Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 13, 2026, 2:01 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
227351 6.8 警告 Pluck CMS - Pluck の data/inc/lib/pcltar.lib.php におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル
CVE-2008-6253 2012-12-20 19:10 2009-02-24 Show GitHub Exploit DB Packet Storm
227352 7.2 危険 smcfancontrol - smcFanControl の smc プログラムにおけるスタックベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー
CVE-2008-6252 2012-12-20 19:10 2009-02-24 Show GitHub Exploit DB Packet Storm
227353 6.8 警告 scripts - phpFan の includes/init.php における PHP リモートファイルインクルージョンの脆弱性 CWE-94
コード・インジェクション
CVE-2008-6251 2012-12-20 19:10 2009-02-24 Show GitHub Exploit DB Packet Storm
227354 7.5 危険 scripts-for-sites - SFS EZ Top Sites の topsite.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2008-6247 2012-12-20 19:10 2009-02-23 Show GitHub Exploit DB Packet Storm
227355 7.5 危険 scripts-for-sites - SFS EZ Webring の category.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2008-6246 2012-12-20 19:10 2009-02-23 Show GitHub Exploit DB Packet Storm
227356 7.5 危険 scripts-for-sites - SFS EZ BIZ PRO の track.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2008-6245 2012-12-20 19:10 2009-02-23 Show GitHub Exploit DB Packet Storm
227357 7.5 危険 scripts-for-sites - SFS EZ Gaming Cheats の view_reviews.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2008-6244 2012-12-20 19:10 2009-02-23 Show GitHub Exploit DB Packet Storm
227358 7.5 危険 scripts-for-sites - SFS Hotscripts-like Site の showcategory.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2008-6243 2012-12-20 19:10 2009-02-23 Show GitHub Exploit DB Packet Storm
227359 7.5 危険 scripts-for-sites - SFS EZ e-store の SearchResults.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2008-6242 2012-12-20 19:10 2009-02-23 Show GitHub Exploit DB Packet Storm
227360 7.5 危険 scripts-for-sites - SFS Hotscripts-like Site の software-description.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2008-6237 2012-12-20 19:10 2009-02-23 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 13, 2026, 5:05 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
224281 5.5 MEDIUM
Local
lavamobiles flair_z1_firmware The Lava Flair Z1 Android device with a build fingerprint of LAVA/Z1/Z1:8.1.0/O11019/1536680131:user/release-keys contains a pre-installed app with a package name of com.mediatek.wfo.impl app (versio… NVD-CWE-noinfo
CVE-2019-15356 2024-11-21 13:28 2019-11-15 Show GitHub Exploit DB Packet Storm
224282 5.5 MEDIUM
Local
tecno-mobile camon_iclick_firmware The Tecno Camon iClick Android device with a build fingerprint of TECNO/H633/TECNO-IN6:8.1.0/O11019/A-180409V96:user/release-keys contains a pre-installed app with a package name of com.mediatek.wfo.… NVD-CWE-noinfo
CVE-2019-15355 2024-11-21 13:28 2019-11-15 Show GitHub Exploit DB Packet Storm
224283 5.5 MEDIUM
Local
ulefone armor_5_firmware The Ulefone Armor 5 Android device with a build fingerprint of Ulefone/Ulefone_Armor_5/Ulefone_Armor_5:8.1.0/O11019/1528806701:user/release-keys contains a pre-installed app with a package name of co… NVD-CWE-noinfo
CVE-2019-15354 2024-11-21 13:28 2019-11-15 Show GitHub Exploit DB Packet Storm
224284 5.5 MEDIUM
Local
coolpad n3c_firmware The Coolpad N3C Android device with a build fingerprint of Coolpad/N3C/N3C:8.1.0/O11019/1538236809:user/release-keys contains a pre-installed app with a package name of com.mediatek.wfo.impl app (ver… NVD-CWE-noinfo
CVE-2019-15353 2024-11-21 13:28 2019-11-15 Show GitHub Exploit DB Packet Storm
224285 5.5 MEDIUM
Local
coolpad mega_5_firmware The Coolpad 1851 Android device with a build fingerprint of Coolpad/android/android:8.1.0/O11019/1534834761:userdebug/release-keys contains a pre-installed app with a package name of com.mediatek.wfo… NVD-CWE-noinfo
CVE-2019-15352 2024-11-21 13:28 2019-11-15 Show GitHub Exploit DB Packet Storm
224286 7.8 HIGH
Local
tecno-mobile tecno\/h622\/tecno-id5b\ The Tecno Camon Android device with a build fingerprint of TECNO/H622/TECNO-ID5b:8.1.0/O11019/G-180829V31:user/release-keys contains a pre-installed platform app with a package name of com.lovelyfont… CWE-78
OS Command 
CVE-2019-15351 2024-11-21 13:28 2019-11-15 Show GitHub Exploit DB Packet Storm
224287 7.8 HIGH
Local
tecno-mobile tecno\/h622\/tecno-id5b\ The Tecno Camon Android device with a build fingerprint of TECNO/H622/TECNO-ID5b:8.1.0/O11019/G-180829V31:user/release-keys contains a pre-installed platform app with a package name of com.lovelyfont… CWE-668
 Exposure of Resource to Wrong Sphere
CVE-2019-15350 2024-11-21 13:28 2019-11-15 Show GitHub Exploit DB Packet Storm
224288 7.8 HIGH
Local
tecno-mobile tecno\/h612\/tecno-id5a\ The Tecno Camon Android device with a build fingerprint of TECNO/H612/TECNO-ID5a:8.1.0/O11019/F-180828V106:user/release-keys contains a pre-installed platform app with a package name of com.lovelyfon… CWE-668
 Exposure of Resource to Wrong Sphere
CVE-2019-15349 2024-11-21 13:28 2019-11-15 Show GitHub Exploit DB Packet Storm
224289 3.3 LOW
Local
mi redmi_6_firmware The Xiaomi Redmi 6 Pro Android device with a build fingerprint of xiaomi/sakura_india/sakura_india:8.1.0/OPM1.171019.019/V9.6.4.0.ODMMIFD:user/release-keys contains a pre-installed app with a package… CWE-732
 Incorrect Permission Assignment for Critical Resource
CVE-2019-15340 2024-11-21 13:28 2019-11-15 Show GitHub Exploit DB Packet Storm
224290 3.3 LOW
Local
lavamobiles z60s_firmware The Lava Z60s Android device with a build fingerprint of LAVA/Z60s/Z60s:8.1.0/O11019/1530331229:user/release-keys contains a pre-installed app with a package name of com.android.lava.powersave app (v… CWE-732
 Incorrect Permission Assignment for Critical Resource
CVE-2019-15339 2024-11-21 13:28 2019-11-15 Show GitHub Exploit DB Packet Storm