Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 4, 2026, 2 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
230041 9.3 危険 SAP - SAP GUI の KWEdit ActiveX コントロールにおける任意のファイルを上書きされる脆弱性 CWE-Other
その他 		CVE-2008-4830 2012-12-20 18:52 2009-04-16 Show GitHub Exploit DB Packet Storm
230042 7.5 危険 YourFreeWorld.com - YourFreeWorld Classifieds Blaster Script の tr.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-4900 2012-12-20 18:52 2008-11-3 Show GitHub Exploit DB Packet Storm
230043 6.8 警告 planetluc - Planetluc RateMe におけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反 		CVE-2008-4899 2012-12-20 18:52 2008-11-3 Show GitHub Exploit DB Packet Storm
230044 4.3 警告 planetluc - planetluc RateMe におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2008-4898 2012-12-20 18:52 2008-11-3 Show GitHub Exploit DB Packet Storm
230045 7.5 危険 YourFreeWorld.com - YourFreeWorld Downline Builder の tr.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-4895 2012-12-20 18:52 2008-11-3 Show GitHub Exploit DB Packet Storm
230046 5.1 警告 Tribal Ltd. - Tribiq CMS の templates/mytribiqsite/tribal-GPL-1066/includes/header.inc.php におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2008-4894 2012-12-20 18:52 2008-11-3 Show GitHub Exploit DB Packet Storm
230047 2.6 注意 Tribal Ltd. - Tribiq CMS の templates/mytribiqsite/tribal-GPL-1066/includes/header.inc.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2008-4893 2012-12-20 18:52 2008-11-3 Show GitHub Exploit DB Packet Storm
230048 4.3 警告 planetluc - Planetluc MyGallery の gallery.inc.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2008-4892 2012-12-20 18:52 2008-11-3 Show GitHub Exploit DB Packet Storm
230049 4.3 警告 planetluc - Planetluc SignMe の signme.inc.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2008-4891 2012-12-20 18:52 2008-11-3 Show GitHub Exploit DB Packet Storm
230050 7.5 危険 YourFreeWorld.com - YourFreeWorld Shopping Cart Script の index.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-4886 2012-12-20 18:52 2008-11-3 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 4, 2026, 4:17 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
224651 5.5 MEDIUM
Local 		versa-networks versa_director
versa_analytics
versa_operating_system 		In Versa Director, Versa Analytics and VOS, Passwords are not hashed using an adaptive cryptographic hash function or key derivation function prior to storage. Popular hashing algorithms based on the… CWE-522
 Insufficiently Protected Credentials 		CVE-2019-25030 2024-11-21 13:39 2021-05-27 Show GitHub Exploit DB Packet Storm
224652 9.8 CRITICAL
Network 		versa-networks versa_director In Versa Director, the command injection is an attack in which the goal is execution of arbitrary commands on the host operating system via a vulnerable application. Command injection attacks are pos… CWE-77
Command Injection 		CVE-2019-25029 2024-11-21 13:39 2021-05-27 Show GitHub Exploit DB Packet Storm
224653 7.8 HIGH
Local 		linux
netapp 		linux_kernel
cloud_backup
solidfire_\&_hci_management_node
solidfire_baseboard_management_controller_firmware
h300s_firmware
h500s_firmware
h700s_firmware
h300e_firmware
h… 		The block subsystem in the Linux kernel before 5.2 has a use-after-free that can lead to arbitrary code execution in the kernel context and privilege escalation, aka CID-c3e2219216c9. This is related… CWE-416
 Use After Free 		CVE-2019-25044 2024-11-21 13:39 2021-05-15 Show GitHub Exploit DB Packet Storm
224654 5.3 MEDIUM
Network 		trustwave modsecurity ModSecurity 3.x before 3.0.4 mishandles key-value pair parsing, as demonstrated by a "string index out of range" error and worker-process crash for a "Cookie: =abc" header. CWE-755
 Improper Handling of Exceptional Conditions 		CVE-2019-25043 2024-11-21 13:39 2021-05-7 Show GitHub Exploit DB Packet Storm
224655 9.8 CRITICAL
Network 		nlnetlabs
debian 		unbound
debian_linux 		Unbound before 1.9.5 allows an out-of-bounds write via a compressed name in rdata_copy. NOTE: The vendor disputes that this is a vulnerability. Although the code may be vulnerable, a running Unbound … CWE-787
 Out-of-bounds Write 		CVE-2019-25042 2024-11-21 13:39 2021-04-27 Show GitHub Exploit DB Packet Storm
224656 7.5 HIGH
Network 		nlnetlabs
debian 		unbound
debian_linux 		Unbound before 1.9.5 allows an assertion failure via a compressed name in dname_pkt_copy. NOTE: The vendor disputes that this is a vulnerability. Although the code may be vulnerable, a running Unboun… CWE-617
 Reachable Assertion 		CVE-2019-25041 2024-11-21 13:39 2021-04-27 Show GitHub Exploit DB Packet Storm
224657 7.5 HIGH
Network 		nlnetlabs
debian 		unbound
debian_linux 		Unbound before 1.9.5 allows an infinite loop via a compressed name in dname_pkt_copy. NOTE: The vendor disputes that this is a vulnerability. Although the code may be vulnerable, a running Unbound in… CWE-835
 Loop with Unreachable Exit Condition ('Infinite Loop') 		CVE-2019-25040 2024-11-21 13:39 2021-04-27 Show GitHub Exploit DB Packet Storm
224658 9.8 CRITICAL
Network 		nlnetlabs
debian 		unbound
debian_linux 		Unbound before 1.9.5 allows an integer overflow in a size calculation in respip/respip.c. NOTE: The vendor disputes that this is a vulnerability. Although the code may be vulnerable, a running Unboun… CWE-190
 Integer Overflow or Wraparound 		CVE-2019-25039 2024-11-21 13:39 2021-04-27 Show GitHub Exploit DB Packet Storm
224659 9.8 CRITICAL
Network 		nlnetlabs
debian 		unbound
debian_linux 		Unbound before 1.9.5 allows an integer overflow in a size calculation in dnscrypt/dnscrypt.c. NOTE: The vendor disputes that this is a vulnerability. Although the code may be vulnerable, a running Un… CWE-190
 Integer Overflow or Wraparound 		CVE-2019-25038 2024-11-21 13:39 2021-04-27 Show GitHub Exploit DB Packet Storm
224660 7.5 HIGH
Network 		nlnetlabs
debian 		unbound
debian_linux 		Unbound before 1.9.5 allows an assertion failure and denial of service in dname_pkt_copy via an invalid packet. NOTE: The vendor disputes that this is a vulnerability. Although the code may be vulner… CWE-617
 Reachable Assertion 		CVE-2019-25037 2024-11-21 13:39 2021-04-27 Show GitHub Exploit DB Packet Storm