Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 10, 2026, 6 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
228031 3.6 注意 plutostatus - PlutoStatus Locator の index.php におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル
CVE-2008-0819 2012-12-20 18:34 2008-02-19 Show GitHub Exploit DB Packet Storm
228032 6.4 警告 truc - TRUC の download.php におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル
CVE-2008-0814 2012-12-20 18:34 2008-02-18 Show GitHub Exploit DB Packet Storm
228033 5 警告 xpweb - XPWeb の Download.php におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル
CVE-2008-0813 2012-12-20 18:34 2008-02-18 Show GitHub Exploit DB Packet Storm
228034 9.3 危険 reality - PHPizabi の image.php における任意のコードを実行される脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2008-0805 2012-12-20 18:34 2008-02-18 Show GitHub Exploit DB Packet Storm
228035 6.8 警告 Thecus - Thecus N5200Pro NAS Server の usrgetform.html における PHP リモートファイルインクルージョンの脆弱性 CWE-94
コード・インジェクション
CVE-2008-0804 2012-12-20 18:34 2008-02-18 Show GitHub Exploit DB Packet Storm
228036 7.5 危険 VWar - VWar の calendar.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2008-0753 2012-12-20 18:34 2008-02-13 Show GitHub Exploit DB Packet Storm
228037 10 危険 ソニー・コンピュータエンタテインメント - Sony ImageStation 用の SonyISUpload.cab におけるバッファオーバーフローの脆弱性 CWE-119
バッファエラー
CVE-2008-0748 2012-12-20 18:34 2008-02-13 Show GitHub Exploit DB Packet Storm
228038 7.5 危険 PreProject.com - PreProjects.com Pre Hotels & Resorts Management System の user_login.asp における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2008-0744 2012-12-20 18:34 2008-02-12 Show GitHub Exploit DB Packet Storm
228039 7.5 危険 powerscripts - PowerScripts PowerNews におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル
CVE-2008-0742 2012-12-20 18:34 2008-02-12 Show GitHub Exploit DB Packet Storm
228040 7.5 危険 shoppingtree - CP の admin/SA_shipFedExMeter.asp における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2008-0739 2012-12-20 18:34 2008-02-12 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 10, 2026, 4:58 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
221981 7.8 HIGH
Local
xen
debian
xen
debian_linux
An issue was discovered in Xen through 4.11.x allowing x86 PV guest OS users to cause a denial of service or gain privileges because a guest can manipulate its virtualised %cr4 in a way that is incom… CWE-20
 Improper Input Validation 
CVE-2019-17347 2024-11-21 13:32 2019-10-8 Show GitHub Exploit DB Packet Storm
221982 8.8 HIGH
Local
xen
debian
xen
debian_linux
An issue was discovered in Xen through 4.11.x allowing x86 PV guest OS users to cause a denial of service or gain privileges because of an incompatibility between Process Context Identifiers (PCID) a… CWE-20
 Improper Input Validation 
CVE-2019-17346 2024-11-21 13:32 2019-10-8 Show GitHub Exploit DB Packet Storm
221983 6.5 MEDIUM
Local
xen
debian
xen
debian_linux
An issue was discovered in Xen 4.8.x through 4.11.x allowing x86 PV guest OS users to cause a denial of service because mishandling of failed IOMMU operations causes a bug check during the cleanup of… NVD-CWE-noinfo
CVE-2019-17345 2024-11-21 13:32 2019-10-8 Show GitHub Exploit DB Packet Storm
221984 6.5 MEDIUM
Local
xen
debian
xen
debian_linux
An issue was discovered in Xen through 4.11.x allowing x86 PV guest OS users to cause a denial of service by leveraging a long-running operation that exists to support restartability of PTE updates. CWE-662
 Improper Synchronization
CVE-2019-17344 2024-11-21 13:32 2019-10-8 Show GitHub Exploit DB Packet Storm
221985 6.8 MEDIUM
Physics
xen
debian
xen
debian_linux
An issue was discovered in Xen through 4.11.x allowing x86 PV guest OS users to cause a denial of service or gain privileges by leveraging incorrect use of the HVM physmap concept for PV domains. CWE-667
 Improper Locking
CVE-2019-17343 2024-11-21 13:32 2019-10-8 Show GitHub Exploit DB Packet Storm
221986 7.0 HIGH
Local
xen
debian
xen
debian_linux
An issue was discovered in Xen through 4.11.x allowing x86 PV guest OS users to cause a denial of service or gain privileges by leveraging a race condition that arose when XENMEM_exchange was introdu… CWE-362
Race Condition
CVE-2019-17342 2024-11-21 13:32 2019-10-8 Show GitHub Exploit DB Packet Storm
221987 7.8 HIGH
Local
xen
debian
xen
debian_linux
An issue was discovered in Xen through 4.11.x allowing x86 PV guest OS users to cause a denial of service or gain privileges by leveraging a page-writability race condition during addition of a passe… CWE-362
Race Condition
CVE-2019-17341 2024-11-21 13:32 2019-10-8 Show GitHub Exploit DB Packet Storm
221988 8.8 HIGH
Local
xen
debian
xen
debian_linux
An issue was discovered in Xen through 4.11.x allowing x86 guest OS users to cause a denial of service or gain privileges because grant-table transfer requests are mishandled. CWE-401
 Missing Release of Memory after Effective Lifetime
CVE-2019-17340 2024-11-21 13:32 2019-10-8 Show GitHub Exploit DB Packet Storm
221989 6.5 MEDIUM
Local
xen
linux
xen
linux_kernel
An issue was discovered in drivers/xen/balloon.c in the Linux kernel before 5.2.3, as used in Xen through 4.12.x, allowing guest OS users to cause a denial of service because of unrestricted resource… CWE-770
 Allocation of Resources Without Limits or Throttling
CVE-2019-17351 2024-11-21 13:32 2019-10-8 Show GitHub Exploit DB Packet Storm
221990 5.5 MEDIUM
Local
xen
debian
xen
debian_linux
An issue was discovered in Xen through 4.12.x allowing Arm domU attackers to cause a denial of service (infinite loop) involving a compare-and-exchange operation. CWE-835
 Loop with Unreachable Exit Condition ('Infinite Loop')
CVE-2019-17350 2024-11-21 13:32 2019-10-8 Show GitHub Exploit DB Packet Storm