Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 21, 2026, 4 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
229421	10	危険	ppmate	-	PPMate の PPMedia Class ActiveX コントロールにおけるヒープベースのバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2008-3242	2012-12-20 18:52	2008-07-21	Show	GitHub Exploit DB Packet Storm

229422	7.5	危険	ultrastats	-	UltraStats の players-detail.php における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2008-3241	2012-12-20 18:52	2008-07-21	Show	GitHub Exploit DB Packet Storm

229423	9.3	危険	phpizabi	-	PHPizabi の system/v_cron_proc.php における任意のコードをアップロードされる脆弱性	CWE-20 不適切な入力確認	CVE-2008-3239	2012-12-20 18:52	2008-07-21	Show	GitHub Exploit DB Packet Storm

229424	4.3	警告	WordPress.org	-	WordPress におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2008-3233	2012-12-20 18:52	2008-07-18	Show	GitHub Exploit DB Packet Storm

229425	4.3	警告	Xine	-	xine-lib におけるサービス運用妨害 (DoS) の脆弱性	CWE-20 不適切な入力確認	CVE-2008-3231	2012-12-20 18:52	2008-07-18	Show	GitHub Exploit DB Packet Storm

229426	6.9	警告	swapoff	-	op におけるスタックベースのバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2008-3229	2012-12-20 18:52	2008-07-18	Show	GitHub Exploit DB Packet Storm

229427	10	危険	phpBB	-	phpBB における脆弱性	CWE-noinfo 情報不足	CVE-2008-3224	2012-12-20 18:52	2008-07-18	Show	GitHub Exploit DB Packet Storm

229428	6.8	警告	PowerDNS	-	PowerDNS Recursor における DNS を偽装される脆弱性	CWE-189 数値処理の問題	CVE-2008-3217	2012-12-20 18:52	2008-04-25	Show	GitHub Exploit DB Packet Storm

229429	7.8	危険	thekelleys	-	dnsmasq におけるサービス運用妨害 (DoS) の脆弱性	CWE-20 不適切な入力確認	CVE-2008-3214	2012-12-20 18:52	2008-07-18	Show	GitHub Exploit DB Packet Storm

229430	7.5	危険	webcms	-	WebCMS Portal Edition の secciones/tablon/tablon.php における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2008-3213	2012-12-20 18:52	2008-07-18	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 21, 2026, 4:10 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
221981	6.5	MEDIUM Network	ezxml_project	ezxml	An issue was discovered in ezXML 0.8.3 through 0.8.6. The ezxml_parse_* functions mishandle XML entities, leading to an infinite loop in which memory allocations occur.	CWE-400 CWE-835 Uncontrolled Resource Consumption Loop with Unreachable Exit Condition ('Infinite Loop')	CVE-2019-20201	2024-11-21 13:38	2020-01-1	Show	GitHub Exploit DB Packet Storm

221982	6.5	MEDIUM Network	ezxml_project	ezxml	An issue was discovered in ezXML 0.8.3 through 0.8.6. The function ezxml_decode, while parsing crafted a XML file, performs incorrect memory handling, leading to a heap-based buffer over-read in the …	CWE-125 Out-of-bounds Read	CVE-2019-20200	2024-11-21 13:38	2020-01-1	Show	GitHub Exploit DB Packet Storm

221983	6.5	MEDIUM Network	ezxml_project	ezxml	An issue was discovered in ezXML 0.8.3 through 0.8.6. The function ezxml_decode, while parsing a crafted XML file, performs incorrect memory handling, leading to NULL pointer dereference while runnin…	CWE-125 CWE-476 Out-of-bounds Read NULL Pointer Dereference	CVE-2019-20199	2024-11-21 13:38	2020-01-1	Show	GitHub Exploit DB Packet Storm

221984	6.5	MEDIUM Network	ezxml_project	ezxml	An issue was discovered in ezXML 0.8.3 through 0.8.6. The function ezxml_ent_ok() mishandles recursion, leading to stack consumption for a crafted XML file.	CWE-674 Uncontrolled Recursion	CVE-2019-20198	2024-11-21 13:38	2020-01-1	Show	GitHub Exploit DB Packet Storm

221985	8.8	HIGH Network	nagios	nagios_xi	In Nagios XI 5.6.9, an authenticated user is able to execute arbitrary OS commands via shell metacharacters in the id parameter to schedulereport.php, in the context of the web-server user account.	CWE-78 OS Command	CVE-2019-20197	2024-11-21 13:38	2020-01-1	Show	GitHub Exploit DB Packet Storm

221986	7.5	HIGH Network	pureftpd fedoraproject	pure-ftpd fedora	In Pure-FTPd 1.0.49, a stack exhaustion issue was discovered in the listdir function in ls.c.	CWE-400 Uncontrolled Resource Consumption	CVE-2019-20176	2024-11-21 13:38	2020-01-1	Show	GitHub Exploit DB Packet Storm

221987	7.5	HIGH Network	qemu	qemu	An issue was discovered in ide_dma_cb() in hw/ide/core.c in QEMU 2.4.0 through 4.2.0. The guest system can crash the QEMU process in the host system via a special SCSI_IOCTL_SEND_COMMAND. It hits an …	CWE-754 Improper Check for Unusual or Exceptional Conditions	CVE-2019-20175	2024-11-21 13:38	2019-12-31	Show	GitHub Exploit DB Packet Storm

221988	7.8	HIGH Local	serenityos	serenityos	Kernel/VM/MemoryManager.cpp in SerenityOS before 2019-12-30 does not reject syscalls with pointers into the kernel-only virtual address space, which allows local users to gain privileges by overwriti…	CWE-119 Incorrect Access of Indexable Resource ('Range Error')	CVE-2019-20172	2024-11-21 13:38	2019-12-31	Show	GitHub Exploit DB Packet Storm

221989	5.5	MEDIUM Local	gpac debian	gpac debian_linux	An issue was discovered in GPAC version 0.8.0 and 0.9.0-development-20191109. There is an invalid pointer dereference in the function GF_IPMPX_AUTH_Delete() in odf/ipmpx_code.c.	CWE-763 Release of Invalid Pointer or Reference	CVE-2019-20170	2024-11-21 13:38	2019-12-31	Show	GitHub Exploit DB Packet Storm

221990	5.5	MEDIUM Local	gpac	gpac	An issue was discovered in GPAC version 0.8.0 and 0.9.0-development-20191109. There is a use-after-free in the function trak_Read() in isomedia/box_code_base.c.	CWE-416 Use After Free	CVE-2019-20169	2024-11-21 13:38	2019-12-31	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed