Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 24, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
230181 4.3 警告 simon elvery
WordPress.org		 - WordPress 用の Simon Elvery WP-Footnotes プラグイにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2008-0691 2012-12-20 18:34 2008-02-11 Show GitHub Exploit DB Packet Storm
230182 4.3 警告 smartscript - Smartscript Domain Trader の catalog.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2008-0688 2012-12-20 18:34 2008-02-11 Show GitHub Exploit DB Packet Storm
230183 7.5 危険 youtube - Youtube Clone Script の siteadmin/editor_files/includes/load_message.php におけるクロスサイトスクリプティングの脆弱性 CWE-94
コード・インジェクション 		CVE-2008-0687 2012-12-20 18:34 2008-02-11 Show GitHub Exploit DB Packet Storm
230184 7.5 危険 WordPress.org - WordPress 用の st_newsletter プラグインにおける SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-0683 2012-12-20 18:34 2008-02-11 Show GitHub Exploit DB Packet Storm
230185 7.5 危険 WordPress.org - WordPress 用の Wordspew プラグインにおける SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-0682 2012-12-20 18:34 2008-02-11 Show GitHub Exploit DB Packet Storm
230186 6.8 警告 phpshop - PHPShop の index.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-0681 2012-12-20 18:34 2008-02-11 Show GitHub Exploit DB Packet Storm
230187 7.5 危険 the everything development company - The Everything Development System の The Everything Development Engine における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-0675 2012-12-20 18:34 2008-02-11 Show GitHub Exploit DB Packet Storm
230188 7.5 危険 tintin - TinTin++ および WinTin++ におけるホームディレクトリの一番上のレベルにある任意のファイルを切り捨てられる脆弱性 CWE-DesignError
CVE-2008-0673 2012-12-20 18:34 2008-02-11 Show GitHub Exploit DB Packet Storm
230189 5 警告 tintin - TinTin++ および WinTin++ の process_chat_input 関数におけるサービス運用妨害 (DoS) の脆弱性 CWE-20
不適切な入力確認 		CVE-2008-0672 2012-12-20 18:34 2008-02-11 Show GitHub Exploit DB Packet Storm
230190 10 危険 tintin - TinTin++ および WinTin++ の add_line_buffer 関数におけるスタックベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2008-0671 2012-12-20 18:34 2008-02-11 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 24, 2026, 4:05 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
223641 7.5 HIGH
Network 		siemens scalance_xc-200_firmware
scalance_xf-200_firmware
scalance_xp-200_firmware
scalance_xb-200_firmware
scalance_x-200irt_firmware
scalance_x-200irt_pro_firmware
scalance_xr-300wg_firmw… 		A vulnerability has been identified in SCALANCE X200-4P IRT, SCALANCE X201-3P IRT, SCALANCE X201-3P IRT PRO, SCALANCE X202-2IRT, SCALANCE X202-2P IRT, SCALANCE X202-2P IRT PRO, SCALANCE X204-2, SCALA… - CVE-2019-19301 2024-11-21 13:34 2020-04-15 Show GitHub Exploit DB Packet Storm
223642 7.5 HIGH
Network 		siemens ktk_ate530s_firmware
sidoor_atd430w_firmware
sidoor_ate530s_coated_firmware
sidoor_ate531s_firmware
simatic_et_200sp_open_controller_cpu_1515sp_pc_firmware
simatic_et_200sp_open_contro… 		A vulnerability has been identified in Development/Evaluation Kits for PROFINET IO: EK-ERTEC 200, Development/Evaluation Kits for PROFINET IO: EK-ERTEC 200P, KTK ATE530S, SIDOOR ATD430W, SIDOOR ATE53… - CVE-2019-19300 2024-11-21 13:34 2020-04-15 Show GitHub Exploit DB Packet Storm
223643 7.0 HIGH
Local 		redhat openshift An insecure modification vulnerability in the /etc/passwd file was found in the container openshift/apb-base, affecting versions before the following 4.3.5, 4.2.21, 4.1.37, and 3.11.188-4. An attacke… CWE-269
 Improper Privilege Management 		CVE-2019-19348 2024-11-21 13:34 2020-04-3 Show GitHub Exploit DB Packet Storm
223644 7.0 HIGH
Local 		redhat openshift An insecure modification vulnerability in the /etc/passwd file was found in the container openshift/mariadb-apb, affecting versions before the following 4.3.5, 4.2.21, 4.1.37, and 3.11.188-4 . An att… CWE-269
 Improper Privilege Management 		CVE-2019-19346 2024-11-21 13:34 2020-04-3 Show GitHub Exploit DB Packet Storm
223645 7.5 HIGH
Network 		hitachienergy esoms ABB eSOMS versions 4.0 to 6.0.3 accept connections using medium strength ciphers. If a connection is enabled using such a cipher, an attacker might be able to eavesdrop and/or intercept the connectio… CWE-326
Inadequate Encryption Strength 		CVE-2019-19097 2024-11-21 13:34 2020-04-3 Show GitHub Exploit DB Packet Storm
223646 6.1 MEDIUM
Local 		hitachienergy esoms The Redis data structure component used in ABB eSOMS versions 6.0 to 6.0.2 stores credentials in clear text. If an attacker has file system access, this can potentially compromise the credentials' co… CWE-522
 Insufficiently Protected Credentials 		CVE-2019-19096 2024-11-21 13:34 2020-04-3 Show GitHub Exploit DB Packet Storm
223647 5.4 MEDIUM
Network 		hitachienergy esoms Lack of adequate input/output validation for ABB eSOMS versions 4.0 to 6.0.2 might allow an attacker to attack such as stored cross-site scripting by storing malicious content in the database. CWE-79
Cross-site Scripting 		CVE-2019-19095 2024-11-21 13:34 2020-04-3 Show GitHub Exploit DB Packet Storm
223648 7.6 HIGH
Network 		hitachienergy esoms Lack of input checks for SQL queries in ABB eSOMS versions 3.9 to 6.0.3 might allow an attacker SQL injection attacks against the backend database. CWE-89
SQL Injection 		CVE-2019-19094 2024-11-21 13:34 2020-04-3 Show GitHub Exploit DB Packet Storm
223649 6.5 MEDIUM
Network 		hitachienergy esoms eSOMS versions 4.0 to 6.0.3 do not enforce password complexity settings, potentially resulting in lower access security due to insecure user passwords. CWE-521
Weak Password Requirements  		CVE-2019-19093 2024-11-21 13:34 2020-04-3 Show GitHub Exploit DB Packet Storm
223650 3.5 LOW
Network 		hitachienergy esoms ABB eSOMS versions 4.0 to 6.0.3 use ASP.NET Viewstate without Message Authentication Code (MAC). Alterations to Viewstate might thus not be noticed. CWE-306
Missing Authentication for Critical Function 		CVE-2019-19092 2024-11-21 13:34 2020-04-3 Show GitHub Exploit DB Packet Storm