Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 24, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
229711	5	警告	relative real estate systems	-	Relative Real Estate Systems における重要な情報を取得される脆弱性	CWE-200 情報漏えい	CVE-2008-2881	2012-12-20 18:52	2008-06-26	Show	GitHub Exploit DB Packet Storm

229712	6.4	警告	yektaweb	-	AWT YEKTA の rss_getfile.php におけるオープンリダイレクトの脆弱性	CWE-Other その他	CVE-2008-2878	2012-12-20 18:52	2008-06-26	Show	GitHub Exploit DB Packet Storm

229713	7.5	危険	webdevindo-cms	-	Webdevindo-CMS の index.php における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2008-2875	2012-12-20 18:52	2008-06-26	Show	GitHub Exploit DB Packet Storm

229714	7.5	危険	SoftbizScripts	-	Softbiz Jokes & Funny Pics Script の index.php における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2008-2874	2012-12-20 18:52	2008-06-26	Show	GitHub Exploit DB Packet Storm

229715	7.5	危険	sharecms	-	ShareCMS における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2008-2870	2012-12-20 18:52	2008-06-26	Show	GitHub Exploit DB Packet Storm

229716	6.8	警告	webchamado	-	WebChamado の index.php における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2008-2858	2012-12-20 18:52	2008-06-25	Show	GitHub Exploit DB Packet Storm

229717	7.5	危険	softdivision	-	Maxtrade AIO の Trade モジュールにおける SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2008-2847	2012-12-20 18:52	2008-06-25	Show	GitHub Exploit DB Packet Storm

229718	4.3	警告	traindepot	-	Traindepot の search モジュールにおけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2008-2839	2012-12-20 18:52	2008-06-24	Show	GitHub Exploit DB Packet Storm

229719	5	警告	traindepot	-	Traindepot の index.php におけるディレクトリトラバーサルの脆弱性	CWE-22 パス・トラバーサル	CVE-2008-2838	2012-12-20 18:52	2008-06-24	Show	GitHub Exploit DB Packet Storm

229720	7.5	危険	sidb	-	Scientific Image DataBase の projects.php における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2008-2834	2012-12-20 18:52	2008-06-24	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 24, 2026, 4:05 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
222201	6.5	MEDIUM Network	cesnet	libyang	A NULL pointer dereference is present in libyang before v1.0-r3 in the function lys_extension_instances_free() due to a copy of unresolved extensions in lys_restr_dup(). Applications that use libyang…	CWE-476 NULL Pointer Dereference	CVE-2019-20398	2024-11-21 13:38	2020-01-23	Show	GitHub Exploit DB Packet Storm

222202	8.8	HIGH Network	cesnet	libyang	A double-free is present in libyang before v1.0-r1 in the function yyparse() when an organization field is not terminated. Applications that use libyang to parse untrusted input yang files may be vul…	CWE-415 Double Free	CVE-2019-20397	2024-11-21 13:38	2020-01-23	Show	GitHub Exploit DB Packet Storm

222203	6.5	MEDIUM Network	cesnet	libyang	A segmentation fault is present in yyparse in libyang before v1.0-r1 due to a malformed pattern statement value during lys_parse_path parsing.	CWE-119 Incorrect Access of Indexable Resource ('Range Error')	CVE-2019-20396	2024-11-21 13:38	2020-01-23	Show	GitHub Exploit DB Packet Storm

222204	6.5	MEDIUM Network	cesnet	libyang	A stack consumption issue is present in libyang before v1.0-r1 due to the self-referential union type containing leafrefs. Applications that use libyang to parse untrusted input yang files may crash.	CWE-674 Uncontrolled Recursion	CVE-2019-20395	2024-11-21 13:38	2020-01-23	Show	GitHub Exploit DB Packet Storm

222205	8.8	HIGH Network	cesnet	libyang	A double-free is present in libyang before v1.0-r3 in the function yyparse() when a type statement in used in a notification statement. Applications that use libyang to parse untrusted input yang fil…	CWE-415 Double Free	CVE-2019-20394	2024-11-21 13:38	2020-01-23	Show	GitHub Exploit DB Packet Storm

222206	8.8	HIGH Network	cesnet	libyang	A double-free is present in libyang before v1.0-r1 in the function yyparse() when an empty description is used. Applications that use libyang to parse untrusted input yang files may be vulnerable to …	CWE-415 Double Free	CVE-2019-20393	2024-11-21 13:38	2020-01-23	Show	GitHub Exploit DB Packet Storm

222207	6.5	MEDIUM Network	cesnet	libyang	An invalid memory access flaw is present in libyang before v1.0-r1 in the function resolve_feature_value() when an if-feature statement is used inside a list key node, and the feature used is not def…	CWE-119 Incorrect Access of Indexable Resource ('Range Error')	CVE-2019-20392	2024-11-21 13:38	2020-01-23	Show	GitHub Exploit DB Packet Storm

222208	6.5	MEDIUM Network	cesnet	libyang	An invalid memory access flaw is present in libyang before v1.0-r3 in the function resolve_feature_value() when an if-feature statement is used inside a bit. Applications that use libyang to parse un…	CWE-119 Incorrect Access of Indexable Resource ('Range Error')	CVE-2019-20391	2024-11-21 13:38	2020-01-23	Show	GitHub Exploit DB Packet Storm

222209	7.5	HIGH Network	opensuse debian	libsolv debian_linux	repodata_schema2id in repodata.c in libsolv before 0.7.6 has a heap-based buffer over-read via a last schema whose length is less than the length of the input schema.	CWE-125 Out-of-bounds Read	CVE-2019-20387	2024-11-21 13:38	2020-01-22	Show	GitHub Exploit DB Packet Storm

222210	7.5	HIGH Network	xmlsoft debian netapp oracle opensuse fedoraproject	libxml2 debian_linux cloud_backup steelstore_cloud_integrated_storage ontap_select_deploy_administration_utility clustered_data_ontap smi-s_provider snapdrive plug-in_for_syma…	xmlSchemaPreRun in xmlschemas.c in libxml2 2.9.10 allows an xmlSchemaValidateStream memory leak.	CWE-401 Missing Release of Memory after Effective Lifetime	CVE-2019-20388	2024-11-21 13:38	2020-01-22	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed