Vulnerability Search Top

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

Vulnerability Information Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 12, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
227501	9	危険	testmaker	-	testMaker における任意の PHP コードを実行される脆弱性	CWE-94 コード・インジェクション	CVE-2008-5173	2012-12-20 18:52	2008-11-19	Show	GitHub Exploit DB Packet Storm

227502	9.3	危険	phpblaster	-	phpBLASTER CMS の admin/minibb/index.php におけるディレクトリトラバーサルの脆弱性	CWE-22 パス・トラバーサル	CVE-2008-5171	2012-12-20 18:52	2008-11-19	Show	GitHub Exploit DB Packet Storm

227503	4.3	警告	theratstudios	-	The Rat CMS におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2008-5164	2012-12-20 18:52	2008-11-19	Show	GitHub Exploit DB Packet Storm

227504	7.5	危険	theratstudios	-	The Rat CMS における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2008-5163	2012-12-20 18:52	2008-11-19	Show	GitHub Exploit DB Packet Storm

227505	6.9	警告	uoregon	-	tau における任意のファイルを上書きされる脆弱性	CWE-59 リンク解釈の問題	CVE-2008-5157	2012-12-20 18:52	2008-11-18	Show	GitHub Exploit DB Packet Storm

227506	9.3	危険	smsclient	-	smsclient の mail2sms.sh における任意のファイルを上書きされる脆弱性	CWE-59 リンク解釈の問題	CVE-2008-5155	2012-12-20 18:52	2008-11-18	Show	GitHub Exploit DB Packet Storm

227507	6.9	警告	tkman	-	tkman の tkman における任意のファイルを上書きされる脆弱性	CWE-59 リンク解釈の問題	CVE-2008-5137	2012-12-20 18:52	2008-11-18	Show	GitHub Exploit DB Packet Storm

227508	4.3	警告	scripts4profit	-	Scripts4Profit DXShopCart の search.php におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2008-5119	2012-12-20 18:52	2008-11-17	Show	GitHub Exploit DB Packet Storm

227509	4	警告	WordPress.org	-	WordPress におけるクロスサイトリクエストフォージェリ (CSRF) 攻撃を実行される脆弱性	CWE-352 同一生成元ポリシー違反	CVE-2008-5113	2012-12-20 18:52	2008-11-17	Show	GitHub Exploit DB Packet Storm

227510	4	警告	Zope Foundation	-	Zope の PythonScripts におけるサービス運用妨害 (DoS) の脆弱性	CWE-399 リソース管理の問題	CVE-2008-5102	2012-12-20 18:52	2008-11-17	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 12, 2026, 5:06 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
224361	7.8	HIGH Local	tianocore debian	edk2 debian_linux	Logic issue in DxeImageVerificationHandler() for EDK II may allow an authenticated user to potentially enable escalation of privilege via local access.	NVD-CWE-noinfo	CVE-2019-14575	2024-11-21 13:26	2020-11-24	Show	GitHub Exploit DB Packet Storm

224362	7.8	HIGH Local	tianocore debian	edk2 debian_linux	Integer truncation in EDK II may allow an authenticated user to potentially enable escalation of privilege via local access.	CWE-787 CWE-681 Out-of-bounds Write Incorrect Conversion between Numeric Types	CVE-2019-14563	2024-11-21 13:26	2020-11-24	Show	GitHub Exploit DB Packet Storm

224363	5.5	MEDIUM Local	tianocore debian	edk2 debian_linux	Integer overflow in DxeImageVerificationHandler() EDK II may allow an authenticated user to potentially enable denial of service via local access.	CWE-190 Integer Overflow or Wraparound	CVE-2019-14562	2024-11-21 13:26	2020-11-24	Show	GitHub Exploit DB Packet Storm

224364	7.5	HIGH Network	tianocore	edk2	Uncontrolled resource consumption in EDK II may allow an unauthenticated user to potentially enable denial of service via network access.	CWE-401 Missing Release of Memory after Effective Lifetime	CVE-2019-14559	2024-11-21 13:26	2020-11-24	Show	GitHub Exploit DB Packet Storm

224365	4.9	MEDIUM Network	tianocore	edk2	Improper authentication in EDK II may allow a privileged user to potentially enable information disclosure via network access.	CWE-287 Improper Authentication	CVE-2019-14553	2024-11-21 13:26	2020-11-24	Show	GitHub Exploit DB Packet Storm

224366	5.7	MEDIUM Adjacent	intel debian	bios debian_linux	Insufficient control flow management in BIOS firmware for 8th, 9th, 10th Generation Intel(R) Core(TM), Intel(R) Celeron(R) Processor 4000 & 5000 Series Processors may allow an authenticated user to p…	NVD-CWE-Other	CVE-2019-14558	2024-11-21 13:26	2020-10-5	Show	GitHub Exploit DB Packet Storm

224367	8.0	HIGH Adjacent	intel	bios	Buffer overflow in BIOS firmware for 8th, 9th, 10th Generation Intel(R) Core(TM), Intel(R) Celeron(R) Processor 4000 & 5000 Series Processors may allow an authenticated user to potentially enable ele…	CWE-120 Classic Buffer Overflow	CVE-2019-14557	2024-11-21 13:26	2020-10-5	Show	GitHub Exploit DB Packet Storm

224368	4.4	MEDIUM Local	intel	bios	Improper initialization in BIOS firmware for 8th, 9th, 10th Generation Intel(R) Core(TM), Intel(R) Celeron(R) Processor 4000 & 5000 Series Processors may allow a privileged user to potentially enable…	CWE-665 Improper Initialization	CVE-2019-14556	2024-11-21 13:26	2020-10-5	Show	GitHub Exploit DB Packet Storm

224369	7.0	HIGH Local	qualcomm	ipq6018_firmware kamorta_firmware mdm9205_firmware mdm9607_firmware nicobar_firmware qcs404_firmware qcs405_firmware qcs605_firmware qcs610_firmware rennell_firmware sa4…	u'While processing SMCInvoke asynchronous message header, message count is modified leading to a TOCTOU race condition and lead to memory corruption' in Snapdragon Auto, Snapdragon Compute, Snapdrago…	CWE-787 CWE-367 Out-of-bounds Write Time-of-check Time-of-use (TOCTOU) Race Condition	CVE-2019-14119	2024-11-21 13:26	2020-09-8	Show	GitHub Exploit DB Packet Storm

224370	7.8	HIGH Local	qualcomm	bitra_firmware mdm9607_firmware qcs405_firmware saipan_firmware sc8180x_firmware sdx55_firmware sm6150_firmware sm7150_firmware sm8150_firmware sm8250_firmware sxr2130_f…	u'Whenever the page list is updated via privileged user, the previous list elements are freed but are not deleted from the list which results in a use after free causing an unhandled page fault excep…	CWE-416 Use After Free	CVE-2019-14117	2024-11-21 13:26	2020-09-8	Show	GitHub Exploit DB Packet Storm