Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 21, 2026, 6:01 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
228501 7.5 危険 xigla - Xigla Software Absolute Live Support .NET における認証を回避される脆弱性 CWE-287
不適切な認証 		CVE-2008-6864 2012-12-20 19:10 2009-07-14 Show GitHub Exploit DB Packet Storm
228502 7.5 危険 xigla - Xigla Software Absolute Form Processor .NET における認証を回避される脆弱性 CWE-287
不適切な認証 		CVE-2008-6863 2012-12-20 19:10 2009-07-14 Show GitHub Exploit DB Packet Storm
228503 7.5 危険 xigla - Absolute Content Rotator における認証を回避される脆弱性 CWE-287
不適切な認証 		CVE-2008-6862 2012-12-20 19:10 2009-07-14 Show GitHub Exploit DB Packet Storm
228504 7.5 危険 xigla - Xigla Software Absolute Newsletter における認証を回避される脆弱性 CWE-287
不適切な認証 		CVE-2008-6861 2012-12-20 19:10 2009-07-14 Show GitHub Exploit DB Packet Storm
228505 7.5 危険 xigla - Xigla Software Absolute Poll Manager XE における認証を回避される脆弱性 CWE-287
不適切な認証 		CVE-2008-6860 2012-12-20 19:10 2009-07-14 Show GitHub Exploit DB Packet Storm
228506 7.5 危険 xigla - Xigla Software Absolute Control Panel XE における認証を回避される脆弱性 CWE-287
不適切な認証 		CVE-2008-6859 2012-12-20 19:10 2009-07-14 Show GitHub Exploit DB Packet Storm
228507 7.5 危険 xigla - Absolute Banner Manager .NET における認証を回避される脆弱性 CWE-287
不適切な認証 		CVE-2008-6858 2012-12-20 19:10 2009-07-14 Show GitHub Exploit DB Packet Storm
228508 7.5 危険 xigla - Absolute Podcast .NET における認証を回避される脆弱性 CWE-287
不適切な認証 		CVE-2008-6857 2012-12-20 19:10 2009-07-14 Show GitHub Exploit DB Packet Storm
228509 7.5 危険 xigla - Xigla Software Absolute News Manager.NET における認証を回避される脆弱性 CWE-287
不適切な認証 		CVE-2008-6856 2012-12-20 19:10 2009-07-14 Show GitHub Exploit DB Packet Storm
228510 7.5 危険 xigla - Xigla Software Absolute News Feed における認証を回避される脆弱性 CWE-287
不適切な認証 		CVE-2008-6855 2012-12-20 19:10 2009-07-14 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 22, 2026, 4:08 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
225261 4.8 MEDIUM
Network 		eu_cookie_law_project eu_cookie_law The eu-cookie-law plugin through 3.0.6 for WordPress (aka EU Cookie Law (GDPR)) is susceptible to Stored XSS due to improper encoding of several configuration options in the admin area and the displa… CWE-79
Cross-site Scripting 		CVE-2019-16522 2024-11-21 13:30 2019-10-17 Show GitHub Exploit DB Packet Storm
225262 6.1 MEDIUM
Network 		managewp broken_link_checker The broken-link-checker plugin through 1.11.8 for WordPress (aka Broken Link Checker) is susceptible to Reflected XSS due to improper encoding and insertion of an HTTP GET parameter into HTML. The fi… CWE-79
Cross-site Scripting 		CVE-2019-16521 2024-11-21 13:30 2019-10-17 Show GitHub Exploit DB Packet Storm
225263 5.4 MEDIUM
Network 		semperplugins all_in_one_seo_pack The all-in-one-seo-pack plugin before 3.2.7 for WordPress (aka All in One SEO Pack) is susceptible to Stored XSS due to improper encoding of the SEO-specific description for posts provided by the plu… CWE-79
Cross-site Scripting 		CVE-2019-16520 2024-11-21 13:30 2019-10-16 Show GitHub Exploit DB Packet Storm
225264 5.4 MEDIUM
Network 		nchsoftware express_invoice In NCH Express Invoice v7.12, persistent cross site scripting (XSS) exists via the Invoices/Items/Customers/Quotes input field. An authenticated unprivileged user can add/modify the Invoices/Items/Cu… CWE-79
Cross-site Scripting 		CVE-2019-16282 2024-11-21 13:30 2019-10-15 Show GitHub Exploit DB Packet Storm
225265 7.5 HIGH
Network 		nazgul nostromo_nhttpd A memory error in the function SSL_accept in nostromo nhttpd through 1.9.6 allows an attacker to trigger a denial of service via a crafted HTTP request. CWE-22
Path Traversal 		CVE-2019-16279 2024-11-21 13:30 2019-10-15 Show GitHub Exploit DB Packet Storm
225266 9.8 CRITICAL
Network 		nazgul nostromo_nhttpd Directory Traversal in the function http_verify in nostromo nhttpd through 1.9.6 allows an attacker to achieve remote code execution via a crafted HTTP request. CWE-22
Path Traversal 		CVE-2019-16278 2024-11-21 13:30 2019-10-15 Show GitHub Exploit DB Packet Storm
225267 7.8 HIGH
Local 		eset cyber_security
endpoint_antivirus
endpoint_security 		ESET Cyber Security 6.7.900.0 for macOS allows a local attacker to execute unauthorized commands as root by abusing an undocumented feature in scheduled tasks. CWE-269
 Improper Privilege Management 		CVE-2019-16519 2024-11-21 13:30 2019-10-15 Show GitHub Exploit DB Packet Storm
225268 6.1 MEDIUM
Network 		scadabr scadabr A cross-site scripting (XSS) vulnerability in the login form (/ScadaBR/login.htm) in ScadaBR 1.0CE allows a remote attacker to inject arbitrary web script or HTML via the username or password paramet… CWE-79
Cross-site Scripting 		CVE-2019-16344 2024-11-21 13:30 2019-10-15 Show GitHub Exploit DB Packet Storm
225269 5.4 MEDIUM
Network 		hrworks hrworks HRworks FLOW 3.36.9 allows XSS via the purpose of a travel-expense report. CWE-79
Cross-site Scripting 		CVE-2019-16417 2024-11-21 13:30 2019-10-8 Show GitHub Exploit DB Packet Storm
225270 5.4 MEDIUM
Network 		hrworks hrworks HRworks 3.36.9 allows XSS via the purpose of a travel-expense report. CWE-79
Cross-site Scripting 		CVE-2019-16416 2024-11-21 13:30 2019-10-8 Show GitHub Exploit DB Packet Storm