Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 24, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
230141	7.5	危険	schoolwires	-	browse.asp の Schoolwires Academic Portal における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2008-0908	2012-12-20 18:34	2008-02-22	Show	GitHub Exploit DB Packet Storm

230142	7.5	危険	PHPNUKE	-	PHP-Nuke 用の Inhalt モジュールにおける SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2008-0907	2012-12-20 18:34	2008-02-22	Show	GitHub Exploit DB Packet Storm

230143	7.5	危険	PHPNUKE	-	PHP-Nuke の Docum モジュールにおける SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2008-0906	2012-12-20 18:34	2008-02-22	Show	GitHub Exploit DB Packet Storm

230144	7.5	危険	レッドハット	-	Red Hat Directory Server で使用されている Red Hat Administration Server における管理者操作を実行される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2008-0893	2012-12-20 18:34	2008-04-15	Show	GitHub Exploit DB Packet Storm

230145	4.6	警告	レッドハット	-	Red Hat Directory Server における JAR ファイルを変更される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2008-0890	2012-12-20 18:34	2008-03-11	Show	GitHub Exploit DB Packet Storm

230146	2.1	注意	レッドハット	-	Red Hat Directory Server における任意のコードを実行される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2008-0889	2012-12-20 18:34	2008-03-19	Show	GitHub Exploit DB Packet Storm

230147	7.5	危険	PHPNUKE	-	PHP-Nuke 用の Okul モジュールにおける SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2008-0881	2012-12-20 18:34	2008-02-21	Show	GitHub Exploit DB Packet Storm

230148	7.5	危険	PHPNUKE	-	PHP-Nuke 用の EasyContent モジュールにおける SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2008-0880	2012-12-20 18:34	2008-02-21	Show	GitHub Exploit DB Packet Storm

230149	7.5	危険	PHPNUKE	-	PHP-Nuke 用の Web_Links モジュールにおける SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2008-0879	2012-12-20 18:34	2008-02-21	Show	GitHub Exploit DB Packet Storm

230150	7.5	危険	runcms	-	RunCMS 用の MyAnnonces モジュールにおける SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2008-0878	2012-12-20 18:34	2008-02-21	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 25, 2026, 4:01 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
223371	7.5	HIGH Network	sylabs	singularity	Insecure permissions (777) are set on $HOME/.singularity when it is newly created by Singularity (version from 3.3.0 to 3.5.1), which could lead to an information leak, and malicious redirection of o…	CWE-276 Incorrect Default Permissions	CVE-2019-19724	2024-11-21 13:35	2019-12-19	Show	GitHub Exploit DB Packet Storm

223372	9.8	CRITICAL Network	trendmicro	mobile_security	Trend Micro Mobile Security for Android (Consumer) versions 10.3.1 and below on Android 8.0+ has an issue in which an attacker could bypass the product's App Password Protection feature.	CWE-521 Weak Password Requirements	CVE-2019-19690	2024-11-21 13:35	2019-12-19	Show	GitHub Exploit DB Packet Storm

223373	7.8	HIGH Local	trendmicro	housecall_for_home_networks	Trend Micro HouseCall for Home Networks (versions below 5.3.0.1063) could be exploited via a DLL Hijack related to a vulnerability on the packer that the program uses.	CWE-427 Uncontrolled Search Path Element	CVE-2019-19689	2024-11-21 13:35	2019-12-19	Show	GitHub Exploit DB Packet Storm

223374	7.8	HIGH Local	trendmicro	housecall_for_home_networks	A privilege escalation vulnerability in Trend Micro HouseCall for Home Networks (versions below 5.3.0.1063) could be exploited allowing an attacker to place a malicious DLL file into the application …	NVD-CWE-noinfo	CVE-2019-19688	2024-11-21 13:35	2019-12-19	Show	GitHub Exploit DB Packet Storm

223375	7.5	HIGH Network	humaxdigital	hgb10r-02_firmware	An issue was discovered on Humax Wireless Voice Gateway HGB10R-2 20160817_1855 devices. Admin credentials are sent over cleartext HTTP.	CWE-319 CWE-522 Cleartext Transmission of Sensitive Information Insufficiently Protected Credentials	CVE-2019-19890	2024-11-21 13:35	2019-12-19	Show	GitHub Exploit DB Packet Storm

223376	7.5	HIGH Network	humaxdigital	hgb10r-02_firmware	An issue was discovered on Humax Wireless Voice Gateway HGB10R-2 20160817_1855 devices. The attacker can discover admin credentials in the backup file, aka backupsettings.conf.	CWE-319 Cleartext Transmission of Sensitive Information	CVE-2019-19889	2024-11-21 13:35	2019-12-19	Show	GitHub Exploit DB Packet Storm

223377	6.5	MEDIUM Network	rockcarry	ffjpeg	jfif_decode in jfif.c in ffjpeg through 2019-08-21 has a divide-by-zero error.	CWE-369 Divide By Zero	CVE-2019-19888	2024-11-21 13:35	2019-12-19	Show	GitHub Exploit DB Packet Storm

223378	6.5	MEDIUM Network	rockcarry	ffjpeg	bitstr_tell at bitstr.c in ffjpeg through 2019-08-21 has a NULL pointer dereference related to jfif_encode.	CWE-476 NULL Pointer Dereference	CVE-2019-19887	2024-11-21 13:35	2019-12-19	Show	GitHub Exploit DB Packet Storm

223379	9.8	CRITICAL Network	djangoproject canonical	django ubuntu_linux	Django before 1.11.27, 2.x before 2.2.9, and 3.x before 3.0.1 allows account takeover. A suitably crafted email address (that is equal to an existing user's email address after case transformation of…	CWE-640 Weak Password Recovery Mechanism for Forgotten Password	CVE-2019-19844	2024-11-21 13:35	2019-12-19	Show	GitHub Exploit DB Packet Storm

223380	6.5	MEDIUM Network	tautulli	tautulli	In Tautulli 2.1.9, CSRF in the /shutdown URI allows an attacker to shut down the remote media server. (Also, anonymous access can be achieved in applications that do not have a user login area).	CWE-352 Origin Validation Error	CVE-2019-19833	2024-11-21 13:35	2019-12-19	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed