Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 30, 2026, 2 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
229091 6.8 警告 VirtueMart - VirtueMart におけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反
CVE-2008-7204 2012-12-20 19:10 2009-09-11 Show GitHub Exploit DB Packet Storm
229092 5 警告 valve software - Valve Software Half-Life Counter-Strike におけるサービス運用妨害 (DoS) の脆弱性 CWE-399
リソース管理の問題
CVE-2008-7203 2012-12-20 19:10 2009-09-11 Show GitHub Exploit DB Packet Storm
229093 6.8 警告 PHPKIT - PHPKIT におけるクロスサイトリクエストフォージェリ攻撃を実行される脆弱性 CWE-352
同一生成元ポリシー違反
CVE-2008-7193 2012-12-20 19:10 2009-09-9 Show GitHub Exploit DB Packet Storm
229094 6.8 警告 woltlab - wBB の index.php におけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反
CVE-2008-7192 2012-12-20 19:10 2009-09-9 Show GitHub Exploit DB Packet Storm
229095 5 警告 pps.jussieu - Polipo におけるサービス運用妨害 (DoS) の脆弱性 CWE-noinfo
情報不足
CVE-2008-7191 2012-12-20 19:10 2009-09-9 Show GitHub Exploit DB Packet Storm
229096 5 警告 rittwick banerjee - Telephone Directory 2008 の del_query1.php における任意の連絡先を削除される脆弱性 CWE-20
不適切な入力確認
CVE-2008-7180 2012-12-20 19:10 2009-09-8 Show GitHub Exploit DB Packet Storm
229097 7.5 危険 XOOPS - XOOPS 用の Uploader モジュールにおけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル
CVE-2008-7178 2012-12-20 19:10 2009-09-8 Show GitHub Exploit DB Packet Storm
229098 7.5 危険 yanick bourbeau - LNP における管理者権限を取得される脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2008-7172 2012-12-20 19:10 2009-09-8 Show GitHub Exploit DB Packet Storm
229099 4.3 警告 yanick bourbeau - LNP におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2008-7171 2012-12-20 19:10 2009-09-8 Show GitHub Exploit DB Packet Storm
229100 9.3 危険 uusee - UUSee UUUpgrade ActiveX コントロールにおける任意のファイルを強制的にダウンロードされる脆弱性 CWE-Other
その他
CVE-2008-7168 2012-12-20 19:10 2009-09-8 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 30, 2026, 4:16 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
221111 9.8 CRITICAL
Network
netapp ontap_select_deploy_administration_utility ONTAP Select Deploy administration utility versions 2.12 & 2.12.1 ship with an HTTP service bound to the network allowing unauthenticated remote attackers to perform administrative actions. CWE-306
Missing Authentication for Critical Function
CVE-2019-5504 2024-11-21 13:45 2019-09-25 Show GitHub Exploit DB Packet Storm
221112 9.6 CRITICAL
Network
vmware fusion
workstation
esxi
VMware ESXi (6.7 before ESXi670-201904101-SG and 6.5 before ESXi650-201903001), Workstation (15.x before 15.0.3 and 14.x before 14.1.6) and Fusion (11.x before 11.0.3 and 10.x before 10.1.6) contain … CWE-125
Out-of-bounds Read
CVE-2019-5521 2024-11-21 13:45 2019-09-21 Show GitHub Exploit DB Packet Storm
221113 7.8 HIGH
Local
linecorp line Integer overflow vulnerability in LINE(Android) from 4.4.0 to the version before 9.15.1 allows remote attackers to cause a denial of service (DoS) condition or execute arbitrary code via a specially … CWE-190
 Integer Overflow or Wraparound
CVE-2019-6010 2024-11-21 13:45 2019-09-19 Show GitHub Exploit DB Packet Storm
221114 5.4 MEDIUM
Network
vmware esxi
vsphere_esxi
vcenter_server
VMware vSphere ESXi (6.7 prior to ESXi670-201810101-SG, 6.5 prior to ESXi650-201811102-SG, and 6.0 prior to ESXi600-201807103-SG) and VMware vCenter Server (6.7 prior to 6.7 U1b, 6.5 prior to 6.5 U2b… CWE-613
 Insufficient Session Expiration
CVE-2019-5531 2024-11-21 13:45 2019-09-19 Show GitHub Exploit DB Packet Storm
221115 7.7 HIGH
Network
vmware vcenter_server VMware vCenter Server (6.7.x prior to 6.7 U3, 6.5 prior to 6.5 U3 and 6.0 prior to 6.0 U3j) contains an information disclosure vulnerability where Virtual Machines deployed from an OVF could expose l… CWE-200
CWE-522
Information Exposure
 Insufficiently Protected Credentials
CVE-2019-5534 2024-11-21 13:45 2019-09-19 Show GitHub Exploit DB Packet Storm
221116 7.7 HIGH
Network
vmware vcenter_server VMware vCenter Server (6.7.x prior to 6.7 U3, 6.5 prior to 6.5 U3 and 6.0 prior to 6.0 U3j) contains an information disclosure vulnerability due to the logging of credentials in plain-text for virtua… CWE-532
 Inclusion of Sensitive Information in Log Files
CVE-2019-5532 2024-11-21 13:45 2019-09-19 Show GitHub Exploit DB Packet Storm
221117 9.8 CRITICAL
Network
haxx
fedoraproject
opensuse
netapp
oracle
debian
curl
fedora
leap
cloud_backup
snapcenter
steelstore_cloud_integrated_storage
oncommand_unified_manager
oncommand_workflow_automation
oncommand_insight
http_server
enterp…
Heap buffer overflow in the TFTP protocol handler in cURL 7.19.4 to 7.65.3. CWE-787
 Out-of-bounds Write
CVE-2019-5482 2024-11-21 13:45 2019-09-17 Show GitHub Exploit DB Packet Storm
221118 9.8 CRITICAL
Network
haxx
fedoraproject
netapp
oracle
debian
opensuse
curl
fedora
cloud_backup
steelstore
solidfire_baseboard_management_controller_firmware
enterprise_manager_ops_center
communications_operations_monitor
oss_support_tools
commun…
Double-free vulnerability in the FTP-kerberos code in cURL 7.52.0 to 7.65.3. CWE-415
 Double Free
CVE-2019-5481 2024-11-21 13:45 2019-09-17 Show GitHub Exploit DB Packet Storm
221119 10.0 CRITICAL
Network
gitlabhook_project gitlabhook NPM package gitlabhook version 0.0.17 is vulnerable to a Command Injection vulnerability. Arbitrary commands can be injected through the repository name. CWE-78
OS Command 
CVE-2019-5485 2024-11-21 13:45 2019-09-14 Show GitHub Exploit DB Packet Storm
221120 7.5 HIGH
Network
bower bower Bower before 1.8.8 has a path traversal vulnerability permitting file write in arbitrary locations via install command, which allows attackers to write arbitrary files when a malicious package is ext… CWE-22
Path Traversal
CVE-2019-5484 2024-11-21 13:45 2019-09-14 Show GitHub Exploit DB Packet Storm