Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 17, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
227971	6.8	警告	phparanoid	-	PHParanoid におけるクロスサイトリクエストフォージェリの脆弱性	CWE-352 同一生成元ポリシー違反	CVE-2008-5758	2012-12-20 19:10	2008-12-30	Show	GitHub Exploit DB Packet Storm

227972	3.5	注意	Textpattern	-	Textpattern の textarea/index.php におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2008-5757	2012-12-20 19:10	2008-12-30	Show	GitHub Exploit DB Packet Storm

227973	4.3	警告	WordPress.org	-	WordPress 用の Page Flip Image Gallery プラグインにおけるディレクトリトラバーサルの脆弱性	CWE-22 パス・トラバーサル	CVE-2008-5752	2012-12-20 19:10	2008-12-30	Show	GitHub Exploit DB Packet Storm

227974	7.5	危険	Pligg	-	Pligg CMS の evb/check_url.php における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2008-5739	2012-12-20 19:10	2008-12-26	Show	GitHub Exploit DB Packet Storm

227975	7.5	危険	PHP-Fusion	-	PHP-Fusion 用の Team Impact TI Blog System モジュールにおける SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2008-5733	2012-12-20 19:10	2008-12-26	Show	GitHub Exploit DB Packet Storm

227976	7.5	危険	stormboards aaronnemisis	-	stormBoards の thread.php における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2008-5726	2012-12-20 19:10	2008-12-26	Show	GitHub Exploit DB Packet Storm

227977	10	危険	sawstudio	-	SAWStudio におけるバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2008-5722	2012-12-20 19:10	2008-12-26	Show	GitHub Exploit DB Packet Storm

227978	7.8	危険	Fabrice Bellard	-	Qemu の monitor.c における VNC パスワードを推測される脆弱性	CWE-189 数値処理の問題	CVE-2008-5714	2012-12-20 19:10	2008-12-24	Show	GitHub Exploit DB Packet Storm

227979	7.5	危険	slimcms	-	SlimCMS の redirect.php における管理ユーザを作成される脆弱性	CWE-287 不適切な認証	CVE-2008-5708	2012-12-20 19:10	2008-12-24	Show	GitHub Exploit DB Packet Storm

227980	6.9	警告	verlihub-project	-	Verlihub のデーモンにおける任意のファイルを上書きされる脆弱性	CWE-59 リンク解釈の問題	CVE-2008-5706	2012-12-20 19:10	2008-12-22	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 17, 2026, 4:15 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
221541	5.5	MEDIUM Local	upx_project fedoraproject	upx fedora	A floating-point exception was discovered in PackLinuxElf::elf_hash in p_lx_elf.cpp in UPX 3.95. The vulnerability causes an application crash, which leads to denial of service.	CWE-682 Incorrect Calculation	CVE-2019-20051	2024-11-21 13:37	2019-12-28	Show	GitHub Exploit DB Packet Storm

221542	5.5	MEDIUM Local	linux netapp	linux_kernel cloud_backup steelstore_cloud_integrated_storage data_availability_services solidfire_\&_hci_management_node active_iq_unified_manager solidfire_baseboard_managemen…	In the Linux kernel before 5.0.6, there is a NULL pointer dereference in drop_sysctl_table() in fs/proc/proc_sysctl.c, related to put_links, aka CID-23da9588037e.	CWE-476 NULL Pointer Dereference	CVE-2019-20054	2024-11-21 13:37	2019-12-28	Show	GitHub Exploit DB Packet Storm

221543	9.8	CRITICAL Network	al-enterprise	omnivista_4760	An issue was discovered on Alcatel-Lucent OmniVista 4760 devices. A remote unauthenticated attacker can chain a directory traversal (which helps to bypass authentication) with an insecure file upload…	NVD-CWE-Other	CVE-2019-20049	2024-11-21 13:37	2019-12-28	Show	GitHub Exploit DB Packet Storm

221544	7.2	HIGH Network	al-enterprise	omnivista_8770	An issue was discovered on Alcatel-Lucent OmniVista 8770 devices before 4.1.2. An authenticated remote attacker, with elevated privileges in the Web Directory component on port 389, may upload a PHP …	CWE-434 Unrestricted Upload of File with Dangerous Type	CVE-2019-20048	2024-11-21 13:37	2019-12-28	Show	GitHub Exploit DB Packet Storm

221545	7.5	HIGH Network	al-enterprise	omnivista_4760 omnivista_8770	An issue was discovered on Alcatel-Lucent OmniVista 4760 devices, and 8770 devices before 4.1.2. An incorrect web server configuration allows a remote unauthenticated attacker to retrieve the content…	CWE-522 Insufficiently Protected Credentials	CVE-2019-20047	2024-11-21 13:37	2019-12-28	Show	GitHub Exploit DB Packet Storm

221546	4.3	MEDIUM Network	wordpress debian	wordpress debian_linux	In in wp-includes/rest-api/endpoints/class-wp-rest-posts-controller.php in WordPress 3.7 to 5.3.0, authenticated users who do not have the rights to publish a post are able to mark posts as sticky or…	CWE-269 Improper Privilege Management	CVE-2019-20043	2024-11-21 13:37	2019-12-27	Show	GitHub Exploit DB Packet Storm

221547	6.1	MEDIUM Network	wordpress debian	wordpress debian_linux	In wp-includes/formatting.php in WordPress 3.7 to 5.3.0, the function wp_targeted_link_rel() can be used in a particular way to result in a stored cross-site scripting (XSS) vulnerability. This has b…	CWE-79 Cross-site Scripting	CVE-2019-20042	2024-11-21 13:37	2019-12-27	Show	GitHub Exploit DB Packet Storm

221548	9.8	CRITICAL Network	wordpress debian	wordpress debian_linux	wp_kses_bad_protocol in wp-includes/kses.php in WordPress before 5.3.1 mishandles the HTML5 colon named entity, allowing attackers to bypass input sanitization, as demonstrated by the javascript&colo…	CWE-20 Improper Input Validation	CVE-2019-20041	2024-11-21 13:37	2019-12-27	Show	GitHub Exploit DB Packet Storm

221549	5.5	MEDIUM Local	upx_project fedoraproject	upx fedora	A heap-based buffer over-read was discovered in canUnpack in p_mach.cpp in UPX 3.95 via a crafted Mach-O file.	CWE-125 Out-of-bounds Read	CVE-2019-20021	2024-11-21 13:37	2019-12-27	Show	GitHub Exploit DB Packet Storm

221550	6.5	MEDIUM Network	matio_project	matio	A stack-based buffer over-read was discovered in ReadNextStructField in mat5.c in matio 1.5.17.	CWE-125 Out-of-bounds Read	CVE-2019-20020	2024-11-21 13:37	2019-12-27	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed