Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 11, 2026, 6:01 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
227501	7.5	危険	YourFreeWorld.com	-	YourFreeWorld Downline Builder の tr.php における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2008-4895	2012-12-20 18:52	2008-11-3	Show	GitHub Exploit DB Packet Storm

227502	5.1	警告	Tribal Ltd.	-	Tribiq CMS の templates/mytribiqsite/tribal-GPL-1066/includes/header.inc.php におけるディレクトリトラバーサルの脆弱性	CWE-22 パス・トラバーサル	CVE-2008-4894	2012-12-20 18:52	2008-11-3	Show	GitHub Exploit DB Packet Storm

227503	2.6	注意	Tribal Ltd.	-	Tribiq CMS の templates/mytribiqsite/tribal-GPL-1066/includes/header.inc.php におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2008-4893	2012-12-20 18:52	2008-11-3	Show	GitHub Exploit DB Packet Storm

227504	4.3	警告	planetluc	-	Planetluc MyGallery の gallery.inc.php におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2008-4892	2012-12-20 18:52	2008-11-3	Show	GitHub Exploit DB Packet Storm

227505	4.3	警告	planetluc	-	Planetluc SignMe の signme.inc.php におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2008-4891	2012-12-20 18:52	2008-11-3	Show	GitHub Exploit DB Packet Storm

227506	7.5	危険	YourFreeWorld.com	-	YourFreeWorld Shopping Cart Script の index.php における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2008-4886	2012-12-20 18:52	2008-11-3	Show	GitHub Exploit DB Packet Storm

227507	7.5	危険	YourFreeWorld.com	-	YourFreeWorld Scrolling Text Ads Script の tr1.php における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2008-4885	2012-12-20 18:52	2008-11-3	Show	GitHub Exploit DB Packet Storm

227508	7.5	危険	YourFreeWorld.com	-	YourFreeWorld Classifieds Hosting Script の tr.php における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2008-4884	2012-12-20 18:52	2008-11-3	Show	GitHub Exploit DB Packet Storm

227509	7.5	危険	YourFreeWorld.com	-	YourFreeWorld Blog Blaster Script の tr.php における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2008-4883	2012-12-20 18:52	2008-11-3	Show	GitHub Exploit DB Packet Storm

227510	7.5	危険	YourFreeWorld.com	-	YourFreeWorld Autoresponder Hosting Script の tr.php における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2008-4882	2012-12-20 18:52	2008-11-3	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 12, 2026, 5:06 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
222121	8.8	HIGH Network	sitemagic	sitemagic	Sitemagic CMS 4.4.1 is affected by a Cross-Site-Request-Forgery (CSRF) issue as it doesn't implement any method to validate incoming requests, allowing the execution of critical functionalities via s…	CWE-352 Origin Validation Error	CVE-2019-18220	2024-11-21 13:32	2019-10-23	Show	GitHub Exploit DB Packet Storm

222122	7.5	HIGH Network	haproxy	haproxy	A flaw was found in HAProxy before 2.0.6. In legacy mode, messages featuring a transfer-encoding header missing the "chunked" value were not being correctly rejected. The impact was limited but if co…	CWE-444 HTTP Request Smuggling	CVE-2019-18277	2024-11-21 13:32	2019-10-23	Show	GitHub Exploit DB Packet Storm

222123	6.1	MEDIUM Network	sitemagic	sitemagic	Sitemagic CMS 4.4.1 is affected by a Cross-Site-Scripting (XSS) vulnerability, as it fails to validate user input. The affected components (index.php, upgrade.php) allow for JavaScript injection with…	CWE-79 Cross-site Scripting	CVE-2019-18219	2024-11-21 13:32	2019-10-23	Show	GitHub Exploit DB Packet Storm

222124	7.8	HIGH Local	nipper-ng_project	nipper-ng	A stack-based buffer overflow in the processPrivilage() function in IOS/process-general.c in nipper-ng 0.11.10 allows remote attackers (serving firewall configuration files) to achieve Remote Code Ex…	CWE-787 Out-of-bounds Write	CVE-2019-17424	2024-11-21 13:32	2019-10-22	Show	GitHub Exploit DB Packet Storm

222125	7.5	HIGH Network	universal_office_converter_project	universal_office_converter	The unoconv package before 0.9 mishandles untrusted pathnames, leading to SSRF and local file inclusion.	CWE-918 Server-Side Request Forgery (SSRF)	CVE-2019-17400	2024-11-21 13:32	2019-10-22	Show	GitHub Exploit DB Packet Storm

222126	8.1	HIGH Network	libssh2 fedoraproject opensuse debian netapp	libssh2 fedora leap debian_linux element_software ontap_select_deploy_administration_utility solidfire hci_management_node active_iq_unified_manager bootstrap_os	In libssh2 v1.9.0 and earlier versions, the SSH_MSG_DISCONNECT logic in packet.c has an integer overflow in a bounds check, enabling an attacker to specify an arbitrary (out-of-bounds) offset for a s…	CWE-190 Integer Overflow or Wraparound	CVE-2019-17498	2024-11-21 13:32	2019-10-22	Show	GitHub Exploit DB Packet Storm

222127	9.8	CRITICAL Network	citrix	application_delivery_controller_firmware netscaler_gateway_firmware gateway_firmware	An issue was discovered in Citrix Application Delivery Controller (ADC) and Gateway before 10.5 build 70.8, 11.x before 11.1 build 63.9, 12.0 before build 62.10, 12.1 before build 54.16, and 13.0 bef…	NVD-CWE-noinfo	CVE-2019-18225	2024-11-21 13:32	2019-10-22	Show	GitHub Exploit DB Packet Storm

222128	6.1	MEDIUM Network	ricoh	mp_501_firmware	On the RICOH MP 501 printer, HTML Injection and Stored XSS vulnerabilities have been discovered in the area of adding addresses via the entryNameIn and KeyDisplay parameter to /web/entry/en/address/a…	CWE-79 Cross-site Scripting	CVE-2019-18203	2024-11-21 13:32	2019-10-22	Show	GitHub Exploit DB Packet Storm

222129	9.8	CRITICAL Network	gnu	libidn2	idn2_to_ascii_4i in lib/lookup.c in GNU libidn2 before 2.1.1 has a heap-based buffer overflow via a long domain string.	CWE-787 Out-of-bounds Write	CVE-2019-18224	2024-11-21 13:32	2019-10-22	Show	GitHub Exploit DB Packet Storm

222130	7.8	HIGH Local	file_project debian opensuse netapp fedoraproject canonical	file debian_linux leap active_iq_unified_manager fedora ubuntu_linux	cdf_read_property_info in cdf.c in file through 5.37 does not restrict the number of CDF_VECTOR elements, which allows a heap-based buffer overflow (4-byte out-of-bounds write).	CWE-787 Out-of-bounds Write	CVE-2019-18218	2024-11-21 13:32	2019-10-21	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed