Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 30, 2026, 4 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
229611 9.3 危険 securecomputing - Secure Computing Secure Web Gateway における HTML ドキュメント内のマルウェアの検出を回避される脆弱性 CWE-20
不適切な入力確認 		CVE-2008-5540 2012-12-20 18:52 2008-12-12 Show GitHub Exploit DB Packet Storm
229612 9.3 危険 Beijing Rising International Software - RISING Antivirus における HTML 文書内のマルウェアの検出を回避される脆弱性 CWE-20
不適切な入力確認 		CVE-2008-5539 2012-12-20 18:52 2008-12-12 Show GitHub Exploit DB Packet Storm
229613 9.3 危険 ウェブルート株式会社 - Prevx Prevx における HTML 文書内のマルウェアの検知を回避される脆弱性 CWE-20
不適切な入力確認 		CVE-2008-5538 2012-12-20 18:52 2008-12-12 Show GitHub Exploit DB Packet Storm
229614 9.3 危険 クイックヒール・テクノロジーズ・ジャパン株式会社 - CAT-QuickHeal におけるマルウェアの検知を回避される脆弱性 CWE-20
不適切な入力確認 		CVE-2008-5524 2012-12-20 18:52 2008-12-12 Show GitHub Exploit DB Packet Storm
229615 7.5 危険 pozscripts - PozScripts Business Directory Script の showcategory.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-5496 2012-12-20 18:52 2008-12-12 Show GitHub Exploit DB Packet Storm
229616 7.5 危険 phpstore - PHPStore Wholesales の track.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-5493 2012-12-20 18:52 2008-12-12 Show GitHub Exploit DB Packet Storm
229617 9.3 危険 verypdf - VeryDOC PDF Viewer OCX Control の pdfview.ocx におけるヒープベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2008-5492 2012-12-20 18:52 2008-12-12 Show GitHub Exploit DB Packet Storm
229618 7.5 危険 slimcms - SlimCMS の edit.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-5491 2012-12-20 18:52 2008-12-12 Show GitHub Exploit DB Packet Storm
229619 7.5 危険 phpstore - PHPStore Yahoo Answers の index.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-5490 2012-12-20 18:52 2008-12-12 Show GitHub Exploit DB Packet Storm
229620 4.3 警告 turnkeyforms - TurnkeyForms Text Link Sales の admin.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2008-5487 2012-12-20 18:52 2008-12-12 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 30, 2026, 4:16 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
224921 7.0 HIGH
Local 		microsoft windows_10
windows_server_2016
windows_server_2019 		An elevation of privilege vulnerability exists due to a race condition in Windows Subsystem for Linux, aka 'Windows Subsystem for Linux Elevation of Privilege Vulnerability'. CWE-362
Race Condition 		CVE-2019-1416 2024-11-21 13:36 2019-11-13 Show GitHub Exploit DB Packet Storm
224922 7.8 HIGH
Local 		microsoft windows_server_2008
windows_server_2012
windows_10
windows_8.1
windows_server_2016
windows_7
windows_rt_8.1
windows_server_2019 		An elevation of privilege vulnerability exists in Windows Installer because of the way Windows Installer handles certain filesystem operations.To exploit the vulnerability, an attacker would require … NVD-CWE-noinfo
CVE-2019-1415 2024-11-21 13:36 2019-11-13 Show GitHub Exploit DB Packet Storm
224923 4.3 MEDIUM
Network 		microsoft edge A security feature bypass vulnerability exists when Microsoft Edge improperly handles extension requests and fails to request host permission for all_urls, aka 'Microsoft Edge Security Feature Bypass… CWE-346
 Origin Validation Error 		CVE-2019-1413 2024-11-21 13:36 2019-11-13 Show GitHub Exploit DB Packet Storm
224924 5.5 MEDIUM
Local 		microsoft windows_server_2008
windows_server_2012
windows_8.1
windows_7
windows_rt_8.1 		An information disclosure vulnerability exists in Windows Adobe Type Manager Font Driver (ATMFD.dll) when it fails to properly handle objects in memory, aka 'OpenType Font Driver Information Disclosu… CWE-125
Out-of-bounds Read 		CVE-2019-1412 2024-11-21 13:36 2019-11-13 Show GitHub Exploit DB Packet Storm
224925 6.5 MEDIUM
Network 		microsoft windows_server_2008
windows_server_2012
windows_10
windows_8.1
windows_server_2016
windows_7
windows_rt_8.1
windows_server_2019 		An information disclosure vulnerability exists when DirectWrite improperly discloses the contents of its memory, aka 'DirectWrite Information Disclosure Vulnerability'. This CVE ID is unique from CVE… CWE-125
Out-of-bounds Read 		CVE-2019-1411 2024-11-21 13:36 2019-11-13 Show GitHub Exploit DB Packet Storm
224926 5.5 MEDIUM
Local 		microsoft windows_server_2008
windows_server_2012
windows_10
windows_8.1
windows_server_2016
windows_7
windows_rt_8.1
windows_server_2019 		An information disclosure vulnerability exists when the Windows Remote Procedure Call (RPC) runtime improperly initializes objects in memory, aka 'Windows Remote Procedure Call Information Disclosure… CWE-665
 Improper Initialization 		CVE-2019-1409 2024-11-21 13:36 2019-11-13 Show GitHub Exploit DB Packet Storm
224927 7.8 HIGH
Local 		microsoft windows_server_2008
windows_server_2012
windows_10
windows_8.1
windows_server_2016
windows_7
windows_rt_8.1
windows_server_2019 		An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory, aka 'Win32k Elevation of Privilege Vulnerability'. This CVE ID is uniqu… CWE-787
 Out-of-bounds Write 		CVE-2019-1408 2024-11-21 13:36 2019-11-13 Show GitHub Exploit DB Packet Storm
224928 7.8 HIGH
Local 		microsoft windows_server_2008
windows_server_2012
windows_10
windows_8.1
windows_server_2016
windows_rt_8.1
windows_7 		An elevation of privilege vulnerability exists when the Windows Graphics Component improperly handles objects in memory, aka 'Windows Graphics Component Elevation of Privilege Vulnerability'. This CV… NVD-CWE-noinfo
CVE-2019-1407 2024-11-21 13:36 2019-11-13 Show GitHub Exploit DB Packet Storm
224929 7.8 HIGH
Local 		microsoft windows_server_2008
windows_server_2012
windows_10
windows_8.1
windows_server_2016
windows_7
windows_rt_8.1
windows_server_2019 		A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory, aka 'Jet Database Engine Remote Code Execution Vulnerability'. NVD-CWE-noinfo
CVE-2019-1406 2024-11-21 13:36 2019-11-13 Show GitHub Exploit DB Packet Storm
224930 7.8 HIGH
Local 		microsoft windows_server_2008
windows_server_2012
windows_10
windows_8.1
windows_server_2016
windows_7
windows_rt_8.1
windows_server_2019 		An elevation of privilege vulnerability exists when the Windows Universal Plug and Play (UPnP) service improperly allows COM object creation, aka 'Windows UPnP Service Elevation of Privilege Vulnerab… NVD-CWE-noinfo
CVE-2019-1405 2024-11-21 13:36 2019-11-13 Show GitHub Exploit DB Packet Storm