Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 9, 2026, 10 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
227811 7.5 危険 site sift media - Site Sift Listings における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-1869 2012-12-20 18:52 2008-04-17 Show GitHub Exploit DB Packet Storm
227812 7.5 危険 pixel motion - Blog Pixel Motion の admin/sauvBase.php における重要な情報を含む blogPM.sql ファイルの結果を取得される脆弱性 CWE-287
不適切な認証 		CVE-2008-1868 2012-12-20 18:52 2008-04-17 Show GitHub Exploit DB Packet Storm
227813 7.5 危険 pixel motion - Blog Pixel Motion における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-1867 2012-12-20 18:52 2008-04-17 Show GitHub Exploit DB Packet Storm
227814 9 危険 pixel motion - Blog Pixel Motion の admin/modif_config.php における任意の PHP スクリプトをアップロードされる脆弱性 CWE-94
コード・インジェクション 		CVE-2008-1866 2012-12-20 18:52 2008-04-17 Show GitHub Exploit DB Packet Storm
227815 7.5 危険 prozilla - Prozilla Freelancers の project.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-1864 2012-12-20 18:52 2008-04-17 Show GitHub Exploit DB Packet Storm
227816 7.5 危険 prozilla - Prozilla Cheat Script の view_reviews.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-1863 2012-12-20 18:52 2008-04-17 Show GitHub Exploit DB Packet Storm
227817 5 警告 SmarterTools Inc. - SmarterMail の SmarterMail Web Server におけるサービス運用妨害 (DoS) の脆弱性 CWE-DesignError
CVE-2008-1854 2012-12-20 18:52 2008-04-16 Show GitHub Exploit DB Packet Storm
227818 4.3 警告 SAP - SAP NetWeaver のデフォルト設定におけるクロスサイトスクリプティング攻撃を実行される脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2008-1846 2012-12-20 18:52 2008-04-16 Show GitHub Exploit DB Packet Storm
227819 7.5 危険 w2b - W2B phpHotResources の cat.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-1844 2012-12-20 18:52 2008-04-16 Show GitHub Exploit DB Packet Storm
227820 7.5 危険 w2b - W2B DatingClub の browse.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-1843 2012-12-20 18:52 2008-04-16 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 9, 2026, 5:07 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
222271 7.5 HIGH
Network 		advantech webaccess\/hmi_designer Advantech WebAccess/HMI Designer 2.1.9.31 has a User Mode Write AV starting at MSVCR90!memcpy+0x000000000000015c. NVD-CWE-noinfo
CVE-2019-16900 2024-11-21 13:31 2019-09-26 Show GitHub Exploit DB Packet Storm
222272 7.5 HIGH
Network 		advantech webaccess\/hmi_designer In Advantech WebAccess/HMI Designer 2.1.9.31, Data from a Faulting Address controls Code Flow starting at PM_V3!CTagInfoThreadBase::GetNICInfo+0x0000000000512918. NVD-CWE-noinfo
CVE-2019-16899 2024-11-21 13:31 2019-09-26 Show GitHub Exploit DB Packet Storm
222273 5.5 MEDIUM
Local 		rubyzip_project
fedoraproject
redhat 		rubyzip
fedora
cloudforms 		In Rubyzip before 1.3.0, a crafted ZIP file can bypass application checks on ZIP entry sizes because data about the uncompressed size can be spoofed. This allows attackers to cause a denial of servic… NVD-CWE-noinfo
CVE-2019-16892 2024-11-21 13:31 2019-09-26 Show GitHub Exploit DB Packet Storm
222274 5.4 MEDIUM
Network 		halo halo Halo 1.1.0 has XSS via a crafted authorUrl in JSON data to api/content/posts/comments. CWE-79
Cross-site Scripting 		CVE-2019-16890 2024-11-21 13:31 2019-09-26 Show GitHub Exploit DB Packet Storm
222275 7.5 HIGH
Network 		ui er-x_firmware
er-x-sfp_firmware
ep-r6_firmware
erlite-3_firmware
erpoe-5_firmware
er-8_firmware
erpro-8_firmware
ep-r8_firmware
er-4_firmware
er-6p_firmware
er-12_firmwa… 		Ubiquiti EdgeMAX devices before 2.0.3 allow remote attackers to cause a denial of service (disk consumption) because *.cache files in /var/run/beaker/container_file/ are created when providing a vali… CWE-770
 Allocation of Resources Without Limits or Throttling 		CVE-2019-16889 2024-11-21 13:31 2019-09-26 Show GitHub Exploit DB Packet Storm
222276 7.8 HIGH
Local 		irfanview irfanview In IrfanView 4.53, Data from a Faulting Address controls a subsequent Write Address starting at image00400000+0x000000000001dcfc. CWE-120
Classic Buffer Overflow 		CVE-2019-16887 2024-11-21 13:31 2019-09-26 Show GitHub Exploit DB Packet Storm
222277 7.5 HIGH
Network 		string-interner_project string-interner An issue was discovered in the string-interner crate before 0.7.1 for Rust. It allows attackers to read from memory locations associated with dangling pointers, because of a cloning flaw. CWE-416
 Use After Free 		CVE-2019-16882 2024-11-21 13:31 2019-09-26 Show GitHub Exploit DB Packet Storm
222278 7.5 HIGH
Network 		linuxfoundation
docker
fedoraproject
opensuse
redhat
canonical 		runc
docker
fedora
leap
enterprise_linux
openshift_container_platform
enterprise_linux_eus
enterprise_linux_server_tus
enterprise_linux_server_aus
ubuntu_linux 		runc through 1.0.0-rc8, as used in Docker through 19.03.2-ce and other products, allows AppArmor restriction bypass because libcontainer/rootfs_linux.go incorrectly checks mount targets, and thus a m… CWE-863
 Incorrect Authorization 		CVE-2019-16884 2024-11-21 13:31 2019-09-26 Show GitHub Exploit DB Packet Storm
222279 9.8 CRITICAL
Network 		portaudio-rs_project portaudio-rs An issue was discovered in the portaudio-rs crate through 0.3.1 for Rust. There is a use-after-free with resultant arbitrary code execution because of a lack of unwind safety in stream_callback and s… CWE-416
 Use After Free 		CVE-2019-16881 2024-11-21 13:31 2019-09-26 Show GitHub Exploit DB Packet Storm
222280 9.8 CRITICAL
Network 		linea_project linea An issue was discovered in the linea crate through 0.9.4 for Rust. There is double free in the Matrix::zip_elements method. CWE-415
 Double Free 		CVE-2019-16880 2024-11-21 13:31 2019-09-26 Show GitHub Exploit DB Packet Storm