Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 12, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
227881 5 警告 phplinkat - phpLinkat における認証を回避される脆弱性 CWE-287
不適切な認証 		CVE-2008-3407 2012-12-20 18:52 2008-07-31 Show GitHub Exploit DB Packet Storm
227882 7.5 危険 phplinkat - TribunaLibre の ftag.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-3406 2012-12-20 18:52 2008-07-31 Show GitHub Exploit DB Packet Storm
227883 4.3 警告 xrms - XRMS CRM における設定情報を取得される脆弱性 CWE-200
情報漏えい 		CVE-2008-3400 2012-12-20 18:52 2008-07-31 Show GitHub Exploit DB Packet Storm
227884 6.8 警告 xrms - XRMS CRM の activities/workflow-activities.php における PHP リモートファイルインクルージョンの脆弱性 CWE-94
コード・インジェクション 		CVE-2008-3399 2012-12-20 18:52 2008-07-31 Show GitHub Exploit DB Packet Storm
227885 2.6 注意 xrms - XRMS CRM におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2008-3398 2012-12-20 18:52 2008-07-31 Show GitHub Exploit DB Packet Storm
227886 4.3 警告 runesoft - Runesoft Cerberus CMS におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2008-3397 2012-12-20 18:52 2008-07-31 Show GitHub Exploit DB Packet Storm
227887 5.8 警告 webwizguide - Web Wiz Forum におけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反 		CVE-2008-3392 2012-12-20 18:52 2008-07-31 Show GitHub Exploit DB Packet Storm
227888 4.3 警告 webwizguide - Web Wiz Forum におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2008-3391 2012-12-20 18:52 2008-07-31 Show GitHub Exploit DB Packet Storm
227889 7.5 危険 phpfootball - PHPFootball の show.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-3387 2012-12-20 18:52 2008-07-30 Show GitHub Exploit DB Packet Storm
227890 4.3 警告 snarky - Snark VisualPic におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2008-3379 2012-12-20 18:52 2008-07-30 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 13, 2026, 5:05 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
214701 7.5 HIGH
Network 		wireshark
debian 		wireshark
debian_linux 		In Wireshark 2.4.0 to 2.4.12 and 2.6.0 to 2.6.6, the TCAP dissector could crash. This was addressed in epan/dissectors/asn1/tcap/tcap.cnf by avoiding NULL pointer dereferences. CWE-476
 NULL Pointer Dereference 		CVE-2019-9208 2024-11-21 13:51 2019-02-28 Show GitHub Exploit DB Packet Storm
214702 6.5 MEDIUM
Network 		gnu
fedoraproject
suse 		pspp
fedora
backports 		There is a reachable assertion abort in the function write_long_string_missing_values() in data/sys-file-writer.c in libdata.a in GNU PSPP 1.2.0 that will lead to denial of service. CWE-617
 Reachable Assertion 		CVE-2019-9211 2024-11-21 13:51 2019-02-28 Show GitHub Exploit DB Packet Storm
214703 9.8 CRITICAL
Network 		antfin sofa-hessian SOFA-Hessian through 4.0.2 allows remote attackers to execute arbitrary commands via a crafted serialized Hessian object because blacklisting of com.caucho.naming.QName and com.sun.org.apache.xpath.i… CWE-184
CWE-502
 Incomplete Blacklist
 Deserialization of Untrusted Data 		CVE-2019-9212 2024-11-21 13:51 2019-02-28 Show GitHub Exploit DB Packet Storm
214704 7.8 HIGH
Local 		advancemame
debian
canonical
fedoraproject 		advancecomp
debian_linux
ubuntu_linux
fedora 		In AdvanceCOMP 2.1, png_compress in pngex.cc in advpng has an integer overflow upon encountering an invalid PNG size, which results in an attempted memcpy to write into a buffer that is too small. (T… CWE-125
CWE-190
Out-of-bounds Read
 Integer Overflow or Wraparound 		CVE-2019-9210 2024-11-21 13:51 2019-02-27 Show GitHub Exploit DB Packet Storm
214705 9.8 CRITICAL
Network 		phoenixcontact ilc_131_eth_firmware
ilc_131_eth\/xc_firmware
ilc_151_eth_firmware
ilc_151_eth\/xc_firmware
ilc_171_eth_2tx_firmware
ilc_191_eth_2tx_firmware
ilc_191_me\/an_firmware
axc_1050_fir… 		Multiple Phoenix Contact devices allow remote attackers to establish TCP sessions to port 1962 and obtain sensitive information or make changes, as demonstrated by using the Create Backup feature to … CWE-306
Missing Authentication for Critical Function 		CVE-2019-9201 2024-11-21 13:51 2019-02-27 Show GitHub Exploit DB Packet Storm
214706 8.8 HIGH
Network 		freedesktop
debian
canonical 		poppler
debian_linux
ubuntu_linux 		A heap-based buffer underwrite exists in ImageStream::getLine() located at Stream.cc in Poppler 0.74.0 that can (for example) be triggered by sending a crafted PDF file to the pdfimages binary. It al… CWE-787
 Out-of-bounds Write 		CVE-2019-9200 2024-11-21 13:51 2019-02-27 Show GitHub Exploit DB Packet Storm
214707 8.8 HIGH
Network 		podofo_project
fedoraproject 		podofo
fedora 		PoDoFo::Impose::PdfTranslator::setSource() in pdftranslator.cpp in PoDoFo 0.9.6 has a NULL pointer dereference that can (for example) be triggered by sending a crafted PDF file to the podofoimpose bi… CWE-476
 NULL Pointer Dereference 		CVE-2019-9199 2024-11-21 13:51 2019-02-27 Show GitHub Exploit DB Packet Storm
214708 9.8 CRITICAL
Network 		grin grin util/src/zip.rs in Grin before 1.0.2 mishandles suspicious files. An attacker can execute arbitrary code via directory traversal in a ZIP archive. CWE-22
Path Traversal 		CVE-2019-9195 2024-11-21 13:51 2019-02-27 Show GitHub Exploit DB Packet Storm
214709 9.8 CRITICAL
Network 		std42 elfinder elFinder before 2.1.48 has a command injection vulnerability in the PHP connector. CWE-78
OS Command  		CVE-2019-9194 2024-11-21 13:51 2019-02-27 Show GitHub Exploit DB Packet Storm
214710 7.5 HIGH
Network 		gnu glibc In the GNU C Library (aka glibc or libc6) through 2.29, check_dst_limits_calc_pos_1 in posix/regexec.c has Uncontrolled Recursion, as demonstrated by '(|)(\\1\\1)*' in grep, a different issue than CV… CWE-674
 Uncontrolled Recursion 		CVE-2019-9192 2024-11-21 13:51 2019-02-27 Show GitHub Exploit DB Packet Storm