Vulnerability Search Top

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

Vulnerability Information Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 21, 2026, 6:01 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
230041	7.5	危険	PreProject.com	-	Pre Dynamic Institution における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2008-0543	2012-12-20 18:34	2008-02-1	Show	GitHub Exploit DB Packet Storm

230042	4.3	警告	trixbox	-	trixbox におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2008-0540	2012-12-20 18:34	2008-02-1	Show	GitHub Exploit DB Packet Storm

230043	6.8	警告	phpip	-	phpIP Management における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2008-0538	2012-12-20 18:34	2008-02-1	Show	GitHub Exploit DB Packet Storm

230044	4.3	警告	softcart	-	SoftCart の SoftCart.exe におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2008-0523	2012-12-20 18:34	2008-01-31	Show	GitHub Exploit DB Packet Storm

230045	7.5	危険	WordPress.org	-	WordPress 用の WassUp プラグインにおける SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2008-0520	2012-12-20 18:34	2008-01-31	Show	GitHub Exploit DB Packet Storm

230046	9.3	危険	SQLiteManager	-	SQLiteManager の spaw/dialogs/confirm.php における PHP リモートファイルインクルージョンの脆弱性	CWE-94 コード・インジェクション	CVE-2008-0516	2012-12-20 18:34	2008-01-31	Show	GitHub Exploit DB Packet Storm

230047	7.8	危険	Phpcms	-	phpCMS の parser/include/class.cache_phpcms.php におけるディレクトリトラバーサルの脆弱性	CWE-22 パス・トラバーサル	CVE-2008-0513	2012-12-20 18:34	2008-01-31	Show	GitHub Exploit DB Packet Storm

230048	6.8	警告	WordPress.org	-	WordPress 用の Dean's Permalinks Migration プラグインにおけるクロスサイトリクエストフォージェリの脆弱性	CWE-352 同一生成元ポリシー違反	CVE-2008-0508	2012-12-20 18:34	2008-01-31	Show	GitHub Exploit DB Packet Storm

230049	7.5	危険	WordPress.org	-	WordPress 用の AdServe プラグインにおける SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2008-0507	2012-12-20 18:34	2008-01-31	Show	GitHub Exploit DB Packet Storm

230050	5.8	警告	加藤和良	-	phpMyClub におけるディレクトリトラバーサルの脆弱性	CWE-22 パス・トラバーサル	CVE-2008-0501	2012-12-20 18:34	2008-01-30	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 22, 2026, 4:08 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
223351	8.8	HIGH Network	openstack	keystone	OpenStack Keystone 15.0.0 and 16.0.0 is affected by Data Leakage in the list credentials API. Any user with a role on a project is able to list any credentials with the /v3/credentials API when enfor…	CWE-522 Insufficiently Protected Credentials	CVE-2019-19687	2024-11-21 13:35	2019-12-10	Show	GitHub Exploit DB Packet Storm

223352	8.8	HIGH Network	nopcommerce	nopcommerce	RoxyFileman, as shipped with nopCommerce v4.2.0, is vulnerable to CSRF because GET requests can be used for renames and deletions.	CWE-352 Origin Validation Error	CVE-2019-19685	2024-11-21 13:35	2019-12-10	Show	GitHub Exploit DB Packet Storm

223353	8.8	HIGH Network	nopcommerce	nopcommerce	nopCommerce v4.2.0 allows privilege escalation via file upload in Presentation/Nop.Web/Admin/Areas/Controllers/PluginController.cs via Admin/FacebookAuthentication/Configure because it is possible to…	CWE-434 Unrestricted Upload of File with Dangerous Type	CVE-2019-19684	2024-11-21 13:35	2019-12-10	Show	GitHub Exploit DB Packet Storm

223354	9.1	CRITICAL Network	nopcommerce	nopcommerce	RoxyFileman, as shipped with nopCommerce v4.2.0, is vulnerable to ../ path traversal via d or f to Admin/RoxyFileman/ProcessRequest because of Libraries/Nop.Services/Media/RoxyFileman/FileRoxyFileman…	CWE-22 Path Traversal	CVE-2019-19683	2024-11-21 13:35	2019-12-10	Show	GitHub Exploit DB Packet Storm

223355	4.8	MEDIUM Network	nopcommerce	nopcommerce	nopCommerce through 4.20 allows XSS in the SaveStoreMappings of the components \Presentation\Nop.Web\Areas\Admin\Controllers\NewsController.cs and \Presentation\Nop.Web\Areas\Admin\Controllers\BlogCo…	CWE-79 Cross-site Scripting	CVE-2019-19682	2024-11-21 13:35	2019-12-10	Show	GitHub Exploit DB Packet Storm

223356	5.4	MEDIUM Network	xpand-it	xray_test_mangaement	In "Xray Test Management for Jira" prior to version 3.5.5, remote authenticated attackers can cause XSS in the Pre-Condition Summary entry point via the summary field of a Create Pre-Condition action…	CWE-79 Cross-site Scripting	CVE-2019-19679	2024-11-21 13:35	2019-12-10	Show	GitHub Exploit DB Packet Storm

223357	5.4	MEDIUM Network	xpand-it	xray_test_mangaement	In "Xray Test Management for Jira" prior to version 3.5.5, remote authenticated attackers can cause XSS in the generic field entry point via the Generic Test Definition field of a new Generic Test is…	CWE-79 Cross-site Scripting	CVE-2019-19678	2024-11-21 13:35	2019-12-10	Show	GitHub Exploit DB Packet Storm

223358	5.5	MEDIUM Local	sqlite netapp oracle tenable siemens	sqlite cloud_backup ontap_select_deploy_administration_utility mysql_workbench tenable.sc sinec_infrastructure_network_services	alter.c in SQLite through 3.30.1 allows attackers to trigger infinite recursion via certain types of self-referential views in conjunction with ALTER TABLE statements.	CWE-674 Uncontrolled Recursion	CVE-2019-19645	2024-11-21 13:35	2019-12-10	Show	GitHub Exploit DB Packet Storm

223359	7.8	HIGH Local	virustotal fedoraproject	yara fedora	In the macho_parse_file functionality in macho/macho.c of YARA 3.11.0, command_size may be inconsistent with the real size. A specially crafted MachO file can cause an out-of-bounds memory access, re…	CWE-125 Out-of-bounds Read	CVE-2019-19648	2024-11-21 13:35	2019-12-9	Show	GitHub Exploit DB Packet Storm

223360	7.8	HIGH Local	radare fedoraproject	radare2 fedora	radare2 through 4.0.0 lacks validation of the content variable in the function r_asm_pseudo_incbin at libr/asm/asm.c, ultimately leading to an arbitrary write. This allows remote attackers to cause a…	CWE-476 NULL Pointer Dereference	CVE-2019-19647	2024-11-21 13:35	2019-12-9	Show	GitHub Exploit DB Packet Storm