Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 7, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
230601 9.3 危険 pragyan - Pragyan CMS の cms/modules/form.lib.php における PHP リモートファイルインクルージョンの脆弱性 CWE-94
コード・インジェクション 		CVE-2008-3207 2012-12-20 18:52 2008-07-18 Show GitHub Exploit DB Packet Storm
230602 4.3 警告 xomol - Xomol CMS の index.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2008-3202 2012-12-20 18:52 2008-07-17 Show GitHub Exploit DB Packet Storm
230603 7.8 危険 reSIProcate - ReSIProcate におけるサービス運用妨害 (DoS) の脆弱性 CWE-20
不適切な入力確認 		CVE-2008-3199 2012-12-20 18:52 2008-07-14 Show GitHub Exploit DB Packet Storm
230604 3.5 注意 The phpMyAdmin Project - phpMyAdmin におけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反 		CVE-2008-3197 2012-12-20 18:52 2008-07-15 Show GitHub Exploit DB Packet Storm
230605 7.8 危険 yacc - yacc 内の skeleton.c における範囲外メモリのスタックにアクセスされる脆弱性 CWE-399
リソース管理の問題 		CVE-2008-3196 2012-12-20 18:52 2008-07-16 Show GitHub Exploit DB Packet Storm
230606 6.8 警告 TWiki - TWiki の bin/configure におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2008-3195 2012-12-20 18:52 2008-08-5 Show GitHub Exploit DB Packet Storm
230607 6.8 警告 Pluck CMS - pluck の data/inc/themes/predefined_variables.php におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2008-3194 2012-12-20 18:52 2008-07-16 Show GitHub Exploit DB Packet Storm
230608 7.5 危険 Sclek - jSite における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-3193 2012-12-20 18:52 2008-07-16 Show GitHub Exploit DB Packet Storm
230609 6.8 警告 Sclek - jSite の index.php におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2008-3192 2012-12-20 18:52 2008-07-16 Show GitHub Exploit DB Packet Storm
230610 6.8 警告 vclcomponents - Relative Real Estate Systems の index.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-3185 2012-12-20 18:52 2008-07-15 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 7, 2026, 4:13 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
223421 2.4 LOW
Physics 		huawei honor_play_firmware Honor play smartphones with versions earlier than Cornell-AL00A 9.1.0.321(C00E320R1P1T8) have an insufficient authentication vulnerability. The system has a logic judge error under certain scenario. … CWE-287
Improper Authentication 		CVE-2019-5213 2024-11-21 13:44 2019-11-13 Show GitHub Exploit DB Packet Storm
223422 7.8 HIGH
Local 		leadtools leadtools An exploitable heap overflow vulnerability exists in the JPEG2000 parsing functionality of LEADTOOLS 20. A specially crafted J2K image file can cause an out of bounds write of a heap buffer, potentia… CWE-787
 Out-of-bounds Write 		CVE-2019-5125 2024-11-21 13:44 2019-11-7 Show GitHub Exploit DB Packet Storm
223423 7.8 HIGH
Local 		leadtools leadtools An exploitable integer overflow vulnerability exists in the BMP header parsing functionality of LEADTOOLS 20. A specially crafted BMP image file can cause an integer overflow, potentially resulting i… CWE-190
 Integer Overflow or Wraparound 		CVE-2019-5100 2024-11-21 13:44 2019-11-7 Show GitHub Exploit DB Packet Storm
223424 7.8 HIGH
Local 		leadtools leadtools An exploitable integer underflow vulnerability exists in the CMP-parsing functionality of LEADTOOLS 20. A specially crafted CMP image file can cause an integer underflow, potentially resulting in cod… CWE-191
 Integer Underflow (Wrap or Wraparound) 		CVE-2019-5099 2024-11-21 13:44 2019-11-7 Show GitHub Exploit DB Packet Storm
223425 7.8 HIGH
Local 		leadtools leadtools An exploitable heap out-of-bounds write vulnerability exists in the TIF-parsing functionality of LEADTOOLS 20. A specially crafted TIF image can cause an offset beyond the bounds of a heap allocation… CWE-787
 Out-of-bounds Write 		CVE-2019-5084 2024-11-21 13:44 2019-11-7 Show GitHub Exploit DB Packet Storm
223426 4.4 MEDIUM
Local 		mesa3d
opensuse
debian
canonical 		mesa
leap
debian_linux
ubuntu_linux 		An exploitable shared memory permissions vulnerability exists in the functionality of X11 Mesa 3D Graphics Library 19.1.2. An attacker can access the shared memory without any specific permissions to… CWE-732
 Incorrect Permission Assignment for Critical Resource 		CVE-2019-5068 2024-11-21 13:44 2019-11-6 Show GitHub Exploit DB Packet Storm
223427 7.8 HIGH
Local 		investintech able2extract An exploitable memory corruption vulnerability exists in Investintech Able2Extract Professional 4.0.7 x64. A specially crafted JPEG file can cause an out-of-bounds memory write, allowing an attacker … CWE-190
 Integer Overflow or Wraparound 		CVE-2019-5089 2024-11-21 13:44 2019-11-6 Show GitHub Exploit DB Packet Storm
223428 7.8 HIGH
Local 		investintech able2extract An exploitable memory corruption vulnerability exists in Investintech Able2Extract Professional 14.0.7 x64. A specially crafted BMP file can cause an out-of-bounds memory write, allowing a potential … CWE-787
 Out-of-bounds Write 		CVE-2019-5088 2024-11-21 13:44 2019-11-6 Show GitHub Exploit DB Packet Storm
223429 7.5 HIGH
Network 		google nest_cam_iq_indoor_firmware An exploitable denial-of-service vulnerability exists in the Weave daemon of the Nest Cam IQ Indoor, version 4620002. A set of TCP connections can cause unrestricted resource allocation, resulting in… CWE-770
 Allocation of Resources Without Limits or Throttling 		CVE-2019-5043 2024-11-21 13:44 2019-11-1 Show GitHub Exploit DB Packet Storm
223430 8.8 HIGH
Network 		antennahouse rainbow_pdf_office_server_document_converter A buffer overflow vulnerability exists in the PowerPoint document conversion function of Rainbow PDF Office Server Document Converter V7.0 Pro MR1 (7,0,2019,0220). While parsing a document text info … CWE-787
 Out-of-bounds Write 		CVE-2019-5030 2024-11-21 13:44 2019-11-1 Show GitHub Exploit DB Packet Storm