Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":June 6, 2026, 10 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
230311	7.5	危険	steve dawson	-	PokerMax Poker League Tournament Script の configure.php における認証を回避される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2008-4600	2012-12-20 18:52	2008-10-17	Show	GitHub Exploit DB Packet Storm

230312	10	危険	slaytanic scripts	-	Slaytanic Scripts Content Plus における脆弱性	CWE-noinfo 情報不足	CVE-2008-4595	2012-12-20 18:52	2008-10-17	Show	GitHub Exploit DB Packet Storm

230313	10	危険	sportspanel	-	Sports Clubs Web Panel の index.php におけるディレクトリトラバーサルの脆弱性	CWE-22 パス・トラバーサル	CVE-2008-4592	2012-12-20 18:52	2008-10-16	Show	GitHub Exploit DB Packet Storm

230314	4.3	警告	phpwebgallery	-	PhpWebGallery の admin/include/isadmin.inc.php におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2008-4591	2012-12-20 18:52	2008-10-16	Show	GitHub Exploit DB Packet Storm

230315	7.5	危険	stash	-	Stash における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2008-4590	2012-12-20 18:52	2008-10-16	Show	GitHub Exploit DB Packet Storm

230316	5	警告	Matthias Wandel	-	jhead の DoCommand 関数におけるバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2008-4575	2012-12-20 18:52	2008-10-15	Show	GitHub Exploit DB Packet Storm

230317	7.5	危険	real-estate-scripts	-	Real Estate Classifieds の index.php における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2008-4570	2012-12-20 18:52	2008-10-15	Show	GitHub Exploit DB Packet Storm

230318	7.5	危険	xigla	-	XIGLA Software Absolute Poll Manager XE の xlacomments.asp における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2008-4569	2012-12-20 18:52	2008-10-15	Show	GitHub Exploit DB Packet Storm

230319	6.8	警告	VideoLAN	-	VLC Media Player における任意のメモリを上書きされる脆弱性	CWE-399 リソース管理の問題	CVE-2008-4558	2012-12-20 18:52	2008-10-14	Show	GitHub Exploit DB Packet Storm

230320	7.2	危険	Fabrice Bellard	-	Debian GNU/Linux 上で稼動する qemu の qemu-make-debian-root における任意のファイルを上書きされる脆弱性	CWE-59 リンク解釈の問題	CVE-2008-4553	2012-12-20 18:52	2008-10-15	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:June 6, 2026, 4:18 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
222561	7.5	HIGH Network	mitsubishielectric	q03udvcpu_firmware q04udvcpu_firmware q06udvcpu_firmware q13udvcpu_firmware q26udvcpu_firmware q04udpvcpu_firmware q06udpvcpu_firmware q13udpvcpu_firmware q26udpvcpu_firmware<…	Mitsubishi Electric Q03/04/06/13/26UDVCPU: serial number 20081 and prior, Q04/06/13/26UDPVCPU: serial number 20081 and prior, and Q03UDECPU, Q04/06/10/13/20/26/50/100UDEHCPU: serial number 20101 and …	CWE-400 Uncontrolled Resource Consumption	CVE-2019-6535	2024-11-21 13:46	2019-02-6	Show	GitHub Exploit DB Packet Storm

222562	5.4	MEDIUM Network	f5	big-ip_access_policy_manager	On BIG-IP APM 14.0.0 to 14.0.0.4, 13.0.0 to 13.1.1.3 and 12.1.0 to 12.1.3.7, a reflected cross-site scripting (XSS) vulnerability exists in the resource information page for authenticated users when …	CWE-79 Cross-site Scripting	CVE-2019-6591	2024-11-21 13:46	2019-02-6	Show	GitHub Exploit DB Packet Storm

222563	9.8	CRITICAL Network	schedmd opensuse	slurm leap	SchedMD Slurm before 17.11.13 and 18.x before 18.08.5 mishandles 32-bit systems.	NVD-CWE-noinfo	CVE-2019-6438	2024-11-21 13:46	2019-01-31	Show	GitHub Exploit DB Packet Storm

222564	9.8	CRITICAL Network	calmar-webmedia	total_donations	Incorrect access control in migla_ajax_functions.php in the Calmar Webmedia Total Donations plugin through 2.0.5 for WordPress allows unauthenticated attackers to update arbitrary WordPress option va…	NVD-CWE-noinfo	CVE-2019-6703	2024-11-21 13:46	2019-01-27	Show	GitHub Exploit DB Packet Storm

222565	8.2	HIGH Network	golang debian opensuse	go debian_linux leap	Go before 1.10.8 and 1.11.x before 1.11.5 mishandles P-521 and P-384 elliptic curves, which allows attackers to cause a denial of service (CPU consumption) or possibly conduct ECDH private key recove…	CWE-770 Allocation of Resources Without Limits or Throttling	CVE-2019-6486	2024-11-21 13:46	2019-01-24	Show	GitHub Exploit DB Packet Storm

222566	9.8	CRITICAL Network	thinkcmf	thinkcmf	app\admin\controller\RouteController.php in ThinkCMF 5.0.190111 allows remote attackers to execute arbitrary PHP code by using vectors involving portal/List/index and list/:id to inject this code int…	CWE-94 Code Injection	CVE-2019-6713	2024-11-21 13:46	2019-01-24	Show	GitHub Exploit DB Packet Storm

222567	7.2	HIGH Network	phpshe	phpshe	PHPSHE 1.7 has SQL injection via the admin.php?mod=order state parameter.	CWE-89 SQL Injection	CVE-2019-6708	2024-11-21 13:46	2019-01-24	Show	GitHub Exploit DB Packet Storm

222568	7.2	HIGH Network	phpshe	phpshe	PHPSHE 1.7 has SQL injection via the admin.php?mod=product&act=state product_id[] parameter.	CWE-89 SQL Injection	CVE-2019-6707	2024-11-21 13:46	2019-01-24	Show	GitHub Exploit DB Packet Storm

222569	7.5	HIGH Network	lua canonical	lua ubuntu_linux	Lua 5.3.5 has a use-after-free in lua_upvaluejoin in lapi.c. For example, a crash outcome might be achieved by an attacker who is able to trigger a debug.upvaluejoin call in which the arguments have …	CWE-416 Use After Free	CVE-2019-6706	2024-11-21 13:46	2019-01-24	Show	GitHub Exploit DB Packet Storm

222570	7.2	HIGH Network	phpwind	phpwind	phpwind 9.0.2.170426 UTF8 allows SQL Injection via the admin.php?m=backup&c=backup&a=doback tabledb[] parameter, related to the "--backup database" option.	CWE-89 SQL Injection	CVE-2019-6691	2024-11-21 13:46	2019-01-23	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed