Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 18, 2026, 10 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
228801 4.3 警告 SonicWALL - SonicWall Email Security におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2008-2162 2012-12-20 18:52 2008-05-12 Show GitHub Exploit DB Packet Storm
228802 10 危険 tftp - Windows 上で稼動している TFTP Server におけるバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2008-2161 2012-12-20 18:52 2008-05-12 Show GitHub Exploit DB Packet Storm
228803 7.5 危険 wordnet - Wordnet の searchwn におけるスタックベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2008-2149 2012-12-20 18:52 2008-05-12 Show GitHub Exploit DB Packet Storm
228804 4.6 警告 VideoLAN - VideoLAN VLC における任意のコードを実行される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2008-2147 2012-12-20 18:52 2008-05-12 Show GitHub Exploit DB Packet Storm
228805 7.5 危険 WordPress.org - Wordpress の wp-includes/vars.php における特定のページに対するアクセス制限を回避される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2008-2146 2012-12-20 18:52 2008-05-12 Show GitHub Exploit DB Packet Storm
228806 2.6 注意 rPath, Inc - rPath Appliance Platform Agent の rootpw プラグインにおけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反 		CVE-2008-2140 2012-12-20 18:52 2008-04-25 Show GitHub Exploit DB Packet Storm
228807 6.5 警告 rPath, Inc - rPath Appliance Platform Agent の rootpw プラグインにおける権限を取得される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2008-2139 2012-12-20 18:52 2008-04-25 Show GitHub Exploit DB Packet Storm
228808 7.5 危険 visualshapers - VisualShapers ezContents における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-2135 2012-12-20 18:52 2008-05-9 Show GitHub Exploit DB Packet Storm
228809 6.8 警告 tru-zone - Tru-Zone Nuke ET の Journal モジュールにおける任意のユーザアカウントへのアクセス権を取得される脆弱性 CWE-20
不適切な入力確認 		CVE-2008-2134 2012-12-20 18:52 2008-05-9 Show GitHub Exploit DB Packet Storm
228810 4.3 警告 tru-zone - Tru-Zone Nuke ET の Journal モジュールにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2008-2133 2012-12-20 18:52 2008-05-9 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 18, 2026, 4:12 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
221521 6.5 MEDIUM
Network 		ezxml_project ezxml An issue was discovered in ezXML 0.8.3 through 0.8.6. The function ezxml_decode, while parsing crafted a XML file, performs incorrect memory handling, leading to a heap-based buffer over-read in the … CWE-125
Out-of-bounds Read 		CVE-2019-20200 2024-11-21 13:38 2020-01-1 Show GitHub Exploit DB Packet Storm
221522 6.5 MEDIUM
Network 		ezxml_project ezxml An issue was discovered in ezXML 0.8.3 through 0.8.6. The function ezxml_decode, while parsing a crafted XML file, performs incorrect memory handling, leading to NULL pointer dereference while runnin… CWE-125
CWE-476
Out-of-bounds Read
 NULL Pointer Dereference 		CVE-2019-20199 2024-11-21 13:38 2020-01-1 Show GitHub Exploit DB Packet Storm
221523 6.5 MEDIUM
Network 		ezxml_project ezxml An issue was discovered in ezXML 0.8.3 through 0.8.6. The function ezxml_ent_ok() mishandles recursion, leading to stack consumption for a crafted XML file. CWE-674
 Uncontrolled Recursion 		CVE-2019-20198 2024-11-21 13:38 2020-01-1 Show GitHub Exploit DB Packet Storm
221524 8.8 HIGH
Network 		nagios nagios_xi In Nagios XI 5.6.9, an authenticated user is able to execute arbitrary OS commands via shell metacharacters in the id parameter to schedulereport.php, in the context of the web-server user account. CWE-78
OS Command  		CVE-2019-20197 2024-11-21 13:38 2020-01-1 Show GitHub Exploit DB Packet Storm
221525 7.5 HIGH
Network 		pureftpd
fedoraproject 		pure-ftpd
fedora 		In Pure-FTPd 1.0.49, a stack exhaustion issue was discovered in the listdir function in ls.c. CWE-400
 Uncontrolled Resource Consumption 		CVE-2019-20176 2024-11-21 13:38 2020-01-1 Show GitHub Exploit DB Packet Storm
221526 7.5 HIGH
Network 		qemu qemu An issue was discovered in ide_dma_cb() in hw/ide/core.c in QEMU 2.4.0 through 4.2.0. The guest system can crash the QEMU process in the host system via a special SCSI_IOCTL_SEND_COMMAND. It hits an … CWE-754
 Improper Check for Unusual or Exceptional Conditions 		CVE-2019-20175 2024-11-21 13:38 2019-12-31 Show GitHub Exploit DB Packet Storm
221527 7.8 HIGH
Local 		serenityos serenityos Kernel/VM/MemoryManager.cpp in SerenityOS before 2019-12-30 does not reject syscalls with pointers into the kernel-only virtual address space, which allows local users to gain privileges by overwriti… CWE-119
Incorrect Access of Indexable Resource ('Range Error')  		CVE-2019-20172 2024-11-21 13:38 2019-12-31 Show GitHub Exploit DB Packet Storm
221528 5.5 MEDIUM
Local 		gpac
debian 		gpac
debian_linux 		An issue was discovered in GPAC version 0.8.0 and 0.9.0-development-20191109. There is an invalid pointer dereference in the function GF_IPMPX_AUTH_Delete() in odf/ipmpx_code.c. CWE-763
 Release of Invalid Pointer or Reference 		CVE-2019-20170 2024-11-21 13:38 2019-12-31 Show GitHub Exploit DB Packet Storm
221529 5.5 MEDIUM
Local 		gpac gpac An issue was discovered in GPAC version 0.8.0 and 0.9.0-development-20191109. There is a use-after-free in the function trak_Read() in isomedia/box_code_base.c. CWE-416
 Use After Free 		CVE-2019-20169 2024-11-21 13:38 2019-12-31 Show GitHub Exploit DB Packet Storm
221530 5.5 MEDIUM
Local 		gpac gpac An issue was discovered in GPAC version 0.8.0 and 0.9.0-development-20191109. There is a use-after-free in the function gf_isom_box_dump_ex() in isomedia/box_funcs.c. CWE-416
 Use After Free 		CVE-2019-20168 2024-11-21 13:38 2019-12-31 Show GitHub Exploit DB Packet Storm