Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 12, 2026, 10 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
227901	5	警告	ソフォス	-	Linux および Unix 上で稼動している Sophos ウィルス検出エンジンにおけるサービス運用妨害 (DoS) の脆弱性	CWE-16 環境設定	CVE-2008-3177	2012-12-20 18:52	2008-07-15	Show	GitHub Exploit DB Packet Storm

227902	6.8	警告	regretless	-	DodosMail の dodosmail.php におけるディレクトリトラバーサルの脆弱性	CWE-22 パス・トラバーサル	CVE-2008-3163	2012-12-20 18:52	2008-07-14	Show	GitHub Exploit DB Packet Storm

227903	7.5	危険	webblizzard	-	WebBlizzard CMS の index.php における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2008-3154	2012-12-20 18:52	2008-07-11	Show	GitHub Exploit DB Packet Storm

227904	7.5	危険	tritoncms	-	Triton CMS Pro における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2008-3153	2012-12-20 18:52	2008-07-11	Show	GitHub Exploit DB Packet Storm

227905	7.5	危険	warpspeed PHPNUKE	-	PHP-Nuke 用の 4ndvddb モジュールにおける SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2008-3151	2012-12-20 18:52	2008-07-11	Show	GitHub Exploit DB Packet Storm

227906	4.7	警告	wefi	-	WeFi における重要な情報を取得される脆弱性	CWE-200 情報漏えい	CVE-2008-3147	2012-12-20 18:52	2008-07-11	Show	GitHub Exploit DB Packet Storm

227907	7.8	危険	secretwars	-	Soldner Secret Wars におけるサービス運用妨害 (DoS) の脆弱性	CWE-189 数値処理の問題	CVE-2008-3135	2012-12-20 18:52	2008-07-10	Show	GitHub Exploit DB Packet Storm

227908	6.8	警告	Powie	-	pSys の chatbox.php における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2008-3131	2012-12-20 18:52	2008-07-10	Show	GitHub Exploit DB Packet Storm

227909	4.3	警告	Simple Machines	-	OpenCart の index.php におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2008-3130	2012-12-20 18:52	2008-07-10	Show	GitHub Exploit DB Packet Storm

227910	5	警告	pivot	-	Pivot の search.php におけるディレクトリトラバーサルの脆弱性	CWE-22 パス・トラバーサル	CVE-2008-3128	2012-12-20 18:52	2008-07-10	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 12, 2026, 5:06 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
214601	7.5	HIGH Network	php debian canonical netapp opensuse	php debian_linux ubuntu_linux storage_automation_store leap	An issue was discovered in PHP before 5.6.40, 7.x before 7.1.26, 7.2.x before 7.2.14, and 7.3.x before 7.3.1. xmlrpc_decode() can allow a hostile XMLRPC server to cause PHP to read memory outside of …	CWE-125 Out-of-bounds Read	CVE-2019-9024	2024-11-21 13:50	2019-02-23	Show	GitHub Exploit DB Packet Storm

214602	7.5	HIGH Network	php debian canonical netapp	php debian_linux ubuntu_linux storage_automation_store	An issue was discovered in PHP 7.x before 7.1.26, 7.2.x before 7.2.14, and 7.3.x before 7.3.2. dns_get_record misparses a DNS response, which can allow a hostile DNS server to cause PHP to misuse mem…	CWE-125 Out-of-bounds Read	CVE-2019-9022	2024-11-21 13:50	2019-02-23	Show	GitHub Exploit DB Packet Storm

214603	9.8	CRITICAL Network	php debian canonical netapp opensuse	php debian_linux ubuntu_linux storage_automation_store leap	An issue was discovered in PHP before 5.6.40, 7.x before 7.1.26, 7.2.x before 7.2.14, and 7.3.x before 7.3.1. A number of heap-based buffer over-read instances are present in mbstring regular express…	CWE-125 Out-of-bounds Read	CVE-2019-9023	2024-11-21 13:50	2019-02-23	Show	GitHub Exploit DB Packet Storm

214604	9.8	CRITICAL Network	php debian canonical netapp opensuse	php debian_linux ubuntu_linux storage_automation_store leap	An issue was discovered in PHP before 5.6.40, 7.x before 7.1.26, 7.2.x before 7.2.14, and 7.3.x before 7.3.1. A heap-based buffer over-read in PHAR reading functions in the PHAR extension may allow a…	CWE-125 Out-of-bounds Read	CVE-2019-9021	2024-11-21 13:50	2019-02-23	Show	GitHub Exploit DB Packet Storm

214605	9.8	CRITICAL Network	php debian canonical netapp opensuse	php debian_linux ubuntu_linux storage_automation_store leap	An issue was discovered in PHP before 5.6.40, 7.x before 7.1.26, 7.2.x before 7.2.14, and 7.3.x before 7.3.1. Invalid input to the function xmlrpc_decode() can lead to an invalid memory access (heap …	CWE-125 CWE-416 Out-of-bounds Read Use After Free	CVE-2019-9020	2024-11-21 13:50	2019-02-23	Show	GitHub Exploit DB Packet Storm

214606	6.8	MEDIUM Physics	british_airways	entertainment_system	The British Airways Entertainment System, as installed on Boeing 777-36N(ER) and possibly other aircraft, does not prevent the USB charging/data-transfer feature from interacting with USB keyboard an…	CWE-119 Incorrect Access of Indexable Resource ('Range Error')	CVE-2019-9019	2024-11-21 13:50	2019-02-23	Show	GitHub Exploit DB Packet Storm

214607	6.1	MEDIUM Network	mopcms	mopcms	An XSS vulnerability was discovered in MOPCMS through 2018-11-30. There is persistent XSS that allows remote attackers to inject arbitrary web script or HTML via the form[name] parameter in a mod=col…	CWE-79 Cross-site Scripting	CVE-2019-9016	2024-11-21 13:50	2019-02-23	Show	GitHub Exploit DB Packet Storm

214608	9.1	CRITICAL Network	mopcms	mopcms	A Path Traversal vulnerability was discovered in MOPCMS through 2018-11-30, leading to deletion of unexpected critical files. The exploitation point is in the "column management" function. The path a…	CWE-22 Path Traversal	CVE-2019-9015	2024-11-21 13:50	2019-02-23	Show	GitHub Exploit DB Packet Storm

214609	7.5	HIGH Network	eclipse	wakaama	In Eclipse Wakaama (formerly liblwm2m) 1.0, core/er-coap-13/er-coap-13.c in lwm2mserver in the LWM2M server mishandles invalid options, leading to a memory leak. Processing of a single crafted packet…	CWE-401 Missing Release of Memory after Effective Lifetime	CVE-2019-9004	2024-11-21 13:50	2019-02-23	Show	GitHub Exploit DB Packet Storm

214610	7.5	HIGH Network	linux netapp canonical opensuse	linux_kernel solidfire hci_management_node snapprotect cn1610_firmware ubuntu_linux leap	In the Linux kernel before 4.20.5, attackers can trigger a drivers/char/ipmi/ipmi_msghandler.c use-after-free and OOPS by arranging for certain simultaneous execution of the code, as demonstrated by …	CWE-416 Use After Free	CVE-2019-9003	2024-11-21 13:50	2019-02-23	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed