Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 27, 2026, 2:01 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
229821 4.3 警告 Xerox - Xerox CWW におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2008-3121 2012-12-20 18:52 2008-07-9 Show GitHub Exploit DB Packet Storm
229822 7.5 危険 phpmotion - PHPmotion の play.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2008-3118 2012-12-20 18:52 2008-07-10 Show GitHub Exploit DB Packet Storm
229823 6.5 警告 phpmotion - PHPmotion の update_profile.php における任意のコードを実行される脆弱性 CWE-20
不適切な入力確認
CVE-2008-3117 2012-12-20 18:52 2008-07-10 Show GitHub Exploit DB Packet Storm
229824 4.3 警告 v-webmail - V-webmail の redirect.php におけるオープンリダイレクトの脆弱性 CWE-Other
その他
CVE-2008-3061 2012-12-20 18:52 2008-10-7 Show GitHub Exploit DB Packet Storm
229825 5 警告 v-webmail - V-webmail における重要な情報を取得される脆弱性 CWE-200
情報漏えい
CVE-2008-3060 2012-12-20 18:52 2008-10-7 Show GitHub Exploit DB Packet Storm
229826 7.5 危険 TYPO3 Association - TYPO3 用の Codeon Petition エクステンションにおける SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2008-3056 2012-12-20 18:52 2008-07-7 Show GitHub Exploit DB Packet Storm
229827 7.5 危険 TYPO3 Association - TYPO3 用の Support view エクステンションにおける SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2008-3055 2012-12-20 18:52 2008-07-7 Show GitHub Exploit DB Packet Storm
229828 7.5 危険 TYPO3 Association - TYPO3 用の Branchenbuch エクステンションにおける SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2008-3054 2012-12-20 18:52 2008-07-7 Show GitHub Exploit DB Packet Storm
229829 7.5 危険 TYPO3 Association - TYPO3 用の SQL Frontend エクステンションにおける SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2008-3053 2012-12-20 18:52 2008-07-7 Show GitHub Exploit DB Packet Storm
229830 7.5 危険 TYPO3 Association - TYPO3 用の SQL Frontend エクステンションにおけるサービス運用妨害 (DoS) の脆弱性 CWE-399
リソース管理の問題
CVE-2008-3052 2012-12-20 18:52 2008-07-7 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 27, 2026, 4:52 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
224461 5.5 MEDIUM
Local
gnome
fedoraproject
opensuse
dia
fedora
leap
When GNOME Dia before 2019-11-27 is launched with a filename argument that is not a valid codepoint in the current encoding, it enters an endless loop, thus endlessly writing text to stdout. If this … CWE-835
 Loop with Unreachable Exit Condition ('Infinite Loop')
CVE-2019-19451 2024-11-21 13:34 2019-11-30 Show GitHub Exploit DB Packet Storm
224462 7.5 HIGH
Network
omniosce omnios illumos, as used in OmniOS Community Edition before r151030y, allows a kernel crash via an application with multiple threads calling sendmsg concurrently over a single socket, because uts/common/inet… CWE-20
 Improper Input Validation 
CVE-2019-19396 2024-11-21 13:34 2019-11-30 Show GitHub Exploit DB Packet Storm
224463 7.8 HIGH
Local
linux linux_kernel In the Linux kernel 5.0.21, mounting a crafted btrfs filesystem image can lead to slab-out-of-bounds write access in index_rbio_pages in fs/btrfs/raid56.c. CWE-787
 Out-of-bounds Write
CVE-2019-19378 2024-11-21 13:34 2019-11-30 Show GitHub Exploit DB Packet Storm
224464 7.8 HIGH
Local
linux
netapp
linux_kernel
cloud_backup
steelstore_cloud_integrated_storage
active_iq_unified_manager
solidfire_baseboard_management_controller
In the Linux kernel 5.0.21, mounting a crafted btrfs filesystem image, performing some operations, and unmounting can lead to a use-after-free in btrfs_queue_work in fs/btrfs/async-thread.c. CWE-416
 Use After Free
CVE-2019-19377 2024-11-21 13:34 2019-11-30 Show GitHub Exploit DB Packet Storm
224465 9.1 CRITICAL
Network
luajit
moonjit_project
luajit
moonjit
In LuaJIT through 2.0.5, as used in Moonjit before 2.1.2 and other products, debug.getinfo has a type confusion issue that leads to arbitrary memory write or read operations, because certain cases in… CWE-843
Type Confusion
CVE-2019-19391 2024-11-21 13:34 2019-11-30 Show GitHub Exploit DB Packet Storm
224466 6.1 MEDIUM
Network
fusionpbx fusionpbx A cross-site scripting (XSS) vulnerability in app/dialplans/dialplan_detail_edit.php in FusionPBX 4.4.1 allows remote attackers to inject arbitrary web script or HTML via the dialplan_uuid parameter. CWE-79
Cross-site Scripting
CVE-2019-19388 2024-11-21 13:34 2019-11-29 Show GitHub Exploit DB Packet Storm
224467 6.1 MEDIUM
Network
fusionpbx fusionpbx A cross-site scripting (XSS) vulnerability in app/fifo_list/fifo_interactive.php in FusionPBX 4.4.1 allows remote attackers to inject arbitrary web script or HTML via the c parameter. CWE-79
Cross-site Scripting
CVE-2019-19387 2024-11-21 13:34 2019-11-29 Show GitHub Exploit DB Packet Storm
224468 6.1 MEDIUM
Network
fusionpbx fusionpbx A cross-site scripting (XSS) vulnerability in app/voicemail_greetings/voicemail_greeting_edit.php in FusionPBX 4.4.1 allows remote attackers to inject arbitrary web script or HTML via the id and/or v… CWE-79
Cross-site Scripting
CVE-2019-19386 2024-11-21 13:34 2019-11-29 Show GitHub Exploit DB Packet Storm
224469 6.1 MEDIUM
Network
fusionpbx fusionpbx A cross-site scripting (XSS) vulnerability in app/dialplans/dialplans.php in FusionPBX 4.4.1 allows remote attackers to inject arbitrary web script or HTML via the app_uuid parameter. CWE-79
Cross-site Scripting
CVE-2019-19385 2024-11-21 13:34 2019-11-29 Show GitHub Exploit DB Packet Storm
224470 6.1 MEDIUM
Network
fusionpbx fusionpbx A cross-site scripting (XSS) vulnerability in app/fax/fax_log_view.php in FusionPBX 4.4.1 allows remote attackers to inject arbitrary web script or HTML via the fax_uuid parameter. CWE-79
Cross-site Scripting
CVE-2019-19384 2024-11-21 13:34 2019-11-29 Show GitHub Exploit DB Packet Storm