Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 6, 2026, 10 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
230141 7.5 危険 wportfolio - wPortfolio の admin/userinfo.php における admin アカウントのパスワードを変更される脆弱性 CWE-287
不適切な認証 		CVE-2008-5221 2012-12-20 18:52 2008-11-25 Show GitHub Exploit DB Packet Storm
230142 10 危険 wportfolio - wPortfolio の admin/upload_form.php における任意のコードを実行される脆弱性 CWE-20
不適切な入力確認 		CVE-2008-5220 2012-12-20 18:52 2008-11-25 Show GitHub Exploit DB Packet Storm
230143 7.5 危険 videoscript - VVideoScript のパスワード変更機能における admin アカウントパスワードを変更される脆弱性 CWE-287
不適切な認証 		CVE-2008-5219 2012-12-20 18:52 2008-11-25 Show GitHub Exploit DB Packet Storm
230144 5 警告 Scriptsez.net - ScriptsEz FREEze Greetings における平文パスワードを取得される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2008-5218 2012-12-20 18:52 2008-11-25 Show GitHub Exploit DB Packet Storm
230145 5.1 警告 phpc0d3r - txtCMS の index.php におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2008-5217 2012-12-20 18:52 2008-11-24 Show GitHub Exploit DB Packet Storm
230146 7.5 危険 toddwoolums - Todd Woolums ASP News Management の viewnews.asp における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-5273 2012-12-20 18:52 2008-11-28 Show GitHub Exploit DB Packet Storm
230147 4 警告 SyndeoCMS - Fred Stuurman SyndeoCMS におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2008-5272 2012-12-20 18:52 2008-11-28 Show GitHub Exploit DB Packet Storm
230148 4.3 警告 SyndeoCMS - Fred Stuurman SyndeoCMS の index.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2008-5271 2012-12-20 18:52 2008-11-28 Show GitHub Exploit DB Packet Storm
230149 7.5 危険 wareziz - Yuhhu Superstar の view.topics.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-5270 2012-12-20 18:52 2008-11-28 Show GitHub Exploit DB Packet Storm
230150 2.6 注意 Ando Saabas - Sphider の search.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2008-5211 2012-12-20 18:52 2008-11-24 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 6, 2026, 4:18 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
224341 10.0 CRITICAL
Network 		moodle moodle A flaw was found in Moodle versions 3.1 to 3.1.15 and earlier unsupported versions. The mybackpack functionality allowed setting the URL of badges, when it should be restricted to the Mozilla Open Ba… CWE-918
Server-Side Request Forgery (SSRF)  		CVE-2019-3809 2024-11-21 13:42 2019-03-26 Show GitHub Exploit DB Packet Storm
224342 5.4 MEDIUM
Network 		moodle moodle A flaw was found in Moodle versions 3.6 to 3.6.1, 3.5 to 3.5.3, 3.4 to 3.4.6, 3.1 to 3.1.15 and earlier unsupported versions. The 'manage groups' capability did not have the 'XSS risk' flag assigned … CWE-79
Cross-site Scripting 		CVE-2019-3808 2024-11-21 13:42 2019-03-26 Show GitHub Exploit DB Packet Storm
224343 7.8 HIGH
Local 		hp arcsight_logger Mitigates a remote code execution issue in ArcSight Logger versions prior to 6.7. NVD-CWE-noinfo
CVE-2019-3484 2024-11-21 13:42 2019-03-26 Show GitHub Exploit DB Packet Storm
224344 6.5 MEDIUM
Network 		hp arcsight_logger Mitigates a potential information leakage issue in ArcSight Logger versions prior to 6.7. NVD-CWE-noinfo
CVE-2019-3483 2024-11-21 13:42 2019-03-26 Show GitHub Exploit DB Packet Storm
224345 6.5 MEDIUM
Network 		hp arcsight_logger Mitigates a directory traversal issue in ArcSight Logger versions prior to 6.7. CWE-22
Path Traversal 		CVE-2019-3482 2024-11-21 13:42 2019-03-26 Show GitHub Exploit DB Packet Storm
224346 7.1 HIGH
Network 		hp arcsight_logger Mitigates a XML External Entity Parsing issue in ArcSight Logger versions prior to 6.7. CWE-611
XXE 		CVE-2019-3481 2024-11-21 13:42 2019-03-26 Show GitHub Exploit DB Packet Storm
224347 6.1 MEDIUM
Network 		hp arcsight_logger Mitigates a stored/reflected XSS issue in ArcSight Logger versions prior to 6.7. CWE-79
Cross-site Scripting 		CVE-2019-3480 2024-11-21 13:42 2019-03-26 Show GitHub Exploit DB Packet Storm
224348 9.8 CRITICAL
Network 		hp arcsight_logger Mitigates a potential remote code execution issue in ArcSight Logger versions prior to 6.7. NVD-CWE-noinfo
CVE-2019-3479 2024-11-21 13:42 2019-03-26 Show GitHub Exploit DB Packet Storm
224349 9.8 CRITICAL
Network 		microfocus data_protector Remote arbitrary code execution in Micro Focus Data Protector, version 10.03 this vulnerability could allow remote arbitrary code execution. NVD-CWE-noinfo
CVE-2019-3476 2024-11-21 13:42 2019-03-26 Show GitHub Exploit DB Packet Storm
224350 8.8 HIGH
Network 		powerdns
fedoraproject 		authoritative_server
fedora 		A vulnerability was found in PowerDNS Authoritative Server before 4.0.7 and before 4.1.7. An insufficient validation of data coming from the user when building a HTTP request from a DNS query in the … CWE-20
 Improper Input Validation  		CVE-2019-3871 2024-11-21 13:42 2019-03-22 Show GitHub Exploit DB Packet Storm