Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 28, 2026, 10 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
230011	10	危険	TYPO3 Association	-	TYPO3 用の air_filemanager エクステンションにおける任意の PHP コードされる脆弱性	CWE-94 コード・インジェクション	CVE-2008-2345	2012-12-20 18:52	2008-05-19	Show	GitHub Exploit DB Packet Storm

230012	4.3	警告	TYPO3 Association	-	TYPO3 用の air_filemanager エクステンションにおけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2008-2344	2012-12-20 18:52	2008-05-19	Show	GitHub Exploit DB Packet Storm

230013	7.5	危険	turnkey web tools	-	Turnkey Web Tools SunShop Shopping Cart の index.php における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2008-2339	2012-12-20 18:52	2008-05-19	Show	GitHub Exploit DB Packet Storm

230014	4.3	警告	Vastal I-Tech & Co.	-	Vastal I-Tech phpVID の search_results.php におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2008-2335	2012-12-20 18:52	2008-05-19	Show	GitHub Exploit DB Packet Storm

230015	7.5	危険	phpway	-	Kostenloses Linkmanagementscript における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2008-2301	2012-12-20 18:52	2008-05-18	Show	GitHub Exploit DB Packet Storm

230016	7.5	危険	加藤和良	-	Web Slider の Admin.php における認証を回避される脆弱性	CWE-287 不適切な認証	CVE-2008-2298	2012-12-20 18:52	2008-05-18	Show	GitHub Exploit DB Packet Storm

230017	7.5	危険	roticv	-	Rantx の admin.php における認証を回避される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2008-2297	2012-12-20 18:52	2008-05-18	Show	GitHub Exploit DB Packet Storm

230018	7.5	危険	rgboard	-	Rgboard の include/bbs.lib.inc.php における PHP リモートファイルインクルージョンの脆弱性	CWE-94 コード・インジェクション	CVE-2008-2296	2012-12-20 18:52	2008-05-18	Show	GitHub Exploit DB Packet Storm

230019	4.3	警告	rgboard	-	Rgboard の rg_search.php におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2008-2295	2012-12-20 18:52	2008-05-18	Show	GitHub Exploit DB Packet Storm

230020	7.5	危険	tpvgames	-	MPCS の admin.php における認証を回避される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2008-2293	2012-12-20 18:52	2008-05-18	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 28, 2026, 4:16 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
222471	5.3	MEDIUM Network	mongodb	ops_manager	In affected Ops Manager versions there is an exposed http route was that may allow attackers to view a specific access log of a publicly exposed Ops Manager instance. This issue affects: MongoDB Inc.…	CWE-425 Direct Request ('Forced Browsing')	CVE-2019-2388	2024-11-21 13:40	2020-05-14	Show	GitHub Exploit DB Packet Storm

222472	5.5	MEDIUM Local	google	android	There is a possible disclosure of RAM using a shared crypto key due to improperly used crypto. This could lead to local information disclosure with no additional execution privileges needed. User int…	NVD-CWE-noinfo	CVE-2019-2056	2024-11-21 13:40	2020-04-18	Show	GitHub Exploit DB Packet Storm

222473	5.4	MEDIUM Network	mongodb	js-bson	Incorrect parsing of certain JSON input may result in js-bson not correctly serializing BSON. This may cause unexpected application behaviour including data disclosure. This issue affects: MongoDB In…	CWE-502 Deserialization of Untrusted Data	CVE-2019-2391	2024-11-21 13:40	2020-03-31	Show	GitHub Exploit DB Packet Storm

222474	7.3	HIGH Local	google	android	In overlay notifications, there is a possible hidden notification due to improper input validation. This could lead to a local escalation of privilege because the user is not notified of an overlayin…	CWE-20 Improper Input Validation	CVE-2019-2216	2024-11-21 13:40	2020-03-16	Show	GitHub Exploit DB Packet Storm

222475	7.8	HIGH Local	google	android	In app uninstallation, there is a possible set of permissions that may not be removed from a shared app ID. This could lead to a local escalation of privilege with no additional execution privileges …	CWE-732 Incorrect Permission Assignment for Critical Resource	CVE-2019-2089	2024-11-21 13:40	2020-03-16	Show	GitHub Exploit DB Packet Storm

222476	5.5	MEDIUM Local	google	android	In StatsService, there is a possible out of bounds read. This could lead to local information disclosure if UBSAN were not enabled, with no additional execution privileges needed. User interaction is…	CWE-125 Out-of-bounds Read	CVE-2019-2088	2024-11-21 13:40	2020-03-16	Show	GitHub Exploit DB Packet Storm

222477	6.5	MEDIUM Network	google	android	In libAACdec, there is a possible out of bounds read. This could lead to remote information disclosure, with no additional execution privileges needed. User interaction is needed for exploitation.Pro…	CWE-125 Out-of-bounds Read	CVE-2019-2058	2024-11-21 13:40	2020-03-16	Show	GitHub Exploit DB Packet Storm

222478	9.8	CRITICAL Network	qualcomm	msm8905_firmware msm8909_firmware msm8917_firmware msm8920_firmware msm8937_firmware msm8940_firmware msm8953_firmware nicobar_firmware qcm2150_firmware qm215_firmware s…	The secret key used to make the Initial Sequence Number in the TCP SYN packet could be brute forced and therefore can be predicted in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Sna…	CWE-330 Use of Insufficiently Random Values	CVE-2019-2317	2024-11-21 13:40	2020-03-5	Show	GitHub Exploit DB Packet Storm

222479	9.8	CRITICAL Network	qualcomm	apq8009_firmware apq8017_firmware apq8096_firmware apq8096au_firmware apq8098_firmware ipq8074_firmware mdm9206_firmware mdm9207c_firmware mdm9607_firmware mdm9640_firmware…	Possible buffer overflow in WLAN handler due to lack of validation of destination buffer size before copying it in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer El…	CWE-120 Classic Buffer Overflow	CVE-2019-2311	2024-11-21 13:40	2020-03-5	Show	GitHub Exploit DB Packet Storm

222480	9.8	CRITICAL Network	qualcomm	apq8009_firmware apq8017_firmware apq8053_firmware apq8096_firmware apq8098_firmware ipq8074_firmware mdm9206_firmware mdm9207c_firmware mdm9607_firmware msm8996_firmware	Possible buffer overflow in WLAN handler due to lack of validation of destination buffer size before copying into it in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consum…	CWE-120 Classic Buffer Overflow	CVE-2019-2300	2024-11-21 13:40	2020-03-5	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed