Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 30, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
230251 7.5 危険 phpraider - Simple Machines phpRaider の authentication/smf/smf.functions.php における PHP リモートファイルインクルージョンの脆弱性 CWE-94
コード・インジェクション 		CVE-2008-2769 2012-12-20 18:52 2008-06-18 Show GitHub Exploit DB Packet Storm
230252 3.5 注意 xigla - Xigla Poll Manager XE の admin/search.asp におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2008-2768 2012-12-20 18:52 2008-06-18 Show GitHub Exploit DB Packet Storm
230253 6.5 警告 xigla - Xigla Poll Manager XE の search.asp における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-2767 2012-12-20 18:52 2008-06-18 Show GitHub Exploit DB Packet Storm
230254 4.3 警告 xigla - Xigla Absolute Image Gallery XE におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2008-2766 2012-12-20 18:52 2008-06-18 Show GitHub Exploit DB Packet Storm
230255 7.5 危険 xigla - Xigla Absolute Image Gallery XE の gallery.asp における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-2765 2012-12-20 18:52 2008-06-18 Show GitHub Exploit DB Packet Storm
230256 3.5 注意 xigla - Xigla Absolute Live Support XE の admin/search.asp におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2008-2764 2012-12-20 18:52 2008-06-18 Show GitHub Exploit DB Packet Storm
230257 6.5 警告 xigla - Xigla Absolute Live Support XE の search.asp における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-2763 2012-12-20 18:52 2008-06-18 Show GitHub Exploit DB Packet Storm
230258 6.5 警告 xigla - Xigla Absolute Form Processor XE の search.asp における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-2762 2012-12-20 18:52 2008-06-18 Show GitHub Exploit DB Packet Storm
230259 3.5 注意 xigla - Xigla Absolute Banner Manager XE におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2008-2761 2012-12-20 18:52 2008-06-18 Show GitHub Exploit DB Packet Storm
230260 6.5 警告 xigla - Xigla Absolute Banner Manager XE の searchbanners.asp における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-2760 2012-12-20 18:52 2008-06-18 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 31, 2026, 4:16 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
224001 7.5 HIGH
Network 		libvnc_project
canonical
debian
siemens
opensuse 		libvncserver
ubuntu_linux
debian_linux
simatic_itc1500_firmware
simatic_itc1500_pro_firmware
simatic_itc1900_firmware
simatic_itc1900_pro_firmware
simatic_itc2200_firmware
sim… 		libvncclient/sockets.c in LibVNCServer before 0.9.13 has a buffer overflow via a long socket filename. CWE-120
Classic Buffer Overflow 		CVE-2019-20839 2024-11-21 13:39 2020-06-18 Show GitHub Exploit DB Packet Storm
224002 7.5 HIGH
Network 		pcre
apple
splunk 		pcre
macos
universal_forwarder 		libpcre in PCRE before 8.43 allows a subject buffer over-read in JIT when UTF is disabled, and \X or \R has more than one fixed quantifier, a related issue to CVE-2019-20454. CWE-125
Out-of-bounds Read 		CVE-2019-20838 2024-11-21 13:39 2020-06-16 Show GitHub Exploit DB Packet Storm
224003 7.5 HIGH
Network 		foxitsoftware phantompdf
reader 		An issue was discovered in Foxit Reader and PhantomPDF before 9.5. It allows signature validation bypass via a modified file or a file with non-standard signatures. CWE-347
 Improper Verification of Cryptographic Signature 		CVE-2019-20837 2024-11-21 13:39 2020-06-5 Show GitHub Exploit DB Packet Storm
224004 7.5 HIGH
Network 		foxitsoftware phantompdf
reader 		An issue was discovered in Foxit Reader and PhantomPDF before 9.5. It has mishandling of cloud credentials, as demonstrated by Google Drive. CWE-200
Information Exposure 		CVE-2019-20836 2024-11-21 13:39 2020-06-5 Show GitHub Exploit DB Packet Storm
224005 4.3 MEDIUM
Network 		foxitsoftware phantompdf
reader 		An issue was discovered in Foxit Reader and PhantomPDF before 9.5. It has homograph mishandling. NVD-CWE-noinfo
CVE-2019-20835 2024-11-21 13:39 2020-06-5 Show GitHub Exploit DB Packet Storm
224006 7.5 HIGH
Network 		foxitsoftware phantompdf An issue was discovered in Foxit PhantomPDF before 8.3.10. It allows signature validation bypass via a modified file or a file with non-standard signatures. CWE-347
 Improper Verification of Cryptographic Signature 		CVE-2019-20834 2024-11-21 13:39 2020-06-5 Show GitHub Exploit DB Packet Storm
224007 7.5 HIGH
Network 		foxitsoftware phantompdf An issue was discovered in Foxit PhantomPDF before 8.3.10. It has mishandling of cloud credentials, as demonstrated by Google Drive. CWE-287
Improper Authentication 		CVE-2019-20833 2024-11-21 13:39 2020-06-5 Show GitHub Exploit DB Packet Storm
224008 4.3 MEDIUM
Network 		foxitsoftware phantompdf An issue was discovered in Foxit PhantomPDF before 8.3.10. It has homograph mishandling. NVD-CWE-noinfo
CVE-2019-20832 2024-11-21 13:39 2020-06-5 Show GitHub Exploit DB Packet Storm
224009 7.5 HIGH
Network 		foxitsoftware 3d An issue was discovered in the 3D Plugin Beta for Foxit Reader and PhantomPDF before 9.5.0.20733. It has void data mishandling, causing a crash. NVD-CWE-Other
CVE-2019-20831 2024-11-21 13:39 2020-06-5 Show GitHub Exploit DB Packet Storm
224010 9.8 CRITICAL
Network 		foxitsoftware phantompdf
reader 		An issue was discovered in Foxit Reader and PhantomPDF before 9.6. It has an out-of-bounds write when Internet Explorer is used. CWE-787
 Out-of-bounds Write 		CVE-2019-20830 2024-11-21 13:39 2020-06-5 Show GitHub Exploit DB Packet Storm