Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 22, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
230101 5.1 警告 The phpMyAdmin Project - phpMyAdmin における SQL インジェクションおよびクロスサイトリクエストフォージェリ攻撃を実行される脆弱性 CWE-352
CWE-89
CVE-2008-1149 2012-12-20 18:34 2008-03-3 Show GitHub Exploit DB Packet Storm
230102 9.3 危険 synce - SynCE-dccm の vdccm の src/utils.cpp における任意のコマンドを実行される脆弱性 CWE-20
CWE-94
CVE-2008-1136 2012-12-20 18:34 2008-03-4 Show GitHub Exploit DB Packet Storm
230103 4.3 警告 xrms crm - XRMS CRM の admin/users/self.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2008-1129 2012-12-20 18:34 2008-03-3 Show GitHub Exploit DB Packet Storm
230104 6.8 警告 phpmytourney - phpMyTourney の tourney/index.php における PHP リモートファイルインクルージョンの脆弱性 CWE-94
コード・インジェクション 		CVE-2008-1128 2012-12-20 18:34 2008-03-3 Show GitHub Exploit DB Packet Storm
230105 5 警告 podcast generator - Podcast Generator におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2008-1125 2012-12-20 18:34 2008-03-3 Show GitHub Exploit DB Packet Storm
230106 6.8 警告 podcast generator - Podcast Generator における PHP リモートファイルインクルージョンの脆弱性 CWE-94
コード・インジェクション 		CVE-2008-1124 2012-12-20 18:34 2008-03-3 Show GitHub Exploit DB Packet Storm
230107 6.8 警告 sitebuilder - SiteBuilder Elite における PHP リモートファイルインクルージョンの脆弱性 CWE-94
コード・インジェクション 		CVE-2008-1123 2012-12-20 18:34 2008-03-3 Show GitHub Exploit DB Packet Storm
230108 9.3 危険 rising antivirus international - Rising Antivirus Online Scanner の Web Scan Object ActiveX コントロール における任意のコードを強制的にダウンロードされる脆弱性 CWE-DesignError
CVE-2008-1116 2012-12-20 18:34 2008-03-3 Show GitHub Exploit DB Packet Storm
230109 7.8 危険 Vocera - Cisco Unified Wireless IP Phone 7921 におけるハッシュされたパスワードを盗まれる脆弱性 CWE-200
情報漏えい 		CVE-2008-1113 2012-12-20 18:34 2008-03-3 Show GitHub Exploit DB Packet Storm
230110 6.8 警告 Xine - xine-lib の xineplug_dmx_asf.so プラグイン におけるバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2008-1110 2012-12-20 18:34 2008-02-29 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 23, 2026, 4:08 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
223411 6.7 MEDIUM
Local 		linux
fedoraproject 		linux_kernel
fedora 		In the Linux kernel 5.3.10, there is a use-after-free (read) in the perf_trace_lock_acquire function (related to include/trace/events/lock.h). CWE-416
 Use After Free 		CVE-2019-19769 2024-11-21 13:35 2019-12-13 Show GitHub Exploit DB Packet Storm
223412 7.5 HIGH
Network 		linux linux_kernel In the Linux kernel 5.4.0-rc2, there is a use-after-free (read) in the __blk_add_trace function in kernel/trace/blktrace.c (which is used to fill out a blk_io_trace structure and place it in a per-cp… CWE-416
 Use After Free 		CVE-2019-19768 2024-11-21 13:35 2019-12-13 Show GitHub Exploit DB Packet Storm
223413 5.5 MEDIUM
Local 		linux linux_kernel The Linux kernel before 5.4.2 mishandles ext4_expand_extra_isize, as demonstrated by use-after-free errors in __ext4_expand_extra_isize and ext4_xattr_set_entry, related to fs/ext4/inode.c and fs/ext… CWE-416
 Use After Free 		CVE-2019-19767 2024-11-21 13:35 2019-12-13 Show GitHub Exploit DB Packet Storm
223414 7.5 HIGH
Network 		bitwarden server The Bitwarden server through 1.32.0 has a potentially unwanted KDF. CWE-916
 Use of Password Hash With Insufficient Computational Effort 		CVE-2019-19766 2024-11-21 13:35 2019-12-13 Show GitHub Exploit DB Packet Storm
223415 9.8 CRITICAL
Network 		minerstat msos minerstat msOS before 2019-10-23 does not have a unique SSH key for each instance of the product. NVD-CWE-noinfo
CVE-2019-19750 2024-11-21 13:35 2019-12-13 Show GitHub Exploit DB Packet Storm
223416 6.1 MEDIUM
Network 		brizoit work_time_calendar The Work Time Calendar app before 4.7.1 for Jira allows XSS. CWE-79
Cross-site Scripting 		CVE-2019-19748 2024-11-21 13:35 2019-12-12 Show GitHub Exploit DB Packet Storm
223417 5.5 MEDIUM
Local 		fig2dev_project
fedoraproject 		fig2dev
fedora 		make_arrow in arrow.c in Xfig fig2dev 3.2.7b allows a segmentation fault and out-of-bounds write because of an integer overflow via a large arrow type. CWE-787
CWE-190
 Out-of-bounds Write
 Integer Overflow or Wraparound 		CVE-2019-19746 2024-11-21 13:35 2019-12-12 Show GitHub Exploit DB Packet Storm
223418 9.8 CRITICAL
Network 		octeth oempro Octeth Oempro 4.7 and 4.8 allow SQL injection. The parameter CampaignID in Campaign.Get is vulnerable. CWE-89
SQL Injection 		CVE-2019-19740 2024-11-21 13:35 2019-12-12 Show GitHub Exploit DB Packet Storm
223419 7.8 HIGH
Local 		openbsd openbsd OpenBSD through 6.6 allows local users to escalate to root because a check for LD_LIBRARY_PATH in setuid programs can be defeated by setting a very small RLIMIT_DATA resource limit. When executing ch… CWE-269
 Improper Privilege Management 		CVE-2019-19726 2024-11-21 13:35 2019-12-12 Show GitHub Exploit DB Packet Storm
223420 7.5 HIGH
Network 		bson-objectid_project bson-objectid An issue was discovered in the BSON ObjectID (aka bson-objectid) package 1.3.0 for Node.js. ObjectID() allows an attacker to generate a malformed objectid by inserting an additional property to the u… CWE-670
 Always-Incorrect Control Flow Implementation 		CVE-2019-19729 2024-11-21 13:35 2019-12-12 Show GitHub Exploit DB Packet Storm