Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 8, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
227981	6.8	警告	Xine	-	xine-lib の xineplug_dmx_asf.so プラグインにおけるバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2008-1110	2012-12-20 18:34	2008-02-29	Show	GitHub Exploit DB Packet Storm

227982	6.8	警告	quantum game library	-	Quantum Game Library における PHP リモートファイルインクルージョンの脆弱性	CWE-94 コード・インジェクション	CVE-2008-1069	2012-12-20 18:34	2008-02-28	Show	GitHub Exploit DB Packet Storm

227983	6.8	警告	portail web php	-	Portail Web Php における PHP リモートファイルインクルージョンの脆弱性	CWE-94 コード・インジェクション	CVE-2008-1068	2012-12-20 18:34	2008-02-28	Show	GitHub Exploit DB Packet Storm

227984	6.8	警告	phpqladmin	-	phpQLAdmin における PHP リモートファイルインクルージョンの脆弱性	CWE-94 コード・インジェクション	CVE-2008-1067	2012-12-20 18:34	2008-02-28	Show	GitHub Exploit DB Packet Storm

227985	7.5	危険	Smarty	-	S9Y などの製品で使用される Smarty における任意の PHP 関数を呼び出される脆弱性	CWE-20 不適切な入力確認	CVE-2008-1066	2012-12-20 18:34	2008-02-28	Show	GitHub Exploit DB Packet Storm

227986	4.3	警告	WordPress.org	-	WordPress 用の Sniplets プラグインにおけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2008-1061	2012-12-20 18:34	2008-02-28	Show	GitHub Exploit DB Packet Storm

227987	7.5	危険	WordPress.org	-	WordPress 用の Sniplets プラグインにおける任意の PHP コードを実行される脆弱性	CWE-94 コード・インジェクション	CVE-2008-1060	2012-12-20 18:34	2008-02-28	Show	GitHub Exploit DB Packet Storm

227988	7.5	危険	WordPress.org	-	WordPress 用の Sniplets プラグインにおける PHP リモートファイルインクルージョンの脆弱性	CWE-94 コード・インジェクション	CVE-2008-1059	2012-12-20 18:34	2008-02-28	Show	GitHub Exploit DB Packet Storm

227989	6.9	警告	symark	-	Symark PowerBroker におけるスタックベースのバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2008-1056	2012-12-20 18:34	2008-02-28	Show	GitHub Exploit DB Packet Storm

227990	7.5	危険	PHPNUKE	-	PHP-Nuke 用の Kose_Yazilari モジュールにおける SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2008-1053	2012-12-20 18:34	2008-02-27	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 8, 2026, 4:54 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
222151	9.8	CRITICAL Network	egpp	sistema_integrado_de_gestion_academica	In Escuela de Gestion Publica Plurinacional (EGPP) Sistema Integrado de Gestion Academica (GESAC) v1, the username parameter of the authentication form is vulnerable to SQL injection, allowing attack…	CWE-89 SQL Injection	CVE-2019-16264	2024-11-21 13:30	2019-09-16	Show	GitHub Exploit DB Packet Storm

222152	6.1	MEDIUM Network	dolibarr	dolibarr_erp\/crm	In htdocs/societe/card.php in Dolibarr 10.0.1, the value of the User-Agent HTTP header is copied into the HTML document as plain text between tags, leading to XSS.	CWE-79 Cross-site Scripting	CVE-2019-16197	2024-11-21 13:30	2019-09-16	Show	GitHub Exploit DB Packet Storm

222153	7.1	HIGH Network	gitlab	gitlab	An issue was discovered in GitLab Enterprise Edition 11.x and 12.x before 12.0.9, 12.1.x before 12.1.9, and 12.2.x before 12.2.5. It has Incorrect Access Control.	NVD-CWE-noinfo	CVE-2019-16170	2024-11-21 13:30	2019-09-16	Show	GitHub Exploit DB Packet Storm

222154	9.8	CRITICAL Network	fasterxml fedoraproject debian netapp redhat oracle	jackson-databind fedora debian_linux steelstore_cloud_integrated_storage oncommand_workflow_automation oncommand_api_services jboss_enterprise_application_platform retail_xstore_…	A Polymorphic Typing issue was discovered in FasterXML jackson-databind before 2.9.10. It is related to com.zaxxer.hikari.HikariDataSource. This is a different vulnerability than CVE-2019-14540.	CWE-502 Deserialization of Untrusted Data	CVE-2019-16335	2024-11-21 13:30	2019-09-16	Show	GitHub Exploit DB Packet Storm

222155	4.8	MEDIUM Network	bludit	bludit	In Bludit v3.9.2, there is a persistent XSS vulnerability in the Categories -> Add New Category -> Name field. NOTE: this may overlap CVE-2017-16636.	CWE-79 Cross-site Scripting	CVE-2019-16334	2024-11-21 13:30	2019-09-16	Show	GitHub Exploit DB Packet Storm

222156	5.4	MEDIUM Network	get-simple	getsimple_cms	GetSimple CMS v3.3.15 has Persistent Cross-Site Scripting (XSS) in admin/theme-edit.php.	CWE-79 Cross-site Scripting	CVE-2019-16333	2024-11-21 13:30	2019-09-16	Show	GitHub Exploit DB Packet Storm

222157	6.1	MEDIUM Network	api_bearer_auth_project	api_bearer_auth	In the api-bearer-auth plugin before 20190907 for WordPress, the server parameter is not correctly filtered in the swagger-config.yaml.php file, and it is possible to inject JavaScript code, aka XSS.	CWE-79 Cross-site Scripting	CVE-2019-16332	2024-11-21 13:30	2019-09-16	Show	GitHub Exploit DB Packet Storm

222158	6.1	MEDIUM Network	scadabr	scadabr	ScadaBR 1.0CE, and 1.1.x through 1.1.0-RC, has XSS via a request for a nonexistent resource, as demonstrated by the dwr/test/ PATH_INFO.	CWE-79 Cross-site Scripting	CVE-2019-16321	2024-11-21 13:30	2019-09-16	Show	GitHub Exploit DB Packet Storm

222159	7.5	HIGH Network	wireshark opensuse debian	wireshark leap debian_linux	In Wireshark 3.0.0 to 3.0.3 and 2.6.0 to 2.6.10, the Gryphon dissector could go into an infinite loop. This was addressed in plugins/epan/gryphon/packet-gryphon.c by checking for a message length of …	CWE-835 Loop with Unreachable Exit Condition ('Infinite Loop')	CVE-2019-16319	2024-11-21 13:30	2019-09-16	Show	GitHub Exploit DB Packet Storm

222160	8.8	HIGH Network	pimcore	pimcore	In Pimcore before 5.7.1, an attacker with limited privileges can bypass file-extension restrictions via a 256-character filename, as demonstrated by the failure of automatic renaming of .php to .php.…	CWE-434 Unrestricted Upload of File with Dangerous Type	CVE-2019-16318	2024-11-21 13:30	2019-09-15	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed