Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 18, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
229671 7.5 危険 php-residence - php-residence の visualizza_tabelle.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-0353 2012-12-20 18:34 2008-01-18 Show GitHub Exploit DB Packet Storm
229672 2.6 注意 pmachine - PMachine Pro の pm/language/spanish/preferences.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2008-0334 2012-12-20 18:34 2008-01-17 Show GitHub Exploit DB Packet Storm
229673 7.8 危険 radiator - OSC Radiator におけるサービス運用妨害 (DoS) の脆弱性 CWE-287
不適切な認証 		CVE-2008-0330 2012-12-20 18:34 2008-01-17 Show GitHub Exploit DB Packet Storm
229674 6.8 警告 シマンテック - Norton 360 などの Symantec Norton 製品の ActiveDataInfo.LaunchProcess メソッドにおける任意のコードを実行される脆弱性 CWE-DesignError
CVE-2008-0313 2012-12-20 18:34 2008-04-2 Show GitHub Exploit DB Packet Storm
229675 9.3 危険 シマンテック - Norton 360 などの Symantec Norton 製品の AutoFix Support Tool ActiveX コントロールにおけるスタックベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2008-0312 2012-12-20 18:34 2008-04-2 Show GitHub Exploit DB Packet Storm
229676 6.9 警告 SCO - SCO UnixWare の pkgadd におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2008-0310 2012-12-20 18:34 2008-02-27 Show GitHub Exploit DB Packet Storm
229677 6.8 警告 シマンテック - Symantec Scan Engine を含む特定の Symantec アンチウイルス製品で使用される Symantec Decomposer におけるスタックベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2008-0309 2012-12-20 18:34 2008-02-26 Show GitHub Exploit DB Packet Storm
229678 7.1 危険 シマンテック - Symantec Scan Engine を含む特定の Symantec アンチウイルス製品で使用される Symantec Decomposer におけるサービス運用妨害 (DoS) の脆弱性 CWE-399
リソース管理の問題 		CVE-2008-0308 2012-12-20 18:34 2008-02-26 Show GitHub Exploit DB Packet Storm
229679 9.3 危険 SAP - SAP MaxDB の vserver における整数符号エラーの脆弱性 CWE-189
数値処理の問題 		CVE-2008-0307 2012-12-20 18:34 2008-03-11 Show GitHub Exploit DB Packet Storm
229680 6.9 警告 SAP - SAP MaxDB の sdbstarter における任意のコマンドを実行される脆弱性 CWE-DesignError
CVE-2008-0306 2012-12-20 18:34 2008-03-11 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 18, 2026, 4:12 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
222541 5.3 MEDIUM
Network 		mfscripts yetishare _account_forgot_password.ajax.php in MFScripts YetiShare 3.5.2 through 4.5.3 takes a different amount of time to return depending on whether an email address is configured for the account name provid… CWE-203
 Information Exposure Through Discrepancy 		CVE-2019-19805 2024-11-21 13:35 2019-12-31 Show GitHub Exploit DB Packet Storm
222542 7.5 HIGH
Network 		mfscripts yetishare MFScripts YetiShare 3.5.2 through 4.5.3 does not set the Secure flag on session cookies, allowing the cookie to be sent over cleartext channels. CWE-311
Missing Encryption of Sensitive Data 		CVE-2019-19739 2024-11-21 13:35 2019-12-31 Show GitHub Exploit DB Packet Storm
222543 6.1 MEDIUM
Network 		mfscripts yetishare log_file_viewer.php in MFScripts YetiShare 3.5.2 through 4.5.3 does not sanitize or encode the output from the lFile parameter on the page, which would allow an attacker to input HTML or execute scri… CWE-79
Cross-site Scripting 		CVE-2019-19738 2024-11-21 13:35 2019-12-31 Show GitHub Exploit DB Packet Storm
222544 8.8 HIGH
Network 		mfscripts yetishare MFScripts YetiShare 3.5.2 through 4.5.3 does not set the SameSite flag on session cookies, allowing the cookie to be sent in cross-site requests and potentially be used in cross-site request forgery … CWE-352
 Origin Validation Error 		CVE-2019-19737 2024-11-21 13:35 2019-12-31 Show GitHub Exploit DB Packet Storm
222545 6.1 MEDIUM
Network 		mfscripts yetishare MFScripts YetiShare 3.5.2 through 4.5.3 does not set the HttpOnly flag on session cookies, allowing the cookie to be read by script, which can potentially be used by attackers to obtain the cookie vi… CWE-732
 Incorrect Permission Assignment for Critical Resource 		CVE-2019-19736 2024-11-21 13:35 2019-12-31 Show GitHub Exploit DB Packet Storm
222546 9.1 CRITICAL
Network 		mfscripts yetishare class.userpeer.php in MFScripts YetiShare 3.5.2 through 4.5.3 uses an insecure method of creating password reset hashes (based only on microtime), which allows an attacker to guess the hash and set t… CWE-916
 Use of Password Hash With Insufficient Computational Effort 		CVE-2019-19735 2024-11-21 13:35 2019-12-31 Show GitHub Exploit DB Packet Storm
222547 8.8 HIGH
Network 		mfscripts yetishare _account_move_file_in_folder.ajax.php in MFScripts YetiShare 3.5.2 directly inserts values from the fileIds parameter into a SQL string. This allows an attacker to inject their own SQL and manipulate… CWE-89
SQL Injection 		CVE-2019-19734 2024-11-21 13:35 2019-12-31 Show GitHub Exploit DB Packet Storm
222548 6.1 MEDIUM
Network 		mfscripts yetishare _get_all_file_server_paths.ajax.php (aka get_all_file_server_paths.ajax.php) in MFScripts YetiShare 3.5.2 through 4.5.3 does not sanitize or encode the output from the fileIds parameter on the page, … CWE-79
Cross-site Scripting 		CVE-2019-19733 2024-11-21 13:35 2019-12-31 Show GitHub Exploit DB Packet Storm
222549 7.2 HIGH
Network 		mfscripts yetishare translation_manage_text.ajax.php and various *_manage.ajax.php in MFScripts YetiShare 3.5.2 through 4.5.3 directly insert values from the aSortDir_0 and/or sSortDir_0 parameter into a SQL string. Thi… CWE-89
SQL Injection 		CVE-2019-19732 2024-11-21 13:35 2019-12-31 Show GitHub Exploit DB Packet Storm
222550 9.8 CRITICAL
Network 		citrix application_delivery_controller_firmware
netscaler_gateway_firmware
gateway_firmware 		An issue was discovered in Citrix Application Delivery Controller (ADC) and Gateway 10.5, 11.1, 12.0, 12.1, and 13.0. They allow Directory Traversal. CWE-22
Path Traversal 		CVE-2019-19781 2024-11-21 13:35 2019-12-27 Show GitHub Exploit DB Packet Storm