Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 20, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
229821	5	警告	sflog	-	sflog! におけるディレクトリトラバーサルの脆弱性	CWE-22 パス・トラバーサル	CVE-2008-0703	2012-12-20 18:34	2008-02-11	Show	GitHub Exploit DB Packet Storm

229822	9.3	危険	south river technologies	-	Titan FTP Server におけるヒープベースのバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2008-0702	2012-12-20 18:34	2008-02-11	Show	GitHub Exploit DB Packet Storm

229823	7.8	危険	print manager plus	-	Print Manager Plus 2008 Client Billing and Authentication におけるスタックベースのバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2008-0693	2012-12-20 18:34	2008-02-11	Show	GitHub Exploit DB Packet Storm

229824	4.3	警告	simon elvery WordPress.org	-	WordPress 用の Simon Elvery WP-Footnotes プラグイにおけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2008-0691	2012-12-20 18:34	2008-02-11	Show	GitHub Exploit DB Packet Storm

229825	4.3	警告	smartscript	-	Smartscript Domain Trader の catalog.php におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2008-0688	2012-12-20 18:34	2008-02-11	Show	GitHub Exploit DB Packet Storm

229826	7.5	危険	youtube	-	Youtube Clone Script の siteadmin/editor_files/includes/load_message.php におけるクロスサイトスクリプティングの脆弱性	CWE-94 コード・インジェクション	CVE-2008-0687	2012-12-20 18:34	2008-02-11	Show	GitHub Exploit DB Packet Storm

229827	7.5	危険	WordPress.org	-	WordPress 用の st_newsletter プラグインにおける SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2008-0683	2012-12-20 18:34	2008-02-11	Show	GitHub Exploit DB Packet Storm

229828	7.5	危険	WordPress.org	-	WordPress 用の Wordspew プラグインにおける SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2008-0682	2012-12-20 18:34	2008-02-11	Show	GitHub Exploit DB Packet Storm

229829	6.8	警告	phpshop	-	PHPShop の index.php における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2008-0681	2012-12-20 18:34	2008-02-11	Show	GitHub Exploit DB Packet Storm

229830	7.5	危険	the everything development company	-	The Everything Development System の The Everything Development Engine における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2008-0675	2012-12-20 18:34	2008-02-11	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 20, 2026, 4:14 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
222921	6.5	MEDIUM Network	dlink	dir-615_t1_firmware	On D-Link DIR-615 devices, a normal user is able to create a root(admin) user from the D-Link portal.	NVD-CWE-noinfo	CVE-2019-19743	2024-11-21 13:35	2019-12-17	Show	GitHub Exploit DB Packet Storm

222922	7.5	HIGH Network	roxyfileman	roxy_fileman	Roxy Fileman 1.4.5 for .NET is vulnerable to path traversal. A remote attacker can write uploaded files to arbitrary locations via the RENAMEFILE action. This can be leveraged for code execution by u…	CWE-22 Path Traversal	CVE-2019-19731	2024-11-21 13:35	2019-12-17	Show	GitHub Exploit DB Packet Storm

222923	6.5	MEDIUM Network	cyrus debian fedoraproject canonical	imap debian_linux fedora ubuntu_linux	An issue was discovered in Cyrus IMAP before 2.5.15, 3.0.x before 3.0.13, and 3.1.x through 3.1.8. If sieve script uploading is allowed (3.x) or certain non-default sieve options are enabled (2.x), a…	CWE-269 Improper Privilege Management	CVE-2019-19783	2024-11-21 13:35	2019-12-16	Show	GitHub Exploit DB Packet Storm

222924	7.8	HIGH Local	linux canonical	linux_kernel ubuntu_linux	In the Linux kernel before 5.3.11, sound/core/timer.c has a use-after-free caused by erroneous code refactoring, aka CID-e7af6307a8a5. This is related to snd_timer_open and snd_timer_close_locked. Th…	CWE-416 Use After Free	CVE-2019-19807	2024-11-21 13:35	2019-12-16	Show	GitHub Exploit DB Packet Storm

222925	5.5	MEDIUM Local	xfig_project fedoraproject debian	fig2dev fedora debian_linux	read_colordef in read.c in Xfig fig2dev 3.2.7b has an out-of-bounds write.	CWE-787 Out-of-bounds Write	CVE-2019-19797	2024-11-21 13:35	2019-12-16	Show	GitHub Exploit DB Packet Storm

222926	7.8	HIGH Local	yabasic	yabasic	Yabasic 2.86.2 has a heap-based buffer overflow in myformat in function.c via a crafted BASIC source file.	CWE-787 Out-of-bounds Write	CVE-2019-19796	2024-11-21 13:35	2019-12-14	Show	GitHub Exploit DB Packet Storm

222927	7.8	HIGH Local	samurai_project	samurai	samurai 0.7 has a heap-based buffer overflow in canonpath in util.c via a crafted build file.	CWE-787 Out-of-bounds Write	CVE-2019-19795	2024-11-21 13:35	2019-12-14	Show	GitHub Exploit DB Packet Storm

222928	5.9	MEDIUM Network	miekg-dns_project	miekg-dns	The miekg Go DNS package before 1.1.25, as used in CoreDNS before 1.6.6 and other products, improperly generates random numbers because math/rand is used. The TXID becomes predictable, leading to res…	CWE-338 Use of Cryptographically Weak Pseudo-Random Number Generator (PRNG)	CVE-2019-19794	2024-11-21 13:35	2019-12-14	Show	GitHub Exploit DB Packet Storm

222929	8.8	HIGH Network	cyxtera	appgate_sdp	In Cyxtera AppGate SDP Client 4.1.x through 4.3.x before 4.3.2 on Windows, a local or remote user from the same domain can gain privileges.	CWE-367 Time-of-check Time-of-use (TOCTOU) Race Condition	CVE-2019-19793	2024-11-21 13:35	2019-12-14	Show	GitHub Exploit DB Packet Storm

222930	9.8	CRITICAL Network	telerik	radchart ui_for_asp.net_ajax	Path traversal in RadChart in Telerik UI for ASP.NET AJAX allows a remote attacker to read and delete an image with extension .BMP, .EXIF, .GIF, .ICON, .JPEG, .PNG, .TIFF, or .WMF on the server throu…	CWE-22 Path Traversal	CVE-2019-19790	2024-11-21 13:35	2019-12-14	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed