Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 27, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
229571	7.5	危険	talkback	-	TalkBack におけるディレクトリトラバーサルの脆弱性	CWE-22 パス・トラバーサル	CVE-2008-4346	2012-12-20 18:52	2008-09-30	Show	GitHub Exploit DB Packet Storm

229572	7.5	危険	webportal	-	WebPortal CMS の download.php における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2008-4345	2012-12-20 18:52	2008-09-30	Show	GitHub Exploit DB Packet Storm

229573	6	警告	vacilanda	-	Drupal 用の Brilliant Gallery モジュールにおける SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2008-4338	2012-12-20 18:52	2008-09-30	Show	GitHub Exploit DB Packet Storm

229574	7.5	危険	phpocs	-	phpOCS の library/pagefunctions.inc.php におけるディレクトリトラバーサルの脆弱性	CWE-22 パス・トラバーサル	CVE-2008-4331	2012-12-20 18:52	2008-09-30	Show	GitHub Exploit DB Packet Storm

229575	5.8	警告	ViewVC	-	ViewVC の lib/viewvc.py におけるブラウザにコンテンツを誤って解釈させる脆弱性	CWE-noinfo 情報不足	CVE-2008-4325	2012-12-20 18:52	2008-06-4	Show	GitHub Exploit DB Packet Storm

229576	10	危険	project-observer	-	Observer における任意のコマンドを実行される脆弱性	CWE-20 不適切な入力確認	CVE-2008-4318	2012-12-20 18:52	2008-09-29	Show	GitHub Exploit DB Packet Storm

229577	9	危険	phpCollab	-	phpCollab の installation/setup.php における include/settings.php に任意の PHP コードを挿入される脆弱性	CWE-94 コード・インジェクション	CVE-2008-4305	2012-12-20 18:52	2008-12-23	Show	GitHub Exploit DB Packet Storm

229578	10	危険	phpCollab	-	phpCollab の general/login.php における任意のコマンドを実行される脆弱性	CWE-78 OSコマンド・インジェクション	CVE-2008-4304	2012-12-20 18:52	2008-12-23	Show	GitHub Exploit DB Packet Storm

229579	6.8	警告	phpCollab	-	phpCollab における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2008-4303	2012-12-20 18:52	2008-12-23	Show	GitHub Exploit DB Packet Storm

229580	6.5	警告	rianxosencabos cms	-	Rianxosencabos CMS の Admin Control Panel におけるユーザの権限を変更される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2008-4245	2012-12-20 18:52	2008-09-25	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 27, 2026, 4:52 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
221731	5.5	MEDIUM Local	google	android	There is a possible disclosure of RAM using a shared crypto key due to improperly used crypto. This could lead to local information disclosure with no additional execution privileges needed. User int…	NVD-CWE-noinfo	CVE-2019-2056	2024-11-21 13:40	2020-04-18	Show	GitHub Exploit DB Packet Storm

221732	5.4	MEDIUM Network	mongodb	js-bson	Incorrect parsing of certain JSON input may result in js-bson not correctly serializing BSON. This may cause unexpected application behaviour including data disclosure. This issue affects: MongoDB In…	CWE-502 Deserialization of Untrusted Data	CVE-2019-2391	2024-11-21 13:40	2020-03-31	Show	GitHub Exploit DB Packet Storm

221733	7.3	HIGH Local	google	android	In overlay notifications, there is a possible hidden notification due to improper input validation. This could lead to a local escalation of privilege because the user is not notified of an overlayin…	CWE-20 Improper Input Validation	CVE-2019-2216	2024-11-21 13:40	2020-03-16	Show	GitHub Exploit DB Packet Storm

221734	7.8	HIGH Local	google	android	In app uninstallation, there is a possible set of permissions that may not be removed from a shared app ID. This could lead to a local escalation of privilege with no additional execution privileges …	CWE-732 Incorrect Permission Assignment for Critical Resource	CVE-2019-2089	2024-11-21 13:40	2020-03-16	Show	GitHub Exploit DB Packet Storm

221735	5.5	MEDIUM Local	google	android	In StatsService, there is a possible out of bounds read. This could lead to local information disclosure if UBSAN were not enabled, with no additional execution privileges needed. User interaction is…	CWE-125 Out-of-bounds Read	CVE-2019-2088	2024-11-21 13:40	2020-03-16	Show	GitHub Exploit DB Packet Storm

221736	6.5	MEDIUM Network	google	android	In libAACdec, there is a possible out of bounds read. This could lead to remote information disclosure, with no additional execution privileges needed. User interaction is needed for exploitation.Pro…	CWE-125 Out-of-bounds Read	CVE-2019-2058	2024-11-21 13:40	2020-03-16	Show	GitHub Exploit DB Packet Storm

221737	9.8	CRITICAL Network	qualcomm	msm8905_firmware msm8909_firmware msm8917_firmware msm8920_firmware msm8937_firmware msm8940_firmware msm8953_firmware nicobar_firmware qcm2150_firmware qm215_firmware s…	The secret key used to make the Initial Sequence Number in the TCP SYN packet could be brute forced and therefore can be predicted in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Sna…	CWE-330 Use of Insufficiently Random Values	CVE-2019-2317	2024-11-21 13:40	2020-03-5	Show	GitHub Exploit DB Packet Storm

221738	9.8	CRITICAL Network	qualcomm	apq8009_firmware apq8017_firmware apq8096_firmware apq8096au_firmware apq8098_firmware ipq8074_firmware mdm9206_firmware mdm9207c_firmware mdm9607_firmware mdm9640_firmware…	Possible buffer overflow in WLAN handler due to lack of validation of destination buffer size before copying it in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer El…	CWE-120 Classic Buffer Overflow	CVE-2019-2311	2024-11-21 13:40	2020-03-5	Show	GitHub Exploit DB Packet Storm

221739	9.8	CRITICAL Network	qualcomm	apq8009_firmware apq8017_firmware apq8053_firmware apq8096_firmware apq8098_firmware ipq8074_firmware mdm9206_firmware mdm9207c_firmware mdm9607_firmware msm8996_firmware	Possible buffer overflow in WLAN handler due to lack of validation of destination buffer size before copying into it in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consum…	CWE-120 Classic Buffer Overflow	CVE-2019-2300	2024-11-21 13:40	2020-03-5	Show	GitHub Exploit DB Packet Storm

221740	7.3	HIGH Local	google	android	In updatePermissions of PermissionManagerService.java, it may be possible for a malicious app to obtain a custom permission from another app due to a permission bypass. This could lead to local escal…	CWE-276 Incorrect Default Permissions	CVE-2019-2200	2024-11-21 13:40	2020-02-14	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed