Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 18, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
229341	6.8	警告	Realtek Semiconductor Corp	-	Windows Vista 上で稼動している Realtek HD Audio Codec Drivers RTKVHDA.sys および RTKVHDA64.sys におけるレジストリキーを作成される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2008-1931	2012-12-20 18:52	2008-04-25	Show	GitHub Exploit DB Packet Storm

229342	7.5	危険	WordPress.org	-	WordPress のクッキー認証メソッドにおけるクッキーを偽造される脆弱性	CWE-287 不適切な認証	CVE-2008-1930	2012-12-20 18:52	2008-04-25	Show	GitHub Exploit DB Packet Storm

229343	3.5	注意	The phpMyAdmin Project	-	phpMyAdmin における任意のファイルを読まれる脆弱性	CWE-200 情報漏えい	CVE-2008-1924	2012-12-20 18:52	2008-04-22	Show	GitHub Exploit DB Packet Storm

229344	10	危険	sarg	-	Sarg におけるスタックベースのバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2008-1922	2012-12-20 18:52	2008-05-13	Show	GitHub Exploit DB Packet Storm

229345	7.5	危険	YourFreeWorld.com	-	YourFreeWorld Apartment Search Script の listtest.php における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2008-1919	2012-12-20 18:52	2008-04-23	Show	GitHub Exploit DB Packet Storm

229346	6	警告	PHP-Fusion	-	PHP-Fusion の submit.php における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2008-1918	2012-12-20 18:52	2008-04-23	Show	GitHub Exploit DB Packet Storm

229347	7.5	危険	w2b	-	W2B Online Banking の index.php における PHP リモートファイルインクルージョンの脆弱性	CWE-94 コード・インジェクション	CVE-2008-1893	2012-12-20 18:52	2008-04-18	Show	GitHub Exploit DB Packet Storm

229348	5	警告	Ruby-lang.org	-	Ruby の WEBrick におけるディレクトリトラバーサルの脆弱性	CWE-22 パス・トラバーサル	CVE-2008-1891	2012-12-20 18:52	2008-04-18	Show	GitHub Exploit DB Packet Storm

229349	7.5	危険	xplodphp	-	XplodPHP AutoTutorials の viewcat.php における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2008-1889	2012-12-20 18:52	2008-04-18	Show	GitHub Exploit DB Packet Storm

229350	5	警告	wikepage	-	Wikepage Opus の index.php におけるディレクトリトラバーサルの脆弱性	CWE-22 パス・トラバーサル	CVE-2008-1884	2012-12-20 18:52	2008-04-18	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 19, 2026, 4:16 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
224461	9.8	CRITICAL Network	inoideas	inoerp	download.php in inoERP 4.15 allows SQL injection through insecure deserialization.	CWE-89 CWE-502 SQL Injection Deserialization of Untrusted Data	CVE-2019-16894	2024-11-21 13:31	2019-09-27	Show	GitHub Exploit DB Packet Storm

224462	7.5	HIGH Network	netty debian canonical redhat	netty debian_linux ubuntu_linux jboss_enterprise_application_platform	Netty before 4.1.42.Final mishandles whitespace before the colon in HTTP headers (such as a "Transfer-Encoding : chunked" line), which leads to HTTP request smuggling.	CWE-444 HTTP Request Smuggling	CVE-2019-16869	2024-11-21 13:31	2019-09-27	Show	GitHub Exploit DB Packet Storm

224463	9.8	CRITICAL Network	bmc	myit_digital_workplace	BMC Remedy ITSM Suite is prone to unspecified vulnerabilities in both DWP and SmartIT components, which can permit remote attackers to perform pre-authenticated remote commands execution on the Opera…	CWE-502 Deserialization of Untrusted Data	CVE-2019-16755	2024-11-21 13:31	2019-09-27	Show	GitHub Exploit DB Packet Storm

224464	5.3	MEDIUM Network	arm fedoraproject debian	mbed_crypto mbed_tls fedora debian_linux	Arm Mbed TLS before 2.19.0 and Arm Mbed Crypto before 2.0.0, when deterministic ECDSA is enabled, use an RNG with insufficient entropy for blinding, which might allow an attacker to recover a private…	NVD-CWE-noinfo	CVE-2019-16910	2024-11-21 13:31	2019-09-26	Show	GitHub Exploit DB Packet Storm

224465	5.4	MEDIUM Network	teampass	teampass	TeamPass 2.1.27.36 allows Stored XSS by setting a crafted password for an item in a common available folder or sharing the item with an admin. (The crafted password is exploitable when viewing the ch…	CWE-79 Cross-site Scripting	CVE-2019-16904	2024-11-21 13:31	2019-09-26	Show	GitHub Exploit DB Packet Storm

224466	5.3	MEDIUM Network	plutinosoft	platinum	Platinum UPnP SDK 1.2.0 allows Directory Traversal in Core/PltHttpServer.cpp because it checks for /.. where it should be checking for ../ instead.	CWE-22 Path Traversal	CVE-2019-16903	2024-11-21 13:31	2019-09-26	Show	GitHub Exploit DB Packet Storm

224467	5.3	MEDIUM Network	mediawiki fedoraproject debian	mediawiki fedora debian_linux	In MediaWiki through 1.33.0, Special:Redirect allows information disclosure of suppressed usernames via a User ID Lookup.	CWE-862 Missing Authorization	CVE-2019-16738	2024-11-21 13:31	2019-09-26	Show	GitHub Exploit DB Packet Storm

224468	7.5	HIGH Network	advantech	webaccess\/hmi_designer	Advantech WebAccess/HMI Designer 2.1.9.31 has Exception Handler Chain corruption starting at Unknown Symbol @ 0x0000000000000000 called from ntdll!RtlRaiseStatus+0x00000000000000b4.	CWE-755 Improper Handling of Exceptional Conditions	CVE-2019-16901	2024-11-21 13:31	2019-09-26	Show	GitHub Exploit DB Packet Storm

224469	7.5	HIGH Network	advantech	webaccess\/hmi_designer	Advantech WebAccess/HMI Designer 2.1.9.31 has a User Mode Write AV starting at MSVCR90!memcpy+0x000000000000015c.	NVD-CWE-noinfo	CVE-2019-16900	2024-11-21 13:31	2019-09-26	Show	GitHub Exploit DB Packet Storm

224470	7.5	HIGH Network	advantech	webaccess\/hmi_designer	In Advantech WebAccess/HMI Designer 2.1.9.31, Data from a Faulting Address controls Code Flow starting at PM_V3!CTagInfoThreadBase::GetNICInfo+0x0000000000512918.	NVD-CWE-noinfo	CVE-2019-16899	2024-11-21 13:31	2019-09-26	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed