Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 4, 2026, 4 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
230281 7.5 危険 review-script - Five Star Review Script の recommend.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-3780 2012-12-20 18:52 2008-08-26 Show GitHub Exploit DB Packet Storm
230282 4.3 警告 review-script - Five Star Review Script の search/index.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2008-3779 2012-12-20 18:52 2008-08-26 Show GitHub Exploit DB Packet Storm
230283 7.5 危険 simasy - Simasy CMS の index.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-3774 2012-12-20 18:52 2008-08-22 Show GitHub Exploit DB Packet Storm
230284 4.3 警告 vBulletin Solutions, Inc. - vBulletin におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2008-3773 2012-12-20 18:52 2008-08-18 Show GitHub Exploit DB Packet Storm
230285 7.5 危険 turnkey web tools - Turnkey Web Tools SunShop Shopping Cart の class.ajax.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-3768 2012-12-20 18:52 2008-08-22 Show GitHub Exploit DB Packet Storm
230286 7.5 危険 smartisoft - phpBazar の classified.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-3767 2012-12-20 18:52 2008-08-22 Show GitHub Exploit DB Packet Storm
230287 5 警告 realtime internet band rehearsal - Realtime Internet llcon におけるサービス運用妨害 (DoS) の脆弱性 CWE-20
不適切な入力確認 		CVE-2008-3766 2012-12-20 18:52 2008-08-22 Show GitHub Exploit DB Packet Storm
230288 7.5 危険 turnkey web tools - Turnkey PHP Live Helper の globalsoff.php における任意の PHP コードを実行される脆弱性 CWE-94
コード・インジェクション 		CVE-2008-3764 2012-12-20 18:52 2008-08-21 Show GitHub Exploit DB Packet Storm
230289 6.8 警告 turnkey web tools - Turnkey PHP Live Helper の libsecure.php における db config ファイルに関連する任意の変数を上書きされる脆弱性 CWE-20
不適切な入力確認 		CVE-2008-3763 2012-12-20 18:52 2008-08-21 Show GitHub Exploit DB Packet Storm
230290 7.5 危険 turnkey web tools - Turnkey PHP Live Helper の onlinestatus_html.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-3762 2012-12-20 18:52 2008-08-21 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 5, 2026, 4:11 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
222351 6.5 MEDIUM
Network 		google
opensuse 		chrome
leap
backports_sle 		Incorrect handling of cancelled requests in Navigation in Google Chrome prior to 73.0.3683.75 allowed a remote attacker to perform domain spoofing via a crafted HTML page. NVD-CWE-noinfo
CVE-2019-5794 2024-11-21 13:45 2019-05-24 Show GitHub Exploit DB Packet Storm
222352 6.5 MEDIUM
Network 		google
opensuse 		chrome
leap
backports 		Insufficient policy enforcement in extensions in Google Chrome prior to 73.0.3683.75 allowed a remote attacker to initiate the extensions installation user interface via a crafted HTML page. CWE-20
 Improper Input Validation  		CVE-2019-5793 2024-11-21 13:45 2019-05-24 Show GitHub Exploit DB Packet Storm
222353 8.8 HIGH
Network 		google
opensuse 		chrome
leap
backports 		Integer overflow in PDFium in Google Chrome prior to 73.0.3683.75 allowed a remote attacker to potentially perform out of bounds memory access via a crafted PDF file. CWE-190
 Integer Overflow or Wraparound 		CVE-2019-5792 2024-11-21 13:45 2019-05-24 Show GitHub Exploit DB Packet Storm
222354 8.8 HIGH
Network 		google
opensuse 		chrome
leap
backports 		Inappropriate optimization in V8 in Google Chrome prior to 73.0.3683.75 allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page. CWE-125
CWE-843
Out-of-bounds Read
Type Confusion 		CVE-2019-5791 2024-11-21 13:45 2019-05-24 Show GitHub Exploit DB Packet Storm
222355 8.8 HIGH
Network 		google
opensuse 		chrome
leap
backports 		An integer overflow leading to an incorrect capacity of a buffer in JavaScript in Google Chrome prior to 73.0.3683.75 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafte… CWE-190
 Integer Overflow or Wraparound 		CVE-2019-5790 2024-11-21 13:45 2019-05-24 Show GitHub Exploit DB Packet Storm
222356 8.8 HIGH
Network 		google
opensuse 		chrome
leap
backports 		An integer overflow that leads to a use-after-free in WebMIDI in Google Chrome on Windows prior to 73.0.3683.75 allowed a remote attacker who had compromised the renderer process to execute arbitrary… CWE-190
CWE-416
 Integer Overflow or Wraparound
 Use After Free 		CVE-2019-5789 2024-11-21 13:45 2019-05-24 Show GitHub Exploit DB Packet Storm
222357 8.8 HIGH
Network 		google
opensuse 		chrome
leap
backports 		An integer overflow that leads to a use-after-free in Blink Storage in Google Chrome on Linux prior to 73.0.3683.75 allowed a remote attacker who had compromised the renderer process to execute arbit… CWE-190
CWE-416
 Integer Overflow or Wraparound
 Use After Free 		CVE-2019-5788 2024-11-21 13:45 2019-05-24 Show GitHub Exploit DB Packet Storm
222358 8.8 HIGH
Network 		google
opensuse 		chrome
leap
backports 		Use-after-garbage-collection in Blink in Google Chrome prior to 73.0.3683.75 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. CWE-787
CWE-416
 Out-of-bounds Write
 Use After Free 		CVE-2019-5787 2024-11-21 13:45 2019-05-24 Show GitHub Exploit DB Packet Storm
222359 7.8 HIGH
Local 		bluecats bc_reveal The iOS mobile application BlueCats Reveal before 5.14 stores the username and password in the app cache as base64 encoded strings, i.e. clear text. These persist in the cache even if the user logs o… CWE-522
 Insufficiently Protected Credentials 		CVE-2019-5627 2024-11-21 13:45 2019-05-23 Show GitHub Exploit DB Packet Storm
222360 7.8 HIGH
Local 		bluecats bluecats_reveal The Android mobile application BlueCats Reveal before 3.0.19 stores the username and password in a clear text file. This file persists until the user logs out or the session times out from non-usage … CWE-522
 Insufficiently Protected Credentials 		CVE-2019-5626 2024-11-21 13:45 2019-05-23 Show GitHub Exploit DB Packet Storm