Vulnerability Search Top

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

Vulnerability Information Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 18, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
228821	7.5	危険	rfaah	-	Cars & Vehicle の page.php における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2008-4172	2012-12-20 18:52	2008-09-22	Show	GitHub Exploit DB Packet Storm

228822	4.3	警告	pro2col	-	Pro2col Stingray FTS の verify_login.jsp におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2008-4168	2012-12-20 18:52	2008-09-22	Show	GitHub Exploit DB Packet Storm

228823	7.5	危険	zanfi solutions	-	Zanfi CMS lite および Jaw Portal の index.php における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2008-4159	2012-12-20 18:52	2008-09-22	Show	GitHub Exploit DB Packet Storm

228824	6.8	警告	zanfi solutions	-	Zanfi CMS lite の index.php におけるディレクトリトラバーサルの脆弱性	CWE-22 パス・トラバーサル	CVE-2008-4158	2012-12-20 18:52	2008-09-22	Show	GitHub Exploit DB Packet Storm

228825	7.5	危険	Vastal I-Tech & Co.	-	Vastal I-Tech phpVID の groups.php における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2008-4157	2012-12-20 18:52	2008-09-22	Show	GitHub Exploit DB Packet Storm

228826	7.5	危険	razorecommerce	-	RazorCommerce Shopping Cart の category_search.php における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2008-4143	2012-12-20 18:52	2008-09-24	Show	GitHub Exploit DB Packet Storm

228827	7.5	危険	x10media	-	x10Media x10 Automatic MP3 Script における PHP リモートファイルインクルージョンの脆弱性	CWE-94 コード・インジェクション	CVE-2008-4141	2012-12-20 18:52	2008-09-24	Show	GitHub Exploit DB Packet Storm

228828	10	危険	technote	-	Technote の skin_shop/standard/3_plugin_twindow/twindow_notice.php における PHP リモートファイルインクルージョンの脆弱性	CWE-94 コード・インジェクション	CVE-2008-4138	2012-12-20 18:52	2008-09-24	Show	GitHub Exploit DB Packet Storm

228829	7.8	危険	s60	-	Nokia E90 Communicator および Nseries N82 上で稼動している Symbian OS におけるサービス運用妨害 (DoS) の脆弱性	CWE-399 リソース管理の問題	CVE-2008-4135	2012-12-20 18:52	2008-09-19	Show	GitHub Exploit DB Packet Storm

228830	7.5	危険	phprealty	-	phpRealty の manager/static/view.php における PHP リモートファイルインクルージョンの脆弱性	CWE-94 コード・インジェクション	CVE-2008-4134	2012-12-20 18:52	2008-09-19	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 19, 2026, 4:16 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
221531	6.5	MEDIUM Network	cesnet	libyang	A NULL pointer dereference is present in libyang before v1.0-r3 in the function lys_extension_instances_free() due to a copy of unresolved extensions in lys_restr_dup(). Applications that use libyang…	CWE-476 NULL Pointer Dereference	CVE-2019-20398	2024-11-21 13:38	2020-01-23	Show	GitHub Exploit DB Packet Storm

221532	8.8	HIGH Network	cesnet	libyang	A double-free is present in libyang before v1.0-r1 in the function yyparse() when an organization field is not terminated. Applications that use libyang to parse untrusted input yang files may be vul…	CWE-415 Double Free	CVE-2019-20397	2024-11-21 13:38	2020-01-23	Show	GitHub Exploit DB Packet Storm

221533	6.5	MEDIUM Network	cesnet	libyang	A segmentation fault is present in yyparse in libyang before v1.0-r1 due to a malformed pattern statement value during lys_parse_path parsing.	CWE-119 Incorrect Access of Indexable Resource ('Range Error')	CVE-2019-20396	2024-11-21 13:38	2020-01-23	Show	GitHub Exploit DB Packet Storm

221534	6.5	MEDIUM Network	cesnet	libyang	A stack consumption issue is present in libyang before v1.0-r1 due to the self-referential union type containing leafrefs. Applications that use libyang to parse untrusted input yang files may crash.	CWE-674 Uncontrolled Recursion	CVE-2019-20395	2024-11-21 13:38	2020-01-23	Show	GitHub Exploit DB Packet Storm

221535	8.8	HIGH Network	cesnet	libyang	A double-free is present in libyang before v1.0-r3 in the function yyparse() when a type statement in used in a notification statement. Applications that use libyang to parse untrusted input yang fil…	CWE-415 Double Free	CVE-2019-20394	2024-11-21 13:38	2020-01-23	Show	GitHub Exploit DB Packet Storm

221536	8.8	HIGH Network	cesnet	libyang	A double-free is present in libyang before v1.0-r1 in the function yyparse() when an empty description is used. Applications that use libyang to parse untrusted input yang files may be vulnerable to …	CWE-415 Double Free	CVE-2019-20393	2024-11-21 13:38	2020-01-23	Show	GitHub Exploit DB Packet Storm

221537	6.5	MEDIUM Network	cesnet	libyang	An invalid memory access flaw is present in libyang before v1.0-r1 in the function resolve_feature_value() when an if-feature statement is used inside a list key node, and the feature used is not def…	CWE-119 Incorrect Access of Indexable Resource ('Range Error')	CVE-2019-20392	2024-11-21 13:38	2020-01-23	Show	GitHub Exploit DB Packet Storm

221538	6.5	MEDIUM Network	cesnet	libyang	An invalid memory access flaw is present in libyang before v1.0-r3 in the function resolve_feature_value() when an if-feature statement is used inside a bit. Applications that use libyang to parse un…	CWE-119 Incorrect Access of Indexable Resource ('Range Error')	CVE-2019-20391	2024-11-21 13:38	2020-01-23	Show	GitHub Exploit DB Packet Storm

221539	7.5	HIGH Network	opensuse debian	libsolv debian_linux	repodata_schema2id in repodata.c in libsolv before 0.7.6 has a heap-based buffer over-read via a last schema whose length is less than the length of the input schema.	CWE-125 Out-of-bounds Read	CVE-2019-20387	2024-11-21 13:38	2020-01-22	Show	GitHub Exploit DB Packet Storm

221540	7.5	HIGH Network	xmlsoft debian netapp oracle opensuse fedoraproject	libxml2 debian_linux cloud_backup steelstore_cloud_integrated_storage ontap_select_deploy_administration_utility clustered_data_ontap smi-s_provider snapdrive plug-in_for_syma…	xmlSchemaPreRun in xmlschemas.c in libxml2 2.9.10 allows an xmlSchemaValidateStream memory leak.	CWE-401 Missing Release of Memory after Effective Lifetime	CVE-2019-20388	2024-11-21 13:38	2020-01-22	Show	GitHub Exploit DB Packet Storm