Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 31, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
229951 10 危険 トレンドマイクロ - Trend Micro NSC モジュールのファイアーウォールにおけるヒープベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2008-3865 2012-12-20 18:52 2009-01-16 Show GitHub Exploit DB Packet Storm
229952 5 警告 トレンドマイクロ - Trend Micro NSC モジュールのファイアーウォールサービスにおけるサービス運用妨害 (DoS) の脆弱性 CWE-20
不適切な入力確認 		CVE-2008-3864 2012-12-20 18:52 2009-01-16 Show GitHub Exploit DB Packet Storm
229953 4 警告 softalk mail server - Softalk Mail Server の IMAP サーバにおけるサービス運用妨害 (DoS) の脆弱性 CWE-20
不適切な入力確認 		CVE-2008-4041 2012-12-20 18:52 2008-09-11 Show GitHub Exploit DB Packet Storm
229954 7.5 危険 spice classifieds - Spice Classifieds の index.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-4039 2012-12-20 18:52 2008-09-11 Show GitHub Exploit DB Packet Storm
229955 4.3 警告 PunBB - PunBB の userlist.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2008-3968 2012-12-20 18:52 2008-08-20 Show GitHub Exploit DB Packet Storm
229956 2.6 注意 ssmtp - ssmtp の ssmtp.c における重要な情報を取得される脆弱性 CWE-200
情報漏えい 		CVE-2008-3962 2012-12-20 18:52 2008-08-10 Show GitHub Exploit DB Packet Storm
229957 7.5 危険 Vastal I-Tech & Co. - Vastal I-Tech Shaadi Zone の keyword_search_action.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-3953 2012-12-20 18:52 2008-09-10 Show GitHub Exploit DB Packet Storm
229958 7.5 危険 Vastal I-Tech & Co. - Vastal I-Tech Agent Zone の view_ann.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-3951 2012-12-20 18:52 2008-09-10 Show GitHub Exploit DB Packet Storm
229959 7.2 危険 SUSE - Emacs の emacs/lisp/progmodes/python.el における任意のコードを実行される脆弱性 CWE-94
コード・インジェクション 		CVE-2008-3949 2012-12-20 18:52 2008-09-19 Show GitHub Exploit DB Packet Storm
229960 7.5 危険 xrms - XRMS の admin/users/self-2.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-3948 2012-12-20 18:52 2008-09-5 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 1, 2026, 4:12 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
221901 8.8 HIGH
Network 		libsdl
opensuse 		sdl2_image
leap
backports_sle 		An exploitable code execution vulnerability exists in the XPM image rendering functionality of SDL2_image 2.0.4. A specially crafted XPM image can cause an integer overflow, allocating too small of a… CWE-787
CWE-190
 Out-of-bounds Write
 Integer Overflow or Wraparound 		CVE-2019-5059 2024-11-21 13:44 2019-08-1 Show GitHub Exploit DB Packet Storm
221902 8.8 HIGH
Network 		libsdl
opensuse 		sdl2_image
leap
backports_sle 		An exploitable code execution vulnerability exists in the XCF image rendering functionality of SDL2_image 2.0.4. A specially crafted XCF image can cause a heap overflow, resulting in code execution. … CWE-787
 Out-of-bounds Write 		CVE-2019-5058 2024-11-21 13:44 2019-08-1 Show GitHub Exploit DB Packet Storm
221903 8.8 HIGH
Network 		libsdl
opensuse 		sdl2_image
leap
backports_sle 		An exploitable code execution vulnerability exists in the PCX image-rendering functionality of SDL2_image 2.0.4. A specially crafted PCX image can cause a heap overflow, resulting in code execution. … CWE-787
 Out-of-bounds Write 		CVE-2019-5057 2024-11-21 13:44 2019-08-1 Show GitHub Exploit DB Packet Storm
221904 5.5 MEDIUM
Local 		virustotal yara An exploitable denial of service vulnerability exists in the object lookup functionality of Yara 3.8.1. A specially crafted binary file can cause a negative value to be read to satisfy an assert, res… CWE-754
CWE-617
 Improper Check for Unusual or Exceptional Conditions
 Reachable Assertion 		CVE-2019-5020 2024-11-21 13:44 2019-08-1 Show GitHub Exploit DB Packet Storm
221905 5.5 MEDIUM
Local 		videolan
opensuse 		vlc_media_player
leap
backports 		Double Free in VLC versions <= 3.0.6 leads to a crash. CWE-415
 Double Free 		CVE-2019-5460 2024-11-21 13:44 2019-07-31 Show GitHub Exploit DB Packet Storm
221906 7.1 HIGH
Local 		videolan
opensuse 		vlc_media_player
leap
backports
backports_sle 		An Integer underflow in VLC Media Player versions < 3.0.7 leads to an out-of-band read. CWE-191
 Integer Underflow (Wrap or Wraparound) 		CVE-2019-5459 2024-11-21 13:44 2019-07-31 Show GitHub Exploit DB Packet Storm
221907 5.4 MEDIUM
Network 		http-file-server_project http-file-server Cross-site scripting (XSS) vulnerability in http-file-server (all versions) allows an attacker with access to the server file system to execute arbitrary JavaScript code in victim's browser. CWE-79
Cross-site Scripting 		CVE-2019-5458 2024-11-21 13:44 2019-07-31 Show GitHub Exploit DB Packet Storm
221908 5.4 MEDIUM
Network 		min-http-server_project min-http-server Cross-site scripting (XSS) vulnerability in min-http-server (all versions) allows an attacker with access to the server file system to execute arbitrary JavaScript code in victim's browser. CWE-79
Cross-site Scripting 		CVE-2019-5457 2024-11-21 13:44 2019-07-31 Show GitHub Exploit DB Packet Storm
221909 8.1 HIGH
Network 		ui unifi_controller SMTP MITM refers to a malicious actor setting up an SMTP proxy server between the UniFi Controller version <= 5.10.21 and their actual SMTP server to record their SMTP credentials for malicious use l… CWE-255
Credentials Management 		CVE-2019-5456 2024-11-21 13:44 2019-07-31 Show GitHub Exploit DB Packet Storm
221910 6.8 MEDIUM
Physics 		nextcloud nextcloud Bypassing lock protection exists in Nextcloud Android app 3.6.0 when creating a multi-account and aborting the process. CWE-287
Improper Authentication 		CVE-2019-5455 2024-11-21 13:44 2019-07-31 Show GitHub Exploit DB Packet Storm