Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 24, 2026, noon

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
229681	7.5	危険	phpbbportal	-	PHPortal の sablonlar/gunaysoft/gunaysoft.php における PHP リモートファイルインクルージョンの脆弱性	CWE-94 コード・インジェクション	CVE-2008-3022	2012-12-20 18:52	2008-07-7	Show	GitHub Exploit DB Packet Storm

229682	7.5	危険	phpeasydata	-	PHPEasyData における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2008-2995	2012-12-20 18:52	2008-07-3	Show	GitHub Exploit DB Packet Storm

229683	4.3	警告	phpeasydata	-	PHPEasyData におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2008-2994	2012-12-20 18:52	2008-07-3	Show	GitHub Exploit DB Packet Storm

229684	7.5	危険	phpdmca	-	phpDMCA における PHP リモートファイルインクルージョンの脆弱性	CWE-94 コード・インジェクション	CVE-2008-2986	2012-12-20 18:52	2008-07-2	Show	GitHub Exploit DB Packet Storm

229685	6.8	警告	tinx cms	-	TinX/cms におけるディレクトリトラバーサルの脆弱性	CWE-22 パス・トラバーサル	CVE-2008-2976	2012-12-20 18:52	2008-07-2	Show	GitHub Exploit DB Packet Storm

229686	4.3	警告	tinx cms	-	TinX/cms の admin/objects/obj_image.php におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2008-2975	2012-12-20 18:52	2008-07-2	Show	GitHub Exploit DB Packet Storm

229687	7.5	危険	yektaweb	-	AWT YEKTA におけるセッションをハイジャックされる脆弱性	CWE-20 不適切な入力確認	CVE-2008-2970	2012-12-20 18:52	2008-07-2	Show	GitHub Exploit DB Packet Storm

229688	5	警告	yektaweb	-	AWT YEKTA の download.php におけるディレクトリトラバーサルの脆弱性	CWE-22 パス・トラバーサル	CVE-2008-2969	2012-12-20 18:52	2008-07-2	Show	GitHub Exploit DB Packet Storm

229689	7.5	危険	yektaweb	-	AWT YEKTA の rating.php における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2008-2968	2012-12-20 18:52	2008-07-2	Show	GitHub Exploit DB Packet Storm

229690	4.3	警告	yektaweb	-	AWT YEKTA におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2008-2967	2012-12-20 18:52	2008-07-2	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 24, 2026, 4:05 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
222291	5.5	MEDIUM Local	gpac	gpac	An issue was discovered in GPAC version 0.8.0 and 0.9.0-development-20191109. There is a NULL pointer dereference in the function gf_isom_box_del() in isomedia/box_funcs.c.	CWE-476 NULL Pointer Dereference	CVE-2019-20164	2024-11-21 13:38	2019-12-31	Show	GitHub Exploit DB Packet Storm

222292	5.5	MEDIUM Local	gpac debian	gpac debian_linux	An issue was discovered in GPAC version 0.8.0 and 0.9.0-development-20191109. There is a NULL pointer dereference in the function gf_odf_avc_cfg_write_bs() in odf/descriptors.c.	CWE-476 NULL Pointer Dereference	CVE-2019-20163	2024-11-21 13:38	2019-12-31	Show	GitHub Exploit DB Packet Storm

222293	5.5	MEDIUM Local	gpac debian	gpac debian_linux	An issue was discovered in GPAC version 0.8.0 and 0.9.0-development-20191109. There is heap-based buffer overflow in the function gf_isom_box_parse_ex() in isomedia/box_funcs.c.	CWE-787 Out-of-bounds Write	CVE-2019-20162	2024-11-21 13:38	2019-12-31	Show	GitHub Exploit DB Packet Storm

222294	5.5	MEDIUM Local	gpac debian	gpac debian_linux	An issue was discovered in GPAC version 0.8.0 and 0.9.0-development-20191109. There is heap-based buffer overflow in the function ReadGF_IPMPX_WatermarkingInit() in odf/ipmpx_code.c.	CWE-787 Out-of-bounds Write	CVE-2019-20161	2024-11-21 13:38	2019-12-31	Show	GitHub Exploit DB Packet Storm

222295	5.5	MEDIUM Local	gpac	gpac	An issue was discovered in GPAC version 0.8.0 and 0.9.0-development-20191109. There is a stack-based buffer overflow in the function av1_parse_tile_group() in media_tools/av_parsers.c.	CWE-787 Out-of-bounds Write	CVE-2019-20160	2024-11-21 13:38	2019-12-31	Show	GitHub Exploit DB Packet Storm

222296	5.5	MEDIUM Local	gpac	gpac	An issue was discovered in GPAC version 0.8.0 and 0.9.0-development-20191109. There is a memory leak in dinf_New() in isomedia/box_code_base.c.	CWE-401 Missing Release of Memory after Effective Lifetime	CVE-2019-20159	2024-11-21 13:38	2019-12-31	Show	GitHub Exploit DB Packet Storm

222297	7.5	HIGH Network	kind-of_project	kind-of	ctorName in index.js in kind-of v6.0.2 allows external user input to overwrite certain internal attributes via a conflicting name, as demonstrated by 'constructor': {'name':'Symbol'}. Hence, a crafte…	CWE-668 Exposure of Resource to Wrong Sphere	CVE-2019-20149	2024-11-21 13:38	2019-12-31	Show	GitHub Exploit DB Packet Storm

222298	6.1	MEDIUM Network	laborator	neon	An XSS issue was discovered in the Laborator Neon theme 2.0 for WordPress via the data/autosuggest-remote.php q parameter.	CWE-79 Cross-site Scripting	CVE-2019-20141	2024-11-21 13:38	2019-12-31	Show	GitHub Exploit DB Packet Storm

222299	5.4	MEDIUM Network	nagios	nagios_xi	In Nagios XI 5.6.9, XSS exists via the nocscreenapi.php host, hostgroup, or servicegroup parameter, or the schedulereport.php hour or frequency parameter. Any authenticated user can attack the admin …	CWE-79 Cross-site Scripting	CVE-2019-20139	2024-11-21 13:38	2019-12-31	Show	GitHub Exploit DB Packet Storm

222300	7.5	HIGH Network	http_authentication_library_project	http_authentication_library	The HTTP Authentication library before 2019-12-27 for Nim has weak password hashing because the default algorithm for libsodium's crypto_pwhash_str is not used.	CWE-327 CWE-916 Use of a Broken or Risky Cryptographic Algorithm Use of Password Hash With Insufficient Computational Effort	CVE-2019-20138	2024-11-21 13:38	2019-12-30	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed