Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 18, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
229521	4.3	警告	xrms crm	-	XRMS CRM の admin/users/self.php におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2008-1129	2012-12-20 18:34	2008-03-3	Show	GitHub Exploit DB Packet Storm

229522	6.8	警告	phpmytourney	-	phpMyTourney の tourney/index.php における PHP リモートファイルインクルージョンの脆弱性	CWE-94 コード・インジェクション	CVE-2008-1128	2012-12-20 18:34	2008-03-3	Show	GitHub Exploit DB Packet Storm

229523	5	警告	podcast generator	-	Podcast Generator におけるディレクトリトラバーサルの脆弱性	CWE-22 パス・トラバーサル	CVE-2008-1125	2012-12-20 18:34	2008-03-3	Show	GitHub Exploit DB Packet Storm

229524	6.8	警告	podcast generator	-	Podcast Generator における PHP リモートファイルインクルージョンの脆弱性	CWE-94 コード・インジェクション	CVE-2008-1124	2012-12-20 18:34	2008-03-3	Show	GitHub Exploit DB Packet Storm

229525	6.8	警告	sitebuilder	-	SiteBuilder Elite における PHP リモートファイルインクルージョンの脆弱性	CWE-94 コード・インジェクション	CVE-2008-1123	2012-12-20 18:34	2008-03-3	Show	GitHub Exploit DB Packet Storm

229526	9.3	危険	rising antivirus international	-	Rising Antivirus Online Scanner の Web Scan Object ActiveX コントロールにおける任意のコードを強制的にダウンロードされる脆弱性	CWE-DesignError	CVE-2008-1116	2012-12-20 18:34	2008-03-3	Show	GitHub Exploit DB Packet Storm

229527	7.8	危険	Vocera	-	Cisco Unified Wireless IP Phone 7921 におけるハッシュされたパスワードを盗まれる脆弱性	CWE-200 情報漏えい	CVE-2008-1113	2012-12-20 18:34	2008-03-3	Show	GitHub Exploit DB Packet Storm

229528	6.8	警告	Xine	-	xine-lib の xineplug_dmx_asf.so プラグインにおけるバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2008-1110	2012-12-20 18:34	2008-02-29	Show	GitHub Exploit DB Packet Storm

229529	6.8	警告	quantum game library	-	Quantum Game Library における PHP リモートファイルインクルージョンの脆弱性	CWE-94 コード・インジェクション	CVE-2008-1069	2012-12-20 18:34	2008-02-28	Show	GitHub Exploit DB Packet Storm

229530	6.8	警告	portail web php	-	Portail Web Php における PHP リモートファイルインクルージョンの脆弱性	CWE-94 コード・インジェクション	CVE-2008-1068	2012-12-20 18:34	2008-02-28	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 18, 2026, 4:12 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
222251	6.4	MEDIUM Network	microsoft	internet_explorer edge	A remote code execution vulnerability exists in the way that Microsoft browsers access objects in memory. The vulnerability could corrupt memory in a way that could allow an attacker to execute arbit…	CWE-787 Out-of-bounds Write	CVE-2019-1193	2024-11-21 13:36	2019-08-15	Show	GitHub Exploit DB Packet Storm

222252	4.3	MEDIUM Network	microsoft	internet_explorer edge	A security feature bypass vulnerability exists when Microsoft browsers improperly handle requests of different origins. The vulnerability allows Microsoft browsers to bypass Same-Origin Policy (SOP) …	CWE-863 Incorrect Authorization	CVE-2019-1192	2024-11-21 13:36	2019-08-15	Show	GitHub Exploit DB Packet Storm

222253	7.8	HIGH Local	microsoft	windows_server_2019 windows_10 windows_server_2016	An elevation of privilege vulnerability exists in the way that the Windows kernel image handles objects in memory. An attacker who successfully exploited the vulnerability could execute code with ele…	NVD-CWE-noinfo	CVE-2019-1190	2024-11-21 13:36	2019-08-15	Show	GitHub Exploit DB Packet Storm

222254	7.5	HIGH Network	microsoft	windows_10 windows_server_2016 windows_server_2019	A remote code execution vulnerability exists in Microsoft Windows that could allow remote code execution if a .LNK file is processed. An attacker who successfully exploited this vulnerability could g…	CWE-59 Link Following	CVE-2019-1188	2024-11-21 13:36	2019-08-15	Show	GitHub Exploit DB Packet Storm

222255	5.5	MEDIUM Local	microsoft	windows_server_2012 windows_10 windows_8.1 windows_server_2016 windows_server_2008 windows_7 windows_rt_8.1 windows_server_2019	A denial of service vulnerability exists when the XmlLite runtime (XmlLite.dll) improperly parses XML input. An attacker who successfully exploited this vulnerability could cause a denial of service …	CWE-611 XXE	CVE-2019-1187	2024-11-21 13:36	2019-08-15	Show	GitHub Exploit DB Packet Storm

222256	6.7	MEDIUM Local	microsoft	windows_10 windows_server_2016 windows_server_2019	An elevation of privilege vulnerability exists when Windows Core Shell COM Server Registrar improperly handles COM calls. An attacker who successfully exploited this vulnerability could potentially s…	NVD-CWE-noinfo	CVE-2019-1184	2024-11-21 13:36	2019-08-15	Show	GitHub Exploit DB Packet Storm

222257	9.8	CRITICAL Network	microsoft	windows_server_2012 windows_10 windows_8.1 windows_server_2016 windows_server_2008 windows_7 windows_server_2019 windows_rt_8.1	A remote code execution vulnerability exists in Remote Desktop Services – formerly known as Terminal Services – when an unauthenticated attacker connects to the target system using RDP and sends spec…	NVD-CWE-noinfo	CVE-2019-1182	2024-11-21 13:36	2019-08-15	Show	GitHub Exploit DB Packet Storm

222258	9.8	CRITICAL Network	microsoft	windows_server_2012 windows_10 windows_8.1 windows_server_2016 windows_server_2008 windows_7 windows_server_2019 windows_rt_8.1	A remote code execution vulnerability exists in Remote Desktop Services – formerly known as Terminal Services – when an unauthenticated attacker connects to the target system using RDP and sends spec…	NVD-CWE-noinfo	CVE-2019-1181	2024-11-21 13:36	2019-08-15	Show	GitHub Exploit DB Packet Storm

222259	7.0	HIGH Local	microsoft	windows_server_2012 windows_10 windows_8.1 windows_server_2016 windows_rt_8.1 windows_server_2019	An elevation of privilege vulnerability exists in the way that the wcmsvc.dll handles objects in memory. An attacker who successfully exploited the vulnerability could execute code with elevated perm…	NVD-CWE-noinfo	CVE-2019-1180	2024-11-21 13:36	2019-08-15	Show	GitHub Exploit DB Packet Storm

222260	7.0	HIGH Local	microsoft	windows_server_2012 windows_10 windows_8.1 windows_server_2016 windows_server_2008 windows_server_2019 windows_7 windows_rt_8.1	An elevation of privilege vulnerability exists in the way that the ssdpsrv.dll handles objects in memory. An attacker who successfully exploited the vulnerability could execute code with elevated per…	NVD-CWE-noinfo	CVE-2019-1178	2024-11-21 13:36	2019-08-15	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed