Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 16, 2026, 6 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
228491 7.5 危険 siteadmin - SiteAdmin の line2.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2008-3414 2012-12-20 18:52 2008-07-31 Show GitHub Exploit DB Packet Storm
228492 5 警告 phplinkat - phpLinkat における認証を回避される脆弱性 CWE-287
不適切な認証
CVE-2008-3407 2012-12-20 18:52 2008-07-31 Show GitHub Exploit DB Packet Storm
228493 7.5 危険 phplinkat - TribunaLibre の ftag.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2008-3406 2012-12-20 18:52 2008-07-31 Show GitHub Exploit DB Packet Storm
228494 4.3 警告 xrms - XRMS CRM における設定情報を取得される脆弱性 CWE-200
情報漏えい
CVE-2008-3400 2012-12-20 18:52 2008-07-31 Show GitHub Exploit DB Packet Storm
228495 6.8 警告 xrms - XRMS CRM の activities/workflow-activities.php における PHP リモートファイルインクルージョンの脆弱性 CWE-94
コード・インジェクション
CVE-2008-3399 2012-12-20 18:52 2008-07-31 Show GitHub Exploit DB Packet Storm
228496 2.6 注意 xrms - XRMS CRM におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2008-3398 2012-12-20 18:52 2008-07-31 Show GitHub Exploit DB Packet Storm
228497 4.3 警告 runesoft - Runesoft Cerberus CMS におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2008-3397 2012-12-20 18:52 2008-07-31 Show GitHub Exploit DB Packet Storm
228498 5.8 警告 webwizguide - Web Wiz Forum におけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反
CVE-2008-3392 2012-12-20 18:52 2008-07-31 Show GitHub Exploit DB Packet Storm
228499 4.3 警告 webwizguide - Web Wiz Forum におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2008-3391 2012-12-20 18:52 2008-07-31 Show GitHub Exploit DB Packet Storm
228500 7.5 危険 phpfootball - PHPFootball の show.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2008-3387 2012-12-20 18:52 2008-07-30 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 16, 2026, 4 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
224951 5.5 MEDIUM
Local
lavamobiles flair_z1_firmware The Lava Flair Z1 Android device with a build fingerprint of LAVA/Z1/Z1:8.1.0/O11019/1536680131:user/release-keys contains a pre-installed app with a package name of com.mediatek.wfo.impl app (versio… NVD-CWE-noinfo
CVE-2019-15356 2024-11-21 13:28 2019-11-15 Show GitHub Exploit DB Packet Storm
224952 5.5 MEDIUM
Local
tecno-mobile camon_iclick_firmware The Tecno Camon iClick Android device with a build fingerprint of TECNO/H633/TECNO-IN6:8.1.0/O11019/A-180409V96:user/release-keys contains a pre-installed app with a package name of com.mediatek.wfo.… NVD-CWE-noinfo
CVE-2019-15355 2024-11-21 13:28 2019-11-15 Show GitHub Exploit DB Packet Storm
224953 5.5 MEDIUM
Local
ulefone armor_5_firmware The Ulefone Armor 5 Android device with a build fingerprint of Ulefone/Ulefone_Armor_5/Ulefone_Armor_5:8.1.0/O11019/1528806701:user/release-keys contains a pre-installed app with a package name of co… NVD-CWE-noinfo
CVE-2019-15354 2024-11-21 13:28 2019-11-15 Show GitHub Exploit DB Packet Storm
224954 5.5 MEDIUM
Local
coolpad n3c_firmware The Coolpad N3C Android device with a build fingerprint of Coolpad/N3C/N3C:8.1.0/O11019/1538236809:user/release-keys contains a pre-installed app with a package name of com.mediatek.wfo.impl app (ver… NVD-CWE-noinfo
CVE-2019-15353 2024-11-21 13:28 2019-11-15 Show GitHub Exploit DB Packet Storm
224955 5.5 MEDIUM
Local
coolpad mega_5_firmware The Coolpad 1851 Android device with a build fingerprint of Coolpad/android/android:8.1.0/O11019/1534834761:userdebug/release-keys contains a pre-installed app with a package name of com.mediatek.wfo… NVD-CWE-noinfo
CVE-2019-15352 2024-11-21 13:28 2019-11-15 Show GitHub Exploit DB Packet Storm
224956 7.8 HIGH
Local
tecno-mobile tecno\/h622\/tecno-id5b\ The Tecno Camon Android device with a build fingerprint of TECNO/H622/TECNO-ID5b:8.1.0/O11019/G-180829V31:user/release-keys contains a pre-installed platform app with a package name of com.lovelyfont… CWE-78
OS Command 
CVE-2019-15351 2024-11-21 13:28 2019-11-15 Show GitHub Exploit DB Packet Storm
224957 7.8 HIGH
Local
tecno-mobile tecno\/h622\/tecno-id5b\ The Tecno Camon Android device with a build fingerprint of TECNO/H622/TECNO-ID5b:8.1.0/O11019/G-180829V31:user/release-keys contains a pre-installed platform app with a package name of com.lovelyfont… CWE-668
 Exposure of Resource to Wrong Sphere
CVE-2019-15350 2024-11-21 13:28 2019-11-15 Show GitHub Exploit DB Packet Storm
224958 7.8 HIGH
Local
tecno-mobile tecno\/h612\/tecno-id5a\ The Tecno Camon Android device with a build fingerprint of TECNO/H612/TECNO-ID5a:8.1.0/O11019/F-180828V106:user/release-keys contains a pre-installed platform app with a package name of com.lovelyfon… CWE-668
 Exposure of Resource to Wrong Sphere
CVE-2019-15349 2024-11-21 13:28 2019-11-15 Show GitHub Exploit DB Packet Storm
224959 3.3 LOW
Local
mi redmi_6_firmware The Xiaomi Redmi 6 Pro Android device with a build fingerprint of xiaomi/sakura_india/sakura_india:8.1.0/OPM1.171019.019/V9.6.4.0.ODMMIFD:user/release-keys contains a pre-installed app with a package… CWE-732
 Incorrect Permission Assignment for Critical Resource
CVE-2019-15340 2024-11-21 13:28 2019-11-15 Show GitHub Exploit DB Packet Storm
224960 3.3 LOW
Local
lavamobiles z60s_firmware The Lava Z60s Android device with a build fingerprint of LAVA/Z60s/Z60s:8.1.0/O11019/1530331229:user/release-keys contains a pre-installed app with a package name of com.android.lava.powersave app (v… CWE-732
 Incorrect Permission Assignment for Critical Resource
CVE-2019-15339 2024-11-21 13:28 2019-11-15 Show GitHub Exploit DB Packet Storm