Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 18, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
227471 4.3 警告 phpscriptsnow - PHP Scripts Now Hangman の index.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2009-2889 2012-12-20 19:28 2009-08-20 Show GitHub Exploit DB Packet Storm
227472 7.5 危険 phpscriptsnow - PHP Scripts Now Hangman の index.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2009-2888 2012-12-20 19:28 2009-08-20 Show GitHub Exploit DB Packet Storm
227473 4.3 警告 phpscriptsnow - PHP Scripts Now President Bios の bios.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2009-2887 2012-12-20 19:28 2009-08-20 Show GitHub Exploit DB Packet Storm
227474 7.5 危険 phpscriptsnow - PHP Scripts Now President Bios の bios.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2009-2886 2012-12-20 19:10 2009-08-20 Show GitHub Exploit DB Packet Storm
227475 7.5 危険 phpscriptsnow - PHP Scripts Now World's Tallest Buildings の bios.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2009-2885 2012-12-20 19:10 2009-08-20 Show GitHub Exploit DB Packet Storm
227476 4.3 警告 phpscriptsnow - PHP Scripts Now World's Tallest Buildings の bios.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2009-2884 2012-12-20 19:10 2009-08-20 Show GitHub Exploit DB Packet Storm
227477 3.5 注意 サン・マイクロシステムズ - Sun VDI における VDI 設定データを平文で読まれる脆弱性 CWE-200
情報漏えい 		CVE-2009-2856 2012-12-20 19:10 2009-08-14 Show GitHub Exploit DB Packet Storm
227478 6.4 警告 WordPress.org - Wordpress における許可されていない編集などをされる脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2009-2854 2012-12-20 19:10 2009-08-3 Show GitHub Exploit DB Packet Storm
227479 10 危険 WordPress.org - Wordpress における権限を取得される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2009-2853 2012-12-20 19:10 2009-08-3 Show GitHub Exploit DB Packet Storm
227480 6.8 警告 ryan.mcgeary - Wordpress 用の WP-Syntax プラグインにおける任意の PHP コードを実行される脆弱性 CWE-20
不適切な入力確認 		CVE-2009-2852 2012-12-20 19:10 2009-08-18 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 18, 2026, 4:12 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
224731 5.5 MEDIUM
Local 		telegram telegram The "delete for" feature in Telegram before 5.11 on Android does not delete shared media files from the Telegram Images directory. In other words, there is a potentially misleading UI indication that… NVD-CWE-noinfo
CVE-2019-16248 2024-11-21 13:30 2019-09-12 Show GitHub Exploit DB Packet Storm
224732 7.8 HIGH
Local 		deltaww dcisoft Delta DCISoft 1.21 has a User Mode Write AV starting at CommLib!CCommLib::SetSerializeData+0x000000000000001b. NVD-CWE-noinfo
CVE-2019-16247 2024-11-21 13:30 2019-09-12 Show GitHub Exploit DB Packet Storm
224733 7.5 HIGH
Network 		dino
canonical
fedoraproject
debian 		dino
ubuntu_linux
fedora
debian_linux 		Dino before 2019-09-10 does not properly check the source of an MAM message in module/xep/0313_message_archive_management.vala. CWE-346
 Origin Validation Error 		CVE-2019-16237 2024-11-21 13:30 2019-09-12 Show GitHub Exploit DB Packet Storm
224734 7.5 HIGH
Network 		dino
canonical
fedoraproject
debian 		dino
ubuntu_linux
fedora
debian_linux 		Dino before 2019-09-10 does not check roster push authorization in module/roster/module.vala. CWE-862
 Missing Authorization 		CVE-2019-16236 2024-11-21 13:30 2019-09-12 Show GitHub Exploit DB Packet Storm
224735 7.5 HIGH
Network 		dino
canonical
fedoraproject
debian 		dino
ubuntu_linux
fedora
debian_linux 		Dino before 2019-09-10 does not properly check the source of a carbons message in module/xep/0280_message_carbons.vala. CWE-346
 Origin Validation Error 		CVE-2019-16235 2024-11-21 13:30 2019-09-12 Show GitHub Exploit DB Packet Storm
224736 7.8 HIGH
Local 		msi afterburner The driver in Micro-Star MSI Afterburner 4.6.2.15658 (aka RTCore64.sys and RTCore32.sys) allows any authenticated user to read and write to arbitrary memory, I/O ports, and MSRs. This can be exploite… CWE-125
CWE-787
Out-of-bounds Read
 Out-of-bounds Write 		CVE-2019-16098 2024-11-21 13:30 2019-09-12 Show GitHub Exploit DB Packet Storm
224737 4.7 MEDIUM
Local 		linux
canonical
opensuse 		linux_kernel
ubuntu_linux
leap 		drivers/net/wireless/intel/iwlwifi/pcie/trans.c in the Linux kernel 5.2.14 does not check the alloc_workqueue return value, leading to a NULL pointer dereference. CWE-476
 NULL Pointer Dereference 		CVE-2019-16234 2024-11-21 13:30 2019-09-12 Show GitHub Exploit DB Packet Storm
224738 4.1 MEDIUM
Local 		linux
redhat
canonical
opensuse 		linux_kernel
enterprise_linux
ubuntu_linux
leap 		drivers/scsi/qla2xxx/qla_os.c in the Linux kernel 5.2.14 does not check the alloc_workqueue return value, leading to a NULL pointer dereference. CWE-476
 NULL Pointer Dereference 		CVE-2019-16233 2024-11-21 13:30 2019-09-12 Show GitHub Exploit DB Packet Storm
224739 4.1 MEDIUM
Local 		linux
canonical
opensuse
fedoraproject 		linux_kernel
ubuntu_linux
leap
fedora 		drivers/net/wireless/marvell/libertas/if_sdio.c in the Linux kernel 5.2.14 does not check the alloc_workqueue return value, leading to a NULL pointer dereference. CWE-476
 NULL Pointer Dereference 		CVE-2019-16232 2024-11-21 13:30 2019-09-12 Show GitHub Exploit DB Packet Storm
224740 4.1 MEDIUM
Local 		linux
redhat
canonical
opensuse 		linux_kernel
enterprise_linux
ubuntu_linux
leap 		drivers/net/fjes/fjes_main.c in the Linux kernel 5.2.14 does not check the alloc_workqueue return value, leading to a NULL pointer dereference. CWE-476
 NULL Pointer Dereference 		CVE-2019-16231 2024-11-21 13:30 2019-09-12 Show GitHub Exploit DB Packet Storm