Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 17, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
228951 5 警告 ZyXEL - ZyXEL Prestige ルータのデフォルト SNMP 設定における SNMP リクエストを送られる脆弱性 CWE-16
環境設定 		CVE-2008-1525 2012-12-20 18:52 2008-03-26 Show GitHub Exploit DB Packet Storm
228952 7.5 危険 ZyXEL - ZyXEL Prestige ルータの SNMP サービスにおける管理アクションを実行される脆弱性 CWE-16
環境設定 		CVE-2008-1524 2012-12-20 18:52 2008-03-26 Show GitHub Exploit DB Packet Storm
228953 5 警告 ZyXEL - ZyXEL Prestige ルータにおける ISP の資格情報を取得される脆弱性 CWE-200
情報漏えい 		CVE-2008-1523 2012-12-20 18:52 2008-03-26 Show GitHub Exploit DB Packet Storm
228954 7.5 危険 ZyXEL - ZyXEL Prestige ルータにおけるアクセス権を取得される脆弱性 CWE-16
環境設定 		CVE-2008-1522 2012-12-20 18:52 2008-03-26 Show GitHub Exploit DB Packet Storm
228955 6.5 警告 ZyXEL - ZyXEL Prestige ルータにおける権限を取得される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2008-1521 2012-12-20 18:52 2008-03-26 Show GitHub Exploit DB Packet Storm
228956 7.5 危険 phpBB - phpBB 用の XS-Mod におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2008-1512 2012-12-20 18:52 2008-03-25 Show GitHub Exploit DB Packet Storm
228957 7.5 危険 xlportal - XLPortal の index.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-1509 2012-12-20 18:52 2008-03-25 Show GitHub Exploit DB Packet Storm
228958 7.5 危険 sstreamtv - Joomla! 用の SSTREAMTV custompages コンポーネントにおける PHP リモートファイルインクルージョンの脆弱性 CWE-94
コード・インジェクション 		CVE-2008-1505 2012-12-20 18:52 2008-03-25 Show GitHub Exploit DB Packet Storm
228959 4.3 警告 php heaven - phpHeaven phpMyChat の setup.php3 におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2008-1504 2012-12-20 18:52 2008-03-25 Show GitHub Exploit DB Packet Storm
228960 4.3 警告 tinyportal - TinyPortal の index.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2008-1500 2012-12-20 18:52 2008-03-25 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 18, 2026, 4:12 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
224761 7.2 HIGH
Network 		limesurvey limesurvey In Limesurvey before 3.17.14, admin users can access the plugin manager without proper permissions. CWE-276
Incorrect Default Permissions  		CVE-2019-16186 2024-11-21 13:30 2019-09-10 Show GitHub Exploit DB Packet Storm
224762 7.2 HIGH
Network 		limesurvey limesurvey In Limesurvey before 3.17.14, admin users can view, update, or delete reserved menu entries without proper permissions. CWE-276
Incorrect Default Permissions  		CVE-2019-16185 2024-11-21 13:30 2019-09-10 Show GitHub Exploit DB Packet Storm
224763 9.8 CRITICAL
Network 		limesurvey limesurvey A CSV injection vulnerability was found in Limesurvey before 3.17.14 that allows survey participants to inject commands via their survey responses that will be included in the export CSV file. CWE-1236
 Improper Neutralization of Formula Elements in a CSV File 		CVE-2019-16184 2024-11-21 13:30 2019-09-10 Show GitHub Exploit DB Packet Storm
224764 2.7 LOW
Network 		limesurvey limesurvey In Limesurvey before 3.17.14, admin users can run an integrity check without proper permissions. CWE-276
Incorrect Default Permissions  		CVE-2019-16183 2024-11-21 13:30 2019-09-10 Show GitHub Exploit DB Packet Storm
224765 6.1 MEDIUM
Network 		limesurvey limesurvey A reflected cross-site scripting (XSS) vulnerability was found in Limesurvey before 3.17.14 that allows remote attackers to inject arbitrary web script or HTML via extensions of uploaded files. CWE-79
Cross-site Scripting 		CVE-2019-16182 2024-11-21 13:30 2019-09-10 Show GitHub Exploit DB Packet Storm
224766 2.7 LOW
Network 		limesurvey limesurvey In Limesurvey before 3.17.14, admin users can mark other users' notifications as read. NVD-CWE-noinfo
CVE-2019-16181 2024-11-21 13:30 2019-09-10 Show GitHub Exploit DB Packet Storm
224767 5.3 MEDIUM
Network 		limesurvey limesurvey Limesurvey before 3.17.14 allows remote attackers to bruteforce the login form and enumerate usernames when the LDAP authentication method is used. NVD-CWE-noinfo
CVE-2019-16180 2024-11-21 13:30 2019-09-10 Show GitHub Exploit DB Packet Storm
224768 5.3 MEDIUM
Network 		limesurvey limesurvey Limesurvey before 3.17.14 does not enforce SSL/TLS usage in the default configuration. CWE-295
Improper Certificate Validation  		CVE-2019-16179 2024-11-21 13:30 2019-09-10 Show GitHub Exploit DB Packet Storm
224769 5.4 MEDIUM
Network 		limesurvey limesurvey A stored cross-site scripting (XSS) vulnerability was found in Limesurvey before 3.17.14 that allows authenticated users with correct permissions to inject arbitrary web script or HTML via titles of … CWE-79
Cross-site Scripting 		CVE-2019-16178 2024-11-21 13:30 2019-09-10 Show GitHub Exploit DB Packet Storm
224770 7.5 HIGH
Network 		limesurvey limesurvey In Limesurvey before 3.17.14, the entire database is exposed through browser caching. CWE-200
Information Exposure 		CVE-2019-16177 2024-11-21 13:30 2019-09-10 Show GitHub Exploit DB Packet Storm