Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 24, 2026, 2 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
229681	7.5	危険	phpbbportal	-	PHPortal の sablonlar/gunaysoft/gunaysoft.php における PHP リモートファイルインクルージョンの脆弱性	CWE-94 コード・インジェクション	CVE-2008-3022	2012-12-20 18:52	2008-07-7	Show	GitHub Exploit DB Packet Storm

229682	7.5	危険	phpeasydata	-	PHPEasyData における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2008-2995	2012-12-20 18:52	2008-07-3	Show	GitHub Exploit DB Packet Storm

229683	4.3	警告	phpeasydata	-	PHPEasyData におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2008-2994	2012-12-20 18:52	2008-07-3	Show	GitHub Exploit DB Packet Storm

229684	7.5	危険	phpdmca	-	phpDMCA における PHP リモートファイルインクルージョンの脆弱性	CWE-94 コード・インジェクション	CVE-2008-2986	2012-12-20 18:52	2008-07-2	Show	GitHub Exploit DB Packet Storm

229685	6.8	警告	tinx cms	-	TinX/cms におけるディレクトリトラバーサルの脆弱性	CWE-22 パス・トラバーサル	CVE-2008-2976	2012-12-20 18:52	2008-07-2	Show	GitHub Exploit DB Packet Storm

229686	4.3	警告	tinx cms	-	TinX/cms の admin/objects/obj_image.php におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2008-2975	2012-12-20 18:52	2008-07-2	Show	GitHub Exploit DB Packet Storm

229687	7.5	危険	yektaweb	-	AWT YEKTA におけるセッションをハイジャックされる脆弱性	CWE-20 不適切な入力確認	CVE-2008-2970	2012-12-20 18:52	2008-07-2	Show	GitHub Exploit DB Packet Storm

229688	5	警告	yektaweb	-	AWT YEKTA の download.php におけるディレクトリトラバーサルの脆弱性	CWE-22 パス・トラバーサル	CVE-2008-2969	2012-12-20 18:52	2008-07-2	Show	GitHub Exploit DB Packet Storm

229689	7.5	危険	yektaweb	-	AWT YEKTA の rating.php における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2008-2968	2012-12-20 18:52	2008-07-2	Show	GitHub Exploit DB Packet Storm

229690	4.3	警告	yektaweb	-	AWT YEKTA におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2008-2967	2012-12-20 18:52	2008-07-2	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 24, 2026, 4:05 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
222201	6.5	MEDIUM Network	cesnet	libyang	A NULL pointer dereference is present in libyang before v1.0-r3 in the function lys_extension_instances_free() due to a copy of unresolved extensions in lys_restr_dup(). Applications that use libyang…	CWE-476 NULL Pointer Dereference	CVE-2019-20398	2024-11-21 13:38	2020-01-23	Show	GitHub Exploit DB Packet Storm

222202	8.8	HIGH Network	cesnet	libyang	A double-free is present in libyang before v1.0-r1 in the function yyparse() when an organization field is not terminated. Applications that use libyang to parse untrusted input yang files may be vul…	CWE-415 Double Free	CVE-2019-20397	2024-11-21 13:38	2020-01-23	Show	GitHub Exploit DB Packet Storm

222203	6.5	MEDIUM Network	cesnet	libyang	A segmentation fault is present in yyparse in libyang before v1.0-r1 due to a malformed pattern statement value during lys_parse_path parsing.	CWE-119 Incorrect Access of Indexable Resource ('Range Error')	CVE-2019-20396	2024-11-21 13:38	2020-01-23	Show	GitHub Exploit DB Packet Storm

222204	6.5	MEDIUM Network	cesnet	libyang	A stack consumption issue is present in libyang before v1.0-r1 due to the self-referential union type containing leafrefs. Applications that use libyang to parse untrusted input yang files may crash.	CWE-674 Uncontrolled Recursion	CVE-2019-20395	2024-11-21 13:38	2020-01-23	Show	GitHub Exploit DB Packet Storm

222205	8.8	HIGH Network	cesnet	libyang	A double-free is present in libyang before v1.0-r3 in the function yyparse() when a type statement in used in a notification statement. Applications that use libyang to parse untrusted input yang fil…	CWE-415 Double Free	CVE-2019-20394	2024-11-21 13:38	2020-01-23	Show	GitHub Exploit DB Packet Storm

222206	8.8	HIGH Network	cesnet	libyang	A double-free is present in libyang before v1.0-r1 in the function yyparse() when an empty description is used. Applications that use libyang to parse untrusted input yang files may be vulnerable to …	CWE-415 Double Free	CVE-2019-20393	2024-11-21 13:38	2020-01-23	Show	GitHub Exploit DB Packet Storm

222207	6.5	MEDIUM Network	cesnet	libyang	An invalid memory access flaw is present in libyang before v1.0-r1 in the function resolve_feature_value() when an if-feature statement is used inside a list key node, and the feature used is not def…	CWE-119 Incorrect Access of Indexable Resource ('Range Error')	CVE-2019-20392	2024-11-21 13:38	2020-01-23	Show	GitHub Exploit DB Packet Storm

222208	6.5	MEDIUM Network	cesnet	libyang	An invalid memory access flaw is present in libyang before v1.0-r3 in the function resolve_feature_value() when an if-feature statement is used inside a bit. Applications that use libyang to parse un…	CWE-119 Incorrect Access of Indexable Resource ('Range Error')	CVE-2019-20391	2024-11-21 13:38	2020-01-23	Show	GitHub Exploit DB Packet Storm

222209	7.5	HIGH Network	opensuse debian	libsolv debian_linux	repodata_schema2id in repodata.c in libsolv before 0.7.6 has a heap-based buffer over-read via a last schema whose length is less than the length of the input schema.	CWE-125 Out-of-bounds Read	CVE-2019-20387	2024-11-21 13:38	2020-01-22	Show	GitHub Exploit DB Packet Storm

222210	7.5	HIGH Network	xmlsoft debian netapp oracle opensuse fedoraproject	libxml2 debian_linux cloud_backup steelstore_cloud_integrated_storage ontap_select_deploy_administration_utility clustered_data_ontap smi-s_provider snapdrive plug-in_for_syma…	xmlSchemaPreRun in xmlschemas.c in libxml2 2.9.10 allows an xmlSchemaValidateStream memory leak.	CWE-401 Missing Release of Memory after Effective Lifetime	CVE-2019-20388	2024-11-21 13:38	2020-01-22	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed