Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 25, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
229761	7.5	危険	youtube blog	-	C. Desseno ytb の info.php における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2008-3306	2012-12-20 18:52	2008-07-25	Show	GitHub Exploit DB Packet Storm

229762	5	警告	tuxplanet	-	BilboBlog における重要な情報を取得される脆弱性	CWE-200 情報漏えい	CVE-2008-3304	2012-12-20 18:52	2008-07-25	Show	GitHub Exploit DB Packet Storm

229763	6.8	警告	tuxplanet	-	BilboBlog の admin/login.php における認証を回避される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2008-3303	2012-12-20 18:52	2008-07-25	Show	GitHub Exploit DB Packet Storm

229764	6	警告	tuxplanet	-	BilboBlog の admin/delete.php における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2008-3302	2012-12-20 18:52	2008-07-25	Show	GitHub Exploit DB Packet Storm

229765	3.5	注意	tuxplanet	-	BilboBlog におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2008-3301	2012-12-20 18:52	2008-07-25	Show	GitHub Exploit DB Packet Storm

229766	6	警告	socialengine	-	SE における任意の PHP コードを実行される脆弱性	CWE-94 コード・インジェクション	CVE-2008-3298	2012-12-20 18:52	2008-07-25	Show	GitHub Exploit DB Packet Storm

229767	7.5	危険	socialengine	-	SE における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2008-3297	2012-12-20 18:52	2008-07-25	Show	GitHub Exploit DB Packet Storm

229768	5	警告	sierra	-	SWAT におけるサービス運用妨害 (DoS) の脆弱性	CWE-20 不適切な入力確認	CVE-2008-3286	2012-12-20 18:52	2008-07-24	Show	GitHub Exploit DB Packet Storm

229769	5	警告	レッドハット	-	Red Hat Enterprise IPA および FreeIPA のデフォルト設定における Kerberos マスターキーを取得される脆弱性	CWE-200 情報漏えい	CVE-2008-3274	2012-12-20 18:52	2008-09-10	Show	GitHub Exploit DB Packet Storm

229770	5	警告	winsoftmagic	-	WinSoftMagic WRPC Lite におけるサービス運用妨害 (DoS) の脆弱性	CWE-399 リソース管理の問題	CVE-2008-3269	2012-12-20 18:52	2008-07-24	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 25, 2026, 4:01 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
224151	5.4	MEDIUM Network	openwrt	openwrt	OpenWrt 18.06.4 allows XSS via these Name fields to the cgi-bin/luci/admin/network/firewall/rules URI: "Open ports on router" and "New forward rule" and "New Source NAT" (this can occur, for example,…	CWE-79 Cross-site Scripting	CVE-2019-18992	2024-11-21 13:33	2019-12-4	Show	GitHub Exploit DB Packet Storm

224152	9.8	CRITICAL Network	titanhq	webtitan	An issue was discovered in TitanHQ WebTitan before 5.18. The proxy service (which is typically exposed to all users) allows connections to the internal PostgreSQL database of the appliance. By connec…	CWE-668 Exposure of Resource to Wrong Sphere	CVE-2019-19015	2024-11-21 13:33	2019-12-3	Show	GitHub Exploit DB Packet Storm

224153	7.8	HIGH Local	titanhq	webtitan	An issue was discovered in TitanHQ WebTitan before 5.18. It has a sudoers file that enables low-privilege users to execute a vast number of commands as root, including mv, chown, and chmod. This can …	CWE-269 Improper Privilege Management	CVE-2019-19014	2024-11-21 13:33	2019-12-3	Show	GitHub Exploit DB Packet Storm

224154	9.8	CRITICAL Network	rabbitmq-c_project fedoraproject canonical debian	rabbitmq-c fedora ubuntu_linux debian_linux	An issue was discovered in amqp_handle_input in amqp_connection.c in rabbitmq-c 0.9.0. There is an integer overflow that leads to heap memory corruption in the handling of CONNECTION_STATE_HEADER. A …	CWE-787 Out-of-bounds Write	CVE-2019-18609	2024-11-21 13:33	2019-12-2	Show	GitHub Exploit DB Packet Storm

224155	7.5	HIGH Network	alliedtelesis	at-gs950\/8_firmware	A Directory Traversal in the Web interface of the Allied Telesis AT-GS950/8 until Firmware AT-S107 V.1.1.3 [1.00.047] allows unauthenticated attackers to read arbitrary system files via a GET request…	CWE-22 Path Traversal	CVE-2019-18922	2024-11-21 13:33	2019-11-30	Show	GitHub Exploit DB Packet Storm

224156	4.7	MEDIUM Local	linux redhat canonical fedoraproject opensuse	linux_kernel enterprise_linux ubuntu_linux fedora leap	The Linux kernel before 5.4.1 on powerpc allows Information Exposure because the Spectre-RSB mitigation is not in place for all applicable CPUs, aka CID-39e72bf96f58. This is related to arch/powerpc/…	CWE-200 Information Exposure	CVE-2019-18660	2024-11-21 13:33	2019-11-28	Show	GitHub Exploit DB Packet Storm

224157	7.5	HIGH Network	squid-cache canonical debian fedoraproject	squid ubuntu_linux debian_linux fedora	An issue was discovered in Squid 2.x, 3.x, and 4.x through 4.8. Due to incorrect data management, it is vulnerable to information disclosure when processing HTTP Digest Authentication. Nonce tokens c…	CWE-200 Information Exposure	CVE-2019-18679	2024-11-21 13:33	2019-11-27	Show	GitHub Exploit DB Packet Storm

224158	5.3	MEDIUM Network	squid-cache canonical debian fedoraproject	squid ubuntu_linux debian_linux fedora	An issue was discovered in Squid 3.x and 4.x through 4.8. It allows attackers to smuggle HTTP requests through frontend software to a Squid instance that splits the HTTP Request pipeline differently.…	CWE-444 HTTP Request Smuggling	CVE-2019-18678	2024-11-21 13:33	2019-11-27	Show	GitHub Exploit DB Packet Storm

224159	6.1	MEDIUM Network	squid-cache canonical fedoraproject	squid ubuntu_linux fedora	An issue was discovered in Squid 3.x and 4.x through 4.8 when the append_domain setting is used (because the appended characters do not properly interact with hostname length restrictions). Due to in…	CWE-352 Origin Validation Error	CVE-2019-18677	2024-11-21 13:33	2019-11-27	Show	GitHub Exploit DB Packet Storm

224160	7.5	HIGH Network	squid-cache canonical fedoraproject debian	squid ubuntu_linux fedora debian_linux	An issue was discovered in Squid 3.x and 4.x through 4.8. Due to incorrect input validation, there is a heap-based buffer overflow that can result in Denial of Service to all clients using the proxy.…	CWE-787 Out-of-bounds Write	CVE-2019-18676	2024-11-21 13:33	2019-11-27	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed