Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 22, 2026, 10 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
228691 7.5 危険 phpBB - phpBB 用の Tag Board モジュールの tag_board.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-6314 2012-12-20 19:10 2009-02-27 Show GitHub Exploit DB Packet Storm
228692 7.5 危険 w3matter - W3matter RevSense の index.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-6310 2012-12-20 19:10 2009-02-26 Show GitHub Exploit DB Packet Storm
228693 7.5 危険 w3matter - W3matter AskPert の index.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-6309 2012-12-20 19:10 2009-02-26 Show GitHub Exploit DB Packet Storm
228694 5.1 警告 PunBB - PunBB 用の PMS におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2008-6308 2012-12-20 19:10 2009-02-26 Show GitHub Exploit DB Packet Storm
228695 4.3 警告 SoftbizScripts - Softbiz Classifieds Script の signinform.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2008-6306 2012-12-20 19:10 2009-02-26 Show GitHub Exploit DB Packet Storm
228696 7.5 危険 toursmanager - ToursManager の tourview.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-6303 2012-12-20 19:10 2009-02-26 Show GitHub Exploit DB Packet Storm
228697 7.5 危険 turnkeyforms - TurnkeyForms Local Classifieds における認証を回避される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2008-6302 2012-12-20 19:10 2009-02-26 Show GitHub Exploit DB Packet Storm
228698 7.5 危険 prezmo - phpBB 用の Small ShoutBox モジュールにおける SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-6301 2012-12-20 19:10 2009-02-26 Show GitHub Exploit DB Packet Storm
228699 7.5 危険 toursmanager - Tours Manager の cityview.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-6289 2012-12-20 19:10 2009-02-26 Show GitHub Exploit DB Packet Storm
228700 4.3 警告 subtextproject - Subtext におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2008-6283 2012-12-20 19:10 2009-02-25 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 22, 2026, 4:08 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
225241 7.4 HIGH
Network 		broadcom brocade_sannav A vulnerability, in The ReportsTrustManager class of Brocade SANnav versions before v2.0, could allow an attacker to perform a man-in-the-middle attack against Secure Sockets Layer(SSL)connections. CWE-295
Improper Certificate Validation  		CVE-2019-16209 2024-11-21 13:30 2019-11-9 Show GitHub Exploit DB Packet Storm
225242 7.5 HIGH
Network 		broadcom brocade_sannav Password-based encryption (PBE) algorithm, of Brocade SANnav versions before v2.0, has a weakness in generating cryptographic keys that may allow an attacker to decrypt passwords used with several se… CWE-327
 Use of a Broken or Risky Cryptographic Algorithm 		CVE-2019-16208 2024-11-21 13:30 2019-11-9 Show GitHub Exploit DB Packet Storm
225243 7.8 HIGH
Local 		broadcom brocade_sannav Brocade SANnav versions before v2.0 use a hard-coded password, which could allow local authenticated attackers to access a back-end database and gain privileges. CWE-798
 Use of Hard-coded Credentials 		CVE-2019-16207 2024-11-21 13:30 2019-11-9 Show GitHub Exploit DB Packet Storm
225244 5.5 MEDIUM
Local 		broadcom brocade_sannav The authentication mechanism, in Brocade SANnav versions before v2.0, logs plaintext account credentials at the ‘trace’ and the 'debug' logging level; which could allow a local authenticated attacker… CWE-532
CWE-311
 Inclusion of Sensitive Information in Log Files
Missing Encryption of Sensitive Data 		CVE-2019-16206 2024-11-21 13:30 2019-11-9 Show GitHub Exploit DB Packet Storm
225245 8.8 HIGH
Network 		broadcom brocade_sannav A vulnerability, in Brocade SANnav versions before v2.0, could allow remote attackers to brute-force a valid session ID. The vulnerability is due to an insufficiently random session ID for several po… CWE-330
 Use of Insufficiently Random Values 		CVE-2019-16205 2024-11-21 13:30 2019-11-9 Show GitHub Exploit DB Packet Storm
225246 6.5 MEDIUM
Adjacent 		samsung galaxy_s8_plus_firmware
galaxy_s3_firmware
galaxy_note_2_firmware 		Samsung Galaxy S8 plus (Android version: 8.0.0, Build Number: R16NW.G955USQU5CRG3, Baseband Vendor: Qualcomm Snapdragon 835, Baseband: G955USQU5CRG3), Samsung Galaxy S3 (Android version: 4.3, Build N… NVD-CWE-noinfo
CVE-2019-16401 2024-11-21 13:30 2019-11-7 Show GitHub Exploit DB Packet Storm
225247 6.5 MEDIUM
Adjacent 		samsung galaxy_s8_plus_firmware
galaxy_s3_firmware
galaxy_note_2_firmware 		Samsung Galaxy S8 plus (Android version: 8.0.0, Build Number: R16NW.G955USQU5CRG3, Baseband Vendor: Qualcomm Snapdragon 835, Baseband: G955USQU5CRG3), Samsung Galaxy S3 (Android version: 4.3, Build N… NVD-CWE-noinfo
CVE-2019-16400 2024-11-21 13:30 2019-11-7 Show GitHub Exploit DB Packet Storm
225248 7.2 HIGH
Network 		hp 260_g1_dm_firmware
280_pro_g1_firmware
285_g2_firmware
340_g3_firmware
340_g4_firmware
346_g3_firmware
346_g4_firmware
348_g3_firmware
348_g4_firmware
elite_slice_firmware<… 		A potential security vulnerability has been identified in multiple HP products and versions which involves possible execution of arbitrary code during boot services that can result in elevation of pr… NVD-CWE-noinfo
CVE-2019-16284 2024-11-21 13:30 2019-11-6 Show GitHub Exploit DB Packet Storm
225249 7.8 HIGH
Local 		phoenixcontact pc_worx_express
config\+
pc_worx 		An issue was discovered in PHOENIX CONTACT PC Worx through 1.86, PC Worx Express through 1.86, and Config+ through 1.86. A manipulated PC Worx or Config+ project file could lead to an Out-of-bounds R… CWE-125
Out-of-bounds Read 		CVE-2019-16675 2024-11-21 13:30 2019-11-1 Show GitHub Exploit DB Packet Storm
225250 4.6 MEDIUM
Local 		control-webpanel webpanel Stored XSS in filemanager2.php in CentOS-WebPanel.com (aka CWP) CentOS Web Panel 0.9.8.885 exists via the cmd_arg parameter. This can be exploited by a local attacker who supplies a crafted filename … CWE-79
Cross-site Scripting 		CVE-2019-16295 2024-11-21 13:30 2019-11-1 Show GitHub Exploit DB Packet Storm