Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 6, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
227441 5 警告 snitz forums 2000 - Snitz Forums 2000 におけるデータベースをダウンロードされる脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2008-0135 2012-12-20 18:34 2008-01-8 Show GitHub Exploit DB Packet Storm
227442 4.3 警告 snitz forums 2000 - Snitz Forums 2000 の Forums/setup.asp におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2008-0134 2012-12-20 18:34 2008-01-8 Show GitHub Exploit DB Packet Storm
227443 7.5 危険 thomas perez - Tribisur における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-0133 2012-12-20 18:34 2008-01-8 Show GitHub Exploit DB Packet Storm
227444 5 警告 pragma systems - Pragma FortressSSH におけるサービス運用妨害 (DoS) の脆弱性 CWE-399
リソース管理の問題 		CVE-2008-0132 2012-12-20 18:34 2008-01-8 Show GitHub Exploit DB Packet Storm
227445 6.8 警告 siteatschool - Site@School の starnet/addons/slideshow_full.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-0129 2012-12-20 18:34 2008-01-8 Show GitHub Exploit DB Packet Storm
227446 4.3 警告 php-stats - Michael Wagner phpstats の phpstats.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2008-0125 2012-12-20 18:34 2008-03-24 Show GitHub Exploit DB Packet Storm
227447 4.3 警告 s9y - S9Y におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2008-0124 2012-12-20 18:34 2008-02-25 Show GitHub Exploit DB Packet Storm
227448 7.5 危険 ourproject.org - White_Dune の DuneApp.cpp におけるフォーマットストリングの脆弱性 CWE-20
不適切な入力確認 		CVE-2008-0101 2012-12-20 18:34 2008-01-7 Show GitHub Exploit DB Packet Storm
227449 7.5 危険 ourproject.org - White_Dune の Scene.cpp におけるスタックベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2008-0100 2012-12-20 18:34 2008-01-7 Show GitHub Exploit DB Packet Storm
227450 10 危険 リアルネットワークス - RealPlayer におけるバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2008-0098 2012-12-20 18:34 2008-01-7 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 7, 2026, 4:22 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
222781 8.8 HIGH
Network 		zohocorp manageengine_applications_manager An issue was discovered in Zoho ManageEngine Application Manager through 14.2. There is a SQL Injection vulnerability in jsp/NewThresholdConfiguration.jsp via the resourceid parameter. Therefore, a l… CWE-89
SQL Injection 		CVE-2019-15105 2024-11-21 13:28 2019-08-16 Show GitHub Exploit DB Packet Storm
222782 8.8 HIGH
Network 		zohocorp manageengine_applications_manager An issue was discovered in Zoho ManageEngine OpManager through 12.4x. There is a SQL Injection vulnerability in jsp/NewThresholdConfiguration.jsp via the resourceid parameter. Therefore, a low-author… CWE-89
SQL Injection 		CVE-2019-15104 2024-11-21 13:28 2019-08-16 Show GitHub Exploit DB Packet Storm
222783 7.5 HIGH
Network 		linux
canonical 		linux_kernel
ubuntu_linux 		drivers/net/wireless/ath/ath10k/usb.c in the Linux kernel through 5.2.8 has a NULL pointer dereference via an incomplete address in an endpoint descriptor. CWE-476
 NULL Pointer Dereference 		CVE-2019-15099 2024-11-21 13:28 2019-08-16 Show GitHub Exploit DB Packet Storm
222784 4.6 MEDIUM
Physics 		linux
canonical
opensuse
netapp
debian 		linux_kernel
ubuntu_linux
leap
element_software
active_iq_performance_analytics_services
active_iq_unified_manager
data_availability_services
debian_linux 		drivers/net/wireless/ath/ath6kl/usb.c in the Linux kernel through 5.2.9 has a NULL pointer dereference via an incomplete address in an endpoint descriptor. CWE-476
 NULL Pointer Dereference 		CVE-2019-15098 2024-11-21 13:28 2019-08-16 Show GitHub Exploit DB Packet Storm
222785 6.1 MEDIUM
Network 		diaowen dwsurvey DWSurvey through 2019-07-22 has reflected XSS via the design/qu-multi-fillblank!answers.action surveyId parameter. CWE-79
Cross-site Scripting 		CVE-2019-15095 2024-11-21 13:28 2019-08-16 Show GitHub Exploit DB Packet Storm
222786 6.7 MEDIUM
Local 		linux
canonical
opensuse 		linux_kernel
ubuntu_linux
leap 		An issue was discovered in drivers/scsi/qedi/qedi_dbg.c in the Linux kernel before 5.1.12. In the qedi_dbg_* family of functions, there is an out-of-bounds read. CWE-125
Out-of-bounds Read 		CVE-2019-15090 2024-11-21 13:28 2019-08-16 Show GitHub Exploit DB Packet Storm
222787 7.8 HIGH
Local 		maxx waves_maxx_audio Realtek Waves MaxxAudio driver 1.6.2.0, as used on Dell laptops, installs with incorrect file permissions. As a result, a local attacker can escalate to SYSTEM. CWE-732
 Incorrect Permission Assignment for Critical Resource 		CVE-2019-15084 2024-11-21 13:28 2019-08-16 Show GitHub Exploit DB Packet Storm
222788 4.8 MEDIUM
Network 		opencart opencart OpenCart 3.x, when the attacker has login access to the admin panel, allows stored XSS within the Source/HTML editing feature of the Categories, Product, and Information pages. CWE-79
Cross-site Scripting 		CVE-2019-15081 2024-11-21 13:28 2019-08-16 Show GitHub Exploit DB Packet Storm
222789 6.5 MEDIUM
Network 		gitlab gitlab An issue was discovered in GitLab Community and Enterprise Edition before 11.11.8, 12 before 12.0.6, and 12.1 before 12.1.6. Gitaly allows injection of command-line flags. This sometimes leads to pri… CWE-77
Command Injection 		CVE-2019-14944 2024-11-21 13:27 2023-04-16 Show GitHub Exploit DB Packet Storm
222790 5.9 MEDIUM
Network 		gitlab gitlab An issue was discovered in GitLab Community and Enterprise Edition before 11.11.8, 12 before 12.0.6, and 12.1 before 12.1.6. Cookies for GitLab Pages (which have access control) could be sent over cl… CWE-319
Cleartext Transmission of Sensitive Information 		CVE-2019-14942 2024-11-21 13:27 2023-04-16 Show GitHub Exploit DB Packet Storm