Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 11, 2026, 6:01 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
228311 7.6 危険 XnSoft - XnView におけるバッファオーバーフローの脆弱性 CWE-119
バッファエラー
CVE-2008-1461 2012-12-20 18:52 2008-03-24 Show GitHub Exploit DB Packet Storm
228312 2.1 注意 raidsonic technology - RaidSonic NAS-4220-B における暗号鍵を取得される脆弱性 CWE-310
暗号の問題
CVE-2008-1431 2012-12-20 18:52 2008-03-20 Show GitHub Exploit DB Packet Storm
228313 7.8 危険 silcnet - SILC Server におけるサービス運用妨害 (DoS) の脆弱性 CWE-DesignError
CVE-2008-1429 2012-12-20 18:52 2008-03-20 Show GitHub Exploit DB Packet Storm
228314 6.8 警告 phpauction - PHPauction GPL における PHP リモートファイルインクルージョンの脆弱性 CWE-94
コード・インジェクション
CVE-2008-1416 2012-12-20 18:52 2008-03-20 Show GitHub Exploit DB Packet Storm
228315 5 警告 riceball - MTS の index.php におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル
CVE-2008-1415 2012-12-20 18:52 2008-03-20 Show GitHub Exploit DB Packet Storm
228316 4.3 警告 riceball - MTS におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2008-1414 2012-12-20 18:52 2008-03-20 Show GitHub Exploit DB Packet Storm
228317 4.3 警告 snews - SNewsCMS Rus の search.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2008-1413 2012-12-20 18:52 2008-03-20 Show GitHub Exploit DB Packet Storm
228318 7.5 危険 phpbp - phpBP の includes/functions/banners-external.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2008-1408 2012-12-20 18:52 2008-03-20 Show GitHub Exploit DB Packet Storm
228319 4.3 警告 Plone Foundation - Plone CMS におけるアカウントへの永久アクセス権を取得される脆弱性 CWE-255
証明書・パスワード管理
CVE-2008-1396 2012-12-20 18:52 2008-03-19 Show GitHub Exploit DB Packet Storm
228320 7.5 危険 Plone Foundation - Plone CMS におけるログアウトしたセッションを再利用される脆弱性 CWE-287
不適切な認証
CVE-2008-1395 2012-12-20 18:52 2008-03-19 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 12, 2026, 5:06 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
221851 5.3 MEDIUM
Network
ready wireless_emergency_alerts The Wireless Emergency Alerts (WEA) protocol allows remote attackers to spoof a Presidential Alert because cryptographic authentication is not used, as demonstrated by MessageIdentifier 4370 in LTE S… CWE-290
 Authentication Bypass by Spoofing
CVE-2019-18659 2024-11-21 13:33 2019-11-2 Show GitHub Exploit DB Packet Storm
221852 6.5 MEDIUM
Network
wpwham currency_switcher_for_woocommerce An issue was discovered in the Currency Switcher addon before 2.11.2 for WooCommerce if a user provides a currency that was not added by the administrator. In this case, even though the currency does… CWE-755
 Improper Handling of Exceptional Conditions
CVE-2019-18668 2024-11-21 13:33 2019-11-3 Show GitHub Exploit DB Packet Storm
221853 9.8 CRITICAL
Network
youphptube youphptube An issue was discovered in YouPHPTube through 7.7. User input passed through the live_stream_code POST parameter to /plugin/LiveChat/getChat.json.php is not properly sanitized (in getFromChat in plug… CWE-89
SQL Injection
CVE-2019-18662 2024-11-21 13:33 2019-11-3 Show GitHub Exploit DB Packet Storm
221854 6.1 MEDIUM
Network
avg anti-virus A Cross Site Scripting (XSS) issue exists in AVG AntiVirus (Internet Security Edition) 19.3.3084 build 19.3.4241.440 in the Network Notification Popup, allowing an attacker to execute JavaScript code… CWE-79
Cross-site Scripting
CVE-2019-18654 2024-11-21 13:33 2019-11-2 Show GitHub Exploit DB Packet Storm
221855 6.1 MEDIUM
Network
avast antivirus A Cross Site Scripting (XSS) issue exists in Avast AntiVirus (Free, Internet Security, and Premiere Edition) 19.3.2369 build 19.3.4241.440 in the Network Notification Popup, allowing an attacker to e… CWE-79
Cross-site Scripting
CVE-2019-18653 2024-11-21 13:33 2019-11-2 Show GitHub Exploit DB Packet Storm
221856 5.4 MEDIUM
Network
jitbit .net_forum A cross-site scripting (XSS) vulnerability in Jitbit .NET Forum (aka ASP.NET forum) 8.3.8 allows remote attackers to inject arbitrary web script or HTML via the gravatar URL parameter. CWE-79
Cross-site Scripting
CVE-2019-18636 2024-11-21 13:33 2019-11-1 Show GitHub Exploit DB Packet Storm
221857 7.2 HIGH
Network
technicolor td5130v2_firmware An issue was discovered in certain Oi third-party firmware that may be installed on Technicolor TD5130v2 devices. A Command Injection in the Ping module in the Web Interface in OI_Fw_V20 allows remot… CWE-78
OS Command 
CVE-2019-18396 2024-11-21 13:33 2019-11-1 Show GitHub Exploit DB Packet Storm
221858 5.3 MEDIUM
Network
yandex clickhouse ClickHouse before 19.13.5.44 allows HTTP header injection via the url table function. CWE-74
Injection
CVE-2019-18657 2024-11-21 13:33 2019-11-1 Show GitHub Exploit DB Packet Storm
221859 6.1 MEDIUM
Network
pimcore pimcore Pimcore 6.2.3 has XSS in the translations grid because bundles/AdminBundle/Resources/public/js/pimcore/settings/translations.js mishandles certain HTML elements. CWE-79
Cross-site Scripting
CVE-2019-18656 2024-11-21 13:33 2019-11-1 Show GitHub Exploit DB Packet Storm
221860 9.8 CRITICAL
Network
ipswitch moveit_transfer In Progress MOVEit Transfer 11.1 before 11.1.3, a vulnerability has been found that could allow an attacker to sign in without full credentials via the SSH (SFTP) interface. The vulnerability affects… CWE-306
Missing Authentication for Critical Function
CVE-2019-18465 2024-11-21 13:33 2019-11-1 Show GitHub Exploit DB Packet Storm