Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 11, 2026, 6:01 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
228171	7.5	危険	phpforge	-	PHP Forge の admin/news.php における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2008-2088	2012-12-20 18:52	2008-05-6	Show	GitHub Exploit DB Packet Storm

228172	6.8	警告	softbiz	-	Softbiz Web Host Directory Script の search_result.php における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2008-2087	2012-12-20 18:52	2008-05-6	Show	GitHub Exploit DB Packet Storm

228173	6.8	警告	prozilla	-	Prozilla Hosting Index の directory.php における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2008-2083	2012-12-20 18:52	2008-05-5	Show	GitHub Exploit DB Packet Storm

228174	4.3	警告	siteman	-	Siteman の index.php におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2008-2082	2012-12-20 18:52	2008-05-5	Show	GitHub Exploit DB Packet Storm

228175	9	危険	siteman	-	Siteman の index.php におけるディレクトリトラバーサルの脆弱性	CWE-22 パス・トラバーサル	CVE-2008-2081	2012-12-20 18:52	2008-05-5	Show	GitHub Exploit DB Packet Storm

228176	7.5	危険	robocode	-	Robocode における "Robocode ゲーム内部にアクセスされる" 脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2008-2078	2012-12-20 18:52	2008-05-5	Show	GitHub Exploit DB Packet Storm

228177	10	危険	plain black	-	Plain Black WebGUI における脆弱性	CWE-noinfo 情報不足	CVE-2008-2077	2012-12-20 18:52	2008-05-5	Show	GitHub Exploit DB Packet Storm

228178	7.5	危険	successkid	-	Harris Yusuf Arifin Harris Wap Chat における PHP リモートファイルインクルージョンの脆弱性	CWE-94 コード・インジェクション	CVE-2008-2074	2012-12-20 18:52	2008-05-5	Show	GitHub Exploit DB Packet Storm

228179	7.5	危険	virtual design studios	-	Virtual Design Studio vlbook の include/global.inc.php におけるディレクトリトラバーサルの脆弱性	CWE-22 パス・トラバーサル	CVE-2008-2073	2012-12-20 18:52	2008-05-5	Show	GitHub Exploit DB Packet Storm

228180	4.3	警告	virtual design studios	-	Virtual Design Studio vlbook の index.php におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2008-2072	2012-12-20 18:52	2008-05-5	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 12, 2026, 5:06 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
224711	7.5	HIGH Network	foxitsoftware	phantompdf	An issue was discovered in Foxit PhantomPDF before 8.3.11. The application could crash when calling the clone function due to an endless loop resulting from confusing relationships between a child an…	CWE-835 Loop with Unreachable Exit Condition ('Infinite Loop')	CVE-2019-14207	2024-11-21 13:26	2019-07-22	Show	GitHub Exploit DB Packet Storm

224712	7.5	HIGH Network	nevma	adaptive_images	An Arbitrary File Deletion vulnerability in the Nevma Adaptive Images plugin before 0.6.67 for WordPress allows remote attackers to delete arbitrary files via the $REQUEST['adaptive-images-settings']…	CWE-22 Path Traversal	CVE-2019-14206	2024-11-21 13:26	2019-07-22	Show	GitHub Exploit DB Packet Storm

224713	7.5	HIGH Network	nevma	adaptive_images	A Local File Inclusion vulnerability in the Nevma Adaptive Images plugin before 0.6.67 for WordPress allows remote attackers to retrieve arbitrary files via the $REQUEST['adaptive-images-settings']['…	CWE-22 Path Traversal	CVE-2019-14205	2024-11-21 13:26	2019-07-22	Show	GitHub Exploit DB Packet Storm

224714	9.6	CRITICAL Network	google	chrome	Inappropriate implementation in OS in Google Chrome on ChromeOS prior to 75.0.3770.80 allowed a remote attacker to perform OS-level privilege escalation via a malicious file. (Chromium security sever…	CWE-269 Improper Privilege Management	CVE-2019-13690	2024-11-21 13:25	2023-08-26	Show	GitHub Exploit DB Packet Storm

224715	7.8	HIGH Local	google	chrome	Inappropriate implementation in OS in Google Chrome on ChromeOS prior to 75.0.3770.80 allowed a remote attacker to perform arbitrary read/write via a malicious file. (Chromium security severity: Crit…	CWE-59 Link Following	CVE-2019-13689	2024-11-21 13:25	2023-08-26	Show	GitHub Exploit DB Packet Storm

224716	7.4	HIGH Network	google	chrome	Use after free in FileAPI in Google Chrome prior to 72.0.3626.81 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. (Chrome security severity: High)	CWE-416 Use After Free	CVE-2019-13768	2024-11-21 13:25	2023-01-3	Show	GitHub Exploit DB Packet Storm

224717	6.5	MEDIUM Adjacent	sierrawireless	mgos	Sierra Wireless MGOS before 3.15.2 and 4.x before 4.3 allows attackers to read log files via a Direct Request (aka Forced Browsing).	NVD-CWE-noinfo	CVE-2019-13988	2024-11-21 13:25	2022-12-27	Show	GitHub Exploit DB Packet Storm

224718	6.1	MEDIUM Network	blinger	blinger	Blinger.io v.1.0.2519 is vulnerable to Blind/Persistent XSS. An attacker can send arbitrary JavaScript code via a built-in communication channel, such as Telegram, WhatsApp, Viber, Skype, Facebook, V…	CWE-79 Cross-site Scripting	CVE-2019-13633	2024-11-21 13:25	2020-10-20	Show	GitHub Exploit DB Packet Storm

224719	7.8	HIGH Local	qualcomm	kamorta_firmware mdm9150_firmware mdm9205_firmware mdm9607_firmware mdm9650_firmware nicobar_firmware qcs404_firmware qcs405_firmware qcs605_firmware qcs610_firmware ren…	u'Possible integer overflow in API due to lack of check on large oid range count in cert extension field' in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, S…	CWE-190 Integer Overflow or Wraparound	CVE-2019-14056	2024-11-21 13:25	2020-09-8	Show	GitHub Exploit DB Packet Storm

224720	9.8	CRITICAL Network	qualcomm	apq8009_firmware apq8017_firmware apq8053_firmware apq8096au_firmware apq8098_firmware mdm9150_firmware mdm9206_firmware mdm9607_firmware mdm9615_firmware mdm9625_firmware<…	u'Accessing an uninitialized data structure could result in partially copying of contents and thus incorrect processing' in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon In…	CWE-908 Use of Uninitialized Resource	CVE-2019-14052	2024-11-21 13:25	2020-09-8	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed