Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 31, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
230281 4.3 警告 telephone - Telephone Directory 2008 の edit1.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2008-2677 2012-12-20 18:52 2008-06-12 Show GitHub Exploit DB Packet Storm
230282 4.3 警告 softcomplex - PHP Image Gallery の index.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2008-2675 2012-12-20 18:52 2008-06-12 Show GitHub Exploit DB Packet Storm
230283 7.5 危険 Powie - Powie pNews の index.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-2673 2012-12-20 18:52 2008-06-12 Show GitHub Exploit DB Packet Storm
230284 7.5 危険 y-blog - yBlog における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-2669 2012-12-20 18:52 2008-06-11 Show GitHub Exploit DB Packet Storm
230285 4.3 警告 y-blog - yBlog におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2008-2668 2012-12-20 18:52 2008-06-11 Show GitHub Exploit DB Packet Storm
230286 7.5 危険 smeweb - SMEWeb の catalog.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-2652 2012-12-20 18:52 2008-06-10 Show GitHub Exploit DB Packet Storm
230287 4.3 警告 smeweb - SMEWeb における任意の Web スクリプトまたは HTML を挿入される脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2008-2644 2012-12-20 18:52 2008-06-10 Show GitHub Exploit DB Packet Storm
230288 7.5 危険 theflashblog - FlashBlog の php/leer_comentarios.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-2572 2012-12-20 18:52 2008-06-6 Show GitHub Exploit DB Packet Storm
230289 4.3 警告 samtodo - SamTodo の dsp_main.php などにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2008-2563 2012-12-20 18:52 2008-06-6 Show GitHub Exploit DB Packet Storm
230290 6.5 警告 powerphlogger - PowerPhlogger の edCss.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-2562 2012-12-20 18:52 2008-06-6 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 31, 2026, 4:16 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
222911 3.7 LOW
Network 		oracle
redhat
netapp
debian
canonical
opensuse 		jdk
jre
enterprise_linux_desktop
enterprise_linux_workstation
enterprise_linux_server
satellite
enterprise_linux
enterprise_linux_server_aus
enterprise_linux_server_tus
ent… 		Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: 2D). Supported versions that are affected are Java SE: 7u231, 8u221, 11.0.4 and 13; Java SE Embedded: 8u221. Diffi… NVD-CWE-noinfo
CVE-2019-2992 2024-11-21 13:41 2019-10-17 Show GitHub Exploit DB Packet Storm
222912 5.5 MEDIUM
Network 		oracle
canonical
fedoraproject
netapp 		mysql
ubuntu_linux
fedora
snapcenter
oncommand_workflow_automation
oncommand_insight
active_iq_unified_manager 		Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.017 and prior. Easily exploitable vulnerability allows high privil… NVD-CWE-noinfo
CVE-2019-2991 2024-11-21 13:41 2019-10-17 Show GitHub Exploit DB Packet Storm
222913 8.2 HIGH
Network 		oracle istore Vulnerability in the Oracle iStore product of Oracle E-Business Suite (component: Order Tracker). Supported versions that are affected are 12.1.1-12.1.3 and 12.2.3-12.2.9. Easily exploitable vulnerab… NVD-CWE-noinfo
CVE-2019-2990 2024-11-21 13:41 2019-10-17 Show GitHub Exploit DB Packet Storm
222914 6.8 MEDIUM
Network 		oracle
redhat
netapp 		graalvm
jdk
jre
enterprise_linux_desktop
enterprise_linux_server
enterprise_linux_workstation
snapmanager
oncommand_workflow_automation
e-series_santricity_web_services_proxy<… 		Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Networking). Supported versions that are affected are Java SE: 7u231, 8u221, 11.0.4 and 13; Java SE Embedded: 8u22… NVD-CWE-noinfo
CVE-2019-2989 2024-11-21 13:41 2019-10-17 Show GitHub Exploit DB Packet Storm
222915 3.7 LOW
Network 		oracle
netapp
debian
canonical
opensuse
redhat 		jdk
jre
snapmanager
oncommand_workflow_automation
e-series_santricity_web_services_proxy
e-series_santricity_storage_manager
e-series_santricity_unified_manager
e-series_santrici… 		Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: 2D). Supported versions that are affected are Java SE: 7u231, 8u221, 11.0.4 and 13; Java SE Embedded: 8u221. Diffi… NVD-CWE-noinfo
CVE-2019-2988 2024-11-21 13:41 2019-10-17 Show GitHub Exploit DB Packet Storm
222916 3.7 LOW
Network 		oracle
redhat
netapp
debian 		jdk
jre
enterprise_linux_desktop
enterprise_linux_server
enterprise_linux_workstation
snapmanager
oncommand_workflow_automation
e-series_santricity_web_services_proxy
e-series… 		Vulnerability in the Java SE product of Oracle Java SE (component: 2D). Supported versions that are affected are Java SE: 11.0.4 and 13. Difficult to exploit vulnerability allows unauthenticated atta… NVD-CWE-noinfo
CVE-2019-2987 2024-11-21 13:41 2019-10-17 Show GitHub Exploit DB Packet Storm
222917 7.7 HIGH
Network 		oracle graalvm Vulnerability in the Oracle GraalVM Enterprise Edition product of Oracle GraalVM (component: LLVM Interpreter). The supported version that is affected is 19.2.0. Easily exploitable vulnerability allo… NVD-CWE-noinfo
CVE-2019-2986 2024-11-21 13:41 2019-10-17 Show GitHub Exploit DB Packet Storm
222918 6.1 MEDIUM
Network 		oracle peoplesoft_enterprise_peopletools Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Fluid Core). Supported versions that are affected are 8.56 and 8.57. Easily exploitable vulnerability a… NVD-CWE-noinfo
CVE-2019-2985 2024-11-21 13:41 2019-10-17 Show GitHub Exploit DB Packet Storm
222919 6.0 MEDIUM
Local 		oracle vm_virtualbox Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). Supported versions that are affected are Prior to 5.2.34 and prior to 6.0.14. Easily exploitable vulnerab… NVD-CWE-noinfo
CVE-2019-2984 2024-11-21 13:41 2019-10-17 Show GitHub Exploit DB Packet Storm
222920 3.7 LOW
Network 		oracle
redhat
netapp
debian
opensuse
canonical 		jdk
jre
enterprise_linux_desktop
enterprise_linux_workstation
enterprise_linux_server
satellite
enterprise_linux
enterprise_linux_server_aus
enterprise_linux_server_tus
ent… 		Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Serialization). Supported versions that are affected are Java SE: 7u231, 8u221, 11.0.4 and 13; Java SE Embedded: 8… NVD-CWE-noinfo
CVE-2019-2983 2024-11-21 13:41 2019-10-17 Show GitHub Exploit DB Packet Storm