Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 8, 2026, 4 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
227661	7.5	危険	TYPO3 Association	-	TYPO3 用の Frontend プラグインエクステンションにおける SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2008-2489	2012-12-20 18:52	2008-05-28	Show	GitHub Exploit DB Packet Storm

227662	6.8	警告	xomol	-	Xomol CMS の index.php における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2008-2484	2012-12-20 18:52	2008-05-28	Show	GitHub Exploit DB Packet Storm

227663	6.8	警告	xomol	-	Xomol CMS の index.php におけるディレクトリトラバーサルの脆弱性	CWE-22 パス・トラバーサル	CVE-2008-2483	2012-12-20 18:52	2008-05-28	Show	GitHub Exploit DB Packet Storm

227664	10	危険	phpraider	-	phpRaider の authentication/phpbb3/phpbb3.functions.php における PHP リモートファイルインクルージョンの脆弱性	CWE-94 コード・インジェクション	CVE-2008-2481	2012-12-20 18:52	2008-05-28	Show	GitHub Exploit DB Packet Storm

227665	10	危険	plusphp	-	plusPHP Short URL Multi-User Script の plus.php における PHP リモートファイルインクルージョンの脆弱性	CWE-94 コード・インジェクション	CVE-2008-2480	2012-12-20 18:52	2008-05-28	Show	GitHub Exploit DB Packet Storm

227666	7.5	危険	vBulletin Solutions, Inc.	-	vBulletin Gold の faq.php における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2008-2460	2012-12-20 18:52	2008-05-27	Show	GitHub Exploit DB Packet Storm

227667	7.5	危険	phpclassifiedsscript	-	PHP Classifieds Script における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2008-2453	2012-12-20 18:52	2008-05-27	Show	GitHub Exploit DB Packet Storm

227668	4.3	警告	TYPO3 Association	-	TYPO3 用の Questionaire エクステンションにおけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2008-2452	2012-12-20 18:52	2008-05-27	Show	GitHub Exploit DB Packet Storm

227669	7.5	危険	TYPO3 Association	-	TYPO3 用の Statistics エクステンションにおける SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2008-2451	2012-12-20 18:52	2008-05-27	Show	GitHub Exploit DB Packet Storm

227670	4.3	警告	TYPO3 Association	-	TYPO3 用の Statistics エクステンションにおけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2008-2450	2012-12-20 18:52	2008-05-27	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 8, 2026, 4:54 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
224121	7.8	HIGH Local	ezautomation	ez_plc_editor	An attacker could use a specially crafted project file to corrupt the memory and execute code under the privileges of the EZ PLC Editor Versions 1.8.41 and prior.	CWE-787 Out-of-bounds Write	CVE-2019-13522	2024-11-21 13:25	2019-09-5	Show	GitHub Exploit DB Packet Storm

224122	7.8	HIGH Local	ezautomation	ez_touch_editor	An attacker could use a specially crafted project file to overflow the buffer and execute code under the privileges of the EZ Touch Editor Versions 2.1.0 and prior.	CWE-119 Incorrect Access of Indexable Resource ('Range Error')	CVE-2019-13518	2024-11-21 13:25	2019-09-5	Show	GitHub Exploit DB Packet Storm

224123	8.8	HIGH Network	datalogic	av7000_firmware	Datalogic AV7000 Linear barcode scanner all versions prior to 4.6.0.0 is vulnerable to authentication bypass, which may allow an attacker to remotely execute arbitrary code.	CWE-287 Improper Authentication	CVE-2019-13526	2024-11-21 13:25	2019-08-30	Show	GitHub Exploit DB Packet Storm

224124	7.5	HIGH Network	citrix	storefront_server	Citrix StoreFront Server before 1903, 7.15 LTSR before CU4 (3.12.4000), and 7.6 LTSR before CU8 (3.0.8000) allows XXE attacks.	CWE-611 XXE	CVE-2019-13608	2024-11-21 13:25	2019-08-30	Show	GitHub Exploit DB Packet Storm

224125	5.3	MEDIUM Network	control-webpanel	webpanel	In CentOS-WebPanel.com (aka CWP) CentOS Web Panel 0.9.8.848, the Login process allows attackers to check whether a username is valid by comparing response times.	CWE-203 Information Exposure Through Discrepancy	CVE-2019-13599	2024-11-21 13:25	2019-08-22	Show	GitHub Exploit DB Packet Storm

224126	7.8	HIGH Local	fujielectric	alpha5_smart_loader_firmware	Multiple buffer overflow issues have been identified in Alpha5 Smart Loader: All versions prior to 4.2. An attacker could use specially crafted project files to overflow the buffer and execute code u…	CWE-787 Out-of-bounds Write	CVE-2019-13520	2024-11-21 13:25	2019-08-21	Show	GitHub Exploit DB Packet Storm

224127	8.8	HIGH Network	osisoft	pi_web_api	In OSIsoft PI Web API and prior, the affected product is vulnerable to a direct attack due to a cross-site request forgery protection setting that has not taken effect.	CWE-352 Origin Validation Error	CVE-2019-13516	2024-11-21 13:25	2019-08-16	Show	GitHub Exploit DB Packet Storm

224128	6.5	MEDIUM Network	osisoft	pi_web_api	OSIsoft PI Web API 2018 and prior may allow disclosure of sensitive information.	CWE-532 Inclusion of Sensitive Information in Log Files	CVE-2019-13515	2024-11-21 13:25	2019-08-16	Show	GitHub Exploit DB Packet Storm

224129	7.8	HIGH Local	deltaww	delta_industrial_automation_dopsoft	In Delta Industrial Automation DOPSoft, Version 4.00.06.15 and prior, processing a specially crafted project file may trigger a use-after-free vulnerability, which may allow information disclosure, r…	CWE-416 Use After Free	CVE-2019-13514	2024-11-21 13:25	2019-08-16	Show	GitHub Exploit DB Packet Storm

224130	7.8	HIGH Local	deltaww	delta_industrial_automation_dopsoft	In Delta Industrial Automation DOPSoft, Version 4.00.06.15 and prior, processing a specially crafted project file may trigger multiple out-of-bounds read vulnerabilities, which may allow information …	CWE-125 Out-of-bounds Read	CVE-2019-13513	2024-11-21 13:25	2019-08-16	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed