Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 19, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
228691 7.5 危険 pressography - WordPress 用の WP Comment Remix プラグインにおける SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-4732 2012-12-20 18:52 2008-10-24 Show GitHub Exploit DB Packet Storm
228692 4.3 警告 CJ Niemira - phpMyID の MyID.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2008-4730 2012-12-20 18:52 2008-10-24 Show GitHub Exploit DB Packet Storm
228693 4.3 警告 sungard - SunGard Banner Student のコンタクトアップデートページにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2008-4727 2012-12-20 18:52 2008-10-23 Show GitHub Exploit DB Packet Storm
228694 7.5 危険 X7 Group - X7 Chat の help/mini.php におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2008-4718 2012-12-20 18:52 2008-10-23 Show GitHub Exploit DB Packet Storm
228695 7.5 危険 zeeways - ZEELYRICS の bannerclick.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-4717 2012-12-20 18:52 2008-10-23 Show GitHub Exploit DB Packet Storm
228696 7.5 危険 scriptdemo - BitmixSoft PHP-Lance の show.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-4716 2012-12-20 18:52 2008-10-23 Show GitHub Exploit DB Packet Storm
228697 7.5 危険 pilotgroup - PG eTraining の news_read.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-4709 2012-12-20 18:52 2008-10-23 Show GitHub Exploit DB Packet Storm
228698 7.5 危険 sylvain pasquet - BbZL.PhP における認証を回避される脆弱性 CWE-287
不適切な認証 		CVE-2008-4708 2012-12-20 18:52 2008-10-23 Show GitHub Exploit DB Packet Storm
228699 5 警告 sylvain pasquet - BbZL.PhP の index.php におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2008-4707 2012-12-20 18:52 2008-10-23 Show GitHub Exploit DB Packet Storm
228700 7.5 危険 vBulletin Solutions, Inc. - VBGooglemap Hotspot Edition モジュールなどにおける SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-4706 2012-12-20 18:52 2008-10-23 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 19, 2026, 4:16 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
225151 9.1 CRITICAL
Network 		suricata-ids suricata An issue was discovered in app-layer-ssl.c in Suricata 4.1.4. Upon receiving a corrupted SSLv3 (TLS 1.2) packet, the parser function TLSDecodeHSHelloExtensions tries to access a memory region that is… CWE-125
Out-of-bounds Read 		CVE-2019-15699 2024-11-21 13:29 2019-09-25 Show GitHub Exploit DB Packet Storm
225152 4.9 MEDIUM
Network 		grafana grafana An issue was discovered in Grafana 5.4.0. Passwords for data sources used by Grafana (e.g., MySQL) are not encrypted. An admin user can reveal passwords for any data source by pressing the "Save and … CWE-319
CWE-522
Cleartext Transmission of Sensitive Information
 Insufficiently Protected Credentials 		CVE-2019-15635 2024-11-21 13:29 2019-09-24 Show GitHub Exploit DB Packet Storm
225153 8.8 HIGH
Network 		valvesoftware counter-strike\ vphysics.dll in Counter-Strike: Global Offensive before 1.37.1.1 allows remote attackers to achieve code execution or denial of service by creating a gaming server and inviting a victim to this serve… CWE-787
 Out-of-bounds Write 		CVE-2019-15943 2024-11-21 13:29 2019-09-19 Show GitHub Exploit DB Packet Storm
225154 7.4 HIGH
Network 		mi xiaomi_millet_firmware A malicious file upload vulnerability was discovered in Xiaomi Millet mobile phones 1-6.3.9.3. A particular condition involving a man-in-the-middle attack may lead to partial data leakage or maliciou… CWE-434
 Unrestricted Upload of File with Dangerous Type  		CVE-2019-15843 2024-11-21 13:29 2019-09-19 Show GitHub Exploit DB Packet Storm
225155 7.5 HIGH
Network 		gitlab gitlab An issue was discovered in GitLab Community and Enterprise Edition 8.18 through 12.2.1. An internal endpoint unintentionally disclosed information about the last pipeline that ran for a merge request. CWE-863
 Incorrect Authorization 		CVE-2019-15729 2024-11-21 13:29 2019-09-18 Show GitHub Exploit DB Packet Storm
225156 9.8 CRITICAL
Network 		gitlab omnibus An issue was discovered in GitLab Omnibus 7.4 through 12.2.1. An unsafe interaction with logrotate could result in a privilege escalation NVD-CWE-noinfo
CVE-2019-15741 2024-11-21 13:29 2019-09-17 Show GitHub Exploit DB Packet Storm
225157 5.3 MEDIUM
Network 		gitlab gitlab An issue was discovered in GitLab Community and Enterprise Edition 7.9 through 12.2.1. EXIF Geolocation data was not being removed from certain image uploads. CWE-200
Information Exposure 		CVE-2019-15740 2024-11-21 13:29 2019-09-17 Show GitHub Exploit DB Packet Storm
225158 6.1 MEDIUM
Network 		gitlab gitlab An issue was discovered in GitLab Community and Enterprise Edition 8.1 through 12.2.1. Certain areas displaying Markdown were not properly sanitizing some XSS payloads. CWE-79
Cross-site Scripting 		CVE-2019-15739 2024-11-21 13:29 2019-09-17 Show GitHub Exploit DB Packet Storm
225159 5.3 MEDIUM
Network 		gitlab gitlab An issue was discovered in GitLab Community and Enterprise Edition 12.0 through 12.2.1. Under certain conditions, merge request IDs were being disclosed via email. CWE-200
Information Exposure 		CVE-2019-15738 2024-11-21 13:29 2019-09-17 Show GitHub Exploit DB Packet Storm
225160 6.5 MEDIUM
Network 		gitlab gitlab An issue was discovered in GitLab Community and Enterprise Edition through 12.2.1. Certain account actions needed improved authentication and session management. NVD-CWE-noinfo
CVE-2019-15737 2024-11-21 13:29 2019-09-17 Show GitHub Exploit DB Packet Storm