Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 12, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
227991	7.5	危険	v-webmail	-	V-webmail の login.php における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2008-3063	2012-12-20 18:52	2008-10-7	Show	GitHub Exploit DB Packet Storm

227992	7.5	危険	TYPO3 Association	-	TYPO3 用の DAM Frontend エクステンションにおける SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2008-3039	2012-12-20 18:52	2008-07-7	Show	GitHub Exploit DB Packet Storm

227993	7.5	危険	TYPO3 Association	-	TYPO3 用の Address Directory エクステンションにおける SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2008-3038	2012-12-20 18:52	2008-07-7	Show	GitHub Exploit DB Packet Storm

227994	4.3	警告	TYPO3 Association	-	TYPO3 用の Address Directory エクステンションにおけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2008-3037	2012-12-20 18:52	2008-07-7	Show	GitHub Exploit DB Packet Storm

227995	6.5	警告	xchangeboard	-	XchangeBoard の newThread.php における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2008-3035	2012-12-20 18:52	2008-07-7	Show	GitHub Exploit DB Packet Storm

227996	7.5	危険	rss aggregator	-	RSS-aggregator における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2008-3034	2012-12-20 18:52	2008-07-7	Show	GitHub Exploit DB Packet Storm

227997	9.3	危険	rss aggregator	-	RSS-aggregator における admin 関数へアクセスされ脆弱性	CWE-287 不適切な認証	CVE-2008-3033	2012-12-20 18:52	2008-07-7	Show	GitHub Exploit DB Packet Storm

227998	4.3	警告	The phpMyAdmin Project	-	TYPO3 用の phpMyAdmin エクステンションにおけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2008-3032	2012-12-20 18:52	2008-07-7	Show	GitHub Exploit DB Packet Storm

227999	7.5	危険	Thomas Abeel	-	Simple PHP Agenda の index.php におけるディレクトリトラバーサルの脆弱性	CWE-22 パス・トラバーサル	CVE-2008-3031	2012-12-20 18:52	2008-07-7	Show	GitHub Exploit DB Packet Storm

228000	4.3	警告	Web-Empowered Church Team	-	TYPO3 用の WEC Discussion Forum エクステンションにおけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2008-3029	2012-12-20 18:52	2008-07-7	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 13, 2026, 5:05 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
224661	7.8	HIGH Local	linux redhat netapp	linux_kernel enterprise_linux enterprise_linux_server_tus enterprise_linux_server_aus enterprise_linux_for_ibm_z_systems_eus enterprise_linux_for_real_time_for_nfv_tus enterprise_li…	A vulnerability was found in Linux Kernel, where a Heap Overflow was found in mwifiex_set_wmm_params() function of Marvell Wifi Driver.	-	CVE-2019-14815	2024-11-21 13:27	2019-11-25	Show	GitHub Exploit DB Packet Storm

224662	6.1	MEDIUM Network	openfind	mail2000	An Open Redirect vulnerability for all browsers in MAIL2000 through version 6.0 and 7.0, which will redirect to a malicious site without authentication. This vulnerability affects many mail system of…	CWE-601 Open Redirect	CVE-2019-15073	2024-11-21 13:27	2019-11-20	Show	GitHub Exploit DB Packet Storm

224663	6.1	MEDIUM Network	openfind	mail2000	The login feature in "/cgi-bin/portal" in MAIL2000 through version 6.0 and 7.0 has a cross-site scripting (XSS) vulnerability, allowing execution of arbitrary code via any parameter. This vulnerabili…	CWE-79 Cross-site Scripting	CVE-2019-15072	2024-11-21 13:27	2019-11-20	Show	GitHub Exploit DB Packet Storm

224664	6.1	MEDIUM Network	openfind	mail2000	The "/cgi-bin/go" page in MAIL2000 through version 6.0 and 7.0 has a cross-site scripting (XSS) vulnerability, allowing execution of arbitrary code via ACTION parameter without authentication. The co…	CWE-79 Cross-site Scripting	CVE-2019-15071	2024-11-21 13:27	2019-11-20	Show	GitHub Exploit DB Packet Storm

224665	6.1	MEDIUM Network	getmailbird	mailbird	Multiple cross-site scripting (XSS) vulnerabilities in Mailbird before 2.7.5.0 r allow remote attackers to execute arbitrary JavaScript in a privileged context via a crafted HTML mail message. This v…	CWE-79 Cross-site Scripting	CVE-2019-15054	2024-11-21 13:27	2019-11-19	Show	GitHub Exploit DB Packet Storm

224666	8.8	HIGH Network	artifex fedoraproject opensuse	ghostscript fedora leap	A flaw was found in all versions of ghostscript 9.x before 9.50, where the `.charkeys` procedure, where it did not properly secure its privileged calls, enabling scripts to bypass `-dSAFER` restricti…	CWE-732 Incorrect Permission Assignment for Critical Resource	CVE-2019-14869	2024-11-21 13:27	2019-11-15	Show	GitHub Exploit DB Packet Storm

224667	10.0	CRITICAL Network	sas	xml_mapper base_sas	SAS XML Mapper 9.45 has an XML External Entity (XXE) vulnerability that can be leveraged by malicious attackers in multiple ways. Examples are Local File Reading, Out Of Band File Exfiltration, Serve…	CWE-611 XXE	CVE-2019-14678	2024-11-21 13:27	2019-11-15	Show	GitHub Exploit DB Packet Storm

224668	7.5	HIGH Network	dpdk redhat fedoraproject	data_plane_development_kit enterprise_linux_fast_datapath openstack virtualization_eus fedora	A flaw was found in all dpdk version 17.x.x before 17.11.8, 16.x.x before 16.11.10, 18.x.x before 18.11.4 and 19.x.x before 19.08.1 where a malicious master, or a container with access to vhost_user …	CWE-401 Missing Release of Memory after Effective Lifetime	CVE-2019-14818	2024-11-21 13:27	2019-11-15	Show	GitHub Exploit DB Packet Storm

224669	7.8	HIGH Local	intel	nuvoton_consumer_infrared	Improper permissions in the installer for the Nuvoton* CIR Driver versions 1.02.1002 and before may allow an authenticated user to potentially enable escalation of privilege via local access.	CWE-276 Incorrect Default Permissions	CVE-2019-14602	2024-11-21 13:27	2019-11-15	Show	GitHub Exploit DB Packet Storm

224670	6.5	MEDIUM Network	redhat	syndesis fuse	It was found that the Syndesis configuration for Cross-Origin Resource Sharing was set to allow all origins. An attacker could use this lack of protection to conduct phishing attacks and further acce…	NVD-CWE-Other	CVE-2019-14860	2024-11-21 13:27	2019-11-9	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed