHub Exploit DB Packet Storm
227312 7.5 危険 simple os cms - Simple OS CMS の login.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-0650 2012-12-20 18:34 2008-02-7 Show GitHub Exploit DB Packet Storm
227313 7.5 危険 portail web php - Portail Web Php における PHP リモートファイルインクルージョンの脆弱性 CWE-94
コード・インジェクション 		CVE-2008-0645 2012-12-20 18:34 2008-02-7 Show GitHub Exploit DB Packet Storm
227314 10 危険 シマンテック - Symantec Ghost Solution Suite における任意のコマンドを実行される脆弱性 CWE-287
不適切な認証 		CVE-2008-0640 2012-12-20 18:34 2008-02-7 Show GitHub Exploit DB Packet Storm
227315 9.3 危険 シマンテック - Symantec Veritas Storage Foundation の VEA サービスにおけるヒープベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2008-0638 2012-12-20 18:34 2008-02-20 Show GitHub Exploit DB Packet Storm
227316 7.5 危険 sejoong namo - Sejoong Namo ActiveSquare で使用される NamoInstaller.dll におけるバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2008-0634 2012-12-20 18:34 2008-02-6 Show GitHub Exploit DB Packet Storm
227317 7.5 危険 SAP - SAP GUI および SAPSprint に含まれる SAPLPD におけるバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2008-0621 2012-12-20 18:34 2008-02-6 Show GitHub Exploit DB Packet Storm
227318 10 危険 SAP - SAP GUI および SAPSprint に含まれる SAPLPD におけるサービス運用妨害 (DoS) の脆弱性 CWE-119
バッファエラー 		CVE-2008-0620 2012-12-20 18:34 2008-02-6 Show GitHub Exploit DB Packet Storm
227319 7.5 危険 rmsoft
XOOPS		 - XOOPS 用の RMSOFT Gallery System モジュールにおける SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-0611 2012-12-20 18:34 2008-02-6 Show GitHub Exploit DB Packet Storm
227320 9.3 危険 UltraVNC - UltraVNC 用の vncviewer におけるスタックベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2008-0610 2012-12-20 18:34 2008-02-6 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 6, 2026, 4:08 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
223491 9.8 CRITICAL
Network 		layerbb layerbb LayerBB 1.1.3 allows admin/general.php arbitrary file upload because the custom_logo filename suffix is not restricted, and .php may be used. CWE-434
 Unrestricted Upload of File with Dangerous Type  		CVE-2019-13973 2024-11-21 13:25 2019-07-19 Show GitHub Exploit DB Packet Storm
223492 6.1 MEDIUM
Network 		layerbb layerbb LayerBB 1.1.3 allows XSS via the application/commands/new.php pm_title variable, a related issue to CVE-2019-17997. CWE-79
Cross-site Scripting 		CVE-2019-13972 2024-11-21 13:25 2019-07-19 Show GitHub Exploit DB Packet Storm
223493 6.1 MEDIUM
Network 		otcms otcms OTCMS 3.81 allows XSS via the mode parameter in an apiRun.php?mudi=autoRun request. CWE-79
Cross-site Scripting 		CVE-2019-13971 2024-11-21 13:25 2019-07-19 Show GitHub Exploit DB Packet Storm
223494 6.1 MEDIUM
Network 		antsword_project antsword In antSword before 2.1.0, self-XSS in the database configuration leads to code execution via modules/database/asp/index.js, modules/database/custom/index.js, modules/database/index.js, or modules/dat… CWE-79
Cross-site Scripting 		CVE-2019-13970 2024-11-21 13:25 2019-07-19 Show GitHub Exploit DB Packet Storm
223495 8.8 HIGH
Network 		metinfo metinfo Metinfo 6.x allows SQL Injection via the id parameter in an admin/index.php?n=ui_set&m=admin&c=index&a=doget_text_content&table=lang&field=1 request. CWE-89
SQL Injection 		CVE-2019-13969 2024-11-21 13:25 2019-07-19 Show GitHub Exploit DB Packet Storm
223496 9.8 CRITICAL
Network 		videolan
opensuse
debian
canonical 		vlc_media_player
leap
backports_sle
debian_linux
ubuntu_linux 		lavc_CopyPicture in modules/codec/avcodec/video.c in VideoLAN VLC media player through 3.0.7 has a heap-based buffer over-read because it does not properly validate the width and height. CWE-125
Out-of-bounds Read 		CVE-2019-13962 2024-11-21 13:25 2019-07-19 Show GitHub Exploit DB Packet Storm
223497 8.8 HIGH
Network 		flatcore flatcore A CSRF vulnerability was found in flatCore before 1.5, leading to the upload of arbitrary .php files via acp/core/files.upload-script.php. CWE-352
 Origin Validation Error 		CVE-2019-13961 2024-11-21 13:25 2019-07-19 Show GitHub Exploit DB Packet Storm
223498 5.5 MEDIUM
Local 		libjpeg-turbo libjpeg-turbo In libjpeg-turbo 2.0.2, a large amount of memory can be used during processing of an invalid progressive JPEG image containing incorrect width and height values in the image header. NOTE: the vendor'… CWE-770
 Allocation of Resources Without Limits or Throttling 		CVE-2019-13960 2024-11-21 13:25 2019-07-19 Show GitHub Exploit DB Packet Storm
223499 6.5 MEDIUM
Network 		axiosys bento4 In Bento4 1.5.1-627, AP4_DataBuffer::SetDataSize does not handle reallocation failures, leading to a memory copy into a NULL pointer. This is different from CVE-2018-20186. CWE-476
 NULL Pointer Dereference 		CVE-2019-13959 2024-11-21 13:25 2019-07-19 Show GitHub Exploit DB Packet Storm
223500 9.8 CRITICAL
Network 		codersclub discuz\!ml Discuz!ML 3.2 through 3.4 allows remote attackers to execute arbitrary PHP code via a modified language cookie, as demonstrated by changing 4gH4_0df5_language=en to 4gH4_0df5_language=en'.phpinfo().'… CWE-94
Code Injection 		CVE-2019-13956 2024-11-21 13:25 2019-07-19 Show GitHub Exploit DB Packet Storm