Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 27, 2026, 4 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
228961 7.5 危険 webbdomain - WEBBDOMAIN Post Card の getin.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-6623 2012-12-20 19:10 2009-04-6 Show GitHub Exploit DB Packet Storm
228962 7.5 危険 webbdomian - WEBBDOMAIN Post Card の choosecard.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-6622 2012-12-20 19:10 2009-04-6 Show GitHub Exploit DB Packet Storm
228963 6.8 警告 sitexs cms - SiteXS CMS の adm/visual/upload.php における任意のコードを実行される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2008-6617 2012-12-20 19:10 2009-04-6 Show GitHub Exploit DB Packet Storm
228964 4.3 警告 Zen Cart - Zen Software Zen Cart の index.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2008-6616 2012-12-20 19:10 2009-04-6 Show GitHub Exploit DB Packet Storm
228965 7.5 危険 Zen Cart - Zen Software Zen Cart の index.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-6615 2012-12-20 19:10 2009-04-6 Show GitHub Exploit DB Packet Storm
228966 10 危険 picoflat - PicoFlat CMS の index.php におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2008-6604 2012-12-20 19:10 2009-04-4 Show GitHub Exploit DB Packet Storm
228967 10 危険 stadtaus - Download Center Lite における脆弱性 CWE-noinfo
情報不足 		CVE-2008-6602 2012-12-20 19:10 2009-04-3 Show GitHub Exploit DB Packet Storm
228968 4.3 警告 xmlportal - XMLPortal の検索機能におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2008-6600 2012-12-20 19:10 2009-04-3 Show GitHub Exploit DB Packet Storm
228969 10 危険 Sangoma - WANPIPE における脆弱性 CWE-362
競合状態 		CVE-2008-6598 2012-12-20 19:10 2009-04-3 Show GitHub Exploit DB Packet Storm
228970 4.3 警告 phpcredo - PHCDownload の upload/install/index.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2008-6597 2012-12-20 19:10 2009-04-3 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 27, 2026, 4:52 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
221181 8.8 HIGH
Network 		nokia i-240w-q_gpon_ont_firmware The Alcatel Lucent I-240W-Q GPON ONT using firmware version 3FE54567BOZJ19 is vulnerable to command injection via crafted HTTP request sent by a remote, authenticated attacker to /GponForm/usb_restor… CWE-77
Command Injection 		CVE-2019-3919 2024-11-21 13:42 2019-03-6 Show GitHub Exploit DB Packet Storm
221182 9.8 CRITICAL
Network 		nokia i-240w-q_gpon_ont_firmware The Alcatel Lucent I-240W-Q GPON ONT using firmware version 3FE54567BOZJ19 contains multiple hard coded credentials for the Telnet and SSH interfaces. CWE-798
 Use of Hard-coded Credentials 		CVE-2019-3918 2024-11-21 13:42 2019-03-6 Show GitHub Exploit DB Packet Storm
221183 7.5 HIGH
Network 		nokia i-240w-q_gpon_ont_firmware The Alcatel Lucent I-240W-Q GPON ONT using firmware version 3FE54567BOZJ19 allows a remote, unauthenticated attacker to enable telnetd on the router via a crafted HTTP request. CWE-425
 Direct Request ('Forced Browsing') 		CVE-2019-3917 2024-11-21 13:42 2019-03-6 Show GitHub Exploit DB Packet Storm
221184 7.5 HIGH
Network 		mcafee agent Information Disclosure vulnerability in Remote logging (which is disabled by default) in McAfee Agent (MA) 5.x allows remote unauthenticated users to access sensitive information via remote logging w… NVD-CWE-noinfo
CVE-2019-3599 2024-11-21 13:42 2019-03-1 Show GitHub Exploit DB Packet Storm
221185 5.3 MEDIUM
Network 		mcafee agent Buffer Access with Incorrect Length Value in McAfee Agent (MA) 5.x allows remote unauthenticated users to potentially cause a denial of service via specifically crafted UDP packets. CWE-119
Incorrect Access of Indexable Resource ('Range Error')  		CVE-2019-3598 2024-11-21 13:42 2019-03-1 Show GitHub Exploit DB Packet Storm
221186 7.8 HIGH
Local 		mcafee endpoint_security Privilege Escalation vulnerability in Microsoft Windows client in McAfee Endpoint Security (ENS) 10.6.1 and earlier allows local users to gain elevated privileges via a specific set of circumstances. NVD-CWE-noinfo
CVE-2019-3582 2024-11-21 13:42 2019-03-1 Show GitHub Exploit DB Packet Storm
221187 7.8 HIGH
Local 		microfocus filr A local privilege escalation vulnerability in the famtd component of Micro Focus Filr 3.0 allows a local attacker authenticated as a low privilege user to escalate to root. This vulnerability affects… CWE-269
 Improper Privilege Management 		CVE-2019-3475 2024-11-21 13:42 2019-02-21 Show GitHub Exploit DB Packet Storm
221188 6.5 MEDIUM
Network 		microfocus filr A path traversal vulnerability in the web application component of Micro Focus Filr 3.x allows a remote attacker authenticated as a low privilege user to download arbitrary files from the Filr server… CWE-22
Path Traversal 		CVE-2019-3474 2024-11-21 13:42 2019-02-21 Show GitHub Exploit DB Packet Storm
221189 7.5 HIGH
Network 		mikrotik routeros MikroTik RouterOS before 6.43.12 (stable) and 6.42.12 (long-term) is vulnerable to an intermediary vulnerability. The software will execute user defined network requests to both WAN and LAN clients. … CWE-441
Confused Deputy 		CVE-2019-3924 2024-11-21 13:42 2019-02-21 Show GitHub Exploit DB Packet Storm
221190 5.5 MEDIUM
Local 		qemu
fedoraproject
canonical
opensuse 		qemu
fedora
ubuntu_linux
leap 		QEMU, through version 2.10 and through version 3.1.0, is vulnerable to an out-of-bounds read of up to 128 bytes in the hw/i2c/i2c-ddc.c:i2c_ddc() function. A local attacker with permission to execute… - CVE-2019-3812 2024-11-21 13:42 2019-02-19 Show GitHub Exploit DB Packet Storm