Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 9, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
227471	10	危険	ppmate	-	PPMate の PPMedia Class ActiveX コントロールにおけるヒープベースのバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2008-3242	2012-12-20 18:52	2008-07-21	Show	GitHub Exploit DB Packet Storm

227472	7.5	危険	ultrastats	-	UltraStats の players-detail.php における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2008-3241	2012-12-20 18:52	2008-07-21	Show	GitHub Exploit DB Packet Storm

227473	9.3	危険	phpizabi	-	PHPizabi の system/v_cron_proc.php における任意のコードをアップロードされる脆弱性	CWE-20 不適切な入力確認	CVE-2008-3239	2012-12-20 18:52	2008-07-21	Show	GitHub Exploit DB Packet Storm

227474	4.3	警告	WordPress.org	-	WordPress におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2008-3233	2012-12-20 18:52	2008-07-18	Show	GitHub Exploit DB Packet Storm

227475	4.3	警告	Xine	-	xine-lib におけるサービス運用妨害 (DoS) の脆弱性	CWE-20 不適切な入力確認	CVE-2008-3231	2012-12-20 18:52	2008-07-18	Show	GitHub Exploit DB Packet Storm

227476	6.9	警告	swapoff	-	op におけるスタックベースのバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2008-3229	2012-12-20 18:52	2008-07-18	Show	GitHub Exploit DB Packet Storm

227477	10	危険	phpBB	-	phpBB における脆弱性	CWE-noinfo 情報不足	CVE-2008-3224	2012-12-20 18:52	2008-07-18	Show	GitHub Exploit DB Packet Storm

227478	6.8	警告	PowerDNS	-	PowerDNS Recursor における DNS を偽装される脆弱性	CWE-189 数値処理の問題	CVE-2008-3217	2012-12-20 18:52	2008-04-25	Show	GitHub Exploit DB Packet Storm

227479	7.8	危険	thekelleys	-	dnsmasq におけるサービス運用妨害 (DoS) の脆弱性	CWE-20 不適切な入力確認	CVE-2008-3214	2012-12-20 18:52	2008-07-18	Show	GitHub Exploit DB Packet Storm

227480	7.5	危険	webcms	-	WebCMS Portal Edition の secciones/tablon/tablon.php における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2008-3213	2012-12-20 18:52	2008-07-18	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 9, 2026, 5:07 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
222371	9.8	CRITICAL Network	fortinet	fortisiem	A hard-coded password vulnerability in the Fortinet FortiSIEM database component version 5.2.5 and below may allow attackers to access the device database via the use of static credentials.	CWE-798 Use of Hard-coded Credentials	CVE-2019-16153	2024-11-21 13:30	2020-01-24	Show	GitHub Exploit DB Packet Storm

222372	7.5	HIGH Network	adobe	experience_manager	Adobe Experience Manager versions 6.5, 6.4, 6.3, 6.2, 6.1, and 6.0 have an expression language injection vulnerability. Successful exploitation could lead to sensitive information disclosure.	CWE-917 Improper Neutralization of Special Elements used in an Expression Language Statement ('Expression Language Injection')	CVE-2019-16469	2024-11-21 13:30	2020-01-16	Show	GitHub Exploit DB Packet Storm

222373	7.5	HIGH Network	adobe	experience_manager	Adobe Experience Manager versions 6.5, 6.4, 6.3, 6.2, 6.1, and 6.0 have an user interface injection vulnerability. Successful exploitation could lead to sensitive information disclosure.	CWE-74 Injection	CVE-2019-16468	2024-11-21 13:30	2020-01-16	Show	GitHub Exploit DB Packet Storm

222374	6.1	MEDIUM Network	adobe	experience_manager	Adobe Experience Manager versions 6.5, 6.4, 6.3, 6.2, 6.1, and 6.0 have a reflected cross-site scripting vulnerability. Successful exploitation could lead to sensitive information disclosure.	CWE-79 Cross-site Scripting	CVE-2019-16467	2024-11-21 13:30	2020-01-16	Show	GitHub Exploit DB Packet Storm

222375	6.1	MEDIUM Network	adobe	experience_manager	Adobe Experience Manager versions 6.5, 6.4, 6.3, 6.2, 6.1, and 6.0 have a reflected cross-site scripting vulnerability. Successful exploitation could lead to sensitive information disclosure.	CWE-79 Cross-site Scripting	CVE-2019-16466	2024-11-21 13:30	2020-01-16	Show	GitHub Exploit DB Packet Storm

222376	6.1	MEDIUM Network	fortinet	fortiauthenticator	An improper neutralization of input during web page generation in FortiAuthenticator WEB UI 6.0.0 may allow an unauthenticated user to perform a cross-site scripting attack (XSS) via a parameter of t…	CWE-79 Cross-site Scripting	CVE-2019-16154	2024-11-21 13:30	2020-01-8	Show	GitHub Exploit DB Packet Storm

222377	5.3	MEDIUM Network	dten	d5_firmware d7_firmware	DTEN D5 and D7 before 1.3.2 devices allows remote attackers to read saved whiteboard image PDF documents via storage/emulated/0/Notes/PDF on TCP port 8080 without authentication.	CWE-306 Missing Authentication for Critical Function	CVE-2019-16271	2024-11-21 13:30	2020-01-7	Show	GitHub Exploit DB Packet Storm

222378	7.5	HIGH Network	dten	d5_firmware d7_firmware	DTEN D5 before 1.3 and D7 before 1.3 devices transfer customer data files via unencrypted HTTP.	CWE-319 Cleartext Transmission of Sensitive Information	CVE-2019-16274	2024-11-21 13:30	2020-01-7	Show	GitHub Exploit DB Packet Storm

222379	9.8	CRITICAL Network	dten	d5_firmware d7_firmware	DTEN D5 and D7 before 1.3.4 devices allow unauthenticated root shell access through Android Debug Bridge (adb), leading to arbitrary code execution and system administration. Also, this provides a co…	NVD-CWE-noinfo	CVE-2019-16273	2024-11-21 13:30	2020-01-7	Show	GitHub Exploit DB Packet Storm

222380	9.8	CRITICAL Network	dten	d5_firmware d7_firmware	On DTEN D5 and D7 before 1.3.4 devices, factory settings allows for firmware reflash and Android Debug Bridge (adb) enablement.	CWE-1188 Insecure Default Initialization of Resource	CVE-2019-16272	2024-11-21 13:30	2020-01-7	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed