Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 4, 2026, 4 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
230611 10 危険 phpraider - phpRaider の authentication/phpbb3/phpbb3.functions.php における PHP リモートファイルインクルージョンの脆弱性 CWE-94
コード・インジェクション 		CVE-2008-2481 2012-12-20 18:52 2008-05-28 Show GitHub Exploit DB Packet Storm
230612 10 危険 plusphp - plusPHP Short URL Multi-User Script の plus.php における PHP リモートファイルインクルージョンの脆弱性 CWE-94
コード・インジェクション 		CVE-2008-2480 2012-12-20 18:52 2008-05-28 Show GitHub Exploit DB Packet Storm
230613 7.5 危険 vBulletin Solutions, Inc. - vBulletin Gold の faq.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-2460 2012-12-20 18:52 2008-05-27 Show GitHub Exploit DB Packet Storm
230614 7.5 危険 phpclassifiedsscript - PHP Classifieds Script における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-2453 2012-12-20 18:52 2008-05-27 Show GitHub Exploit DB Packet Storm
230615 4.3 警告 TYPO3 Association - TYPO3 用の Questionaire エクステンションにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2008-2452 2012-12-20 18:52 2008-05-27 Show GitHub Exploit DB Packet Storm
230616 7.5 危険 TYPO3 Association - TYPO3 用の Statistics エクステンションにおける SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-2451 2012-12-20 18:52 2008-05-27 Show GitHub Exploit DB Packet Storm
230617 4.3 警告 TYPO3 Association - TYPO3 用の Statistics エクステンションにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2008-2450 2012-12-20 18:52 2008-05-27 Show GitHub Exploit DB Packet Storm
230618 7.5 危険 wgcc - WGCC における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-2446 2012-12-20 18:52 2008-05-27 Show GitHub Exploit DB Packet Storm
230619 4.3 警告 wgcc - WGCC の profile.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2008-2445 2012-12-20 18:52 2008-05-27 Show GitHub Exploit DB Packet Storm
230620 7.5 危険 therealestatescript - The Real Estate Script の dpage.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-2443 2012-12-20 18:52 2008-05-27 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 5, 2026, 4:11 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
223841 5.2 MEDIUM
Adjacent 		fedoraproject
debian
opensuse
redhat 		sssd
debian_linux
fedora
leap
enterprise_linux 		A vulnerability was found in sssd. If a user was configured with no home directory set, sssd would return '/' (the root directory) instead of '' (the empty string / no home directory). This could imp… NVD-CWE-Other
CVE-2019-3811 2024-11-21 13:42 2019-01-16 Show GitHub Exploit DB Packet Storm
223842 7.5 HIGH
Network 		pivotal_software concourse Pivotal Concourse, all versions prior to 4.2.2, puts the user access token in a url during the login flow. A remote attacker who gains access to a user's browser history could obtain the access token… CWE-200
Information Exposure 		CVE-2019-3803 2024-11-21 13:42 2019-01-12 Show GitHub Exploit DB Packet Storm
223843 6.5 MEDIUM
Network 		djangoproject
debian
canonical
fedoraproject 		django
debian_linux
ubuntu_linux
fedora 		In Django 1.11.x before 1.11.18, 2.0.x before 2.0.10, and 2.1.x before 2.1.5, an Improper Neutralization of Special Elements in Output Used by a Downstream Component issue exists in django.views.defa… CWE-74
Injection 		CVE-2019-3498 2024-11-21 13:42 2019-01-10 Show GitHub Exploit DB Packet Storm
223844 7.5 HIGH
Network 		mcafee mcafee_web_gateway Improper input validation in the proxy component of McAfee Web Gateway 7.8.2.0 and later allows remote attackers to cause a denial of service via a crafted HTTP request parameter. CWE-20
 Improper Input Validation  		CVE-2019-3581 2024-11-21 13:42 2019-01-9 Show GitHub Exploit DB Packet Storm
223845 10.0 CRITICAL
Network 		zohocorp manageengine_adselfservice_plus Zoho ManageEngine ADSelfService Plus 5.x before build 5703 has SSRF. CWE-918
Server-Side Request Forgery (SSRF)  		CVE-2019-3905 2024-11-21 13:42 2019-01-4 Show GitHub Exploit DB Packet Storm
223846 7.8 HIGH
Local 		sqla_yaml_fixtures_project sqla_yaml_fixtures Sqla_yaml_fixtures 0.9.1 allows local users to execute arbitrary python code via the fixture_text argument in sqla_yaml_fixtures.load. CWE-94
Code Injection 		CVE-2019-3575 2024-11-21 13:42 2019-01-4 Show GitHub Exploit DB Packet Storm
223847 4.4 MEDIUM
Local 		linux
debian
canonical 		linux_kernel
debian_linux
ubuntu_linux 		An issue was discovered in can_can_gw_rcv in net/can/gw.c in the Linux kernel through 4.19.13. The CAN frame modification rules allow bitwise logical operations that can be also applied to the can_dl… CWE-787
 Out-of-bounds Write 		CVE-2019-3701 2024-11-21 13:42 2019-01-4 Show GitHub Exploit DB Packet Storm
223848 7.5 HIGH
Network 		openrefine openrefine OpenRefine through 3.1 allows arbitrary file write because Directory Traversal can occur during the import of a crafted project file. CWE-22
Path Traversal 		CVE-2019-3580 2024-11-21 13:42 2019-01-3 Show GitHub Exploit DB Packet Storm
223849 9.8 CRITICAL
Network 		bijiadao waimai_super_cms An issue was discovered in Waimai Super Cms 20150505. web/Lib/Action/ProductAction.class.php allows blind SQL Injection via the id[0] parameter to the /product URI. CWE-89
SQL Injection 		CVE-2019-3577 2024-11-21 13:42 2019-01-3 Show GitHub Exploit DB Packet Storm
223850 9.8 CRITICAL
Network 		inxedu_project inxedu inxedu through 2018-12-24 has a SQL Injection vulnerability that can lead to information disclosure via the deleteFaveorite/ PATH_INFO. The vulnerable code location is com.inxedu.os.edu.controller.us… CWE-89
SQL Injection 		CVE-2019-3576 2024-11-21 13:42 2019-01-3 Show GitHub Exploit DB Packet Storm