Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 1, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
230111 6 警告 tuxplanet - BilboBlog の admin/delete.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-3302 2012-12-20 18:52 2008-07-25 Show GitHub Exploit DB Packet Storm
230112 3.5 注意 tuxplanet - BilboBlog におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2008-3301 2012-12-20 18:52 2008-07-25 Show GitHub Exploit DB Packet Storm
230113 6 警告 socialengine - SE における任意の PHP コードを実行される脆弱性 CWE-94
コード・インジェクション 		CVE-2008-3298 2012-12-20 18:52 2008-07-25 Show GitHub Exploit DB Packet Storm
230114 7.5 危険 socialengine - SE における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-3297 2012-12-20 18:52 2008-07-25 Show GitHub Exploit DB Packet Storm
230115 5 警告 sierra - SWAT におけるサービス運用妨害 (DoS) の脆弱性 CWE-20
不適切な入力確認 		CVE-2008-3286 2012-12-20 18:52 2008-07-24 Show GitHub Exploit DB Packet Storm
230116 5 警告 レッドハット - Red Hat Enterprise IPA および FreeIPA のデフォルト設定における Kerberos マスターキーを取得される脆弱性 CWE-200
情報漏えい 		CVE-2008-3274 2012-12-20 18:52 2008-09-10 Show GitHub Exploit DB Packet Storm
230117 5 警告 winsoftmagic - WinSoftMagic WRPC Lite におけるサービス運用妨害 (DoS) の脆弱性 CWE-399
リソース管理の問題 		CVE-2008-3269 2012-12-20 18:52 2008-07-24 Show GitHub Exploit DB Packet Storm
230118 7.5 危険 softacid - SoftAcid HRS Multi の picture_pic_bv.asp における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-3266 2012-12-20 18:52 2008-07-24 Show GitHub Exploit DB Packet Storm
230119 7.5 危険 Zoph - Zoph における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-3258 2012-12-20 18:52 2008-07-22 Show GitHub Exploit DB Packet Storm
230120 7.5 危険 siteframe - Siteframe CMS の folder.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-3256 2012-12-20 18:52 2008-07-22 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 1, 2026, 4:12 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
224071 7.5 HIGH
Network 		foxitsoftware phantompdf An issue was discovered in Foxit PhantomPDF before 8.3.12. It allows stack consumption via nested function calls for XML parsing. CWE-674
 Uncontrolled Recursion 		CVE-2019-20815 2024-11-21 13:39 2020-06-5 Show GitHub Exploit DB Packet Storm
224072 7.5 HIGH
Network 		foxitsoftware phantompdf An issue was discovered in Foxit PhantomPDF before 8.3.12. It allows memory consumption because data is created for each page of an application level. CWE-770
 Allocation of Resources Without Limits or Throttling 		CVE-2019-20814 2024-11-21 13:39 2020-06-5 Show GitHub Exploit DB Packet Storm
224073 7.5 HIGH
Network 		foxitsoftware phantompdf An issue was discovered in Foxit PhantomPDF before 8.3.12. It has a NULL pointer dereference. CWE-476
 NULL Pointer Dereference 		CVE-2019-20813 2024-11-21 13:39 2020-06-5 Show GitHub Exploit DB Packet Storm
224074 7.5 HIGH
Network 		compound price_oracle The price oracle in PriceOracle.sol in Compound Finance Compound Price Oracle 1.0 through 2.0 allows a price poster to set an invalid asset price via the setPrice function, and consequently violate t… NVD-CWE-noinfo
CVE-2019-20809 2024-11-21 13:39 2020-06-4 Show GitHub Exploit DB Packet Storm
224075 5.5 MEDIUM
Local 		linux linux_kernel An issue was discovered in the Linux kernel before 5.4.7. The prb_calc_retire_blk_tmo() function in net/packet/af_packet.c can result in a denial of service (CPU consumption and soft lockup) in a cer… CWE-400
 Uncontrolled Resource Consumption 		CVE-2019-20812 2024-11-21 13:39 2020-06-3 Show GitHub Exploit DB Packet Storm
224076 5.5 MEDIUM
Local 		linux
debian
canonical 		linux_kernel
debian_linux
ubuntu_linux 		An issue was discovered in the Linux kernel before 5.0.6. In rx_queue_add_kobject() and netdev_queue_add_kobject() in net/core/net-sysfs.c, a reference count is mishandled, aka CID-a3e23f719f5c. NVD-CWE-Other
CVE-2019-20811 2024-11-21 13:39 2020-06-3 Show GitHub Exploit DB Packet Storm
224077 5.5 MEDIUM
Local 		linux
opensuse
canonical 		linux_kernel
leap
ubuntu_linux 		go7007_snd_init in drivers/media/usb/go7007/snd-go7007.c in the Linux kernel before 5.6 does not call snd_card_free for a failure path, which causes a memory leak, aka CID-9453264ef586. CWE-401
 Missing Release of Memory after Effective Lifetime 		CVE-2019-20810 2024-11-21 13:39 2020-06-3 Show GitHub Exploit DB Packet Storm
224078 5.5 MEDIUM
Local 		upx_project upx p_lx_elf.cpp in UPX before 3.96 has an integer overflow during unpacking via crafted values in a PT_DYNAMIC segment. CWE-190
 Integer Overflow or Wraparound 		CVE-2019-20805 2024-11-21 13:39 2020-06-1 Show GitHub Exploit DB Packet Storm
224079 5.3 MEDIUM
Local 		vim
debian
opensuse
canonical
apple
starwindsoftware 		vim
debian_linux
leap
ubuntu_linux
mac_os_x
command_center
san_\&_nas 		In Vim before 8.1.0881, users can circumvent the rvim restricted mode and execute arbitrary OS commands via scripting interfaces (e.g., Python, Ruby, or Lua). CWE-78
OS Command  		CVE-2019-20807 2024-11-21 13:39 2020-05-28 Show GitHub Exploit DB Packet Storm
224080 4.4 MEDIUM
Local 		linux linux_kernel An issue was discovered in the Linux kernel before 5.2. There is a NULL pointer dereference in tw5864_handle_frame() in drivers/media/pci/tw5864/tw5864-video.c, which may cause denial of service, aka… CWE-476
 NULL Pointer Dereference 		CVE-2019-20806 2024-11-21 13:39 2020-05-27 Show GitHub Exploit DB Packet Storm