Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":June 2, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
230111	6	警告	tuxplanet	-	BilboBlog の admin/delete.php における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2008-3302	2012-12-20 18:52	2008-07-25	Show	GitHub Exploit DB Packet Storm

230112	3.5	注意	tuxplanet	-	BilboBlog におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2008-3301	2012-12-20 18:52	2008-07-25	Show	GitHub Exploit DB Packet Storm

230113	6	警告	socialengine	-	SE における任意の PHP コードを実行される脆弱性	CWE-94 コード・インジェクション	CVE-2008-3298	2012-12-20 18:52	2008-07-25	Show	GitHub Exploit DB Packet Storm

230114	7.5	危険	socialengine	-	SE における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2008-3297	2012-12-20 18:52	2008-07-25	Show	GitHub Exploit DB Packet Storm

230115	5	警告	sierra	-	SWAT におけるサービス運用妨害 (DoS) の脆弱性	CWE-20 不適切な入力確認	CVE-2008-3286	2012-12-20 18:52	2008-07-24	Show	GitHub Exploit DB Packet Storm

230116	5	警告	レッドハット	-	Red Hat Enterprise IPA および FreeIPA のデフォルト設定における Kerberos マスターキーを取得される脆弱性	CWE-200 情報漏えい	CVE-2008-3274	2012-12-20 18:52	2008-09-10	Show	GitHub Exploit DB Packet Storm

230117	5	警告	winsoftmagic	-	WinSoftMagic WRPC Lite におけるサービス運用妨害 (DoS) の脆弱性	CWE-399 リソース管理の問題	CVE-2008-3269	2012-12-20 18:52	2008-07-24	Show	GitHub Exploit DB Packet Storm

230118	7.5	危険	softacid	-	SoftAcid HRS Multi の picture_pic_bv.asp における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2008-3266	2012-12-20 18:52	2008-07-24	Show	GitHub Exploit DB Packet Storm

230119	7.5	危険	Zoph	-	Zoph における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2008-3258	2012-12-20 18:52	2008-07-22	Show	GitHub Exploit DB Packet Storm

230120	7.5	危険	siteframe	-	Siteframe CMS の folder.php における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2008-3256	2012-12-20 18:52	2008-07-22	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:June 2, 2026, 4:18 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
222221	7.6	HIGH Physics	capsuletech	smartlinx_neuron_2_firmware	A restricted environment escape vulnerability exists in the “kiosk mode” function of Capsule Technologies SmartLinx Neuron 2 medical information collection devices running versions 9.0.3 or lower. A …	NVD-CWE-noinfo	CVE-2019-5024	2024-11-21 13:44	2019-04-12	Show	GitHub Exploit DB Packet Storm

222222	4.8	MEDIUM Network	ui	edgeswitch_x	In Ubiquiti Networks EdgeSwitch X v1.1.0 and prior, an unauthenticated user can use the "local port forwarding" and "dynamic port forwarding" (SOCKS proxy) functionalities. Remote attackers without c…	CWE-287 Improper Authentication	CVE-2019-5426	2024-11-21 13:44	2019-04-11	Show	GitHub Exploit DB Packet Storm

222223	8.8	HIGH Network	ui	edgeswitch_x	In Ubiquiti Networks EdgeSwitch X v1.1.0 and prior, an authenticated user can execute arbitrary shell commands over the SSH interface bypassing the CLI interface, which allow them to escalate privile…	CWE-78 OS Command	CVE-2019-5425	2024-11-21 13:44	2019-04-11	Show	GitHub Exploit DB Packet Storm

222224	8.8	HIGH Network	ui	edgeswitch_x	In Ubiquiti Networks EdgeSwitch X v1.1.0 and prior, a privileged user can execute arbitrary shell commands over the SSH CLI interface. This allows to execute shell commands under the root user.	CWE-78 OS Command	CVE-2019-5424	2024-11-21 13:44	2019-04-11	Show	GitHub Exploit DB Packet Storm

222225	7.5	HIGH Network	http-live-simulator_project	http-live-simulator	Path traversal vulnerability in http-live-simulator npm package version 1.0.5 allows arbitrary path to be accessed on the file system by a remote attacker.	CWE-22 Path Traversal	CVE-2019-5423	2024-11-21 13:44	2019-04-4	Show	GitHub Exploit DB Packet Storm

222226	6.1	MEDIUM Network	buttle_project	buttle	XSS in buttle npm package version 0.2.0 causes execution of attacker-provided code in the victim's browser when an attacker creates an arbitrary file on the server.	CWE-79 Cross-site Scripting	CVE-2019-5422	2024-11-21 13:44	2019-04-4	Show	GitHub Exploit DB Packet Storm

222227	9.8	CRITICAL Network	plataformatec	devise	Plataformatec Devise version 4.5.0 and earlier, using the lockable module contains a CWE-367 vulnerability in The `Devise::Models::Lockable` class, more specifically at the `#increment_failed_attempt…	CWE-307 mproper Restriction of Excessive Authentication Attempts	CVE-2019-5421	2024-11-21 13:44	2019-04-4	Show	GitHub Exploit DB Packet Storm

222228	9.8	CRITICAL Network	rubyonrails debian fedoraproject	rails debian_linux fedora	A remote code execution vulnerability in development mode Rails <5.2.2.1, <6.0.0.beta3 can allow an attacker to guess the automatically generated development mode secret token. This secret token can …	CWE-330 Use of Insufficiently Random Values	CVE-2019-5420	2024-11-21 13:44	2019-03-27	Show	GitHub Exploit DB Packet Storm

222229	7.5	HIGH Network	rubyonrails debian redhat opensuse fedoraproject	rails debian_linux software_collections cloudforms leap fedora	There is a possible denial of service vulnerability in Action View (Rails) <5.2.2.1, <5.1.6.2, <5.0.7.2, <4.2.11.1 where specially crafted accept headers can cause action view to consume 100% cpu and…	CWE-770 Allocation of Resources Without Limits or Throttling	CVE-2019-5419	2024-11-21 13:44	2019-03-27	Show	GitHub Exploit DB Packet Storm

222230	7.5	HIGH Network	rubyonrails debian redhat opensuse fedoraproject	rails debian_linux cloudforms leap fedora software_collections	There is a File Content Disclosure vulnerability in Action View <5.2.2.1, <5.1.6.2, <5.0.7.2, <4.2.11.1 and v3 where specially crafted accept headers can cause contents of arbitrary files on the targ…	NVD-CWE-noinfo	CVE-2019-5418	2024-11-21 13:44	2019-03-27	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed