Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 27, 2026, 10 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
229551	10	危険	TYPO3 Association	-	TYPO3 Secure Directory エクステンションにおける任意のコードを実行される脆弱性	CWE-94 コード・インジェクション	CVE-2008-4188	2012-12-20 18:52	2008-09-23	Show	GitHub Exploit DB Packet Storm

229552	4.3	警告	proactive cms	-	ProActive CMS の index.php におけるディレクトリトラバーサルの脆弱性	CWE-22 パス・トラバーサル	CVE-2008-4187	2012-12-20 18:52	2008-09-23	Show	GitHub Exploit DB Packet Storm

229553	7.5	危険	webcms	-	webCMS Portal Edition の index.php における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2008-4186	2012-12-20 18:52	2008-09-23	Show	GitHub Exploit DB Packet Storm

229554	9.3	危険	systemrequirementslab	-	Instant Expert Analysis で使用されている LLC Systems Requirements Lab における強制的にダウンロードされる脆弱性	CWE-94 コード・インジェクション	CVE-2008-4385	2012-12-20 18:52	2008-10-14	Show	GitHub Exploit DB Packet Storm

229555	7.8	危険	サムスン	-	Samsung DVR の Web インターフェースにおけるサービス運用妨害 (DoS) の脆弱性	CWE-20 不適切な入力確認	CVE-2008-4380	2012-12-20 18:52	2008-10-1	Show	GitHub Exploit DB Packet Storm

229556	4.3	警告	siteman	-	Siteman の search.php におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2008-4365	2012-12-20 18:52	2008-09-30	Show	GitHub Exploit DB Packet Storm

229557	7.8	危険	powerportal	-	PowerPortal におけるディレクトリトラバーサルの脆弱性	CWE-22 パス・トラバーサル	CVE-2008-4361	2012-12-20 18:52	2008-09-30	Show	GitHub Exploit DB Packet Storm

229558	10	危険	spaw editor	-	SPAW Editor PHP Edtion の class/theme.class.php における脆弱性	CWE-20 不適切な入力確認	CVE-2008-4358	2012-12-20 18:52	2008-09-30	Show	GitHub Exploit DB Packet Storm

229559	7.5	危険	Powie	-	Powie pLink の linkto.php における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2008-4357	2012-12-20 18:52	2008-09-30	Show	GitHub Exploit DB Packet Storm

229560	7.5	危険	Powie	-	Powie PSCRIPT Forum の showprofil.php における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2008-4355	2012-12-20 18:52	2008-09-30	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 27, 2026, 4:52 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
224851	7.3	HIGH Network	chartkick	chartkick.js	Chartkick.js 3.1.0 through 3.1.3, as used in the Chartkick gem before 3.3.0 for Ruby, allows prototype pollution.	NVD-CWE-noinfo	CVE-2019-18841	2024-11-21 13:33	2019-11-11	Show	GitHub Exploit DB Packet Storm

224852	7.5	HIGH Network	envoyproxy istio	envoy istio	Envoy 1.12.0 allows a remote denial of service because of resource loops, as demonstrated by a single idle TCP connection being able to keep a worker thread in an infinite busy loop when continue_on_…	CWE-835 Loop with Unreachable Exit Condition ('Infinite Loop')	CVE-2019-18836	2024-11-21 13:33	2019-11-11	Show	GitHub Exploit DB Packet Storm

224853	7.1	HIGH Local	patriotmemory	viper_rgb_firmware	The MsIo64.sys and MsIo32.sys drivers in Patriot Viper RGB before 1.1 allow local users (including low integrity processes) to read and write to arbitrary memory locations, and consequently gain NT A…	CWE-269 Improper Privilege Management	CVE-2019-18845	2024-11-21 13:33	2019-11-10	Show	GitHub Exploit DB Packet Storm

224854	7.5	HIGH Network	wolfssl	wolfssl	In wolfSSL 4.1.0 through 4.2.0c, there are missing sanity checks of memory accesses in parsing ASN.1 certificate data while handshaking. Specifically, there is a one-byte heap-based buffer overflow i…	CWE-787 Out-of-bounds Write	CVE-2019-18840	2024-11-21 13:33	2019-11-9	Show	GitHub Exploit DB Packet Storm

224855	9.8	CRITICAL Network	energycap	energycap	Escalation of privileges in EnergyCAP 7 through 7.5.6 allows an attacker to access data. If an unauthenticated user clicks on a link on the public dashboard, the resource opens in EnergyCAP with acce…	CWE-269 Improper Privilege Management	CVE-2019-18623	2024-11-21 13:33	2019-11-9	Show	GitHub Exploit DB Packet Storm

224856	9.8	CRITICAL Network	matrix	synapse	Matrix Synapse before 1.5.0 mishandles signature checking on some federation APIs. Events sent over /send_join, /send_leave, and /invite may not be correctly signed, or may not come from the expected…	CWE-345 Insufficient Verification of Data Authenticity	CVE-2019-18835	2024-11-21 13:33	2019-11-8	Show	GitHub Exploit DB Packet Storm

224857	9.8	CRITICAL Network	strapi	strapi	strapi before 3.0.0-beta.17.5 mishandles password resets within packages/strapi-admin/controllers/Auth.js and packages/strapi-plugin-users-permissions/controllers/Auth.js.	CWE-640 Weak Password Recovery Mechanism for Forgotten Password	CVE-2019-18818	2024-11-21 13:33	2019-11-8	Show	GitHub Exploit DB Packet Storm

224858	5.5	MEDIUM Local	eximioussoft	logo_designer	Eximious Logo Designer 3.82 has a User Mode Write AV starting at ExiCustomPathLib!ExiCustomPathLib::CGradientColorsProfile::BuildGradientColorsTable+0x0000000000000053.	CWE-787 Out-of-bounds Write	CVE-2019-18821	2024-11-21 13:33	2019-11-8	Show	GitHub Exploit DB Packet Storm

224859	5.5	MEDIUM Local	eximioussoft	logo_designer	Eximious Logo Designer 3.82 has Heap Corruption starting at ntdll!RtlpNtMakeTemporaryKey+0x0000000000001a78.	CWE-787 Out-of-bounds Write	CVE-2019-18820	2024-11-21 13:33	2019-11-8	Show	GitHub Exploit DB Packet Storm

224860	5.5	MEDIUM Local	eximioussoft	logo_designer	Eximious Logo Designer 3.82 has a User Mode Write AV starting at ExiVectorRender!StrokeText_Blend+0x00000000000003a7.	CWE-787 Out-of-bounds Write	CVE-2019-18819	2024-11-21 13:33	2019-11-8	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed