Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 15, 2026, 4 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
229041	6.8	警告	podcast generator	-	Podcast Generator における PHP リモートファイルインクルージョンの脆弱性	CWE-94 コード・インジェクション	CVE-2008-1124	2012-12-20 18:34	2008-03-3	Show	GitHub Exploit DB Packet Storm

229042	6.8	警告	sitebuilder	-	SiteBuilder Elite における PHP リモートファイルインクルージョンの脆弱性	CWE-94 コード・インジェクション	CVE-2008-1123	2012-12-20 18:34	2008-03-3	Show	GitHub Exploit DB Packet Storm

229043	9.3	危険	rising antivirus international	-	Rising Antivirus Online Scanner の Web Scan Object ActiveX コントロールにおける任意のコードを強制的にダウンロードされる脆弱性	CWE-DesignError	CVE-2008-1116	2012-12-20 18:34	2008-03-3	Show	GitHub Exploit DB Packet Storm

229044	7.8	危険	Vocera	-	Cisco Unified Wireless IP Phone 7921 におけるハッシュされたパスワードを盗まれる脆弱性	CWE-200 情報漏えい	CVE-2008-1113	2012-12-20 18:34	2008-03-3	Show	GitHub Exploit DB Packet Storm

229045	6.8	警告	Xine	-	xine-lib の xineplug_dmx_asf.so プラグインにおけるバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2008-1110	2012-12-20 18:34	2008-02-29	Show	GitHub Exploit DB Packet Storm

229046	6.8	警告	quantum game library	-	Quantum Game Library における PHP リモートファイルインクルージョンの脆弱性	CWE-94 コード・インジェクション	CVE-2008-1069	2012-12-20 18:34	2008-02-28	Show	GitHub Exploit DB Packet Storm

229047	6.8	警告	portail web php	-	Portail Web Php における PHP リモートファイルインクルージョンの脆弱性	CWE-94 コード・インジェクション	CVE-2008-1068	2012-12-20 18:34	2008-02-28	Show	GitHub Exploit DB Packet Storm

229048	6.8	警告	phpqladmin	-	phpQLAdmin における PHP リモートファイルインクルージョンの脆弱性	CWE-94 コード・インジェクション	CVE-2008-1067	2012-12-20 18:34	2008-02-28	Show	GitHub Exploit DB Packet Storm

229049	7.5	危険	Smarty	-	S9Y などの製品で使用される Smarty における任意の PHP 関数を呼び出される脆弱性	CWE-20 不適切な入力確認	CVE-2008-1066	2012-12-20 18:34	2008-02-28	Show	GitHub Exploit DB Packet Storm

229050	4.3	警告	WordPress.org	-	WordPress 用の Sniplets プラグインにおけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2008-1061	2012-12-20 18:34	2008-02-28	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 15, 2026, 4:28 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
222031	6.5	MEDIUM Network	maxum	rumpus_ftp	A CSRF vulnerability exists in the Web File Manager's Create/Delete Accounts functionality of Rumpus FTP Server 8.2.9.1. By exploiting it, an attacker can Create and Delete accounts via RAPR/TriggerS…	CWE-352 Origin Validation Error	CVE-2019-19662	2024-11-21 13:35	2020-02-11	Show	GitHub Exploit DB Packet Storm

222032	6.5	MEDIUM Network	maxum	rumpus	A CSRF vulnerability exists in the FTP Settings of Web File Manager in Rumpus FTP 8.2.9.1. Exploitation of this vulnerability can result in manipulation of Server FTP settings at RAPR/FTPSettingsSet.…	CWE-352 Origin Validation Error	CVE-2019-19665	2024-11-21 13:35	2020-02-11	Show	GitHub Exploit DB Packet Storm

222033	6.5	MEDIUM Network	maxum	rumpus	A CSRF vulnerability exists in the Folder Sets Settings of Web File Manager in Rumpus FTP 8.2.9.1. This allows an attacker to Create/Delete Folders after exploiting it at RAPR/FolderSetsSet.html.	CWE-352 Origin Validation Error	CVE-2019-19663	2024-11-21 13:35	2020-02-11	Show	GitHub Exploit DB Packet Storm

222034	6.5	MEDIUM Network	maxum	rumpus	A CSRF vulnerability exists in the Web File Manager's Network Setting functionality of Rumpus FTP Server 8.2.9.1. By exploiting it, an attacker can manipulate the SMTP setting and other network setti…	CWE-352 Origin Validation Error	CVE-2019-19660	2024-11-21 13:35	2020-02-11	Show	GitHub Exploit DB Packet Storm

222035	8.8	HIGH Network	maxum	rumpus	A CSRF vulnerability exists in the Web File Manager's Edit Accounts functionality of Rumpus FTP Server 8.2.9.1. By exploiting it, an attacker can take over a user account by changing the password, up…	CWE-352 Origin Validation Error	CVE-2019-19659	2024-11-21 13:35	2020-02-11	Show	GitHub Exploit DB Packet Storm

222036	5.3	MEDIUM Network	zohocorp	manageengine_applications_manager	Zoho ManageEngine Applications Manager 14 before 14520 allows a remote unauthenticated attacker to disclose OS file names via FailOverHelperServlet.	CWE-306 Missing Authentication for Critical Function	CVE-2019-19800	2024-11-21 13:35	2020-02-7	Show	GitHub Exploit DB Packet Storm

222037	5.4	MEDIUM Network	pandorafms	pandora_fms	PandoraFMS 742 suffers from multiple XSS vulnerabilities, affecting the Agent Management, Report Builder, and Graph Builder components. An authenticated user can inject dangerous content into a data …	CWE-79 Cross-site Scripting	CVE-2019-19968	2024-11-21 13:35	2020-02-5	Show	GitHub Exploit DB Packet Storm

222038	8.8	HIGH Network	totolink	a3002ru_firmware a702r_firmware n301rt_firmware n302r_firmware n300rt_firmware n200re_firmware n150rt_firmware n100re_firmware	On certain TOTOLINK Realtek SDK based routers, an authenticated attacker may execute arbitrary OS commands via the sysCmd parameter to the boafrm/formSysCmd URI, even if the GUI (syscmd.htm) is not a…	CWE-78 OS Command	CVE-2019-19824	2024-11-21 13:35	2020-01-28	Show	GitHub Exploit DB Packet Storm

222039	7.5	HIGH Network	totolink realtek sapido ciktel kctvjeju fg-products hiwifi tbroad coship iodata hcn_max-c300n_project	a3002ru_firmware a702r_firmware n302r_firmware n300rt_firmware n200re_firmware n150rt_firmware n100re_firmware rtk_11n_ap_firmware gr297n_firmware mesh_router_firmware w…	A certain router administration interface (that includes Realtek APMIB 0.11f for Boa 0.94.14rc21) stores cleartext administrative passwords in flash memory and in a file. This affects TOTOLINK A3002R…	CWE-522 Insufficiently Protected Credentials	CVE-2019-19823	2024-11-21 13:35	2020-01-28	Show	GitHub Exploit DB Packet Storm

222040	7.5	HIGH Network	totolink realtek sapido ciktel kctvjeju fg-products hiwifi tbroad coship iodata hcn_max-c300n_project	a3002ru_firmware a702r_firmware n302r_firmware n300rt_firmware n200re_firmware n150rt_firmware n100re_firmware rtk_11n_ap_firmware gr297n_firmware mesh_router_firmware w…	A certain router administration interface (that includes Realtek APMIB 0.11f for Boa 0.94.14rc21) allows remote attackers to retrieve the configuration, including sensitive data (usernames and passwo…	CWE-306 Missing Authentication for Critical Function	CVE-2019-19822	2024-11-21 13:35	2020-01-28	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed