Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 23, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
229681	7.5	危険	phpbbportal	-	PHPortal の sablonlar/gunaysoft/gunaysoft.php における PHP リモートファイルインクルージョンの脆弱性	CWE-94 コード・インジェクション	CVE-2008-3022	2012-12-20 18:52	2008-07-7	Show	GitHub Exploit DB Packet Storm

229682	7.5	危険	phpeasydata	-	PHPEasyData における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2008-2995	2012-12-20 18:52	2008-07-3	Show	GitHub Exploit DB Packet Storm

229683	4.3	警告	phpeasydata	-	PHPEasyData におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2008-2994	2012-12-20 18:52	2008-07-3	Show	GitHub Exploit DB Packet Storm

229684	7.5	危険	phpdmca	-	phpDMCA における PHP リモートファイルインクルージョンの脆弱性	CWE-94 コード・インジェクション	CVE-2008-2986	2012-12-20 18:52	2008-07-2	Show	GitHub Exploit DB Packet Storm

229685	6.8	警告	tinx cms	-	TinX/cms におけるディレクトリトラバーサルの脆弱性	CWE-22 パス・トラバーサル	CVE-2008-2976	2012-12-20 18:52	2008-07-2	Show	GitHub Exploit DB Packet Storm

229686	4.3	警告	tinx cms	-	TinX/cms の admin/objects/obj_image.php におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2008-2975	2012-12-20 18:52	2008-07-2	Show	GitHub Exploit DB Packet Storm

229687	7.5	危険	yektaweb	-	AWT YEKTA におけるセッションをハイジャックされる脆弱性	CWE-20 不適切な入力確認	CVE-2008-2970	2012-12-20 18:52	2008-07-2	Show	GitHub Exploit DB Packet Storm

229688	5	警告	yektaweb	-	AWT YEKTA の download.php におけるディレクトリトラバーサルの脆弱性	CWE-22 パス・トラバーサル	CVE-2008-2969	2012-12-20 18:52	2008-07-2	Show	GitHub Exploit DB Packet Storm

229689	7.5	危険	yektaweb	-	AWT YEKTA の rating.php における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2008-2968	2012-12-20 18:52	2008-07-2	Show	GitHub Exploit DB Packet Storm

229690	4.3	警告	yektaweb	-	AWT YEKTA におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2008-2967	2012-12-20 18:52	2008-07-2	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 23, 2026, 4:08 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
224221	6.1	MEDIUM Network	parallels	parallels_plesk_panel	Parallels Plesk Panel 9.5 allows XSS in target/locales/tr-TR/help/index.htm? via the "fileName" parameter.	CWE-79 Cross-site Scripting	CVE-2019-18793	2024-11-21 13:33	2019-11-14	Show	GitHub Exploit DB Packet Storm

224222	8.8	HIGH Network	western_digital	my_cloud_ex2_ultra_firmware	Western Digital My Cloud EX2 Ultra firmware 2.31.195 allows a Buffer Overflow with Extended Instruction Pointer (EIP) control via crafted GET/POST parameters.	CWE-120 Classic Buffer Overflow	CVE-2019-18931	2024-11-21 13:33	2019-11-14	Show	GitHub Exploit DB Packet Storm

224223	8.8	HIGH Network	western_digital	my_cloud_ex2_ultra_firmware	Western Digital My Cloud EX2 Ultra firmware 2.31.183 allows web users (including guest account) to remotely execute arbitrary code via a stack-based buffer overflow. There is no size verification log…	CWE-787 Out-of-bounds Write	CVE-2019-18930	2024-11-21 13:33	2019-11-14	Show	GitHub Exploit DB Packet Storm

224224	8.8	HIGH Network	western_digital	my_cloud_ex2_ultra_firmware	Western Digital My Cloud EX2 Ultra firmware 2.31.183 allows web users (including guest accounts) to remotely execute arbitrary code via a download_mgr.cgi stack-based buffer overflow.	CWE-787 Out-of-bounds Write	CVE-2019-18929	2024-11-21 13:33	2019-11-14	Show	GitHub Exploit DB Packet Storm

224225	9.0	CRITICAL Network	fudforum	fudforum	FUDForum 3.0.9 is vulnerable to Stored XSS via the nlogin parameter. This may result in remote code execution. An attacker can use a user account to fully compromise the system using a POST request. …	CWE-79 CWE-78 Cross-site Scripting OS Command	CVE-2019-18839	2024-11-21 13:33	2019-11-14	Show	GitHub Exploit DB Packet Storm

224226	7.8	HIGH Local	gnu debian	fribidi debian_linux	A buffer overflow in the fribidi_get_par_embedding_levels_ex() function in lib/fribidi-bidi.c of GNU FriBidi through 1.0.7 allows an attacker to cause a denial of service or possibly execute arbitrar…	CWE-120 Classic Buffer Overflow	CVE-2019-18397	2024-11-21 13:33	2019-11-13	Show	GitHub Exploit DB Packet Storm

224227	6.1	MEDIUM Network	systematicinc	iris_standards_management	Systematic IRIS Standards Management (ISM) v2.1 SP1 89 is vulnerable to unauthenticated reflected Cross Site Scripting (XSS). A user input (related to dialog information) is reflected directly in the…	CWE-79 Cross-site Scripting	CVE-2019-18926	2024-11-21 13:33	2019-11-13	Show	GitHub Exploit DB Packet Storm

224228	9.8	CRITICAL Network	systematic	iris_webforms	Systematic IRIS WebForms 5.4 and its functionalities can be accessed and used without any form of authentication.	CWE-306 Missing Authentication for Critical Function	CVE-2019-18925	2024-11-21 13:33	2019-11-13	Show	GitHub Exploit DB Packet Storm

224229	5.3	MEDIUM Network	systematic	iris_webforms	Systematic IRIS WebForms 5.4 is vulnerable to directory traversal. By manipulating variables that reference files with ../ (and variations), it is possible to list all the directories and check if a …	CWE-22 Path Traversal	CVE-2019-18924	2024-11-21 13:33	2019-11-13	Show	GitHub Exploit DB Packet Storm

224230	9.8	CRITICAL Network	upredsun	file_sharing_wizard	File Sharing Wizard version 1.5.0 build 2008 is affected by a Structured Exception Handler based buffer overflow vulnerability. An unauthenticated attacker is able to perform remote command execution…	CWE-787 Out-of-bounds Write	CVE-2019-18655	2024-11-21 13:33	2019-11-13	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed