Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 30, 2026, 4 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
229121	4.3	警告	phpcart	-	Carmosa phpCart におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2008-7108	2012-12-20 19:10	2009-08-28	Show	GitHub Exploit DB Packet Storm

229122	5	警告	ソフォス	-	Microsoft Exchange 用の Sophos PureMessage におけるスキャン保護のリモート回避をされる脆弱性	CWE-Other その他	CVE-2008-7106	2012-12-20 19:10	2009-08-27	Show	GitHub Exploit DB Packet Storm

229123	5	警告	ソフォス	-	Microsoft Exchange 用の Sophos PureMessage におけるサービス運用妨害 (DoS) の脆弱性	CWE-Other その他	CVE-2008-7105	2012-12-20 19:10	2009-08-27	Show	GitHub Exploit DB Packet Storm

229124	5	警告	ソフォス	-	Microsoft Exchange 用の PureMessage におけるサービス運用妨害 (DoS) の脆弱性	CWE-Other その他	CVE-2008-7104	2012-12-20 19:10	2009-08-27	Show	GitHub Exploit DB Packet Storm

229125	6.8	警告	qsoft-inc	-	Qsoft K-Rate Premium の Manage Templates 機能における任意の PHP コードを実行される脆弱性	CWE-noinfo 情報不足	CVE-2008-7099	2012-12-20 19:10	2009-08-27	Show	GitHub Exploit DB Packet Storm

229126	4.3	警告	qsoft-inc	-	Qsoft K-Rate Premium におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2008-7098	2012-12-20 19:10	2009-08-27	Show	GitHub Exploit DB Packet Storm

229127	7.5	危険	qsoft-inc	-	Qsoft K-Rate Premium における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2008-7097	2012-12-20 19:10	2009-08-27	Show	GitHub Exploit DB Packet Storm

229128	5	警告	unica	-	Unica Affinium Campaign のリスナーサーバにおけるサービス運用妨害 (DoS) の脆弱性	CWE-399 リソース管理の問題	CVE-2008-7094	2012-12-20 19:10	2009-08-26	Show	GitHub Exploit DB Packet Storm

229129	6.8	警告	unica	-	Unica Affinium Campaign におけるディレクトリトラバーサルの脆弱性	CWE-22 パス・トラバーサル	CVE-2008-7093	2012-12-20 19:10	2009-08-26	Show	GitHub Exploit DB Packet Storm

229130	4.3	警告	unica	-	Unica Affinium Campaign におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2008-7092	2012-12-20 19:10	2009-08-26	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 30, 2026, 4:16 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
221131	6.1	MEDIUM Network	ntt-east ntt-west	pr-s300ne_firmware rt-s300ne_firmware rv-s340ne_firmware pr-s300hi_firmware rt-s300hi_firmware rv-s340hi_firmware pr-s300se_firmware rt-s300se_firmware rv-s340se_firmware p…	Cross-site scripting vulnerability in Hikari Denwa router/Home GateWay (Hikari Denwa router/Home GateWay provided by NIPPON TELEGRAPH AND TELEPHONE EAST CORPORATION PR-S300NE/RT-S300NE/RV-S340NE firm…	CWE-79 Cross-site Scripting	CVE-2019-5985	2024-11-21 13:45	2019-09-13	Show	GitHub Exploit DB Packet Storm

221132	6.1	MEDIUM Network	cybozu	garoon	Open redirect vulnerability in Cybozu Garoon 4.0.0 to 4.10.2 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via the application 'Scheduler'.	CWE-601 Open Redirect	CVE-2019-5978	2024-11-21 13:45	2019-09-13	Show	GitHub Exploit DB Packet Storm

221133	4.3	MEDIUM Network	cybozu	garoon	Mail header injection vulnerability in Cybozu Garoon 4.0.0 to 4.10.2 may allow a remote authenticated attackers to alter mail header via the application 'E-Mail'.	CWE-74 Injection	CVE-2019-5977	2024-11-21 13:45	2019-09-13	Show	GitHub Exploit DB Packet Storm

221134	4.9	MEDIUM Network	cybozu	garoon	Cybozu Garoon 4.0.0 to 4.10.2 allows an attacker with administrative rights to cause a denial of service condition via unspecified vectors.	CWE-20 Improper Input Validation	CVE-2019-5976	2024-11-21 13:45	2019-09-13	Show	GitHub Exploit DB Packet Storm

221135	5.4	MEDIUM Network	cybozu	garoon	DOM-based cross-site scripting vulnerability in Cybozu Garoon 4.6.0 to 4.10.2 allows remote authenticated attackers to inject arbitrary web script or HTML via unspecified vectors.	CWE-79 Cross-site Scripting	CVE-2019-5975	2024-11-21 13:45	2019-09-13	Show	GitHub Exploit DB Packet Storm

221136	6.5	MEDIUM Network	wondercms	wondercms	Directory traversal vulnerability in WonderCMS 2.6.0 and earlier allows remote attackers to delete arbitrary files via unspecified vectors.	CWE-22 Path Traversal	CVE-2019-5956	2024-11-21 13:45	2019-09-13	Show	GitHub Exploit DB Packet Storm

221137	5.3	MEDIUM Network	netapp	oncommand_workflow_automation	OnCommand Workflow Automation versions prior to 5.0 shipped without certain HTTP Security headers configured which could allow an attacker to obtain sensitive information via unspecified vectors.	CWE-319 Cleartext Transmission of Sensitive Information	CVE-2019-5503	2024-11-21 13:45	2019-09-11	Show	GitHub Exploit DB Packet Storm

221138	7.2	HIGH Network	gitlab	gitlab	An authentication issue was discovered in GitLab that allowed a bypass of email verification. This was addressed in GitLab 12.1.2 and 12.0.4.	CWE-287 Improper Authentication	CVE-2019-5473	2024-11-21 13:45	2019-09-10	Show	GitHub Exploit DB Packet Storm

221139	5.3	MEDIUM Network	senecajs	seneca	Seneca < 3.9.0 contains a vulnerability that could lead to exposing environment variables to unauthorized users.	CWE-209 Information Exposure Through an Error Message	CVE-2019-5483	2024-11-21 13:45	2019-09-10	Show	GitHub Exploit DB Packet Storm

221140	5.3	MEDIUM Network	statichttpserver_project	statichttpserver	A path traversal vulnerability in <= v0.9.7 of statichttpserver npm module allows attackers to list files in arbitrary folders.	CWE-22 Path Traversal	CVE-2019-5480	2024-11-21 13:45	2019-09-4	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed