Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 7, 2026, 2:09 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
227661	4.3	警告	Tiki Software Community Association	-	TikiWiki の tiki-edit_article.php におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2008-1047	2012-12-20 18:34	2008-02-23	Show	GitHub Exploit DB Packet Storm

227662	6.8	警告	quinsonnas	-	Quinsonnas Mail Checker の footer.php における PHP リモートファイルインクルージョンの脆弱性	CWE-94 コード・インジェクション	CVE-2008-1046	2012-12-20 18:34	2008-02-27	Show	GitHub Exploit DB Packet Storm

227663	7.5	危険	porar	-	PORAR WEBBOARD の question.asp における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2008-1039	2012-12-20 18:34	2008-02-27	Show	GitHub Exploit DB Packet Storm

227664	5.8	警告	spyce	-	Spyce - PSP における重要な情報を取得される脆弱性	CWE-20 不適切な入力確認	CVE-2008-0982	2012-12-20 18:34	2008-02-25	Show	GitHub Exploit DB Packet Storm

227665	6.4	警告	spyce	-	Spyce - PSP の spyce/examples/redirect.spy におけるオープンリダイレクトの脆弱性	CWE-22 パス・トラバーサル	CVE-2008-0981	2012-12-20 18:34	2008-02-25	Show	GitHub Exploit DB Packet Storm

227666	4.3	警告	spyce	-	Spyce - PSP におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2008-0980	2012-12-20 18:34	2008-02-25	Show	GitHub Exploit DB Packet Storm

227667	4.3	警告	webgui	-	Plain Black WebGUI におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2008-0940	2012-12-20 18:34	2008-02-25	Show	GitHub Exploit DB Packet Storm

227668	7.5	危険	WordPress.org	-	WordPress 用の WPPA プラグインにおける SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2008-0939	2012-12-20 18:34	2008-02-25	Show	GitHub Exploit DB Packet Storm

227669	7.5	危険	the sword project	-	The SWORD Project Diatheke の diatheke.pl における任意のコマンドを実行される脆弱性	CWE-20 不適切な入力確認	CVE-2008-0932	2012-12-20 18:34	2008-02-25	Show	GitHub Exploit DB Packet Storm

227670	6.3	警告	xwine	-	Debian GNU/Linux 上で稼動する XWine の w_export.c における任意のコマンドを実行される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2008-0931	2012-12-20 18:34	2008-03-3	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 7, 2026, 4:22 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
224031	8.8	HIGH Network	eng	knowage	In Knowage through 6.1.1, an authenticated user who accesses the datasources page will gain access to any data source credentials in cleartext, which includes databases.	CWE-522 Insufficiently Protected Credentials	CVE-2019-13348	2024-11-21 13:24	2019-08-29	Show	GitHub Exploit DB Packet Storm

224032	6.1	MEDIUM Network	eng	knowage	In Knowage through 6.1.1, there is XSS via the start_url or user_id field to the ChangePwdServlet page.	CWE-79 Cross-site Scripting	CVE-2019-13189	2024-11-21 13:24	2019-08-29	Show	GitHub Exploit DB Packet Storm

224033	8.8	HIGH Adjacent	edimax	br-6208ac_v1_firmware	Edimax BR-6208AC V1 devices have Insufficient Compartmentalization between a host network and a guest network that are established by the same device. In order to transfer data from the host network …	CWE-20 Improper Input Validation	CVE-2019-13270	2024-11-21 13:24	2019-08-28	Show	GitHub Exploit DB Packet Storm

224034	8.8	HIGH Adjacent	edimax	br-6208ac_v1_firmware	Edimax BR-6208AC V1 devices have Insufficient Compartmentalization between a host network and a guest network that are established by the same device. A DHCP Request is sent to the router with a cert…	CWE-20 Improper Input Validation	CVE-2019-13269	2024-11-21 13:24	2019-08-28	Show	GitHub Exploit DB Packet Storm

224035	8.8	HIGH Adjacent	tp-link	archer_c3200_v1_firmware archer_c2_v1_firmware	TP-Link Archer C3200 V1 and Archer C2 V1 devices have Insufficient Compartmentalization between a host network and a guest network that are established by the same device. They forward ARP requests, …	CWE-20 Improper Input Validation	CVE-2019-13268	2024-11-21 13:24	2019-08-28	Show	GitHub Exploit DB Packet Storm

224036	9.8	CRITICAL Network	xymon debian	xymon debian_linux	In Xymon through 4.3.28, a stack-based buffer overflow exists in the status-log viewer component because of   expansion in svcstatus.c.	CWE-787 Out-of-bounds Write	CVE-2019-13486	2024-11-21 13:24	2019-08-28	Show	GitHub Exploit DB Packet Storm

224037	9.8	CRITICAL Network	xymon debian	xymon debian_linux	In Xymon through 4.3.28, a stack-based buffer overflow vulnerability exists in the history viewer component via a long hostname or service parameter to history.c.	CWE-787 Out-of-bounds Write	CVE-2019-13485	2024-11-21 13:24	2019-08-28	Show	GitHub Exploit DB Packet Storm

224038	9.8	CRITICAL Network	xymon debian	xymon debian_linux	In Xymon through 4.3.28, a buffer overflow exists in the status-log viewer CGI because of   expansion in appfeed.c.	CWE-119 Incorrect Access of Indexable Resource ('Range Error')	CVE-2019-13484	2024-11-21 13:24	2019-08-28	Show	GitHub Exploit DB Packet Storm

224039	9.8	CRITICAL Network	xymon debian	xymon debian_linux	In Xymon through 4.3.28, a stack-based buffer overflow vulnerability exists in the alert acknowledgment CGI tool because of   expansion in acknowledge.c.	CWE-787 Out-of-bounds Write	CVE-2019-13455	2024-11-21 13:24	2019-08-28	Show	GitHub Exploit DB Packet Storm

224040	8.8	HIGH Adjacent	tp-link	archer_c3200_v1_firmware archer_c2_v1_firmware	TP-Link Archer C3200 V1 and Archer C2 V1 devices have Insufficient Compartmentalization between a host network and a guest network that are established by the same device. In order to transfer data f…	NVD-CWE-noinfo	CVE-2019-13267	2024-11-21 13:24	2019-08-28	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed