Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 18, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
228821	7.5	危険	rfaah	-	Cars & Vehicle の page.php における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2008-4172	2012-12-20 18:52	2008-09-22	Show	GitHub Exploit DB Packet Storm

228822	4.3	警告	pro2col	-	Pro2col Stingray FTS の verify_login.jsp におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2008-4168	2012-12-20 18:52	2008-09-22	Show	GitHub Exploit DB Packet Storm

228823	7.5	危険	zanfi solutions	-	Zanfi CMS lite および Jaw Portal の index.php における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2008-4159	2012-12-20 18:52	2008-09-22	Show	GitHub Exploit DB Packet Storm

228824	6.8	警告	zanfi solutions	-	Zanfi CMS lite の index.php におけるディレクトリトラバーサルの脆弱性	CWE-22 パス・トラバーサル	CVE-2008-4158	2012-12-20 18:52	2008-09-22	Show	GitHub Exploit DB Packet Storm

228825	7.5	危険	Vastal I-Tech & Co.	-	Vastal I-Tech phpVID の groups.php における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2008-4157	2012-12-20 18:52	2008-09-22	Show	GitHub Exploit DB Packet Storm

228826	7.5	危険	razorecommerce	-	RazorCommerce Shopping Cart の category_search.php における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2008-4143	2012-12-20 18:52	2008-09-24	Show	GitHub Exploit DB Packet Storm

228827	7.5	危険	x10media	-	x10Media x10 Automatic MP3 Script における PHP リモートファイルインクルージョンの脆弱性	CWE-94 コード・インジェクション	CVE-2008-4141	2012-12-20 18:52	2008-09-24	Show	GitHub Exploit DB Packet Storm

228828	10	危険	technote	-	Technote の skin_shop/standard/3_plugin_twindow/twindow_notice.php における PHP リモートファイルインクルージョンの脆弱性	CWE-94 コード・インジェクション	CVE-2008-4138	2012-12-20 18:52	2008-09-24	Show	GitHub Exploit DB Packet Storm

228829	7.8	危険	s60	-	Nokia E90 Communicator および Nseries N82 上で稼動している Symbian OS におけるサービス運用妨害 (DoS) の脆弱性	CWE-399 リソース管理の問題	CVE-2008-4135	2012-12-20 18:52	2008-09-19	Show	GitHub Exploit DB Packet Storm

228830	7.5	危険	phprealty	-	phpRealty の manager/static/view.php における PHP リモートファイルインクルージョンの脆弱性	CWE-94 コード・インジェクション	CVE-2008-4134	2012-12-20 18:52	2008-09-19	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 18, 2026, 4:12 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
221601	7.5	HIGH Network	al-enterprise	omnivista_4760 omnivista_8770	An issue was discovered on Alcatel-Lucent OmniVista 4760 devices, and 8770 devices before 4.1.2. An incorrect web server configuration allows a remote unauthenticated attacker to retrieve the content…	CWE-522 Insufficiently Protected Credentials	CVE-2019-20047	2024-11-21 13:37	2019-12-28	Show	GitHub Exploit DB Packet Storm

221602	4.3	MEDIUM Network	wordpress debian	wordpress debian_linux	In in wp-includes/rest-api/endpoints/class-wp-rest-posts-controller.php in WordPress 3.7 to 5.3.0, authenticated users who do not have the rights to publish a post are able to mark posts as sticky or…	CWE-269 Improper Privilege Management	CVE-2019-20043	2024-11-21 13:37	2019-12-27	Show	GitHub Exploit DB Packet Storm

221603	6.1	MEDIUM Network	wordpress debian	wordpress debian_linux	In wp-includes/formatting.php in WordPress 3.7 to 5.3.0, the function wp_targeted_link_rel() can be used in a particular way to result in a stored cross-site scripting (XSS) vulnerability. This has b…	CWE-79 Cross-site Scripting	CVE-2019-20042	2024-11-21 13:37	2019-12-27	Show	GitHub Exploit DB Packet Storm

221604	9.8	CRITICAL Network	wordpress debian	wordpress debian_linux	wp_kses_bad_protocol in wp-includes/kses.php in WordPress before 5.3.1 mishandles the HTML5 colon named entity, allowing attackers to bypass input sanitization, as demonstrated by the javascript&colo…	CWE-20 Improper Input Validation	CVE-2019-20041	2024-11-21 13:37	2019-12-27	Show	GitHub Exploit DB Packet Storm

221605	5.5	MEDIUM Local	upx_project fedoraproject	upx fedora	A heap-based buffer over-read was discovered in canUnpack in p_mach.cpp in UPX 3.95 via a crafted Mach-O file.	CWE-125 Out-of-bounds Read	CVE-2019-20021	2024-11-21 13:37	2019-12-27	Show	GitHub Exploit DB Packet Storm

221606	6.5	MEDIUM Network	matio_project	matio	A stack-based buffer over-read was discovered in ReadNextStructField in mat5.c in matio 1.5.17.	CWE-125 Out-of-bounds Read	CVE-2019-20020	2024-11-21 13:37	2019-12-27	Show	GitHub Exploit DB Packet Storm

221607	6.5	MEDIUM Network	matio_project	matio	An attempted excessive memory allocation was discovered in Mat_VarRead5 in mat5.c in matio 1.5.17.	CWE-770 Allocation of Resources Without Limits or Throttling	CVE-2019-20019	2024-11-21 13:37	2019-12-27	Show	GitHub Exploit DB Packet Storm

221608	6.5	MEDIUM Network	matio_project	matio	A stack-based buffer over-read was discovered in ReadNextCell in mat5.c in matio 1.5.17.	CWE-125 Out-of-bounds Read	CVE-2019-20018	2024-11-21 13:37	2019-12-27	Show	GitHub Exploit DB Packet Storm

221609	6.5	MEDIUM Network	matio_project	matio	A stack-based buffer over-read was discovered in Mat_VarReadNextInfo5 in mat5.c in matio 1.5.17.	CWE-125 Out-of-bounds Read	CVE-2019-20017	2024-11-21 13:37	2019-12-27	Show	GitHub Exploit DB Packet Storm

221610	6.5	MEDIUM Network	symonics	libmysofa	libmysofa before 2019-11-24 does not properly restrict recursive function calls, as demonstrated by reports of stack consumption in readOHDRHeaderMessageDatatype in dataobject.c and directblockRead i…	CWE-787 Out-of-bounds Write	CVE-2019-20016	2024-11-21 13:37	2019-12-27	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed