Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 6, 2026, 4 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
227421 7.5 危険 spacial audio solutions - SAM Broadcaster samPHPweb の songinfo.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2008-0187 2012-12-20 18:34 2008-01-9 Show GitHub Exploit DB Packet Storm
227422 4.3 警告 phprisk - NetRisk の index.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2008-0186 2012-12-20 18:34 2008-01-9 Show GitHub Exploit DB Packet Storm
227423 6.4 警告 prenotazioni on line - Line System 上で稼動している Sys-Hotel における絶対パストラバーサルの脆弱性 CWE-22
パス・トラバーサル
CVE-2008-0184 2012-12-20 18:34 2008-01-9 Show GitHub Exploit DB Packet Storm
227424 4.3 警告 Plone Foundation - Plone CMS におけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反
CVE-2008-0164 2012-12-20 18:34 2008-03-14 Show GitHub Exploit DB Packet Storm
227425 7.2 危険 sam lantinga - splitvt の misc.c における権限を取得される脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2008-0162 2012-12-20 18:34 2008-02-21 Show GitHub Exploit DB Packet Storm
227426 5 警告 shop-script - Shop-Script の index.php におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル
CVE-2008-0158 2012-12-20 18:34 2008-01-8 Show GitHub Exploit DB Packet Storm
227427 5 警告 pragma systems - Pragma TelnetServer の telnetd.exe におけるサービス運用妨害 (DoS) の脆弱性 CWE-399
リソース管理の問題
CVE-2008-0153 2012-12-20 18:34 2008-01-8 Show GitHub Exploit DB Packet Storm
227428 4.3 警告 seattle lab software - SLnet.exe の SeattleLab SLNet RF Telnet Server におけるサービス運用妨害 (DoS) の脆弱性 CWE-119
バッファエラー
CVE-2008-0152 2012-12-20 18:34 2008-01-8 Show GitHub Exploit DB Packet Storm
227429 5 警告 tutos - TUTOS におけるシステム情報を読み取られる脆弱性 CWE-DesignError
CVE-2008-0149 2012-12-20 18:34 2008-01-8 Show GitHub Exploit DB Packet Storm
227430 10 危険 tutos - TUTOS における任意のシェルコマンドを実行される脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2008-0148 2012-12-20 18:34 2008-01-8 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 6, 2026, 4:08 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
223741 7.3 HIGH
Network
auth0 passport-sharepoint Auth0 Passport-SharePoint before 0.4.0 does not validate the JWT signature of an Access Token before processing. This allows attackers to forge tokens and bypass authentication and authorization mech… CWE-345
 Insufficient Verification of Data Authenticity
CVE-2019-13483 2024-11-21 13:24 2019-07-26 Show GitHub Exploit DB Packet Storm
223742 7.5 HIGH
Network
cat_runner\ _decorate_home_project The application API of Cat Runner Decorate Home version 2.8.0 for Android does not sufficiently verify inputs that are assumed to be immutable but are actually externally controllable. Attackers can … CWE-20
 Improper Input Validation 
CVE-2019-13097 2024-11-21 13:24 2019-07-23 Show GitHub Exploit DB Packet Storm
223743 9.8 CRITICAL
Network
tronlink wallet TronLink Wallet 2.2.0 stores user wallet keystore in plaintext and places them in insecure storage. An attacker can read and reuse the user keystore of a valid user via /data/data/com.tronlink.wallet… CWE-312
 Cleartext Storage of Sensitive Information
CVE-2019-13096 2024-11-21 13:24 2019-07-23 Show GitHub Exploit DB Packet Storm
223744 6.5 MEDIUM
Network
send-anywhere send_anywhere The Send Anywhere application 9.4.18 for Android stores confidential information insecurely on the system (i.e., in cleartext), which allows a non-root user to find out the username/password of a val… CWE-312
 Cleartext Storage of Sensitive Information
CVE-2019-13100 2024-11-21 13:24 2019-07-23 Show GitHub Exploit DB Packet Storm
223745 6.5 MEDIUM
Network
momo_project momo The Momo application 2.1.9 for Android stores confidential information insecurely on the system (i.e., in cleartext), which allows a non-root user to find out the username/password of a valid user an… CWE-312
 Cleartext Storage of Sensitive Information
CVE-2019-13099 2024-11-21 13:24 2019-07-23 Show GitHub Exploit DB Packet Storm
223746 6.5 MEDIUM
Network
tronlink wallet The user password via the registration form of TronLink Wallet 2.2.0 is stored in the log when the class CreateWalletTwoActivity is called. Other authenticated users can read it in the log later. The… CWE-532
 Inclusion of Sensitive Information in Log Files
CVE-2019-13098 2024-11-21 13:24 2019-07-23 Show GitHub Exploit DB Packet Storm
223747 6.1 MEDIUM
Network
sertek xpare An issue was discovered in Sertek Xpare 3.67. The login form does not sanitize input data. Because of this, a malicious agent could exploit the vulnerable function in order to prepare an XSS payload … CWE-79
Cross-site Scripting
CVE-2019-13448 2024-11-21 13:24 2019-07-18 Show GitHub Exploit DB Packet Storm
223748 9.8 CRITICAL
Network
sertek xpare An issue was discovered in Sertek Xpare 3.67. The login form does not sanitize input data. Because of this, a malicious agent could access the backend database via SQL injection. CWE-89
SQL Injection
CVE-2019-13447 2024-11-21 13:24 2019-07-18 Show GitHub Exploit DB Packet Storm
223749 7.5 HIGH
Network
temenos cwx Temenos CWX version 8.9 has an Broken Access Control vulnerability in the module /CWX/Employee/EmployeeEdit2.aspx, leading to the viewing of user information. NVD-CWE-noinfo
CVE-2019-13403 2024-11-21 13:24 2019-07-18 Show GitHub Exploit DB Packet Storm
223750 6.1 MEDIUM
Network
myt_project myt In MyT 1.5.1, the User[username] parameter has XSS. CWE-79
Cross-site Scripting
CVE-2019-13346 2024-11-21 13:24 2019-07-18 Show GitHub Exploit DB Packet Storm