Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 14, 2026, 12:08 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
227461	6.8	警告	sitexs cms	-	SiteXS CMS の adm/visual/upload.php における任意のコードを実行される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2008-6617	2012-12-20 19:10	2009-04-6	Show	GitHub Exploit DB Packet Storm

227462	4.3	警告	Zen Cart	-	Zen Software Zen Cart の index.php におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2008-6616	2012-12-20 19:10	2009-04-6	Show	GitHub Exploit DB Packet Storm

227463	7.5	危険	Zen Cart	-	Zen Software Zen Cart の index.php における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2008-6615	2012-12-20 19:10	2009-04-6	Show	GitHub Exploit DB Packet Storm

227464	10	危険	picoflat	-	PicoFlat CMS の index.php におけるディレクトリトラバーサルの脆弱性	CWE-22 パス・トラバーサル	CVE-2008-6604	2012-12-20 19:10	2009-04-4	Show	GitHub Exploit DB Packet Storm

227465	10	危険	stadtaus	-	Download Center Lite における脆弱性	CWE-noinfo 情報不足	CVE-2008-6602	2012-12-20 19:10	2009-04-3	Show	GitHub Exploit DB Packet Storm

227466	4.3	警告	xmlportal	-	XMLPortal の検索機能におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2008-6600	2012-12-20 19:10	2009-04-3	Show	GitHub Exploit DB Packet Storm

227467	10	危険	Sangoma	-	WANPIPE における脆弱性	CWE-362 競合状態	CVE-2008-6598	2012-12-20 19:10	2009-04-3	Show	GitHub Exploit DB Packet Storm

227468	4.3	警告	phpcredo	-	PHCDownload の upload/install/index.php におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2008-6597	2012-12-20 19:10	2009-04-3	Show	GitHub Exploit DB Packet Storm

227469	5.5	警告	Simple Machines	-	SMF の index.php におけるディレクトリトラバーサルの脆弱性	CWE-22 パス・トラバーサル	CVE-2008-6659	2012-12-20 19:10	2008-11-7	Show	GitHub Exploit DB Packet Storm

227470	4	警告	Simple Machines	-	SMF の index.php におけるディレクトリトラバーサルの脆弱性	CWE-22 パス・トラバーサル	CVE-2008-6658	2012-12-20 19:10	2008-11-7	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 14, 2026, 4 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
221991	6.1	MEDIUM Network	fusionpbx	fusionpbx	A cross-site scripting (XSS) vulnerability in app/fifo_list/fifo_interactive.php in FusionPBX 4.4.1 allows remote attackers to inject arbitrary web script or HTML via the c parameter.	CWE-79 Cross-site Scripting	CVE-2019-19387	2024-11-21 13:34	2019-11-29	Show	GitHub Exploit DB Packet Storm

221992	6.1	MEDIUM Network	fusionpbx	fusionpbx	A cross-site scripting (XSS) vulnerability in app/voicemail_greetings/voicemail_greeting_edit.php in FusionPBX 4.4.1 allows remote attackers to inject arbitrary web script or HTML via the id and/or v…	CWE-79 Cross-site Scripting	CVE-2019-19386	2024-11-21 13:34	2019-11-29	Show	GitHub Exploit DB Packet Storm

221993	6.1	MEDIUM Network	fusionpbx	fusionpbx	A cross-site scripting (XSS) vulnerability in app/dialplans/dialplans.php in FusionPBX 4.4.1 allows remote attackers to inject arbitrary web script or HTML via the app_uuid parameter.	CWE-79 Cross-site Scripting	CVE-2019-19385	2024-11-21 13:34	2019-11-29	Show	GitHub Exploit DB Packet Storm

221994	6.1	MEDIUM Network	fusionpbx	fusionpbx	A cross-site scripting (XSS) vulnerability in app/fax/fax_log_view.php in FusionPBX 4.4.1 allows remote attackers to inject arbitrary web script or HTML via the fax_uuid parameter.	CWE-79 Cross-site Scripting	CVE-2019-19384	2024-11-21 13:34	2019-11-29	Show	GitHub Exploit DB Packet Storm

221995	5.3	MEDIUM Network	misp	misp	In app/Controller/TagsController.php in MISP 2.4.118, users can bypass intended restrictions on tagging data.	NVD-CWE-noinfo	CVE-2019-19379	2024-11-21 13:34	2019-11-29	Show	GitHub Exploit DB Packet Storm

221996	6.5	MEDIUM Network	octopus	octopus_deploy	In Octopus Deploy before 2019.10.6, an authenticated user with TeamEdit permission could send a malformed Team API request that bypasses input validation and causes an application level denial of ser…	CWE-20 CWE-476 Improper Input Validation NULL Pointer Dereference	CVE-2019-19376	2024-11-21 13:34	2019-11-29	Show	GitHub Exploit DB Packet Storm

221997	5.3	MEDIUM Network	octopus	octopus_deploy	In Octopus Deploy before 2019.10.7, in a configuration where SSL offloading is enabled, the CSRF cookie was sometimes sent without the secure attribute. (The fix for this was backported to LTS versio…	CWE-352 Origin Validation Error	CVE-2019-19375	2024-11-21 13:34	2019-11-29	Show	GitHub Exploit DB Packet Storm

221998	7.5	HIGH Network	rconfig	rconfig	A downloadFile.php download_file path traversal vulnerability in rConfig through 3.9.3 allows attackers to list files in arbitrary folders and potentially download files. NOTE: the discoverer later r…	CWE-22 Path Traversal	CVE-2019-19372	2024-11-21 13:34	2019-11-29	Show	GitHub Exploit DB Packet Storm

221999	6.5	MEDIUM Local	linux redhat opensuse	linux_kernel enterprise_linux leap	In the Linux kernel before 5.2, a setxattr operation, after a mount of a crafted ext4 image, can cause a slab-out-of-bounds write access because of an ext4_xattr_set_entry use-after-free in fs/ext4/x…	CWE-787 CWE-416 Out-of-bounds Write Use After Free	CVE-2019-19319	2024-11-21 13:34	2019-11-28	Show	GitHub Exploit DB Packet Storm

222000	4.4	MEDIUM Local	linux opensuse canonical debian netapp	linux_kernel leap ubuntu_linux debian_linux steelstore_cloud_integrated_storage active_iq_unified_manager data_availability_services solidfire hci_management_node aff_a700s…	In the Linux kernel 5.3.11, mounting a crafted btrfs image twice can cause an rwsem_down_write_slowpath use-after-free because (in rwsem_can_spin_on_owner in kernel/locking/rwsem.c) rwsem_owner_flags…	CWE-416 Use After Free	CVE-2019-19318	2024-11-21 13:34	2019-11-28	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed