Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 9, 2026, 2 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
227811	7.5	危険	site sift media	-	Site Sift Listings における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2008-1869	2012-12-20 18:52	2008-04-17	Show	GitHub Exploit DB Packet Storm

227812	7.5	危険	pixel motion	-	Blog Pixel Motion の admin/sauvBase.php における重要な情報を含む blogPM.sql ファイルの結果を取得される脆弱性	CWE-287 不適切な認証	CVE-2008-1868	2012-12-20 18:52	2008-04-17	Show	GitHub Exploit DB Packet Storm

227813	7.5	危険	pixel motion	-	Blog Pixel Motion における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2008-1867	2012-12-20 18:52	2008-04-17	Show	GitHub Exploit DB Packet Storm

227814	9	危険	pixel motion	-	Blog Pixel Motion の admin/modif_config.php における任意の PHP スクリプトをアップロードされる脆弱性	CWE-94 コード・インジェクション	CVE-2008-1866	2012-12-20 18:52	2008-04-17	Show	GitHub Exploit DB Packet Storm

227815	7.5	危険	prozilla	-	Prozilla Freelancers の project.php における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2008-1864	2012-12-20 18:52	2008-04-17	Show	GitHub Exploit DB Packet Storm

227816	7.5	危険	prozilla	-	Prozilla Cheat Script の view_reviews.php における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2008-1863	2012-12-20 18:52	2008-04-17	Show	GitHub Exploit DB Packet Storm

227817	5	警告	SmarterTools Inc.	-	SmarterMail の SmarterMail Web Server におけるサービス運用妨害 (DoS) の脆弱性	CWE-DesignError	CVE-2008-1854	2012-12-20 18:52	2008-04-16	Show	GitHub Exploit DB Packet Storm

227818	4.3	警告	SAP	-	SAP NetWeaver のデフォルト設定におけるクロスサイトスクリプティング攻撃を実行される脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2008-1846	2012-12-20 18:52	2008-04-16	Show	GitHub Exploit DB Packet Storm

227819	7.5	危険	w2b	-	W2B phpHotResources の cat.php における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2008-1844	2012-12-20 18:52	2008-04-16	Show	GitHub Exploit DB Packet Storm

227820	7.5	危険	w2b	-	W2B DatingClub の browse.php における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2008-1843	2012-12-20 18:52	2008-04-16	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 9, 2026, 5:07 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
222211	9.8	CRITICAL Network	openmpt	libopenmpt	In libopenmpt before 0.3.19 and 0.4.x before 0.4.9, ModPlug_InstrumentName and ModPlug_SampleName in libopenmpt_modplug.c do not restrict the lengths of libmodplug output-buffer strings in the C API,…	CWE-120 Classic Buffer Overflow	CVE-2019-17113	2024-11-21 13:31	2019-10-4	Show	GitHub Exploit DB Packet Storm

222212	6.1	MEDIUM Network	themeisle	visualizer	A stored XSS vulnerability in the Visualizer plugin 3.3.0 for WordPress allows an unauthenticated attacker to execute arbitrary JavaScript when an admin or other privileged user edits the chart via t…	CWE-79 Cross-site Scripting	CVE-2019-16931	2024-11-21 13:31	2019-10-4	Show	GitHub Exploit DB Packet Storm

222213	7.5	HIGH Network	nlnetlabs canonical	unbound ubuntu_linux	Unbound before 1.9.4 accesses uninitialized memory, which allows remote attackers to trigger a crash via a crafted NOTIFY query. The source IP address of the query must match an access-control rule.	CWE-755 CWE-908 Improper Handling of Exceptional Conditions Use of Uninitialized Resource	CVE-2019-16866	2024-11-21 13:31	2019-10-4	Show	GitHub Exploit DB Packet Storm

222214	7.8	HIGH Local	linuxmint	mintinstall	mintinstall (aka Software Manager) 7.9.9 for Linux Mint allows code execution if a REVIEWS_CACHE file is controlled by an attacker, because an unpickle occurs. This is resolved in 8.0.0 and backports.	CWE-502 Deserialization of Untrusted Data	CVE-2019-17080	2024-11-21 13:31	2019-10-2	Show	GitHub Exploit DB Packet Storm

222215	7.5	HIGH Network	linux	linux_kernel	An issue was discovered in write_tpt_entry in drivers/infiniband/hw/cxgb4/mem.c in the Linux kernel through 5.3.2. The cxgb4 driver is directly calling dma_map_single (a DMA function) from a stack va…	NVD-CWE-noinfo	CVE-2019-17075	2024-11-21 13:31	2019-10-2	Show	GitHub Exploit DB Packet Storm

222216	5.4	MEDIUM Network	xunruicms	xunruicms	An issue was discovered in XunRuiCMS 4.3.1. There is a stored XSS in the module_category area.	CWE-79 Cross-site Scripting	CVE-2019-17074	2024-11-21 13:31	2019-10-2	Show	GitHub Exploit DB Packet Storm

222217	6.5	MEDIUM Network	emlog	emlog	emlog through 6.0.0beta allows remote authenticated users to delete arbitrary files via admin/template.php?action=del&tpl=../ directory traversal.	CWE-22 Path Traversal	CVE-2019-17073	2024-11-21 13:31	2019-10-2	Show	GitHub Exploit DB Packet Storm

222218	6.1	MEDIUM Network	eclipse oracle	mojarra mojarra_javaserver_faces retail_service_backbone retail_integration_bus retail_merchandising_system application_testing_suite secure_global_desktop retail_financial_integ…	faces/context/PartialViewContextImpl.java in Eclipse Mojarra, as used in Mojarra for Eclipse EE4J before 2.3.10 and Mojarra JavaServer Faces before 2.2.20, allows Reflected XSS because a client windo…	CWE-79 Cross-site Scripting	CVE-2019-17091	2024-11-21 13:31	2019-10-2	Show	GitHub Exploit DB Packet Storm

222219	7.5	HIGH Network	putty opensuse netapp	putty leap oncommand_unified_manager_core_package	PuTTY before 0.73 might allow remote SSH-1 servers to cause a denial of service by accessing freed memory locations via an SSH1_MSG_DISCONNECT message.	CWE-416 Use After Free	CVE-2019-17069	2024-11-21 13:31	2019-10-2	Show	GitHub Exploit DB Packet Storm

222220	7.5	HIGH Network	putty opensuse	putty leap	PuTTY before 0.73 mishandles the "bracketed paste mode" protection mechanism, which may allow a session to be affected by malicious clipboard content.	CWE-74 Injection	CVE-2019-17068	2024-11-21 13:31	2019-10-2	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed