Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 12, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
227761	7.5	危険	Vastal I-Tech & Co.	-	Vastal I-Tech Shaadi Zone の keyword_search_action.php における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2008-3953	2012-12-20 18:52	2008-09-10	Show	GitHub Exploit DB Packet Storm

227762	7.5	危険	Vastal I-Tech & Co.	-	Vastal I-Tech Agent Zone の view_ann.php における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2008-3951	2012-12-20 18:52	2008-09-10	Show	GitHub Exploit DB Packet Storm

227763	7.2	危険	SUSE	-	Emacs の emacs/lisp/progmodes/python.el における任意のコードを実行される脆弱性	CWE-94 コード・インジェクション	CVE-2008-3949	2012-12-20 18:52	2008-09-19	Show	GitHub Exploit DB Packet Storm

227764	7.5	危険	xrms	-	XRMS の admin/users/self-2.php における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2008-3948	2012-12-20 18:52	2008-09-5	Show	GitHub Exploit DB Packet Storm

227765	7.5	危険	source workshop	-	Words タグの index.php における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2008-3945	2012-12-20 18:52	2008-09-5	Show	GitHub Exploit DB Packet Storm

227766	6.9	警告	r foundation	-	javareconf における任意のファイルを上書きされる脆弱性	CWE-59 リンク解釈の問題	CVE-2008-3931	2012-12-20 18:52	2008-09-4	Show	GitHub Exploit DB Packet Storm

227767	7.2	危険	tiger	-	genmsgidx の Tiger における任意のファイルを上書きされる脆弱性	CWE-59 リンク解釈の問題	CVE-2008-3927	2012-12-20 18:52	2008-09-4	Show	GitHub Exploit DB Packet Storm

227768	9.3	危険	telartis bv	-	AWStats Totals の awstatstotals.php における任意のコードを実行される脆弱性	CWE-94 コード・インジェクション	CVE-2008-3922	2012-12-20 18:52	2008-09-4	Show	GitHub Exploit DB Packet Storm

227769	4.3	警告	telartis bv	-	AWStats Totals におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2008-3921	2012-12-20 18:52	2008-09-4	Show	GitHub Exploit DB Packet Storm

227770	10	危険	princeton university	-	Princeton wn におけるバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2008-3908	2012-12-20 18:52	2008-09-4	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 12, 2026, 5:06 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
214601	7.5	HIGH Network	php debian canonical netapp opensuse	php debian_linux ubuntu_linux storage_automation_store leap	An issue was discovered in PHP before 5.6.40, 7.x before 7.1.26, 7.2.x before 7.2.14, and 7.3.x before 7.3.1. xmlrpc_decode() can allow a hostile XMLRPC server to cause PHP to read memory outside of …	CWE-125 Out-of-bounds Read	CVE-2019-9024	2024-11-21 13:50	2019-02-23	Show	GitHub Exploit DB Packet Storm

214602	7.5	HIGH Network	php debian canonical netapp	php debian_linux ubuntu_linux storage_automation_store	An issue was discovered in PHP 7.x before 7.1.26, 7.2.x before 7.2.14, and 7.3.x before 7.3.2. dns_get_record misparses a DNS response, which can allow a hostile DNS server to cause PHP to misuse mem…	CWE-125 Out-of-bounds Read	CVE-2019-9022	2024-11-21 13:50	2019-02-23	Show	GitHub Exploit DB Packet Storm

214603	9.8	CRITICAL Network	php debian canonical netapp opensuse	php debian_linux ubuntu_linux storage_automation_store leap	An issue was discovered in PHP before 5.6.40, 7.x before 7.1.26, 7.2.x before 7.2.14, and 7.3.x before 7.3.1. A number of heap-based buffer over-read instances are present in mbstring regular express…	CWE-125 Out-of-bounds Read	CVE-2019-9023	2024-11-21 13:50	2019-02-23	Show	GitHub Exploit DB Packet Storm

214604	9.8	CRITICAL Network	php debian canonical netapp opensuse	php debian_linux ubuntu_linux storage_automation_store leap	An issue was discovered in PHP before 5.6.40, 7.x before 7.1.26, 7.2.x before 7.2.14, and 7.3.x before 7.3.1. A heap-based buffer over-read in PHAR reading functions in the PHAR extension may allow a…	CWE-125 Out-of-bounds Read	CVE-2019-9021	2024-11-21 13:50	2019-02-23	Show	GitHub Exploit DB Packet Storm

214605	9.8	CRITICAL Network	php debian canonical netapp opensuse	php debian_linux ubuntu_linux storage_automation_store leap	An issue was discovered in PHP before 5.6.40, 7.x before 7.1.26, 7.2.x before 7.2.14, and 7.3.x before 7.3.1. Invalid input to the function xmlrpc_decode() can lead to an invalid memory access (heap …	CWE-125 CWE-416 Out-of-bounds Read Use After Free	CVE-2019-9020	2024-11-21 13:50	2019-02-23	Show	GitHub Exploit DB Packet Storm

214606	6.8	MEDIUM Physics	british_airways	entertainment_system	The British Airways Entertainment System, as installed on Boeing 777-36N(ER) and possibly other aircraft, does not prevent the USB charging/data-transfer feature from interacting with USB keyboard an…	CWE-119 Incorrect Access of Indexable Resource ('Range Error')	CVE-2019-9019	2024-11-21 13:50	2019-02-23	Show	GitHub Exploit DB Packet Storm

214607	6.1	MEDIUM Network	mopcms	mopcms	An XSS vulnerability was discovered in MOPCMS through 2018-11-30. There is persistent XSS that allows remote attackers to inject arbitrary web script or HTML via the form[name] parameter in a mod=col…	CWE-79 Cross-site Scripting	CVE-2019-9016	2024-11-21 13:50	2019-02-23	Show	GitHub Exploit DB Packet Storm

214608	9.1	CRITICAL Network	mopcms	mopcms	A Path Traversal vulnerability was discovered in MOPCMS through 2018-11-30, leading to deletion of unexpected critical files. The exploitation point is in the "column management" function. The path a…	CWE-22 Path Traversal	CVE-2019-9015	2024-11-21 13:50	2019-02-23	Show	GitHub Exploit DB Packet Storm

214609	7.5	HIGH Network	eclipse	wakaama	In Eclipse Wakaama (formerly liblwm2m) 1.0, core/er-coap-13/er-coap-13.c in lwm2mserver in the LWM2M server mishandles invalid options, leading to a memory leak. Processing of a single crafted packet…	CWE-401 Missing Release of Memory after Effective Lifetime	CVE-2019-9004	2024-11-21 13:50	2019-02-23	Show	GitHub Exploit DB Packet Storm

214610	7.5	HIGH Network	linux netapp canonical opensuse	linux_kernel solidfire hci_management_node snapprotect cn1610_firmware ubuntu_linux leap	In the Linux kernel before 4.20.5, attackers can trigger a drivers/char/ipmi/ipmi_msghandler.c use-after-free and OOPS by arranging for certain simultaneous execution of the code, as demonstrated by …	CWE-416 Use After Free	CVE-2019-9003	2024-11-21 13:50	2019-02-23	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed