Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 13, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
227681 10 危険 サン・マイクロシステムズ - Sun Java Web Start の BasicService におけるクライアントマシン上で任意のプログラムを実行される脆弱性 CWE-20
不適切な入力確認 		CVE-2008-4910 2012-12-20 18:52 2008-11-3 Show GitHub Exploit DB Packet Storm
227682 7.5 危険 w1n78 - e107 用の Lyrics プラグインにおける SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-4906 2012-12-20 18:52 2008-11-3 Show GitHub Exploit DB Packet Storm
227683 5 警告 typosphere - Typo におけるパスワードを推測される脆弱性 CWE-310
暗号の問題 		CVE-2008-4905 2012-12-20 18:52 2008-11-3 Show GitHub Exploit DB Packet Storm
227684 6 警告 typosphere - Typo の "ページを管理する" 機能における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-4904 2012-12-20 18:52 2008-11-3 Show GitHub Exploit DB Packet Storm
227685 4.3 警告 typosphere - Typo のコメントを残す機能におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2008-4903 2012-12-20 18:52 2008-11-3 Show GitHub Exploit DB Packet Storm
227686 7.5 危険 scripts frenzy - Article Publisher Pro の contact_author.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-4902 2012-12-20 18:52 2008-11-3 Show GitHub Exploit DB Packet Storm
227687 7.5 危険 scripts frenzy - Article Publisher Pro の admin/admin.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-4901 2012-12-20 18:52 2008-11-3 Show GitHub Exploit DB Packet Storm
227688 9.3 危険 SAP - SAP GUI の KWEdit ActiveX コントロールにおける任意のファイルを上書きされる脆弱性 CWE-Other
その他 		CVE-2008-4830 2012-12-20 18:52 2009-04-16 Show GitHub Exploit DB Packet Storm
227689 7.5 危険 YourFreeWorld.com - YourFreeWorld Classifieds Blaster Script の tr.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-4900 2012-12-20 18:52 2008-11-3 Show GitHub Exploit DB Packet Storm
227690 6.8 警告 planetluc - Planetluc RateMe におけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反 		CVE-2008-4899 2012-12-20 18:52 2008-11-3 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 13, 2026, 5:05 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
221971 6.5 MEDIUM
Network 		djangoproject
fedoraproject 		django
fedora 		Django 2.1 before 2.1.15 and 2.2 before 2.2.8 allows unintended model editing. A Django model admin displaying inline related models, where the user has view-only permissions to a parent model but ed… CWE-276
Incorrect Default Permissions  		CVE-2019-19118 2024-11-21 13:34 2019-12-2 Show GitHub Exploit DB Packet Storm
221972 9.8 CRITICAL
Network 		freeswitch freeswitch FreeSWITCH 1.6.10 through 1.10.1 has a default password in event_socket.conf.xml. CWE-798
 Use of Hard-coded Credentials 		CVE-2019-19492 2024-11-21 13:34 2019-12-2 Show GitHub Exploit DB Packet Storm
221973 6.1 MEDIUM
Network 		testlink testlink TestLink 1.9.19 has XSS via the lib/testcases/archiveData.php edit parameter, the index.php reqURI parameter, or the URI in a lib/testcases/tcEdit.php?doAction=doDeleteStep request. CWE-79
Cross-site Scripting 		CVE-2019-19491 2024-11-21 13:34 2019-12-2 Show GitHub Exploit DB Packet Storm
221974 7.3 HIGH
Local 		litemanager litemanager LiteManager 4.5.0 has weak permissions (Everyone: Full Control) in the "LiteManagerFree - Server" folder, as demonstrated by ROMFUSClient.exe. CWE-276
Incorrect Default Permissions  		CVE-2019-19490 2024-11-21 13:34 2019-12-2 Show GitHub Exploit DB Packet Storm
221975 5.5 MEDIUM
Local 		smplayer smplayer SMPlayer 19.5.0 has a buffer overflow via a long .m3u file. CWE-120
Classic Buffer Overflow 		CVE-2019-19489 2024-11-21 13:34 2019-12-2 Show GitHub Exploit DB Packet Storm
221976 4.6 MEDIUM
Physics 		opensc_project opensc An issue was discovered in OpenSC through 0.19.0 and 0.20.x through 0.20.0-rc3. libopensc/card-cac1.c mishandles buffer limits for CAC certificates. CWE-119
Incorrect Access of Indexable Resource ('Range Error')  		CVE-2019-19481 2024-11-21 13:34 2019-12-2 Show GitHub Exploit DB Packet Storm
221977 4.6 MEDIUM
Physics 		opensc_project opensc An issue was discovered in OpenSC through 0.19.0 and 0.20.x through 0.20.0-rc3. libopensc/pkcs15-prkey.c has an incorrect free operation in sc_pkcs15_decode_prkdf_entry. CWE-672
 Operation on a Resource after Expiration or Release 		CVE-2019-19480 2024-11-21 13:34 2019-12-2 Show GitHub Exploit DB Packet Storm
221978 5.5 MEDIUM
Local 		opensc_project
debian
fedoraproject 		opensc
debian_linux
fedora 		An issue was discovered in OpenSC through 0.19.0 and 0.20.x through 0.20.0-rc3. libopensc/card-setcos.c has an incorrect read operation during parsing of a SETCOS file attribute. CWE-125
Out-of-bounds Read 		CVE-2019-19479 2024-11-21 13:34 2019-12-2 Show GitHub Exploit DB Packet Storm
221979 8.8 HIGH
Network 		zmanda amanda In Zmanda Management Console 3.3.9, ZMC_Admin_Advanced?form=adminTasks&action=Apply&command= allows CSRF, as demonstrated by command injection with shell metacharacters. This may depend on weak defau… CWE-352
CWE-78
 Origin Validation Error
OS Command  		CVE-2019-19469 2024-11-21 13:34 2019-12-1 Show GitHub Exploit DB Packet Storm
221980 4.9 MEDIUM
Network 		proftpd
fedoraproject
debian 		proftpd
fedora
debian_linux 		An issue was discovered in tls_verify_crl in ProFTPD through 1.3.6b. A dereference of a NULL pointer may occur. This pointer is returned by the OpenSSL sk_X509_REVOKED_value() function when encounter… CWE-476
 NULL Pointer Dereference 		CVE-2019-19269 2024-11-21 13:34 2019-12-1 Show GitHub Exploit DB Packet Storm