Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 9, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
227471	10	危険	ppmate	-	PPMate の PPMedia Class ActiveX コントロールにおけるヒープベースのバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2008-3242	2012-12-20 18:52	2008-07-21	Show	GitHub Exploit DB Packet Storm

227472	7.5	危険	ultrastats	-	UltraStats の players-detail.php における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2008-3241	2012-12-20 18:52	2008-07-21	Show	GitHub Exploit DB Packet Storm

227473	9.3	危険	phpizabi	-	PHPizabi の system/v_cron_proc.php における任意のコードをアップロードされる脆弱性	CWE-20 不適切な入力確認	CVE-2008-3239	2012-12-20 18:52	2008-07-21	Show	GitHub Exploit DB Packet Storm

227474	4.3	警告	WordPress.org	-	WordPress におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2008-3233	2012-12-20 18:52	2008-07-18	Show	GitHub Exploit DB Packet Storm

227475	4.3	警告	Xine	-	xine-lib におけるサービス運用妨害 (DoS) の脆弱性	CWE-20 不適切な入力確認	CVE-2008-3231	2012-12-20 18:52	2008-07-18	Show	GitHub Exploit DB Packet Storm

227476	6.9	警告	swapoff	-	op におけるスタックベースのバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2008-3229	2012-12-20 18:52	2008-07-18	Show	GitHub Exploit DB Packet Storm

227477	10	危険	phpBB	-	phpBB における脆弱性	CWE-noinfo 情報不足	CVE-2008-3224	2012-12-20 18:52	2008-07-18	Show	GitHub Exploit DB Packet Storm

227478	6.8	警告	PowerDNS	-	PowerDNS Recursor における DNS を偽装される脆弱性	CWE-189 数値処理の問題	CVE-2008-3217	2012-12-20 18:52	2008-04-25	Show	GitHub Exploit DB Packet Storm

227479	7.8	危険	thekelleys	-	dnsmasq におけるサービス運用妨害 (DoS) の脆弱性	CWE-20 不適切な入力確認	CVE-2008-3214	2012-12-20 18:52	2008-07-18	Show	GitHub Exploit DB Packet Storm

227480	7.5	危険	webcms	-	WebCMS Portal Edition の secciones/tablon/tablon.php における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2008-3213	2012-12-20 18:52	2008-07-18	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 9, 2026, 5:07 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
224071	5.3	MEDIUM Network	knowage-suite	knowage	In Knowage through 6.1.1, an unauthenticated user can enumerated valid usernames via the ChangePwdServlet page.	NVD-CWE-noinfo	CVE-2019-14278	2024-11-21 13:26	2019-09-6	Show	GitHub Exploit DB Packet Storm

224072	6.1	MEDIUM Network	instagram-php-api_project userproplugin	instagram-php-api user_pro	cosenary Instagram-PHP-API (aka Instagram PHP API V2), as used in the UserPro plugin through 4.9.32 for WordPress, has XSS via the example/success.php error_description parameter.	CWE-79 Cross-site Scripting	CVE-2019-14470	2024-11-21 13:26	2019-09-5	Show	GitHub Exploit DB Packet Storm

224073	6.5	MEDIUM Adjacent	tiktok	tiktok	The TikTok (formerly Musical.ly) application 12.2.0 for Android and iOS performs unencrypted transmission of images, videos, and likes. This allows an attacker to extract private sensitive informatio…	CWE-319 Cleartext Transmission of Sensitive Information	CVE-2019-14319	2024-11-21 13:26	2019-09-5	Show	GitHub Exploit DB Packet Storm

224074	7.5	HIGH Network	abus	secvest_wireless_alarm_system_fuaa50000_firmware	An issue was discovered on ABUS Secvest FUAA50000 3.01.01 devices. Due to an insufficient implementation of jamming detection, an attacker is able to suppress correctly received RF messages sent betw…	CWE-310 Cryptographic Issues	CVE-2019-14261	2024-11-21 13:26	2019-09-4	Show	GitHub Exploit DB Packet Storm

224075	5.5	MEDIUM Local	videolan debian	vlc_media_player debian_linux	In VideoLAN VLC media player 3.0.7.1, there is a NULL pointer dereference at the function SeekPercent of demux/asf/asf.c that will lead to a denial of service attack.	CWE-476 NULL Pointer Dereference	CVE-2019-14534	2024-11-21 13:26	2019-08-30	Show	GitHub Exploit DB Packet Storm

224076	7.8	HIGH Local	videolan debian	vlc_media_player debian_linux	The Control function of demux/asf/asf.c in VideoLAN VLC media player 3.0.7.1 has a use-after-free.	CWE-416 Use After Free	CVE-2019-14533	2024-11-21 13:26	2019-08-30	Show	GitHub Exploit DB Packet Storm

224077	7.8	HIGH Local	videolan debian	vlc_media_player debian_linux	A divide-by-zero error exists in the SeekIndex function of demux/asf/asf.c in VideoLAN VLC media player 3.0.7.1. As a result, an FPE can be triggered via a crafted WMV file.	CWE-369 Divide By Zero	CVE-2019-14535	2024-11-21 13:26	2019-08-30	Show	GitHub Exploit DB Packet Storm

224078	7.8	HIGH Local	videolan debian	vlc_media_player debian_linux	A divide-by-zero error exists in the Control function of demux/caf.c in VideoLAN VLC media player 3.0.7.1. As a result, an FPE can be triggered via a crafted CAF file.	CWE-369 Divide By Zero	CVE-2019-14498	2024-11-21 13:26	2019-08-30	Show	GitHub Exploit DB Packet Storm

224079	7.8	HIGH Local	videolan debian	vlc_media_player debian_linux	A heap-based buffer over-read in xiph_PackHeaders() in modules/demux/xiph.h in VideoLAN VLC media player 3.0.7.1 allows remote attackers to trigger a heap-based buffer over-read via a crafted .ogg fi…	CWE-125 Out-of-bounds Read	CVE-2019-14438	2024-11-21 13:26	2019-08-30	Show	GitHub Exploit DB Packet Storm

224080	7.8	HIGH Local	videolan debian	vlc_media_player debian_linux	The xiph_SplitHeaders function in modules/demux/xiph.h in VideoLAN VLC media player 3.0.7.1 does not check array bounds properly. As a result, a heap-based buffer over-read can be triggered via a cra…	CWE-125 CWE-129 Out-of-bounds Read Improper Validation of Array Index	CVE-2019-14437	2024-11-21 13:26	2019-08-30	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed