Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 30, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
230181	4.3	警告	Vtiger	-	vtiger CRM におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2008-3101	2012-12-20 18:52	2008-09-3	Show	GitHub Exploit DB Packet Storm

230182	6.5	警告	phplizardo	-	ImperialBB における任意の PHP コードをアップロードされる脆弱性	CWE-94 コード・インジェクション	CVE-2008-3093	2012-12-20 18:52	2008-07-9	Show	GitHub Exploit DB Packet Storm

230183	7.5	危険	xpoze	-	Xpoze Pro の user.html における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2008-3089	2012-12-20 18:52	2008-07-9	Show	GitHub Exploit DB Packet Storm

230184	7.5	危険	Simple Machines	-	SMF における脆弱性	CWE-noinfo 情報不足	CVE-2008-3073	2012-12-20 18:52	2008-04-30	Show	GitHub Exploit DB Packet Storm

230185	7.5	危険	Simple Machines	-	Simple Machines Forum における脆弱性	CWE-189 数値処理の問題	CVE-2008-3072	2012-12-20 18:52	2008-04-30	Show	GitHub Exploit DB Packet Storm

230186	2.1	注意	SUSE	-	SUSE openSUSE の sudo におけるパスワードを取得される脆弱性	CWE-255 証明書・パスワード管理	CVE-2008-3067	2012-12-20 18:52	2008-07-7	Show	GitHub Exploit DB Packet Storm

230187	7.5	危険	v-webmail	-	V-webmail の login.php における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2008-3063	2012-12-20 18:52	2008-10-7	Show	GitHub Exploit DB Packet Storm

230188	7.5	危険	TYPO3 Association	-	TYPO3 用の DAM Frontend エクステンションにおける SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2008-3039	2012-12-20 18:52	2008-07-7	Show	GitHub Exploit DB Packet Storm

230189	7.5	危険	TYPO3 Association	-	TYPO3 用の Address Directory エクステンションにおける SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2008-3038	2012-12-20 18:52	2008-07-7	Show	GitHub Exploit DB Packet Storm

230190	4.3	警告	TYPO3 Association	-	TYPO3 用の Address Directory エクステンションにおけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2008-3037	2012-12-20 18:52	2008-07-7	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 31, 2026, 4:16 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
222861	4.4	MEDIUM Local	linux debian canonical opensuse	linux_kernel debian_linux ubuntu_linux leap	A flaw was found in the Linux kernel in the function hid_debug_events_read() in drivers/hid/hid-debug.c file which may enter an infinite loop with certain parameters passed from a userspace. A local …	CWE-835 Loop with Unreachable Exit Condition ('Infinite Loop')	CVE-2019-3819	2024-11-21 13:42	2019-01-26	Show	GitHub Exploit DB Packet Storm

222862	6.5	MEDIUM Local	mcafee	total_protection	DLL Search Order Hijacking vulnerability in Microsoft Windows client in McAfee Total Protection (MTP) Prior to 16.0.18 allows local users to execute arbitrary code via execution from a compromised fo…	CWE-426 Untrusted Search Path	CVE-2019-3587	2024-11-21 13:42	2019-01-24	Show	GitHub Exploit DB Packet Storm

222863	6.0	MEDIUM Local	mcafee	mvision_endpoint	Exploitation of Authentication vulnerability in MVision Endpoint in McAfee MVision Endpoint Prior to 1811 Update 1 (18.11.31.62) allows authenticated administrator users --> administrators to Remove …	CWE-287 Improper Authentication	CVE-2019-3584	2024-11-21 13:42	2019-01-24	Show	GitHub Exploit DB Packet Storm

222864	9.8	CRITICAL Network	pivotal_software	spring_batch	Spring Batch versions 3.0.9, 4.0.1, 4.1.0, and older unsupported versions, were susceptible to XML External Entity Injection (XXE) when receiving XML data from untrusted sources.	CWE-611 XXE	CVE-2019-3774	2024-11-21 13:42	2019-01-19	Show	GitHub Exploit DB Packet Storm

222865	9.8	CRITICAL Network	pivotal_software oracle	spring_web_services flexcube_private_banking financial_services_analytical_applications_infrastructure	Spring Web Services, versions 2.4.3, 3.0.4, and older unsupported versions of all three projects, were susceptible to XML External Entity Injection (XXE) when receiving XML data from untrusted source…	CWE-611 XXE	CVE-2019-3773	2024-11-21 13:42	2019-01-19	Show	GitHub Exploit DB Packet Storm

222866	9.8	CRITICAL Network	vmware oracle	spring_integration retail_customer_management_and_segmentation_foundation	Spring Integration (spring-integration-xml and spring-integration-ws modules), versions 4.3.18, 5.0.10, 5.1.1, and older unsupported versions, were susceptible to XML External Entity Injection (XXE) …	CWE-611 XXE	CVE-2019-3772	2024-11-21 13:42	2019-01-19	Show	GitHub Exploit DB Packet Storm

222867	9.1	CRITICAL Network	crestron	airmedia_am-100_firmware	Crestron AM-100 before firmware version 1.6.0.2 contains an authentication bypass in the web interface's return.cgi script. Unauthenticated remote users can use the bypass to access some administrato…	NVD-CWE-noinfo	CVE-2019-3910	2024-11-21 13:42	2019-01-19	Show	GitHub Exploit DB Packet Storm

222868	9.8	CRITICAL Network	identicard	premisys_id	Premisys Identicard version 3.1.190 database uses default credentials. Users are unable to change the credentials without vendor intervention.	CWE-1188 Insecure Default Initialization of Resource	CVE-2019-3909	2024-11-21 13:42	2019-01-19	Show	GitHub Exploit DB Packet Storm

222869	7.5	HIGH Network	identicard	premisys_id	Premisys Identicard version 3.1.190 stores backup files as encrypted zip files. The password to the zip is hard-coded and unchangeable. An attacker with access to these backups can decrypt them and o…	CWE-798 Use of Hard-coded Credentials	CVE-2019-3908	2024-11-21 13:42	2019-01-19	Show	GitHub Exploit DB Packet Storm

222870	7.5	HIGH Network	identicard	premisys_id	Premisys Identicard version 3.1.190 stores user credentials and other sensitive information with a known weak encryption method (MD5 hash of a salt and password).	CWE-916 Use of Password Hash With Insufficient Computational Effort	CVE-2019-3907	2024-11-21 13:42	2019-01-19	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed