Vulnerability Search Top

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

Vulnerability Information Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 12, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
227541	10	危険	サン・マイクロシステムズ	-	Sun Java Web Start の BasicService におけるクライアントマシン上で任意のプログラムを実行される脆弱性	CWE-20 不適切な入力確認	CVE-2008-4910	2012-12-20 18:52	2008-11-3	Show	GitHub Exploit DB Packet Storm

227542	7.5	危険	w1n78	-	e107 用の Lyrics プラグインにおける SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2008-4906	2012-12-20 18:52	2008-11-3	Show	GitHub Exploit DB Packet Storm

227543	5	警告	typosphere	-	Typo におけるパスワードを推測される脆弱性	CWE-310 暗号の問題	CVE-2008-4905	2012-12-20 18:52	2008-11-3	Show	GitHub Exploit DB Packet Storm

227544	6	警告	typosphere	-	Typo の "ページを管理する" 機能における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2008-4904	2012-12-20 18:52	2008-11-3	Show	GitHub Exploit DB Packet Storm

227545	4.3	警告	typosphere	-	Typo のコメントを残す機能におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2008-4903	2012-12-20 18:52	2008-11-3	Show	GitHub Exploit DB Packet Storm

227546	7.5	危険	scripts frenzy	-	Article Publisher Pro の contact_author.php における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2008-4902	2012-12-20 18:52	2008-11-3	Show	GitHub Exploit DB Packet Storm

227547	7.5	危険	scripts frenzy	-	Article Publisher Pro の admin/admin.php における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2008-4901	2012-12-20 18:52	2008-11-3	Show	GitHub Exploit DB Packet Storm

227548	9.3	危険	SAP	-	SAP GUI の KWEdit ActiveX コントロールにおける任意のファイルを上書きされる脆弱性	CWE-Other その他	CVE-2008-4830	2012-12-20 18:52	2009-04-16	Show	GitHub Exploit DB Packet Storm

227549	7.5	危険	YourFreeWorld.com	-	YourFreeWorld Classifieds Blaster Script の tr.php における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2008-4900	2012-12-20 18:52	2008-11-3	Show	GitHub Exploit DB Packet Storm

227550	6.8	警告	planetluc	-	Planetluc RateMe におけるクロスサイトリクエストフォージェリの脆弱性	CWE-352 同一生成元ポリシー違反	CVE-2008-4899	2012-12-20 18:52	2008-11-3	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 12, 2026, 5:06 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
224361	7.8	HIGH Local	tianocore debian	edk2 debian_linux	Logic issue in DxeImageVerificationHandler() for EDK II may allow an authenticated user to potentially enable escalation of privilege via local access.	NVD-CWE-noinfo	CVE-2019-14575	2024-11-21 13:26	2020-11-24	Show	GitHub Exploit DB Packet Storm

224362	7.8	HIGH Local	tianocore debian	edk2 debian_linux	Integer truncation in EDK II may allow an authenticated user to potentially enable escalation of privilege via local access.	CWE-787 CWE-681 Out-of-bounds Write Incorrect Conversion between Numeric Types	CVE-2019-14563	2024-11-21 13:26	2020-11-24	Show	GitHub Exploit DB Packet Storm

224363	5.5	MEDIUM Local	tianocore debian	edk2 debian_linux	Integer overflow in DxeImageVerificationHandler() EDK II may allow an authenticated user to potentially enable denial of service via local access.	CWE-190 Integer Overflow or Wraparound	CVE-2019-14562	2024-11-21 13:26	2020-11-24	Show	GitHub Exploit DB Packet Storm

224364	7.5	HIGH Network	tianocore	edk2	Uncontrolled resource consumption in EDK II may allow an unauthenticated user to potentially enable denial of service via network access.	CWE-401 Missing Release of Memory after Effective Lifetime	CVE-2019-14559	2024-11-21 13:26	2020-11-24	Show	GitHub Exploit DB Packet Storm

224365	4.9	MEDIUM Network	tianocore	edk2	Improper authentication in EDK II may allow a privileged user to potentially enable information disclosure via network access.	CWE-287 Improper Authentication	CVE-2019-14553	2024-11-21 13:26	2020-11-24	Show	GitHub Exploit DB Packet Storm

224366	5.7	MEDIUM Adjacent	intel debian	bios debian_linux	Insufficient control flow management in BIOS firmware for 8th, 9th, 10th Generation Intel(R) Core(TM), Intel(R) Celeron(R) Processor 4000 & 5000 Series Processors may allow an authenticated user to p…	NVD-CWE-Other	CVE-2019-14558	2024-11-21 13:26	2020-10-5	Show	GitHub Exploit DB Packet Storm

224367	8.0	HIGH Adjacent	intel	bios	Buffer overflow in BIOS firmware for 8th, 9th, 10th Generation Intel(R) Core(TM), Intel(R) Celeron(R) Processor 4000 & 5000 Series Processors may allow an authenticated user to potentially enable ele…	CWE-120 Classic Buffer Overflow	CVE-2019-14557	2024-11-21 13:26	2020-10-5	Show	GitHub Exploit DB Packet Storm

224368	4.4	MEDIUM Local	intel	bios	Improper initialization in BIOS firmware for 8th, 9th, 10th Generation Intel(R) Core(TM), Intel(R) Celeron(R) Processor 4000 & 5000 Series Processors may allow a privileged user to potentially enable…	CWE-665 Improper Initialization	CVE-2019-14556	2024-11-21 13:26	2020-10-5	Show	GitHub Exploit DB Packet Storm

224369	7.0	HIGH Local	qualcomm	ipq6018_firmware kamorta_firmware mdm9205_firmware mdm9607_firmware nicobar_firmware qcs404_firmware qcs405_firmware qcs605_firmware qcs610_firmware rennell_firmware sa4…	u'While processing SMCInvoke asynchronous message header, message count is modified leading to a TOCTOU race condition and lead to memory corruption' in Snapdragon Auto, Snapdragon Compute, Snapdrago…	CWE-787 CWE-367 Out-of-bounds Write Time-of-check Time-of-use (TOCTOU) Race Condition	CVE-2019-14119	2024-11-21 13:26	2020-09-8	Show	GitHub Exploit DB Packet Storm

224370	7.8	HIGH Local	qualcomm	bitra_firmware mdm9607_firmware qcs405_firmware saipan_firmware sc8180x_firmware sdx55_firmware sm6150_firmware sm7150_firmware sm8150_firmware sm8250_firmware sxr2130_f…	u'Whenever the page list is updated via privileged user, the previous list elements are freed but are not deleted from the list which results in a use after free causing an unhandled page fault excep…	CWE-416 Use After Free	CVE-2019-14117	2024-11-21 13:26	2020-09-8	Show	GitHub Exploit DB Packet Storm