Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 9, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
228121 6.8 警告 softpedia - Small Axe Weblog の inc/linkbar.php における PHP リモートファイルインクルージョンの脆弱性 CWE-94
コード・インジェクション 		CVE-2008-0376 2012-12-20 18:34 2008-01-22 Show GitHub Exploit DB Packet Storm
228122 6.8 警告 Pixelpost.org - Pixelpost の index.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-0358 2012-12-20 18:34 2008-01-16 Show GitHub Exploit DB Packet Storm
228123 7.5 危険 phpecho cms - PHPEcho CMS の forum モジュールにおける SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-0355 2012-12-20 18:34 2008-01-18 Show GitHub Exploit DB Packet Storm
228124 7.5 危険 php-residence - php-residence の visualizza_tabelle.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-0353 2012-12-20 18:34 2008-01-18 Show GitHub Exploit DB Packet Storm
228125 2.6 注意 pmachine - PMachine Pro の pm/language/spanish/preferences.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2008-0334 2012-12-20 18:34 2008-01-17 Show GitHub Exploit DB Packet Storm
228126 7.8 危険 radiator - OSC Radiator におけるサービス運用妨害 (DoS) の脆弱性 CWE-287
不適切な認証 		CVE-2008-0330 2012-12-20 18:34 2008-01-17 Show GitHub Exploit DB Packet Storm
228127 6.8 警告 シマンテック - Norton 360 などの Symantec Norton 製品の ActiveDataInfo.LaunchProcess メソッドにおける任意のコードを実行される脆弱性 CWE-DesignError
CVE-2008-0313 2012-12-20 18:34 2008-04-2 Show GitHub Exploit DB Packet Storm
228128 9.3 危険 シマンテック - Norton 360 などの Symantec Norton 製品の AutoFix Support Tool ActiveX コントロールにおけるスタックベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2008-0312 2012-12-20 18:34 2008-04-2 Show GitHub Exploit DB Packet Storm
228129 6.9 警告 SCO - SCO UnixWare の pkgadd におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2008-0310 2012-12-20 18:34 2008-02-27 Show GitHub Exploit DB Packet Storm
228130 6.8 警告 シマンテック - Symantec Scan Engine を含む特定の Symantec アンチウイルス製品で使用される Symantec Decomposer におけるスタックベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2008-0309 2012-12-20 18:34 2008-02-26 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 9, 2026, 5:07 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
224511 9.8 CRITICAL
Network 		carel pcoweb_firmware Rittal Chiller SK 3232-Series web interface as built upon Carel pCOWeb firmware A1.5.3 – B1.2.4. The authentication mechanism on affected systems is configured using hard-coded credentials. These cre… CWE-798
 Use of Hard-coded Credentials 		CVE-2019-13553 2024-11-21 13:25 2019-10-26 Show GitHub Exploit DB Packet Storm
224512 7.5 HIGH
Network 		carel pcoweb_firmware Rittal Chiller SK 3232-Series web interface as built upon Carel pCOWeb firmware A1.5.3 – B1.2.4. The authentication mechanism on affected systems does not provide a sufficient level of protection aga… CWE-306
Missing Authentication for Critical Function 		CVE-2019-13549 2024-11-21 13:25 2019-10-26 Show GitHub Exploit DB Packet Storm
224513 6.8 MEDIUM
Physics 		philips intellispace_perinatal In IntelliSpace Perinatal, Versions K and prior, a vulnerability within the IntelliSpace Perinatal application environment could enable an unauthorized attacker with physical access to a locked appli… CWE-668
 Exposure of Resource to Wrong Sphere 		CVE-2019-13546 2024-11-21 13:25 2019-10-26 Show GitHub Exploit DB Packet Storm
224514 5.3 MEDIUM
Network 		honeywell ip-ak2_firmware In IP-AK2 Access Control Panel Version 1.04.07 and prior, the integrated web server of the affected devices could allow remote attackers to obtain web configuration data, which can be accessed withou… CWE-306
Missing Authentication for Critical Function 		CVE-2019-13525 2024-11-21 13:25 2019-10-26 Show GitHub Exploit DB Packet Storm
224515 9.8 CRITICAL
Network 		tp-link m7350_firmware TP-Link M7350 devices through 1.0.16 Build 181220 Rel.1116n allow triggerPort OS Command Injection (issue 5 of 5). CWE-78
OS Command  		CVE-2019-13653 2024-11-21 13:25 2019-10-25 Show GitHub Exploit DB Packet Storm
224516 9.8 CRITICAL
Network 		tp-link m7350_firmware TP-Link M7350 devices through 1.0.16 Build 181220 Rel.1116n allow serviceName OS Command Injection (issue 4 of 5). CWE-78
OS Command  		CVE-2019-13652 2024-11-21 13:25 2019-10-25 Show GitHub Exploit DB Packet Storm
224517 9.8 CRITICAL
Network 		tp-link m7350_firmware TP-Link M7350 devices through 1.0.16 Build 181220 Rel.1116n allow portMappingProtocol OS Command Injection (issue 3 of 5). CWE-78
OS Command  		CVE-2019-13651 2024-11-21 13:25 2019-10-25 Show GitHub Exploit DB Packet Storm
224518 9.8 CRITICAL
Network 		tp-link m7350_firmware TP-Link M7350 devices through 1.0.16 Build 181220 Rel.1116n allow internalPort OS Command Injection (issue 2 of 5). CWE-78
OS Command  		CVE-2019-13650 2024-11-21 13:25 2019-10-25 Show GitHub Exploit DB Packet Storm
224519 9.8 CRITICAL
Network 		tp-link m7350_firmware TP-Link M7350 devices through 1.0.16 Build 181220 Rel.1116n allow externalPort OS Command Injection (issue 1 of 5). CWE-78
OS Command  		CVE-2019-13649 2024-11-21 13:25 2019-10-25 Show GitHub Exploit DB Packet Storm
224520 7.8 HIGH
Local 		hornerautomation cscape In Horner Automation Cscape 9.90 and prior, improper validation of data may cause the system to write outside the intended buffer area, which may allow arbitrary code execution. CWE-787
 Out-of-bounds Write 		CVE-2019-13545 2024-11-21 13:25 2019-10-19 Show GitHub Exploit DB Packet Storm