Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 5, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
227431 6.8 警告 smallnuke - SmallNuke の index.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-0147 2012-12-20 18:34 2008-01-8 Show GitHub Exploit DB Packet Storm
227432 7.5 危険 phprisk - NetRisk の index.php における PHP リモートファイルインクルージョンの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-0144 2012-12-20 18:34 2008-01-8 Show GitHub Exploit DB Packet Storm
227433 7.5 危険 spacial audio solutions - samPHPweb の common/db.php における PHP リモートファイルインクルージョンの脆弱性 CWE-94
コード・インジェクション 		CVE-2008-0143 2012-12-20 18:34 2008-01-8 Show GitHub Exploit DB Packet Storm
227434 9.3 危険 ZyXEL - ZyXEL P-330W ルータの Web 管理インターフェースにおけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反 		CVE-2007-6730 2012-12-20 18:34 2009-09-10 Show GitHub Exploit DB Packet Storm
227435 4.3 警告 ZyXEL - ZyXEL P-330W ルータの Web 管理インターフェースにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2007-6729 2012-12-20 18:34 2009-09-10 Show GitHub Exploit DB Packet Storm
227436 6.8 警告 webportal - WebPortal CMS における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-0142 2012-12-20 18:34 2008-01-8 Show GitHub Exploit DB Packet Storm
227437 7.5 危険 webportal - WebPortal CMS の actions.php における任意のアカウントへのアクセス権を取得される脆弱性 CWE-255
証明書・パスワード管理 		CVE-2008-0141 2012-12-20 18:34 2008-01-8 Show GitHub Exploit DB Packet Storm
227438 6.4 警告 uebimiau - Uebimiau Webmail の error.php におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2008-0140 2012-12-20 18:34 2008-01-8 Show GitHub Exploit DB Packet Storm
227439 7.5 危険 snetworks - SNETWORKS PHP CLASSIFIEDS の config.inc.php における PHP リモートファイルインクルージョンの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-0137 2012-12-20 18:34 2008-01-8 Show GitHub Exploit DB Packet Storm
227440 5 警告 snitz forums 2000 - Snitz Forums 2000 における重要な情報を取得される脆弱性 CWE-200
情報漏えい 		CVE-2008-0136 2012-12-20 18:34 2008-01-8 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 6, 2026, 4:08 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
222881 9.8 CRITICAL
Network 		qualcomm ipq6018_firmware
ipq8074_firmware
nicobar_firmware
qca6390_firmware
qca8081_firmware
qcn7605_firmware
qcs404_firmware
qcs405_firmware
rennell_firmware
sc7180_firmware
sc… 		Possible buffer overflow while handling NAN reception of NMF in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Mobile, Snapdrag… CWE-120
Classic Buffer Overflow 		CVE-2019-14111 2024-11-21 13:26 2020-04-16 Show GitHub Exploit DB Packet Storm
222882 9.8 CRITICAL
Network 		qualcomm apq8009_firmware
apq8017_firmware
apq8053_firmware
apq8064_firmware
apq8096_firmware
apq8096au_firmware
apq8098_firmware
ipq6018_firmware
ipq8074_firmware
mdm9206_firmware<… 		Buffer overflow can occur in function wlan firmware while copying association frame content if frame length is more than the maximum buffer size in case of SAP mode in Snapdragon Auto, Snapdragon Com… CWE-120
Classic Buffer Overflow 		CVE-2019-14110 2024-11-21 13:26 2020-04-16 Show GitHub Exploit DB Packet Storm
222883 5.5 MEDIUM
Local 		qualcomm mdm9607_firmware
msm8917_firmware
msm8920_firmware
msm8937_firmware
msm8940_firmware
msm8953_firmware
msm8998_firmware
nicobar_firmware
qcs605_firmware
rennell_firmware
… 		Null pointer dereference issue in radio interface layer due to lack of null check in sapmodule destructor in Snapdragon Auto, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile in … CWE-476
 NULL Pointer Dereference 		CVE-2019-14075 2024-11-21 13:26 2020-04-16 Show GitHub Exploit DB Packet Storm
222884 7.0 HIGH
Local 		qualcomm apq8009_firmware
apq8017_firmware
apq8053_firmware
apq8064_firmware
apq8096au_firmware
apq8098_firmware
ipq4019_firmware
ipq6018_firmware
ipq8064_firmware
ipq8074_firmware<… 		Possible use after free issue in pcm volume controls due to race condition exist in private data used in mixer controls in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Ind… CWE-362
CWE-416
Race Condition
 Use After Free 		CVE-2019-14070 2024-11-21 13:26 2020-04-16 Show GitHub Exploit DB Packet Storm
222885 7.8 HIGH
Local 		andyroid andy_os An issue was discovered in AndyOS Andy versions up to 46.11.113. By default, it starts telnet and ssh (ports 22 and 23) with root privileges in the emulated Android system. This can be exploited by r… CWE-276
Incorrect Default Permissions  		CVE-2019-14326 2024-11-21 13:26 2020-04-15 Show GitHub Exploit DB Packet Storm
222886 6.1 MEDIUM
Network 		limesurvey limesurvey LimeSurvey 3.17.7+190627 has XSS via Boxes in application/extensions/PanelBoxWidget/views/box.php or a label title in application/views/admin/labels/labelview_view.php. CWE-79
Cross-site Scripting 		CVE-2019-14512 2024-11-21 13:26 2020-03-17 Show GitHub Exploit DB Packet Storm
222887 9.8 CRITICAL
Network 		ricoh sp_c250sf_firmware
sp_c252sf_firmware
sp_c250dn_firmware
sp_c252dn_firmware 		Ricoh SP C250DN 1.05 devices allow denial of service (issue 2 of 3). Unauthenticated crafted packets to the IPP service will cause a vulnerable device to crash. A memory corruption has been identifie… CWE-787
 Out-of-bounds Write 		CVE-2019-14310 2024-11-21 13:26 2020-03-14 Show GitHub Exploit DB Packet Storm
222888 7.5 HIGH
Network 		ricoh sp_c250sf_firmware
sp_c252sf_firmware
sp_c250dn_firmware
sp_c252dn_firmware 		Ricoh SP C250DN 1.05 devices have a fixed password. FTP service credential were found to be hardcoded within the printer firmware. This would allow to an attacker to access and read information store… CWE-798
 Use of Hard-coded Credentials 		CVE-2019-14309 2024-11-21 13:26 2020-03-14 Show GitHub Exploit DB Packet Storm
222889 7.5 HIGH
Network 		ricoh sp_c250sf_firmware
sp_c252sf_firmware
sp_c250dn_firmware
sp_c252dn_firmware 		Ricoh SP C250DN 1.05 devices allow denial of service (issue 1 of 3). Some Ricoh printers were affected by a wrong LPD service implementation that lead to a denial of service vulnerability. NVD-CWE-noinfo
CVE-2019-14303 2024-11-21 13:26 2020-03-14 Show GitHub Exploit DB Packet Storm
222890 9.8 CRITICAL
Network 		ricoh sp_c250sf_firmware
sp_c252sf_firmware
sp_c250dn_firmware
sp_c252dn_firmware 		Ricoh SP C250DN 1.05 devices have an Authentication Method Vulnerable to Brute Force Attacks. Some Ricoh printers did not implement account lockout. Therefore, it was possible to obtain the local acc… CWE-307
mproper Restriction of Excessive Authentication Attempts 		CVE-2019-14299 2024-11-21 13:26 2020-03-14 Show GitHub Exploit DB Packet Storm