Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 2, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
230161 6.5 警告 Xerox - Xerox CWW における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-3122 2012-12-20 18:52 2008-07-9 Show GitHub Exploit DB Packet Storm
230162 4.3 警告 Xerox - Xerox CWW におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2008-3121 2012-12-20 18:52 2008-07-9 Show GitHub Exploit DB Packet Storm
230163 7.5 危険 phpmotion - PHPmotion の play.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-3118 2012-12-20 18:52 2008-07-10 Show GitHub Exploit DB Packet Storm
230164 6.5 警告 phpmotion - PHPmotion の update_profile.php における任意のコードを実行される脆弱性 CWE-20
不適切な入力確認 		CVE-2008-3117 2012-12-20 18:52 2008-07-10 Show GitHub Exploit DB Packet Storm
230165 4.3 警告 v-webmail - V-webmail の redirect.php におけるオープンリダイレクトの脆弱性 CWE-Other
その他 		CVE-2008-3061 2012-12-20 18:52 2008-10-7 Show GitHub Exploit DB Packet Storm
230166 5 警告 v-webmail - V-webmail における重要な情報を取得される脆弱性 CWE-200
情報漏えい 		CVE-2008-3060 2012-12-20 18:52 2008-10-7 Show GitHub Exploit DB Packet Storm
230167 7.5 危険 TYPO3 Association - TYPO3 用の Codeon Petition エクステンションにおける SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-3056 2012-12-20 18:52 2008-07-7 Show GitHub Exploit DB Packet Storm
230168 7.5 危険 TYPO3 Association - TYPO3 用の Support view エクステンションにおける SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-3055 2012-12-20 18:52 2008-07-7 Show GitHub Exploit DB Packet Storm
230169 7.5 危険 TYPO3 Association - TYPO3 用の Branchenbuch エクステンションにおける SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-3054 2012-12-20 18:52 2008-07-7 Show GitHub Exploit DB Packet Storm
230170 7.5 危険 TYPO3 Association - TYPO3 用の SQL Frontend エクステンションにおける SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-3053 2012-12-20 18:52 2008-07-7 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 2, 2026, 4:18 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
224111 7.8 HIGH
Local 		linux
netapp 		linux_kernel
solidfire_baseboard_management_controller_firmware
cloud_backup
solidfire_\&_hci_management_node
h500s_firmware
h700s_firmware
h300e_firmware
h500e_firmware
h… 		An issue was discovered in the Linux kernel before 5.0.19. The XFRM subsystem has a use-after-free, related to an xfrm_state_fini panic, aka CID-dbb2483b2a46. CWE-416
 Use After Free 		CVE-2019-25045 2024-11-21 13:39 2021-06-8 Show GitHub Exploit DB Packet Storm
224112 5.5 MEDIUM
Local 		versa-networks versa_director
versa_analytics
versa_operating_system 		In Versa Director, Versa Analytics and VOS, Passwords are not hashed using an adaptive cryptographic hash function or key derivation function prior to storage. Popular hashing algorithms based on the… CWE-522
 Insufficiently Protected Credentials 		CVE-2019-25030 2024-11-21 13:39 2021-05-27 Show GitHub Exploit DB Packet Storm
224113 9.8 CRITICAL
Network 		versa-networks versa_director In Versa Director, the command injection is an attack in which the goal is execution of arbitrary commands on the host operating system via a vulnerable application. Command injection attacks are pos… CWE-77
Command Injection 		CVE-2019-25029 2024-11-21 13:39 2021-05-27 Show GitHub Exploit DB Packet Storm
224114 7.8 HIGH
Local 		linux
netapp 		linux_kernel
cloud_backup
solidfire_\&_hci_management_node
solidfire_baseboard_management_controller_firmware
h300s_firmware
h500s_firmware
h700s_firmware
h300e_firmware
h… 		The block subsystem in the Linux kernel before 5.2 has a use-after-free that can lead to arbitrary code execution in the kernel context and privilege escalation, aka CID-c3e2219216c9. This is related… CWE-416
 Use After Free 		CVE-2019-25044 2024-11-21 13:39 2021-05-15 Show GitHub Exploit DB Packet Storm
224115 5.3 MEDIUM
Network 		trustwave modsecurity ModSecurity 3.x before 3.0.4 mishandles key-value pair parsing, as demonstrated by a "string index out of range" error and worker-process crash for a "Cookie: =abc" header. CWE-755
 Improper Handling of Exceptional Conditions 		CVE-2019-25043 2024-11-21 13:39 2021-05-7 Show GitHub Exploit DB Packet Storm
224116 9.8 CRITICAL
Network 		nlnetlabs
debian 		unbound
debian_linux 		Unbound before 1.9.5 allows an out-of-bounds write via a compressed name in rdata_copy. NOTE: The vendor disputes that this is a vulnerability. Although the code may be vulnerable, a running Unbound … CWE-787
 Out-of-bounds Write 		CVE-2019-25042 2024-11-21 13:39 2021-04-27 Show GitHub Exploit DB Packet Storm
224117 7.5 HIGH
Network 		nlnetlabs
debian 		unbound
debian_linux 		Unbound before 1.9.5 allows an assertion failure via a compressed name in dname_pkt_copy. NOTE: The vendor disputes that this is a vulnerability. Although the code may be vulnerable, a running Unboun… CWE-617
 Reachable Assertion 		CVE-2019-25041 2024-11-21 13:39 2021-04-27 Show GitHub Exploit DB Packet Storm
224118 7.5 HIGH
Network 		nlnetlabs
debian 		unbound
debian_linux 		Unbound before 1.9.5 allows an infinite loop via a compressed name in dname_pkt_copy. NOTE: The vendor disputes that this is a vulnerability. Although the code may be vulnerable, a running Unbound in… CWE-835
 Loop with Unreachable Exit Condition ('Infinite Loop') 		CVE-2019-25040 2024-11-21 13:39 2021-04-27 Show GitHub Exploit DB Packet Storm
224119 9.8 CRITICAL
Network 		nlnetlabs
debian 		unbound
debian_linux 		Unbound before 1.9.5 allows an integer overflow in a size calculation in respip/respip.c. NOTE: The vendor disputes that this is a vulnerability. Although the code may be vulnerable, a running Unboun… CWE-190
 Integer Overflow or Wraparound 		CVE-2019-25039 2024-11-21 13:39 2021-04-27 Show GitHub Exploit DB Packet Storm
224120 9.8 CRITICAL
Network 		nlnetlabs
debian 		unbound
debian_linux 		Unbound before 1.9.5 allows an integer overflow in a size calculation in dnscrypt/dnscrypt.c. NOTE: The vendor disputes that this is a vulnerability. Although the code may be vulnerable, a running Un… CWE-190
 Integer Overflow or Wraparound 		CVE-2019-25038 2024-11-21 13:39 2021-04-27 Show GitHub Exploit DB Packet Storm