Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 19, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
228881 7.5 危険 review-script - Five Star Review Script の recommend.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-3780 2012-12-20 18:52 2008-08-26 Show GitHub Exploit DB Packet Storm
228882 4.3 警告 review-script - Five Star Review Script の search/index.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2008-3779 2012-12-20 18:52 2008-08-26 Show GitHub Exploit DB Packet Storm
228883 7.5 危険 simasy - Simasy CMS の index.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-3774 2012-12-20 18:52 2008-08-22 Show GitHub Exploit DB Packet Storm
228884 4.3 警告 vBulletin Solutions, Inc. - vBulletin におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2008-3773 2012-12-20 18:52 2008-08-18 Show GitHub Exploit DB Packet Storm
228885 7.5 危険 turnkey web tools - Turnkey Web Tools SunShop Shopping Cart の class.ajax.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-3768 2012-12-20 18:52 2008-08-22 Show GitHub Exploit DB Packet Storm
228886 7.5 危険 smartisoft - phpBazar の classified.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-3767 2012-12-20 18:52 2008-08-22 Show GitHub Exploit DB Packet Storm
228887 5 警告 realtime internet band rehearsal - Realtime Internet llcon におけるサービス運用妨害 (DoS) の脆弱性 CWE-20
不適切な入力確認 		CVE-2008-3766 2012-12-20 18:52 2008-08-22 Show GitHub Exploit DB Packet Storm
228888 7.5 危険 turnkey web tools - Turnkey PHP Live Helper の globalsoff.php における任意の PHP コードを実行される脆弱性 CWE-94
コード・インジェクション 		CVE-2008-3764 2012-12-20 18:52 2008-08-21 Show GitHub Exploit DB Packet Storm
228889 6.8 警告 turnkey web tools - Turnkey PHP Live Helper の libsecure.php における db config ファイルに関連する任意の変数を上書きされる脆弱性 CWE-20
不適切な入力確認 		CVE-2008-3763 2012-12-20 18:52 2008-08-21 Show GitHub Exploit DB Packet Storm
228890 7.5 危険 turnkey web tools - Turnkey PHP Live Helper の onlinestatus_html.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-3762 2012-12-20 18:52 2008-08-21 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 19, 2026, 4:16 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
221481 7.8 HIGH
Local 		goverlan client_agent
reach_console
reach_server 		Goverlan Reach Console before 9.50, Goverlan Reach Server before 3.50, and Goverlan Client Agent before 9.20.50 have an Untrusted Search Path that leads to Command Injection and Local Privilege Escal… CWE-426
 Untrusted Search Path 		CVE-2019-20456 2024-11-21 13:38 2020-02-17 Show GitHub Exploit DB Packet Storm
221482 5.9 MEDIUM
Network 		globalpayments php_sdk Gateways/Gateway.php in Heartland & Global Payments PHP SDK before 2.0.0 does not enforce SSL certificate validations. CWE-295
Improper Certificate Validation  		CVE-2019-20455 2024-11-21 13:38 2020-02-15 Show GitHub Exploit DB Packet Storm
221483 7.5 HIGH
Network 		pcre
fedoraproject
splunk 		pcre2
fedora
universal_forwarder 		An out-of-bounds read was discovered in PCRE before 10.34 when the pattern \X is JIT compiled and used to match specially crafted subjects in non-UTF mode. Applications that use PCRE to parse untrust… CWE-125
Out-of-bounds Read 		CVE-2019-20454 2024-11-21 13:38 2020-02-14 Show GitHub Exploit DB Packet Storm
221484 4.7 MEDIUM
Network 		atlassian jira
jira_server
jira_data_center 		The Atlassian Application Links plugin is vulnerable to cross-site request forgery (CSRF). The following versions are affected: all versions prior to 5.4.21, from version 6.0.0 before version 6.0.12,… CWE-352
 Origin Validation Error 		CVE-2019-20100 2024-11-21 13:38 2020-02-12 Show GitHub Exploit DB Packet Storm
221485 4.3 MEDIUM
Network 		atlassian jira_server
jira_data_center 		The VerifyPopServerConnection!add.jspa component in Atlassian Jira Server and Data Center before version 8.7.0 is vulnerable to cross-site request forgery (CSRF). An attacker could exploit this by tr… CWE-352
 Origin Validation Error 		CVE-2019-20099 2024-11-21 13:38 2020-02-12 Show GitHub Exploit DB Packet Storm
221486 4.3 MEDIUM
Network 		atlassian jira_server
jira_data_center 		The VerifySmtpServerConnection!add.jspa component in Atlassian Jira Server and Data Center before version 8.7.0 is vulnerable to cross-site request forgery (CSRF). An attacker could exploit this by t… CWE-352
 Origin Validation Error 		CVE-2019-20098 2024-11-21 13:38 2020-02-12 Show GitHub Exploit DB Packet Storm
221487 9.8 CRITICAL
Network 		samsung prismview_player_11
prismview_system_9 		The HTTP API in Prismview System 9 11.10.17.00 and Prismview Player 11 13.09.1100 allows remote code execution by uploading RebootSystem.lnk and requesting /REBOOTSYSTEM or /RESTARTVNC. (Authenticati… CWE-434
 Unrestricted Upload of File with Dangerous Type  		CVE-2019-20451 2024-11-21 13:38 2020-02-11 Show GitHub Exploit DB Packet Storm
221488 7.8 HIGH
Local 		atlassian confluence
confluence_server 		The usage of Tomcat in Confluence on the Microsoft Windows operating system before version 7.0.5, and from version 7.1.0 before version 7.1.1 allows local system attackers who have permission to writ… CWE-427
 Uncontrolled Search Path Element 		CVE-2019-20406 2024-11-21 13:38 2020-02-6 Show GitHub Exploit DB Packet Storm
221489 4.3 MEDIUM
Network 		atlassian jira_server
jira_data_center 		The JMX monitoring flag in Atlassian Jira Server and Data Center before version 8.6.0 allows remote attackers to turn the JMX monitoring flag off or on via a Cross-site request forgery (CSRF) vulnera… CWE-352
 Origin Validation Error 		CVE-2019-20405 2024-11-21 13:38 2020-02-6 Show GitHub Exploit DB Packet Storm
221490 4.3 MEDIUM
Network 		atlassian jira_server
jira_data_center 		The API in Atlassian Jira Server and Data Center before version 8.6.0 allows authenticated remote attackers to determine project titles they do not have access to via an improper authorization vulner… NVD-CWE-noinfo
CVE-2019-20404 2024-11-21 13:38 2020-02-6 Show GitHub Exploit DB Packet Storm