Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":June 7, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
229821	7.5	危険	socialsitegenerator	-	Social Site Generator における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2008-6419	2012-12-20 19:10	2009-03-6	Show	GitHub Exploit DB Packet Storm

229822	7.5	危険	torrenttrader	-	TorrentTrader の scrape.php における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2008-6418	2012-12-20 19:10	2009-03-6	Show	GitHub Exploit DB Packet Storm

229823	10	危険	Youngzsoft	-	YoungZSoft CCProxy におけるバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2008-6415	2012-12-20 19:10	2009-03-6	Show	GitHub Exploit DB Packet Storm

229824	7.5	危険	vignette	-	Vignette Content Management における管理者権限を取得される脆弱性	CWE-noinfo 情報不足	CVE-2008-6412	2012-12-20 19:10	2009-03-6	Show	GitHub Exploit DB Packet Storm

229825	4.3	警告	refbase	-	refbase におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2008-6400	2012-12-20 19:10	2009-03-5	Show	GitHub Exploit DB Packet Storm

229826	10	危険	psi-im	-	PSI Jabber クライアントにおける整数オーバーフローの脆弱性	CWE-189 数値処理の問題	CVE-2008-6393	2012-12-20 19:10	2009-03-3	Show	GitHub Exploit DB Packet Storm

229827	4.3	警告	w3matter	-	W3matter RevSense の index.php におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2008-6385	2012-12-20 19:10	2009-03-2	Show	GitHub Exploit DB Packet Storm

229828	7.5	危険	phpbb-seo	-	Multi SEO phpBB の include/global.php における PHP リモートファイルインクルージョンの脆弱性	CWE-94 コード・インジェクション	CVE-2008-6377	2012-12-20 19:10	2009-03-2	Show	GitHub Exploit DB Packet Storm

229829	8.5	危険	socialgroupie	-	Social Groupie の Photos/create_album.php における任意のコードを実行される脆弱性	CWE-20 不適切な入力確認	CVE-2008-6367	2012-12-20 19:10	2009-03-2	Show	GitHub Exploit DB Packet Storm

229830	4.3	警告	phpf1	-	Max's Guestbook の index.php におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2008-6359	2012-12-20 19:10	2009-03-2	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:June 7, 2026, 4:13 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
221451	8.8	HIGH Network	dlink	dir-878_firmware	An issue was discovered on D-Link DIR-878 devices with firmware 1.12A1. This issue is a Command Injection allowing a remote attacker to execute arbitrary code, and get a root shell. A command Injecti…	CWE-78 OS Command	CVE-2019-8314	2024-11-21 13:49	2019-02-13	Show	GitHub Exploit DB Packet Storm

221452	8.8	HIGH Network	dlink	dir-878_firmware	An issue was discovered on D-Link DIR-878 devices with firmware 1.12A1. This issue is a Command Injection allowing a remote attacker to execute arbitrary code, and get a root shell. A command Injecti…	CWE-78 OS Command	CVE-2019-8313	2024-11-21 13:49	2019-02-13	Show	GitHub Exploit DB Packet Storm

221453	8.8	HIGH Network	dlink	dir-878_firmware	An issue was discovered on D-Link DIR-878 devices with firmware 1.12A1. This issue is a Command Injection allowing a remote attacker to execute arbitrary code, and get a root shell. A command Injecti…	CWE-78 OS Command	CVE-2019-8312	2024-11-21 13:49	2019-02-13	Show	GitHub Exploit DB Packet Storm

221454	8.2	HIGH Local	flatpak debian redhat	flatpak debian_linux enterprise_linux_desktop enterprise_linux_workstation enterprise_linux_server enterprise_linux_server_tus enterprise_linux_server_eus enterprise_linux_server…	Flatpak before 1.0.7, and 1.1.x and 1.2.x before 1.2.3, exposes /proc in the apply_extra script sandbox, which allows attackers to modify a host-side executable file.	CWE-668 Exposure of Resource to Wrong Sphere	CVE-2019-8308	2024-11-21 13:49	2019-02-13	Show	GitHub Exploit DB Packet Storm

221455	5.5	MEDIUM Local	adobe	acrobat_dc acrobat_reader_dc	Adobe Acrobat Reader versions 2019.010.20098 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnera…	-	CVE-2019-7819	2024-11-21 13:48	2023-09-11	Show	GitHub Exploit DB Packet Storm

221456	9.8	CRITICAL Network	nukeviet	nukeviet	modules/banners/funcs/click.php in NukeViet before 4.3.04 has a SQL INSERT statement with raw header data from an HTTP request (e.g., Referer and User-Agent).	CWE-89 SQL Injection	CVE-2019-7726	2024-11-21 13:48	2020-12-31	Show	GitHub Exploit DB Packet Storm

221457	9.8	CRITICAL Network	nukeviet	nukeviet	includes/core/is_user.php in NukeViet before 4.3.04 deserializes the untrusted nvloginhash cookie (i.e., the code relies on PHP's serialization format when JSON can be used to eliminate the risk).	CWE-502 Deserialization of Untrusted Data	CVE-2019-7725	2024-11-21 13:48	2020-12-31	Show	GitHub Exploit DB Packet Storm

221458	8.8	HIGH Network	intelliants	subrion_cms	Subrion CMS 4.2.1 has CSRF in panel/modules/plugins/. The attacker can remotely activate/deactivate the plugins.	CWE-352 Origin Validation Error	CVE-2019-7357	2024-11-21 13:48	2020-11-11	Show	GitHub Exploit DB Packet Storm

221459	5.4	MEDIUM Network	intelliants	subrion	Subrion CMS v4.2.1 allows XSS via the panel/phrases/ VALUE parameter.	CWE-79 Cross-site Scripting	CVE-2019-7356	2024-11-21 13:48	2020-11-5	Show	GitHub Exploit DB Packet Storm

221460	6.1	MEDIUM Network	galileo_cms_project	galileo_cms	There is stored cross site scripting (XSS) in Galileo CMS v0.042. Remote authenticated users could inject arbitrary web script or HTML via $page_title in /lib/Galileo/files/templates/page/show.html.e…	CWE-79 Cross-site Scripting	CVE-2019-7410	2024-11-21 13:48	2020-08-14	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed