Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 7, 2026, 4:01 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
227341 5 警告 トレンドマイクロ - Trend Micro OfficeScan および Worry-Free Business Security クライアントの OfficeScanNT Listener サービスにおけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル
CVE-2008-2439 2012-12-20 18:52 2008-09-26 Show GitHub Exploit DB Packet Storm
227342 10 危険 トレンドマイクロ - Trend Micro OfficeScan および Client Server Messaging Security の cgiRecvFile.exe におけるスタックベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー
CVE-2008-2437 2012-12-20 18:52 2008-09-12 Show GitHub Exploit DB Packet Storm
227343 9.3 危険 トレンドマイクロ - Housecall_ActiveX.dll の Trend Micro HouseCall ActiveX コントロールにおける任意のコードを実行される脆弱性 CWE-399
リソース管理の問題
CVE-2008-2435 2012-12-20 18:52 2008-12-23 Show GitHub Exploit DB Packet Storm
227344 9.3 危険 トレンドマイクロ - Housecall_ActiveX.dll の Trend Micro HouseCall ActiveX コントロールにおけるクライアントシステム上へ任意のライブラリファイルをダウンロードされる脆弱性 CWE-94
コード・インジェクション
CVE-2008-2434 2012-12-20 18:52 2008-12-23 Show GitHub Exploit DB Packet Storm
227345 7.5 危険 トレンドマイクロ - Trend Micro OfficeScan などの Web 管理コンソールにおけるセッションをハイジャックされる脆弱性 CWE-287
不適切な認証
CVE-2008-2433 2012-12-20 18:52 2008-08-20 Show GitHub Exploit DB Packet Storm
227346 9.3 危険 VideoLAN - Windows 上で稼動する VLC Media Player の modules/demux/wav.c における整数オーバーフローの脆弱性 CWE-189
数値処理の問題
CVE-2008-2430 2012-12-20 18:52 2008-07-7 Show GitHub Exploit DB Packet Storm
227347 6.8 警告 torrenttrader - TorrentTrader Classic における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2008-2428 2012-12-20 18:52 2008-06-18 Show GitHub Exploit DB Packet Storm
227348 7.5 危険 webslider - Web Slider の index.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2008-2422 2012-12-20 18:52 2008-05-23 Show GitHub Exploit DB Packet Storm
227349 4.3 警告 SAP - SAP WAS などの Web GUI におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2008-2421 2012-12-20 18:52 2008-05-23 Show GitHub Exploit DB Packet Storm
227350 6.8 警告 stunnel - stunnel の OCSP 関数におけるアクセス制限を回避される脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2008-2420 2012-12-20 18:52 2008-05-23 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 7, 2026, 4:22 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
223831 7.2 HIGH
Network
ajdg adrotate The AJdG AdRotate plugin before 5.3 for WordPress allows SQL Injection. CWE-89
SQL Injection
CVE-2019-13570 2024-11-21 13:25 2019-07-24 Show GitHub Exploit DB Packet Storm
223832 9.8 CRITICAL
Network
icegram email_subscribers_\&_newsletters A SQL injection vulnerability exists in the Icegram Email Subscribers & Newsletters plugin through 4.1.7 for WordPress. Successful exploitation of this vulnerability would allow a remote attacker to … CWE-89
SQL Injection
CVE-2019-13569 2024-11-21 13:25 2019-07-20 Show GitHub Exploit DB Packet Storm
223833 6.5 MEDIUM
Adjacent
arduino arduino_firmware Embedded systems based on Arduino before Rev3 allow remote attackers to send data to LEDs (directly connected to GPIO pins) via a laser, because of LED photosensitivity. NVD-CWE-noinfo
CVE-2019-13991 2024-11-21 13:25 2019-07-20 Show GitHub Exploit DB Packet Storm
223834 7.8 HIGH
Local
dpic_project dpic dpic 2019.06.20 has a Stack-based Buffer Overflow in the wfloat() function in main.c. CWE-787
 Out-of-bounds Write
CVE-2019-13989 2024-11-21 13:25 2019-07-20 Show GitHub Exploit DB Packet Storm
223835 8.8 HIGH
Network
rangerstudio directus_7_api Directus 7 API before 2.3.0 does not validate uploaded files. Regardless of the file extension or MIME type, there is a direct link to each uploaded file, accessible by unauthenticated users, as demo… CWE-434
 Unrestricted Upload of File with Dangerous Type 
CVE-2019-13984 2024-11-21 13:25 2019-07-20 Show GitHub Exploit DB Packet Storm
223836 9.8 CRITICAL
Network
rangerstudio directus_7_api Directus 7 API before 2.2.2 has insufficient anti-automation, as demonstrated by lack of a CAPTCHA in core/Directus/Services/AuthService.php and endpoints/Auth.php. CWE-306
Missing Authentication for Critical Function
CVE-2019-13983 2024-11-21 13:25 2019-07-20 Show GitHub Exploit DB Packet Storm
223837 5.3 MEDIUM
Network
rangerstudio directus_7 interfaces/markdown/input.vue in Directus 7 Application before 7.7.0 does not sanitize Markdown text before rendering a preview. NVD-CWE-noinfo
CVE-2019-13982 2024-11-21 13:25 2019-07-20 Show GitHub Exploit DB Packet Storm
223838 5.3 MEDIUM
Network
rangerstudio directus_7_api In Directus 7 API through 2.3.0, remote attackers can read image files via a direct request for a filename under the uploads/_/originals/ directory. This is related to a configuration option in which… CWE-425
 Direct Request ('Forced Browsing')
CVE-2019-13981 2024-11-21 13:25 2019-07-20 Show GitHub Exploit DB Packet Storm
223839 8.8 HIGH
Network
rangerstudio directus_7_api In Directus 7 API through 2.3.0, uploading of PHP files is blocked only when the Apache HTTP Server is used, leading to uploads/_/originals remote code execution with nginx. CWE-434
 Unrestricted Upload of File with Dangerous Type 
CVE-2019-13980 2024-11-21 13:25 2019-07-20 Show GitHub Exploit DB Packet Storm
223840 8.8 HIGH
Network
rangerstudio directus_7_api In Directus 7 API before 2.2.1, uploading of PHP files is not blocked, leading to uploads/_/originals remote code execution. CWE-434
 Unrestricted Upload of File with Dangerous Type 
CVE-2019-13979 2024-11-21 13:25 2019-07-20 Show GitHub Exploit DB Packet Storm