Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 8, 2026, noon

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
227701 6.8 警告 snarky - VisualPic の index.php における PHP リモートファイルインクルージョンの脆弱性 CWE-94
コード・インジェクション 		CVE-2008-1876 2012-12-20 18:52 2008-04-17 Show GitHub Exploit DB Packet Storm
227702 7.5 危険 terong - Terong PHP Photo Gallery の index.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-1875 2012-12-20 18:52 2008-04-17 Show GitHub Exploit DB Packet Storm
227703 6.5 警告 xpoze - Xpoze Pro の account/user/mail.html における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-1874 2012-12-20 18:52 2008-04-17 Show GitHub Exploit DB Packet Storm
227704 4.3 警告 tru-zone - Nuke ET のプライベートメッセージ機能におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2008-1873 2012-12-20 18:52 2008-04-17 Show GitHub Exploit DB Packet Storm
227705 6.5 警告 scriptsagent - Scriptsagent.com Links Directory の links.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-1871 2012-12-20 18:52 2008-04-17 Show GitHub Exploit DB Packet Storm
227706 7.5 危険 site sift media - Site Sift Listings における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-1869 2012-12-20 18:52 2008-04-17 Show GitHub Exploit DB Packet Storm
227707 7.5 危険 pixel motion - Blog Pixel Motion の admin/sauvBase.php における重要な情報を含む blogPM.sql ファイルの結果を取得される脆弱性 CWE-287
不適切な認証 		CVE-2008-1868 2012-12-20 18:52 2008-04-17 Show GitHub Exploit DB Packet Storm
227708 7.5 危険 pixel motion - Blog Pixel Motion における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-1867 2012-12-20 18:52 2008-04-17 Show GitHub Exploit DB Packet Storm
227709 9 危険 pixel motion - Blog Pixel Motion の admin/modif_config.php における任意の PHP スクリプトをアップロードされる脆弱性 CWE-94
コード・インジェクション 		CVE-2008-1866 2012-12-20 18:52 2008-04-17 Show GitHub Exploit DB Packet Storm
227710 7.5 危険 prozilla - Prozilla Freelancers の project.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-1864 2012-12-20 18:52 2008-04-17 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 8, 2026, 4:54 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
224131 3.3 LOW
Local 		fujielectric frenic_loader Fuji Electric FRENIC Loader 3.5.0.0 and prior is vulnerable to an out-of-bounds read vulnerability, which may allow an attacker to read limited information from the device. CWE-125
Out-of-bounds Read 		CVE-2019-13512 2024-11-21 13:25 2019-08-16 Show GitHub Exploit DB Packet Storm
224132 3.3 LOW
Local 		rockwellautomation arena_simulation_software Rockwell Automation Arena Simulation Software versions 16.00.00 and earlier contain an INFORMATION EXPOSURE CWE-200. A maliciously crafted Arena file opened by an unsuspecting user may result in the … CWE-416
 Use After Free 		CVE-2019-13511 2024-11-21 13:25 2019-08-16 Show GitHub Exploit DB Packet Storm
224133 7.8 HIGH
Local 		rockwellautomation arena_simulation_software Rockwell Automation Arena Simulation Software versions 16.00.00 and earlier contain a USE AFTER FREE CWE-416. A maliciously crafted Arena file opened by an unsuspecting user may result in the applica… CWE-416
 Use After Free 		CVE-2019-13510 2024-11-21 13:25 2019-08-16 Show GitHub Exploit DB Packet Storm
224134 9.8 CRITICAL
Network 		givewp givewp A SQL injection vulnerability exists in the Impress GiveWP Give plugin through 2.5.0 for WordPress. Successful exploitation of this vulnerability would allow a remote attacker to execute arbitrary SQ… CWE-89
SQL Injection 		CVE-2019-13578 2024-11-21 13:25 2019-08-16 Show GitHub Exploit DB Packet Storm
224135 9.8 CRITICAL
Network 		adenion blog2social The Adenion Blog2Social plugin through 5.5.0 for WordPress allows SQL Injection. CWE-89
SQL Injection 		CVE-2019-13572 2024-11-21 13:25 2019-08-2 Show GitHub Exploit DB Packet Storm
224136 8.8 HIGH
Network 		cimg cimg CImg through 2.6.7 has a heap-based buffer overflow in _load_bmp in CImg.h because of erroneous memory allocation for a malformed BMP image. CWE-787
 Out-of-bounds Write 		CVE-2019-13568 2024-11-21 13:25 2019-08-1 Show GitHub Exploit DB Packet Storm
224137 9.1 CRITICAL
Network 		wpfastestcache wp_fastest_cache The WP Fastest Cache plugin through 0.8.9.5 for WordPress allows wpFastestCache.php and inc/cache.php Directory Traversal. CWE-22
Path Traversal 		CVE-2019-13635 2024-11-21 13:25 2019-07-30 Show GitHub Exploit DB Packet Storm
224138 6.5 MEDIUM
Network 		imgix imgix Imgix through 2019-06-19 allows remote attackers to cause a denial of service (resource consumption) by manipulating a small JPEG file to specify dimensions of 64250x64250 pixels, which is mishandled… CWE-400
 Uncontrolled Resource Consumption 		CVE-2019-13655 2024-11-21 13:25 2019-07-30 Show GitHub Exploit DB Packet Storm
224139 9.8 CRITICAL
Network 		vsourz advanced_cf7_db A SQL injection vulnerability exists in the Vsourz Digital Advanced CF7 DB plugin through 1.6.1 for WordPress. Successful exploitation of this vulnerability would allow a remote attacker to execute a… CWE-89
SQL Injection 		CVE-2019-13571 2024-11-21 13:25 2019-07-30 Show GitHub Exploit DB Packet Storm
224140 7.4 HIGH
Network 		oneidentity cloud_access_manager One Identity Cloud Access Manager 8.1.3 does not use HTTP Strict Transport Security (HSTS), which may allow man-in-the-middle (MITM) attacks. This issue is fixed in version 8.1.4. CWE-319
Cleartext Transmission of Sensitive Information 		CVE-2019-13498 2024-11-21 13:25 2019-07-30 Show GitHub Exploit DB Packet Storm