Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 18, 2026, 10 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
229221 7.5 危険 WordPress.org - WordPress 用の Wp-FileManager プラグインにおける任意の PHP コードを実行される脆弱性 CWE-94
コード・インジェクション 		CVE-2008-0222 2012-12-20 18:34 2008-01-10 Show GitHub Exploit DB Packet Storm
229222 6.4 警告 uebimiau - Uebimiau Webmail における認証を回避される脆弱性 CWE-287
不適切な認証 		CVE-2008-0210 2012-12-20 18:34 2008-01-9 Show GitHub Exploit DB Packet Storm
229223 5.8 警告 snitz forums 2000 - Snitz Forums 2000 の Forums/login.asp におけるオープンリダイレクトの脆弱性 CWE-20
不適切な入力確認 		CVE-2008-0209 2012-12-20 18:34 2008-01-9 Show GitHub Exploit DB Packet Storm
229224 4.3 警告 snitz forums 2000 - Snitz Forums 2000 の login.asp におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2008-0208 2012-12-20 18:34 2008-01-9 Show GitHub Exploit DB Packet Storm
229225 4.3 警告 pro search - PRO-Search におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2008-0207 2012-12-20 18:34 2008-01-9 Show GitHub Exploit DB Packet Storm
229226 4.3 警告 WordPress.org - WordPress 用の Captcha! プラグインにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2008-0206 2012-12-20 18:34 2008-01-9 Show GitHub Exploit DB Packet Storm
229227 4.3 警告 WordPress.org - WordPress 用の Math Comment Spam Protection プラグインにおけるクロスサイトリクエストフォージェリの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2008-0205 2012-12-20 18:34 2008-01-9 Show GitHub Exploit DB Packet Storm
229228 4.3 警告 WordPress.org - WordPress 用の Math Comment Spam Protection プラグインにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2008-0204 2012-12-20 18:34 2008-01-9 Show GitHub Exploit DB Packet Storm
229229 4.3 警告 WordPress.org - WordPress 用の Cryptographp プラグインにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2008-0203 2012-12-20 18:34 2008-01-9 Show GitHub Exploit DB Packet Storm
229230 5 警告 pro search - PRO-Search におけるサービス運用妨害 (DoS) の脆弱性 CWE-20
不適切な入力確認 		CVE-2008-0199 2012-12-20 18:34 2008-01-9 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 18, 2026, 4:12 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
222051 8.4 HIGH
Adjacent 		microsoft windows_10
windows_server_2012
windows_server_2016
windows_7
windows_8.1
windows_server_2008
windows_server_2019 		A remote code execution vulnerability exists when Windows Hyper-V on a host server fails to properly validate input from an authenticated user on a guest operating system, aka 'Windows Hyper-V Remote… CWE-20
 Improper Input Validation  		CVE-2019-1397 2024-11-21 13:36 2019-11-13 Show GitHub Exploit DB Packet Storm
222052 7.8 HIGH
Local 		microsoft windows_server_2008
windows_server_2012
windows_10
windows_8.1
windows_server_2016
windows_7
windows_rt_8.1
windows_server_2019 		An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory, aka 'Win32k Elevation of Privilege Vulnerability'. This CVE ID is uniqu… CWE-787
 Out-of-bounds Write 		CVE-2019-1396 2024-11-21 13:36 2019-11-13 Show GitHub Exploit DB Packet Storm
222053 7.8 HIGH
Local 		microsoft windows_server_2008
windows_server_2012
windows_10
windows_8.1
windows_server_2016
windows_7
windows_rt_8.1
windows_server_2019 		An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory, aka 'Win32k Elevation of Privilege Vulnerability'. This CVE ID is uniqu… CWE-787
 Out-of-bounds Write 		CVE-2019-1395 2024-11-21 13:36 2019-11-13 Show GitHub Exploit DB Packet Storm
222054 7.8 HIGH
Local 		microsoft windows_server_2008
windows_server_2012
windows_10
windows_8.1
windows_server_2016
windows_7
windows_rt_8.1
windows_server_2019 		An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory, aka 'Win32k Elevation of Privilege Vulnerability'. This CVE ID is uniqu… CWE-787
 Out-of-bounds Write 		CVE-2019-1394 2024-11-21 13:36 2019-11-13 Show GitHub Exploit DB Packet Storm
222055 7.8 HIGH
Local 		microsoft windows_server_2008
windows_server_2012
windows_10
windows_8.1
windows_server_2016
windows_server_2019
windows_rt_8.1
windows_7 		An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory, aka 'Win32k Elevation of Privilege Vulnerability'. This CVE ID is uniqu… CWE-787
 Out-of-bounds Write 		CVE-2019-1393 2024-11-21 13:36 2019-11-13 Show GitHub Exploit DB Packet Storm
222056 7.8 HIGH
Local 		microsoft windows_server_2012
windows_8.1
windows_rt_8.1
windows_10 		An elevation of privilege vulnerability exists when the Windows kernel fails to properly handle objects in memory, aka 'Windows Kernel Elevation of Privilege Vulnerability'. NVD-CWE-noinfo
CVE-2019-1392 2024-11-21 13:36 2019-11-13 Show GitHub Exploit DB Packet Storm
222057 5.5 MEDIUM
Local 		microsoft windows_server_2008
windows_server_2012
windows_10
windows_8.1
windows_server_2016
windows_7
windows_rt_8.1
windows_server_2019 		A denial of service vulnerability exists when Windows improperly handles objects in memory, aka 'Windows Denial of Service Vulnerability'. This CVE ID is unique from CVE-2018-12207. NVD-CWE-noinfo
CVE-2019-1391 2024-11-21 13:36 2019-11-13 Show GitHub Exploit DB Packet Storm
222058 7.5 HIGH
Network 		microsoft internet_explorer A remote code execution vulnerability exists in the way that the VBScript engine handles objects in memory, aka 'VBScript Remote Code Execution Vulnerability'. NVD-CWE-noinfo
CVE-2019-1390 2024-11-21 13:36 2019-11-13 Show GitHub Exploit DB Packet Storm
222059 8.4 HIGH
Adjacent 		microsoft windows_10
windows_server_2012
windows_server_2016
windows_7
windows_8.1
windows_server_2008 		A remote code execution vulnerability exists when Windows Hyper-V on a host server fails to properly validate input from an authenticated user on a guest operating system, aka 'Windows Hyper-V Remote… CWE-20
 Improper Input Validation  		CVE-2019-1389 2024-11-21 13:36 2019-11-13 Show GitHub Exploit DB Packet Storm
222060 7.8 HIGH
Local 		microsoft windows_server_2008
windows_server_2012
windows_10
windows_8.1
windows_server_2016
windows_7
windows_rt_8.1
windows_server_2019 		An elevation of privilege vulnerability exists in the Windows Certificate Dialog when it does not properly enforce user privileges, aka 'Windows Certificate Dialog Elevation of Privilege Vulnerabilit… CWE-269
 Improper Privilege Management 		CVE-2019-1388 2024-11-21 13:36 2019-11-13 Show GitHub Exploit DB Packet Storm