Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 21, 2026, 6:01 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
228651 7.5 危険 phpkf - phpKF の forum_duzen.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-6443 2012-12-20 19:10 2009-03-9 Show GitHub Exploit DB Packet Storm
228652 5.8 警告 sina - Sina Inc. DLoader Class ActiveX コントロールにおける任意のファイルを上書きされる脆弱性 CWE-Other
その他 		CVE-2008-6442 2012-12-20 19:10 2009-03-9 Show GitHub Exploit DB Packet Storm
228653 4.3 警告 phpsqlitecms - phpSQLiteCMS におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2008-6435 2012-12-20 19:10 2009-03-6 Show GitHub Exploit DB Packet Storm
228654 7.5 危険 psychostats - PsychoStats における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-6422 2012-12-20 19:10 2009-03-6 Show GitHub Exploit DB Packet Storm
228655 7.5 危険 socialsitegenerator - Social Site Generator の social_game_play.php における PHP リモートファイルインクルージョンの脆弱性 CWE-94
コード・インジェクション 		CVE-2008-6421 2012-12-20 19:10 2009-03-6 Show GitHub Exploit DB Packet Storm
228656 5 警告 socialsitegenerator - Social Site Generator における任意のファイルを読まれる脆弱性 CWE-200
情報漏えい 		CVE-2008-6420 2012-12-20 19:10 2009-03-6 Show GitHub Exploit DB Packet Storm
228657 7.5 危険 socialsitegenerator - Social Site Generator における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-6419 2012-12-20 19:10 2009-03-6 Show GitHub Exploit DB Packet Storm
228658 7.5 危険 torrenttrader - TorrentTrader の scrape.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-6418 2012-12-20 19:10 2009-03-6 Show GitHub Exploit DB Packet Storm
228659 10 危険 Youngzsoft - YoungZSoft CCProxy におけるバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2008-6415 2012-12-20 19:10 2009-03-6 Show GitHub Exploit DB Packet Storm
228660 7.5 危険 vignette - Vignette Content Management における管理者権限を取得される脆弱性 CWE-noinfo
情報不足 		CVE-2008-6412 2012-12-20 19:10 2009-03-6 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 21, 2026, 4:10 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
225271 6.1 MEDIUM
Network 		10web photo_gallery Cross site scripting (XSS) in the photo-gallery (10Web Photo Gallery) plugin before 1.5.35 for WordPress exists via admin/models/Galleries.php. CWE-79
Cross-site Scripting 		CVE-2019-16117 2024-11-21 13:30 2019-09-9 Show GitHub Exploit DB Packet Storm
225272 7.8 HIGH
Local 		glyphandcog xpdfreader In Xpdf 4.01.01, a stack-based buffer under-read could be triggered in IdentityFunction::transform in Function.cc, used by GfxAxialShading::getColor. It can, for example, be triggered by sending a cr… CWE-125
Out-of-bounds Read 		CVE-2019-16115 2024-11-21 13:30 2019-09-9 Show GitHub Exploit DB Packet Storm
225273 8.8 HIGH
Network 		bludit bludit Bludit 3.9.2 allows remote code execution via bl-kernel/ajax/upload-images.php because PHP code can be entered with a .jpg file name, and then this PHP code can write other PHP code to a ../ pathname. CWE-22
Path Traversal 		CVE-2019-16113 2024-11-21 13:30 2019-09-9 Show GitHub Exploit DB Packet Storm
225274 5.3 MEDIUM
Network 		plataformatec devise An issue was discovered in Plataformatec Devise before 4.7.1. It confirms accounts upon receiving a request with a blank confirmation_token, if a database record has a blank value in the confirmation… NVD-CWE-noinfo
CVE-2019-16109 2024-11-21 13:30 2019-09-9 Show GitHub Exploit DB Packet Storm
225275 4.9 MEDIUM
Network 		silver-peak unity_edgeconnect_sd-wan_firmware Silver Peak EdgeConnect SD-WAN before 8.1.7.x allows ..%2f directory traversal via a rest/json/configdb/download/ URI. CWE-22
Path Traversal 		CVE-2019-16105 2024-11-21 13:30 2019-09-9 Show GitHub Exploit DB Packet Storm
225276 6.1 MEDIUM
Network 		silver-peak unity_edgeconnect_sd-wan_firmware Silver Peak EdgeConnect SD-WAN before 8.1.7.x has reflected XSS via the rest/json/configdb/download/ PATH_INFO. CWE-79
Cross-site Scripting 		CVE-2019-16104 2024-11-21 13:30 2019-09-9 Show GitHub Exploit DB Packet Storm
225277 7.2 HIGH
Network 		silver-peak unity_edgeconnect_sd-wan_firmware Silver Peak EdgeConnect SD-WAN before 8.1.7.x allows privilege escalation (by administrators) from the menu to a root Bash OS shell via the spsshell feature. NVD-CWE-noinfo
CVE-2019-16103 2024-11-21 13:30 2019-09-9 Show GitHub Exploit DB Packet Storm
225278 9.8 CRITICAL
Network 		silver-peak unity_edgeconnect_sd-wan_firmware Silver Peak EdgeConnect SD-WAN before 8.1.7.x has an SNMP service with a public value for rocommunity and trapcommunity. CWE-1188
 Insecure Default Initialization of Resource 		CVE-2019-16102 2024-11-21 13:30 2019-09-9 Show GitHub Exploit DB Packet Storm
225279 5.3 MEDIUM
Network 		silver-peak unity_edgeconnect_sd-wan_firmware Silver Peak EdgeConnect SD-WAN before 8.1.7.x allows remote attackers to obtain potentially sensitive stack traces by sending incorrect JSON data to the REST API, such as the rest/json/banners URI. CWE-209
Information Exposure Through an Error Message 		CVE-2019-16101 2024-11-21 13:30 2019-09-9 Show GitHub Exploit DB Packet Storm
225280 7.5 HIGH
Network 		silver-peak unity_edgeconnect_sd-wan_firmware Silver Peak EdgeConnect SD-WAN before 8.1.7.x allows remote attackers to trigger a web-interface outage via slow client-side HTTP traffic from a single source. NVD-CWE-noinfo
CVE-2019-16100 2024-11-21 13:30 2019-09-9 Show GitHub Exploit DB Packet Storm