Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 16, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
228451 7.5 危険 qsoft - Qsoft K-Links における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-3580 2012-12-20 18:52 2008-08-10 Show GitHub Exploit DB Packet Storm
228452 2.6 注意 Pluck CMS - Pluck におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2008-3574 2012-12-20 18:52 2008-08-10 Show GitHub Exploit DB Packet Storm
228453 5 警告 Pligg
PHPNUKE		 - Pligg などの製品の CAPTCHA 実装における CAPTCHA テストを通過される脆弱性 CWE-189
CWE-264
CVE-2008-3573 2012-12-20 18:52 2008-08-10 Show GitHub Exploit DB Packet Storm
228454 4.3 警告 Pligg - Pligg の index.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2008-3572 2012-12-20 18:52 2008-08-10 Show GitHub Exploit DB Packet Storm
228455 7.8 危険 Xerox - Xerox Phaser におけるサービス運用妨害 (DoS) の脆弱性 CWE-20
不適切な入力確認 		CVE-2008-3571 2012-12-20 18:52 2008-08-10 Show GitHub Exploit DB Packet Storm
228456 7.5 危険 unak - UNAK-CMS の fckeditor/editor/filemanager/browser/default/connectors/php/connector.php における絶対パストラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2008-3568 2012-12-20 18:52 2008-08-10 Show GitHub Exploit DB Packet Storm
228457 4.3 警告 ZoneO-soft - ZoneO-soft freeForum におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2008-3566 2012-12-20 18:52 2008-08-10 Show GitHub Exploit DB Packet Storm
228458 7.5 危険 Plogger Project - Plogger における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-3563 2012-12-20 18:52 2008-07-29 Show GitHub Exploit DB Packet Storm
228459 6.8 警告 powergap - Powergap Shopsystem の s03.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-3561 2012-12-20 18:52 2008-08-10 Show GitHub Exploit DB Packet Storm
228460 6.8 警告 wsnlinks - WSN Forum などの index.php におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2008-3555 2012-12-20 18:52 2008-08-8 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 16, 2026, 4 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
215211 7.8 HIGH
Local 		google android In readArgumentList of zygote.java in Android 10, there is a possible command injection due to improper input validation. This could lead to local escalation of privilege with no additional execution… CWE-20
CWE-77
 Improper Input Validation 
Command Injection 		CVE-2019-9254 2024-11-21 13:51 2019-09-6 Show GitHub Exploit DB Packet Storm
215212 9.8 CRITICAL
Network 		deltacontrols entelibus_firmware Buffer Overflow in dactetra in Delta Controls enteliBUS Manager V3.40_B-571848 allows remote unauthenticated users to execute arbitrary code and possibly cause a denial of service via unspecified vec… CWE-787
 Out-of-bounds Write 		CVE-2019-9569 2024-11-21 13:51 2019-08-27 Show GitHub Exploit DB Packet Storm
215213 5.9 MEDIUM
Network 		openpgpjs openpgpjs A cryptographic issue in OpenPGP.js <=4.2.0 allows an attacker who is able provide forged messages and gain feedback about whether decryption of these messages succeeded to conduct an invalid curve a… CWE-327
 Use of a Broken or Risky Cryptographic Algorithm 		CVE-2019-9155 2024-11-21 13:51 2019-08-23 Show GitHub Exploit DB Packet Storm
215214 7.5 HIGH
Network 		openpgpjs openpgpjs Improper Verification of a Cryptographic Signature in OpenPGP.js <=4.1.2 allows an attacker to pass off unsigned data as signed. CWE-347
 Improper Verification of Cryptographic Signature 		CVE-2019-9154 2024-11-21 13:51 2019-08-23 Show GitHub Exploit DB Packet Storm
215215 7.5 HIGH
Network 		openpgpjs openpgpjs Improper Verification of a Cryptographic Signature in OpenPGP.js <=4.1.2 allows an attacker to forge signed messages by replacing its signatures with a "standalone" or "timestamp" signature. CWE-347
 Improper Verification of Cryptographic Signature 		CVE-2019-9153 2024-11-21 13:51 2019-08-23 Show GitHub Exploit DB Packet Storm
215216 9.8 CRITICAL
Network 		eq-3 homematic_ccu2_firmware
homematic_ccu3_firmware 		eQ-3 Homematic CCU2 prior to 2.47.10 and CCU3 prior to 3.47.10 JSON API has Improper Access Control for Interface.***Metadata related operations, resulting in the ability to read, set and deletion of… CWE-306
Missing Authentication for Critical Function 		CVE-2019-9585 2024-11-21 13:51 2019-08-15 Show GitHub Exploit DB Packet Storm
215217 9.8 CRITICAL
Network 		eq-3 homematic_ccu2_firmware
homematic_ccu3_firmware 		eQ-3 Homematic AddOn 'CloudMatic' on CCU2 and CCU3 allows uncontrolled admin access, resulting in the ability to obtain VPN profile details, shutting down the VPN service and to delete the VPN servic… CWE-425
 Direct Request ('Forced Browsing') 		CVE-2019-9584 2024-11-21 13:51 2019-08-15 Show GitHub Exploit DB Packet Storm
215218 8.2 HIGH
Network 		eq-3 homematic_ccu3_firmware
homematic_ccu2_firmware 		eQ-3 Homematic CCU2 and CCU3 obtain session IDs without login. This allows a Denial of Service and is a starting point for other attacks. Affected versions for CCU2: 2.35.16, 2.41.5, 2.41.8, 2.41.9, … CWE-400
 Uncontrolled Resource Consumption 		CVE-2019-9583 2024-11-21 13:51 2019-08-15 Show GitHub Exploit DB Packet Storm
215219 7.5 HIGH
Network 		eq-3 homematic_ccu2_firmware eQ-3 Homematic CCU2 outdated base software packages allows Denial of Service. CCU2 affected versions: 2.35.16, 2.41.5, 2.41.8, 2.41.9, 2.45.6, 2.45.7, 2.47.10, 2.47.12, 2.47.15. NVD-CWE-noinfo
CVE-2019-9582 2024-11-21 13:51 2019-08-15 Show GitHub Exploit DB Packet Storm
215220 8.1 HIGH
Adjacent 		google
apple
canonical
debian
opensuse
redhat
huawei 		android
mac_os_x
watchos
iphone_os
tvos
ubuntu_linux
debian_linux
leap
enterprise_linux_server
enterprise_linux_for_real_time
enterprise_linux_for_real_time_for_nfv
e… 		The Bluetooth BR/EDR specification up to and including version 5.1 permits sufficiently low encryption key length and does not prevent an attacker from influencing the key length negotiation. This al… CWE-327
 Use of a Broken or Risky Cryptographic Algorithm 		CVE-2019-9506 2024-11-21 13:51 2019-08-15 Show GitHub Exploit DB Packet Storm