Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 29, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
229771 4.3 警告 questwork - QuestCMS の main/main.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2008-4774 2012-12-20 18:52 2008-10-28 Show GitHub Exploit DB Packet Storm
229772 5 警告 questwork - QuestCMS の main/main.php におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2008-4773 2012-12-20 18:52 2008-10-28 Show GitHub Exploit DB Packet Storm
229773 7.5 危険 questwork - QuestCMS の main/main.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-4772 2012-12-20 18:52 2008-10-28 Show GitHub Exploit DB Packet Storm
229774 9.3 危険 WordPress.org - WordPress の wp-includes/theme.php におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2008-4769 2012-12-20 18:52 2008-04-2 Show GitHub Exploit DB Packet Storm
229775 7.5 危険 tlm cms - TLM CMS における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-4768 2012-12-20 18:52 2008-10-28 Show GitHub Exploit DB Packet Storm
229776 9 危険 PHPNUKE - PHP-Nuke の DownloadsPlus モジュールにおける任意のコードを実行される脆弱性 CWE-20
不適切な入力確認 		CVE-2008-4767 2012-12-20 18:52 2008-10-28 Show GitHub Exploit DB Packet Storm
229777 4.3 警告 wikidsystems - WiKID wClient-PHP の sample.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2008-4763 2012-12-20 18:52 2008-10-27 Show GitHub Exploit DB Packet Storm
229778 5 警告 php-daily - PHP-Daily の download_file.php におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2008-4758 2012-12-20 18:52 2008-10-27 Show GitHub Exploit DB Packet Storm
229779 7.5 危険 php-daily - PHP-Daily における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-4757 2012-12-20 18:52 2008-10-27 Show GitHub Exploit DB Packet Storm
229780 4.3 警告 php-daily - PHP-Daily の add_prest_date.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2008-4756 2012-12-20 18:52 2008-10-27 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 29, 2026, 4:16 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
224721 5.5 MEDIUM
Local 		microsoft windows_server_2008
windows_server_2012
windows_10
windows_8.1
windows_server_2016
windows_7
windows_rt_8.1
windows_server_2019
office 		An information disclosure vulnerability exists when the Microsoft Windows Graphics Component improperly handles objects in memory. An attacker who successfully exploited the vulnerability could obtai… CWE-125
Out-of-bounds Read 		CVE-2019-1153 2024-11-21 13:36 2019-08-15 Show GitHub Exploit DB Packet Storm
224722 8.8 HIGH
Network 		microsoft windows_server_2012
windows_10
windows_8.1
windows_server_2016
windows_server_2008
windows_rt_8.1
windows_7
windows_server_2019 		A remote code execution vulnerability exists when the Windows font library improperly handles specially crafted embedded fonts. An attacker who successfully exploited the vulnerability could take con… CWE-787
 Out-of-bounds Write 		CVE-2019-1152 2024-11-21 13:36 2019-08-15 Show GitHub Exploit DB Packet Storm
224723 8.8 HIGH
Network 		microsoft windows_server_2012
windows_10
windows_8.1
windows_server_2016
windows_server_2008
windows_rt_8.1
windows_7
windows_server_2019
office 		A remote code execution vulnerability exists when the Windows font library improperly handles specially crafted embedded fonts. An attacker who successfully exploited the vulnerability could take con… CWE-787
 Out-of-bounds Write 		CVE-2019-1151 2024-11-21 13:36 2019-08-15 Show GitHub Exploit DB Packet Storm
224724 8.8 HIGH
Network 		microsoft windows_server_2012
windows_10
windows_8.1
windows_server_2016
windows_server_2008
windows_7
windows_rt_8.1
windows_server_2019 		A remote code execution vulnerability exists when the Windows font library improperly handles specially crafted embedded fonts. An attacker who successfully exploited the vulnerability could take con… CWE-787
 Out-of-bounds Write 		CVE-2019-1150 2024-11-21 13:36 2019-08-15 Show GitHub Exploit DB Packet Storm
224725 8.8 HIGH
Network 		microsoft windows_server_2012
windows_10
windows_8.1
windows_server_2016
windows_server_2008
windows_server_2019
windows_7
windows_rt_8.1
office 		A remote code execution vulnerability exists when the Windows font library improperly handles specially crafted embedded fonts. An attacker who successfully exploited the vulnerability could take con… CWE-787
 Out-of-bounds Write 		CVE-2019-1149 2024-11-21 13:36 2019-08-15 Show GitHub Exploit DB Packet Storm
224726 5.5 MEDIUM
Local 		microsoft windows_server_2008
windows_server_2012
windows_10
windows_8.1
windows_server_2016
windows_rt_8.1
windows_server_2019
windows_7
office 		An information disclosure vulnerability exists when the Microsoft Windows Graphics Component improperly handles objects in memory. An attacker who successfully exploited the vulnerability could obtai… CWE-125
Out-of-bounds Read 		CVE-2019-1148 2024-11-21 13:36 2019-08-15 Show GitHub Exploit DB Packet Storm
224727 7.8 HIGH
Local 		microsoft windows_server_2008
windows_server_2012
windows_10
windows_8.1
windows_server_2016
windows_7
windows_rt_8.1
windows_server_2019 		A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory. An attacker who successfully exploited this vulnerability could execute arbitra… NVD-CWE-noinfo
CVE-2019-1147 2024-11-21 13:36 2019-08-15 Show GitHub Exploit DB Packet Storm
224728 7.8 HIGH
Local 		microsoft windows_server_2008
windows_server_2012
windows_10
windows_8.1
windows_server_2016
windows_7
windows_rt_8.1
windows_server_2019 		A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory. An attacker who successfully exploited this vulnerability could execute arbitra… NVD-CWE-noinfo
CVE-2019-1146 2024-11-21 13:36 2019-08-15 Show GitHub Exploit DB Packet Storm
224729 8.8 HIGH
Network 		microsoft windows_server_2012
windows_10
windows_8.1
windows_server_2016
windows_server_2008
windows_rt_8.1
windows_7
windows_server_2019 		A remote code execution vulnerability exists when the Windows font library improperly handles specially crafted embedded fonts. An attacker who successfully exploited the vulnerability could take con… CWE-119
Incorrect Access of Indexable Resource ('Range Error')  		CVE-2019-1145 2024-11-21 13:36 2019-08-15 Show GitHub Exploit DB Packet Storm
224730 8.8 HIGH
Network 		microsoft windows_server_2012
windows_10
windows_8.1
windows_server_2016
windows_server_2008
windows_server_2019
windows_7
windows_rt_8.1 		A remote code execution vulnerability exists when the Windows font library improperly handles specially crafted embedded fonts. An attacker who successfully exploited the vulnerability could take con… CWE-415
 Double Free 		CVE-2019-1144 2024-11-21 13:36 2019-08-15 Show GitHub Exploit DB Packet Storm