Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 8, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
227671 7.5 危険 wgcc - WGCC における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-2446 2012-12-20 18:52 2008-05-27 Show GitHub Exploit DB Packet Storm
227672 4.3 警告 wgcc - WGCC の profile.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2008-2445 2012-12-20 18:52 2008-05-27 Show GitHub Exploit DB Packet Storm
227673 7.5 危険 therealestatescript - The Real Estate Script の dpage.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-2443 2012-12-20 18:52 2008-05-27 Show GitHub Exploit DB Packet Storm
227674 5 警告 トレンドマイクロ - Trend Micro OfficeScan および Worry-Free Business Security クライアントの OfficeScanNT Listener サービスにおけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2008-2439 2012-12-20 18:52 2008-09-26 Show GitHub Exploit DB Packet Storm
227675 10 危険 トレンドマイクロ - Trend Micro OfficeScan および Client Server Messaging Security の cgiRecvFile.exe におけるスタックベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2008-2437 2012-12-20 18:52 2008-09-12 Show GitHub Exploit DB Packet Storm
227676 9.3 危険 トレンドマイクロ - Housecall_ActiveX.dll の Trend Micro HouseCall ActiveX コントロールにおける任意のコードを実行される脆弱性 CWE-399
リソース管理の問題 		CVE-2008-2435 2012-12-20 18:52 2008-12-23 Show GitHub Exploit DB Packet Storm
227677 9.3 危険 トレンドマイクロ - Housecall_ActiveX.dll の Trend Micro HouseCall ActiveX コントロールにおけるクライアントシステム上へ任意のライブラリファイルをダウンロードされる脆弱性 CWE-94
コード・インジェクション 		CVE-2008-2434 2012-12-20 18:52 2008-12-23 Show GitHub Exploit DB Packet Storm
227678 7.5 危険 トレンドマイクロ - Trend Micro OfficeScan などの Web 管理コンソールにおけるセッションをハイジャックされる脆弱性 CWE-287
不適切な認証 		CVE-2008-2433 2012-12-20 18:52 2008-08-20 Show GitHub Exploit DB Packet Storm
227679 9.3 危険 VideoLAN - Windows 上で稼動する VLC Media Player の modules/demux/wav.c における整数オーバーフローの脆弱性 CWE-189
数値処理の問題 		CVE-2008-2430 2012-12-20 18:52 2008-07-7 Show GitHub Exploit DB Packet Storm
227680 6.8 警告 torrenttrader - TorrentTrader Classic における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-2428 2012-12-20 18:52 2008-06-18 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 8, 2026, 4:54 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
214291 6.5 MEDIUM
Network 		elastic kibana A local file disclosure flaw was found in Elastic Code versions 7.3.0, 7.3.1, and 7.3.2. If a malicious code repository is imported into Code it is possible to read arbitrary files from the local fil… CWE-22
Path Traversal 		CVE-2019-7618 2024-11-21 13:48 2019-10-2 Show GitHub Exploit DB Packet Storm
214292 7.8 HIGH
Local 		autodesk design_review Use-after-free vulnerability in Autodesk Design Review versions 2011, 2012, 2013, and 2018. An attacker may trick a user into opening a malicious DWF file that may leverage a use-after-free vulnerabi… CWE-416
 Use After Free 		CVE-2019-7363 2024-11-21 13:48 2019-08-24 Show GitHub Exploit DB Packet Storm
214293 7.8 HIGH
Local 		autodesk design_review DLL preloading vulnerability in Autodesk Design Review versions 2011, 2012, 2013, and 2018. An attacker may trick a user into opening a malicious DWF file that may leverage a DLL preloading vulnerabi… CWE-427
 Uncontrolled Search Path Element 		CVE-2019-7362 2024-11-21 13:48 2019-08-24 Show GitHub Exploit DB Packet Storm
214294 7.8 HIGH
Local 		autodesk advance_steel
autocad
autocad_architecture
autocad_electrical
autocad_lt
autocad_map_3d
autocad_mechanical
autocad_mep
autocad_plant_3d
civil_3d
autocad_p\&id 		DLL preloading vulnerability in versions 2017, 2018, 2019, and 2020 of Autodesk Advanced Steel, Civil 3D, AutoCAD, AutoCAD LT, AutoCAD Architecture, AutoCAD Electrical, AutoCAD Map 3D, AutoCAD Mechan… CWE-427
 Uncontrolled Search Path Element 		CVE-2019-7364 2024-11-21 13:48 2019-08-24 Show GitHub Exploit DB Packet Storm
214295 7.2 HIGH
Network 		elastic apm_agent When the Elastic APM agent for Python versions before 5.1.0 is run as a CGI script, there is a variable name clash flaw if a remote attacker can control the proxy header. This could result in an atta… CWE-20
 Improper Input Validation  		CVE-2019-7617 2024-11-21 13:48 2019-08-23 Show GitHub Exploit DB Packet Storm
214296 9.1 CRITICAL
Network 		johnsoncontrols metasys_system Metasys® ADS/ADX servers and NAE/NIE/NCE engines prior to 9.0 make use of a hardcoded RC2 key for certain encryption operations involving the Site Management Portal (SMP). CWE-798
 Use of Hard-coded Credentials 		CVE-2019-7594 2024-11-21 13:48 2019-08-21 Show GitHub Exploit DB Packet Storm
214297 9.1 CRITICAL
Network 		johnsoncontrols metasys_system Metasys® ADS/ADX servers and NAE/NIE/NCE engines prior to 9.0 make use of a shared RSA key pair for certain encryption operations involving the Site Management Portal (SMP). CWE-798
 Use of Hard-coded Credentials 		CVE-2019-7593 2024-11-21 13:48 2019-08-21 Show GitHub Exploit DB Packet Storm
214298 7.8 HIGH
Local 		adobe premiere_pro_cc Adobe Premiere Pro CC versions 13.1.2 and earlier have an insecure library loading (dll hijacking) vulnerability. Successful exploitation could lead to arbitrary code execution. CWE-427
 Uncontrolled Search Path Element 		CVE-2019-7931 2024-11-21 13:48 2019-08-15 Show GitHub Exploit DB Packet Storm
214299 7.8 HIGH
Local 		adobe character_animator Adobe Character Animator versions 2.1 and earlier have an insecure library loading (dll hijacking) vulnerability. Successful exploitation could lead to arbitrary code execution. CWE-427
 Uncontrolled Search Path Element 		CVE-2019-7870 2024-11-21 13:48 2019-08-15 Show GitHub Exploit DB Packet Storm
214300 7.5 HIGH
Network 		magento magento An information leakage vulnerability exists in Magento 2.1 prior to 2.1.18, Magento 2.2 prior to 2.2.9, Magento 2.3 prior to 2.3.2. A SOAP web service endpoint does not properly enforce parameters re… NVD-CWE-noinfo
CVE-2019-7951 2024-11-21 13:48 2019-08-3 Show GitHub Exploit DB Packet Storm