Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 16, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
228481 7.5 危険 winzip - WinZip における任意のコードを実行される脆弱性 CWE-94
コード・インジェクション 		CVE-2008-3442 2012-12-20 18:52 2008-08-1 Show GitHub Exploit DB Packet Storm
228482 7.5 危険 サン・マイクロシステムズ - Sun Java における任意のコードを実行される脆弱性 CWE-94
コード・インジェクション 		CVE-2008-3440 2012-12-20 18:52 2008-08-1 Show GitHub Exploit DB Packet Storm
228483 7.5 危険 speedbit - SpeedBit Video Acceleration における任意のコードを実行される脆弱性 CWE-94
コード・インジェクション 		CVE-2008-3439 2012-12-20 18:52 2008-08-1 Show GitHub Exploit DB Packet Storm
228484 7.5 危険 speedbit - SpeedBit DAP における任意のコードを実行される脆弱性 CWE-94
コード・インジェクション 		CVE-2008-3433 2012-12-20 18:52 2008-08-1 Show GitHub Exploit DB Packet Storm
228485 5 警告 Vtiger - Vtiger CRM におけるメールマージテンプレートを読まれる脆弱性 CWE-200
情報漏えい 		CVE-2008-3458 2012-12-20 18:52 2006-09-9 Show GitHub Exploit DB Packet Storm
228486 7.2 危険 サン・マイクロシステムズ - IOCTL 用の METHOD_NEITHER 通信メソッドで使用されている Sun xVM VirtualBox における権限を取得される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2008-3431 2012-12-20 18:52 2008-08-5 Show GitHub Exploit DB Packet Storm
228487 6.5 警告 PhpFreeChat - phpFreeChat におけるセッションをハイジャックされる脆弱性 CWE-287
不適切な認証 		CVE-2008-3428 2012-12-20 18:52 2008-07-31 Show GitHub Exploit DB Packet Storm
228488 6.5 警告 サン・マイクロシステムズ - Sun N1 SPS の Sun Java System Web Server プラグインにおける Web サーバへの管理アクセス権限を取得される脆弱性 CWE-287
不適切な認証 		CVE-2008-3425 2012-12-20 18:52 2008-07-30 Show GitHub Exploit DB Packet Storm
228489 7.5 危険 willo - Mobius for Mimsy XG における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-3420 2012-12-20 18:52 2008-07-31 Show GitHub Exploit DB Packet Storm
228490 7.5 危険 willo - TriO の browse.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-3418 2012-12-20 18:52 2008-07-31 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 16, 2026, 4 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
215231 7.8 HIGH
Local 		trendmicro officescan A DLL side-loading vulnerability in Trend Micro OfficeScan 11.0 SP1 and XG could allow an authenticated attacker to gain code execution and terminate the product's process - disabling endpoint protec… CWE-426
 Untrusted Search Path 		CVE-2019-9492 2024-11-21 13:51 2019-07-26 Show GitHub Exploit DB Packet Storm
215232 8.8 HIGH
Adjacent 		audiocodes median_500l-msbr_firmware
median_500-msbr_firmware
median_m800b-msbr_firmware
median_800c-msbr_firmware 		An issue was discovered on AudioCodes Mediant 500L-MSBR, 500-MBSR, M800B-MSBR and 800C-MSBR devices with firmware versions F7.20A to F7.20A.251. An internal interface exposed to the link-local addres… CWE-798
 Use of Hard-coded Credentials 		CVE-2019-9229 2024-11-21 13:51 2019-07-20 Show GitHub Exploit DB Packet Storm
215233 7.5 HIGH
Network 		audiocodes median_500l-msbr_firmware
median_500-msbr_firmware
median_m800b-msbr_firmware
median_800c-msbr_firmware 		An issue was discovered on AudioCodes Mediant 500L-MSBR, 500-MBSR, M800B-MSBR and 800C-MSBR devices with firmware versions F7.20A at least to 7.20A.252.062. The (1) management SSH and (2) management … NVD-CWE-noinfo
CVE-2019-9228 2024-11-21 13:51 2019-07-20 Show GitHub Exploit DB Packet Storm
215234 8.8 HIGH
Network 		audiocodes mediant_500l-msbr_firmware
mediant_500-mbsr_firmware
mediant_m800b-msbr_firmware
mediant_800c-msbr_firmware 		An issue was discovered on AudioCodes Mediant 500L-MSBR, 500-MBSR, M800B-MSBR and 800C-MSBR devices with firmware versions before 7.20A.202.307. A Cross-Site Request Forgery (CSRF) vulnerability in t… CWE-352
 Origin Validation Error 		CVE-2019-9231 2024-11-21 13:51 2019-07-19 Show GitHub Exploit DB Packet Storm
215235 6.1 MEDIUM
Network 		audiocodes mediant_500l-msbr_firmware
mediant_500-mbsr_firmware
mediant_m800b-msbr_firmware
mediant_800c-msbr_firmware 		An issue was discovered on AudioCodes Mediant 500L-MSBR, 500-MBSR, M800B-MSBR and 800C-MSBR devices with firmware versions F7.20A to F7.20A.253. A cross-site scripting (XSS) vulnerability in the sear… CWE-79
Cross-site Scripting 		CVE-2019-9230 2024-11-21 13:51 2019-07-19 Show GitHub Exploit DB Packet Storm
215236 5.3 MEDIUM
Network 		mailvelope mailvelope Mailvelope prior to 3.3.0 does not require user interaction to import public keys shown on web page. This functionality can be tricked to either hide a key import from the user or obscure which key w… CWE-320
 Key Management Errors 		CVE-2019-9150 2024-11-21 13:51 2019-07-10 Show GitHub Exploit DB Packet Storm
215237 6.5 MEDIUM
Network 		mailvelope mailvelope Mailvelope prior to 3.3.0 allows private key operations without user interaction via its client-API. By modifying an URL parameter in Mailvelope, an attacker is able to sign (and encrypt) arbitrary m… CWE-347
CWE-863
 Improper Verification of Cryptographic Signature
 Incorrect Authorization 		CVE-2019-9149 2024-11-21 13:51 2019-07-10 Show GitHub Exploit DB Packet Storm
215238 4.3 MEDIUM
Network 		mailvelope mailvelope Mailvelope prior to 3.3.0 accepts or operates with invalid PGP public keys: Mailvelope allows importing keys that contain users without a valid self-certification. Keys that are obviously invalid are… CWE-295
Improper Certificate Validation  		CVE-2019-9148 2024-11-21 13:51 2019-07-10 Show GitHub Exploit DB Packet Storm
215239 4.3 MEDIUM
Network 		mailvelope mailvelope Mailvelope prior to 3.1.0 is vulnerable to a clickjacking attack against the settings page. As the settings page is intended to be accessible from web applications, the browser's extension isolation … CWE-1021
 Improper Restriction of Rendered UI Layers or Frames 		CVE-2019-9147 2024-11-21 13:51 2019-07-10 Show GitHub Exploit DB Packet Storm
215240 9.8 CRITICAL
Network 		jetbrains intellij_idea In several JetBrains IntelliJ IDEA versions, a Spring Boot run configuration with the default setting allowed remote attackers to execute code when the configuration is running, because a JMX server … CWE-668
 Exposure of Resource to Wrong Sphere 		CVE-2019-9186 2024-11-21 13:51 2019-07-4 Show GitHub Exploit DB Packet Storm