Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 25, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
230111	6.8	警告	snarky	-	VisualPic の index.php における PHP リモートファイルインクルージョンの脆弱性	CWE-94 コード・インジェクション	CVE-2008-1876	2012-12-20 18:52	2008-04-17	Show	GitHub Exploit DB Packet Storm

230112	7.5	危険	terong	-	Terong PHP Photo Gallery の index.php における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2008-1875	2012-12-20 18:52	2008-04-17	Show	GitHub Exploit DB Packet Storm

230113	6.5	警告	xpoze	-	Xpoze Pro の account/user/mail.html における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2008-1874	2012-12-20 18:52	2008-04-17	Show	GitHub Exploit DB Packet Storm

230114	4.3	警告	tru-zone	-	Nuke ET のプライベートメッセージ機能におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2008-1873	2012-12-20 18:52	2008-04-17	Show	GitHub Exploit DB Packet Storm

230115	6.5	警告	scriptsagent	-	Scriptsagent.com Links Directory の links.php における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2008-1871	2012-12-20 18:52	2008-04-17	Show	GitHub Exploit DB Packet Storm

230116	7.5	危険	site sift media	-	Site Sift Listings における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2008-1869	2012-12-20 18:52	2008-04-17	Show	GitHub Exploit DB Packet Storm

230117	7.5	危険	pixel motion	-	Blog Pixel Motion の admin/sauvBase.php における重要な情報を含む blogPM.sql ファイルの結果を取得される脆弱性	CWE-287 不適切な認証	CVE-2008-1868	2012-12-20 18:52	2008-04-17	Show	GitHub Exploit DB Packet Storm

230118	7.5	危険	pixel motion	-	Blog Pixel Motion における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2008-1867	2012-12-20 18:52	2008-04-17	Show	GitHub Exploit DB Packet Storm

230119	9	危険	pixel motion	-	Blog Pixel Motion の admin/modif_config.php における任意の PHP スクリプトをアップロードされる脆弱性	CWE-94 コード・インジェクション	CVE-2008-1866	2012-12-20 18:52	2008-04-17	Show	GitHub Exploit DB Packet Storm

230120	7.5	危険	prozilla	-	Prozilla Freelancers の project.php における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2008-1864	2012-12-20 18:52	2008-04-17	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 25, 2026, 4:01 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
223781	7.8	HIGH Local	idrix	veracrypt	VeraCrypt 1.24 allows Local Privilege Escalation during execution of VeraCryptExpander.exe.	NVD-CWE-noinfo	CVE-2019-19501	2024-11-21 13:34	2019-12-13	Show	GitHub Exploit DB Packet Storm

223782	7.8	HIGH Local	ea	origin	Electronic Arts Origin through 10.5.x allows Elevation of Privilege (issue 2 of 2).	NVD-CWE-noinfo	CVE-2019-19248	2024-11-21 13:34	2019-12-12	Show	GitHub Exploit DB Packet Storm

223783	7.8	HIGH Local	ea	origin	Electronic Arts Origin through 10.5.x allows Elevation of Privilege (issue 1 of 2).	NVD-CWE-noinfo	CVE-2019-19247	2024-11-21 13:34	2019-12-12	Show	GitHub Exploit DB Packet Storm

223784	5.4	MEDIUM Network	scoutnet	kalender	The Scoutnet Kalender plugin 1.1.0 for WordPress allows XSS.	CWE-79 Cross-site Scripting	CVE-2019-19198	2024-11-21 13:34	2019-12-12	Show	GitHub Exploit DB Packet Storm

223785	9.1	CRITICAL Network	squiz	matrix	An issue was discovered in core/assets/form/form_question_types/form_question_type_file_upload/form_question_type_file_upload.inc in Squiz Matrix CMS 5.5.0 prior to 5.5.0.3, 5.5.1 prior to 5.5.1.8, 5…	CWE-22 Path Traversal	CVE-2019-19374	2024-11-21 13:34	2019-12-12	Show	GitHub Exploit DB Packet Storm

223786	7.5	HIGH Network	squiz	matrix	An issue was discovered in Squiz Matrix CMS 5.5.0 prior to 5.5.0.3, 5.5.1 prior to 5.5.1.8, 5.5.2 prior to 5.5.2.4, and 5.5.3 prior to 5.5.3.3 where a user can trigger arbitrary unserialization of a …	CWE-502 Deserialization of Untrusted Data	CVE-2019-19373	2024-11-21 13:34	2019-12-12	Show	GitHub Exploit DB Packet Storm

223787	7.5	HIGH Network	xen fedoraproject opensuse debian	xen fedora leap debian_linux	An issue was discovered in Xen through 4.12.x allowing x86 HVM/PVH guest OS users to cause a denial of service (guest OS crash) because VMX VMEntry checks mishandle a certain case. Please see XSA-260…	NVD-CWE-noinfo	CVE-2019-19583	2024-11-21 13:34	2019-12-12	Show	GitHub Exploit DB Packet Storm

223788	6.5	MEDIUM Local	xen fedoraproject	xen fedora	An issue was discovered in Xen through 4.12.x allowing x86 guest OS users to cause a denial of service (infinite loop) because certain bit iteration is mishandled. In a number of places bitmaps are b…	CWE-835 Loop with Unreachable Exit Condition ('Infinite Loop')	CVE-2019-19582	2024-11-21 13:34	2019-12-12	Show	GitHub Exploit DB Packet Storm

223789	6.5	MEDIUM Local	xen fedoraproject	xen fedora	An issue was discovered in Xen through 4.12.x allowing 32-bit Arm guest OS users to cause a denial of service (out-of-bounds access) because certain bit iteration is mishandled. In a number of places…	CWE-119 Incorrect Access of Indexable Resource ('Range Error')	CVE-2019-19581	2024-11-21 13:34	2019-12-12	Show	GitHub Exploit DB Packet Storm

223790	6.6	MEDIUM Network	xen fedoraproject	xen fedora	An issue was discovered in Xen through 4.12.x allowing x86 PV guest OS users to gain host OS privileges by leveraging race conditions in pagetable promotion and demotion operations, because of an inc…	CWE-362 Race Condition	CVE-2019-19580	2024-11-21 13:34	2019-12-12	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed