Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 31, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
230141 7.5 危険 Sclek - jSite における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-3193 2012-12-20 18:52 2008-07-16 Show GitHub Exploit DB Packet Storm
230142 6.8 警告 Sclek - jSite の index.php におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2008-3192 2012-12-20 18:52 2008-07-16 Show GitHub Exploit DB Packet Storm
230143 6.8 警告 vclcomponents - Relative Real Estate Systems の index.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-3185 2012-12-20 18:52 2008-07-15 Show GitHub Exploit DB Packet Storm
230144 4.3 警告 vBulletin Solutions, Inc. - vBulletin におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2008-3184 2012-12-20 18:52 2008-07-7 Show GitHub Exploit DB Packet Storm
230145 9.3 危険 speedbit - DAP の DAP.exe におけるスタックベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2008-3182 2012-12-20 18:52 2008-07-15 Show GitHub Exploit DB Packet Storm
230146 7.5 危険 w2b - W2B phpDatingClub の website.php におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2008-3179 2012-12-20 18:52 2008-07-15 Show GitHub Exploit DB Packet Storm
230147 7.5 危険 webxell - WebXell Editor の upload_pictures.php における任意のコードを実行される脆弱性 CWE-20
不適切な入力確認 		CVE-2008-3178 2012-12-20 18:52 2008-07-15 Show GitHub Exploit DB Packet Storm
230148 5 警告 ソフォス - Linux および Unix 上で稼動している Sophos ウィルス検出エンジンにおけるサービス運用妨害 (DoS) の脆弱性 CWE-16
環境設定 		CVE-2008-3177 2012-12-20 18:52 2008-07-15 Show GitHub Exploit DB Packet Storm
230149 6.8 警告 regretless - DodosMail の dodosmail.php におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2008-3163 2012-12-20 18:52 2008-07-14 Show GitHub Exploit DB Packet Storm
230150 7.5 危険 webblizzard - WebBlizzard CMS の index.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-3154 2012-12-20 18:52 2008-07-11 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 31, 2026, 4:16 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
224031 5.5 MEDIUM
Local 		linux
opensuse
canonical 		linux_kernel
leap
ubuntu_linux 		go7007_snd_init in drivers/media/usb/go7007/snd-go7007.c in the Linux kernel before 5.6 does not call snd_card_free for a failure path, which causes a memory leak, aka CID-9453264ef586. CWE-401
 Missing Release of Memory after Effective Lifetime 		CVE-2019-20810 2024-11-21 13:39 2020-06-3 Show GitHub Exploit DB Packet Storm
224032 5.5 MEDIUM
Local 		upx_project upx p_lx_elf.cpp in UPX before 3.96 has an integer overflow during unpacking via crafted values in a PT_DYNAMIC segment. CWE-190
 Integer Overflow or Wraparound 		CVE-2019-20805 2024-11-21 13:39 2020-06-1 Show GitHub Exploit DB Packet Storm
224033 5.3 MEDIUM
Local 		vim
debian
opensuse
canonical
apple
starwindsoftware 		vim
debian_linux
leap
ubuntu_linux
mac_os_x
command_center
san_\&_nas 		In Vim before 8.1.0881, users can circumvent the rvim restricted mode and execute arbitrary OS commands via scripting interfaces (e.g., Python, Ruby, or Lua). CWE-78
OS Command  		CVE-2019-20807 2024-11-21 13:39 2020-05-28 Show GitHub Exploit DB Packet Storm
224034 4.4 MEDIUM
Local 		linux linux_kernel An issue was discovered in the Linux kernel before 5.2. There is a NULL pointer dereference in tw5864_handle_frame() in drivers/media/pci/tw5864/tw5864-video.c, which may cause denial of service, aka… CWE-476
 NULL Pointer Dereference 		CVE-2019-20806 2024-11-21 13:39 2020-05-27 Show GitHub Exploit DB Packet Storm
224035 8.8 HIGH
Network 		gilacms gila_cms Gila CMS before 1.11.6 allows CSRF with resultant XSS via the admin/themes URI, leading to compromise of the admin account. CWE-352
 Origin Validation Error 		CVE-2019-20804 2024-11-21 13:39 2020-05-22 Show GitHub Exploit DB Packet Storm
224036 6.1 MEDIUM
Network 		gilacms gila_cms Gila CMS before 1.11.6 has reflected XSS via the admin/content/postcategory id parameter, which is mishandled for g_preview_theme. CWE-79
Cross-site Scripting 		CVE-2019-20803 2024-11-21 13:39 2020-05-22 Show GitHub Exploit DB Packet Storm
224037 6.1 MEDIUM
Network 		readdle documents An issue was discovered in the Readdle Documents app before 6.9.7 for iOS. The application's file-transfer web server improperly displays directory names, leading to Stored XSS, which may be used to … CWE-79
Cross-site Scripting 		CVE-2019-20802 2024-11-21 13:39 2020-05-18 Show GitHub Exploit DB Packet Storm
224038 5.3 MEDIUM
Network 		readdle documents An issue was discovered in the Readdle Documents app before 6.9.7 for iOS. The application's file-transfer web server allows for cross-origin requests from any domain, and the WebSocket server lacks … CWE-862
CWE-863
 Missing Authorization
 Incorrect Authorization 		CVE-2019-20801 2024-11-21 13:39 2020-05-18 Show GitHub Exploit DB Packet Storm
224039 9.8 CRITICAL
Network 		cherokee-project cherokee In Cherokee through 1.2.104, remote attackers can trigger an out-of-bounds write in cherokee_handler_cgi_add_env_pair in handler_cgi.c by sending many request headers, as demonstrated by a GET reques… CWE-787
 Out-of-bounds Write 		CVE-2019-20800 2024-11-21 13:39 2020-05-18 Show GitHub Exploit DB Packet Storm
224040 7.5 HIGH
Network 		cherokee-project cherokee In Cherokee through 1.2.104, multiple memory corruption errors may be used by a remote attacker to destabilize the work of a server. CWE-787
 Out-of-bounds Write 		CVE-2019-20799 2024-11-21 13:39 2020-05-18 Show GitHub Exploit DB Packet Storm