Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 28, 2026, 10 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
244211	5	警告	donnafontenot	-	evCal Events Calendar におけるユーザ名などを含むデータベースをダウンロードされる脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2008-6356	2012-06-26 16:10	2009-03-2	Show	GitHub Exploit DB Packet Storm

244212	7.5	危険	asp-cms	-	ASP-CMS の index.asp における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2008-6353	2012-06-26 16:10	2009-03-2	Show	GitHub Exploit DB Packet Storm

244213	7.5	危険	developiteasy	-	DevelopItEasy Photo Gallery における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2008-6348	2012-06-26 16:10	2009-03-2	Show	GitHub Exploit DB Packet Storm

244214	4.3	警告	dennis royer TYPO3 Association	-	TYPO3 用の DR Wiki 拡張におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2008-6346	2012-06-26 16:10	2009-02-27	Show	GitHub Exploit DB Packet Storm

244215	7.5	危険	cms.maury91	-	SolarCMS の Forum.php における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2008-6345	2012-06-26 16:10	2009-02-27	Show	GitHub Exploit DB Packet Storm

244216	7.8	危険	emetrix	-	eMetrix Online Keyword Research Tool の download.php におけるディレクトリトラバーサルの脆弱性	CWE-22 パス・トラバーサル	CVE-2008-6335	2012-06-26 16:10	2009-02-27	Show	GitHub Exploit DB Packet Storm

244217	7.8	危険	emetrix	-	eMetrix Extract Website の download.php におけるディレクトリトラバーサルの脆弱性	CWE-22 パス・トラバーサル	CVE-2008-6334	2012-06-26 16:10	2009-02-27	Show	GitHub Exploit DB Packet Storm

244218	7.5	危険	butterflymedia	-	Butterfly Organizer の view.php における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2008-6328	2012-06-26 16:10	2009-02-27	Show	GitHub Exploit DB Packet Storm

244219	7.5	危険	cfmsource	-	CF_Forum の forummessages.cfm における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2008-6324	2012-06-26 16:10	2009-02-27	Show	GitHub Exploit DB Packet Storm

244220	7.5	危険	cfmsource	-	CFMSource CF_Auction の forummessages.cfm における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2008-6323	2012-06-26 16:10	2009-02-27	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 28, 2026, 4:16 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
220011	7.5	HIGH Network	gitlab	gitlab	An issue was discovered in GitLab Community and Enterprise Edition before 11.4. It allows Directory Traversal.	CWE-22 Path Traversal	CVE-2019-6240	2024-11-21 13:46	2019-03-26	Show	GitHub Exploit DB Packet Storm

220012	8.8	HIGH Network	risi	gestao_de_horarios	RISI Gestao de Horarios v3201.09.08 rev.23 allows SQL Injection.	CWE-89 SQL Injection	CVE-2019-6491	2024-11-21 13:46	2019-03-22	Show	GitHub Exploit DB Packet Storm

220013	9.8	CRITICAL Network	blogengine	blogengine.net	An issue was discovered in BlogEngine.NET through 3.3.6.0. A path traversal and Local File Inclusion vulnerability in PostList.ascx.cs can cause unauthenticated users to load a PostView.ascx componen…	CWE-22 Path Traversal	CVE-2019-6714	2024-11-21 13:46	2019-03-22	Show	GitHub Exploit DB Packet Storm

220014	5.9	MEDIUM Network	mastercard	qkr\!_with_masterpass	The MasterCard Qkr! app before 5.0.8 for iOS has Missing SSL Certificate Validation. NOTE: this CVE only applies to obsolete versions from 2016 or earlier.	CWE-295 Improper Certificate Validation	CVE-2019-6702	2024-11-21 13:46	2019-03-22	Show	GitHub Exploit DB Packet Storm

220015	7.5	HIGH Network	python debian opensuse suse canonical	python-gnupg debian_linux leap backports ubuntu_linux	python-gnupg 0.4.3 allows context-dependent attackers to trick gnupg to decrypt other ciphertext than intended. To perform the attack, the passphrase to gnupg must be controlled by the adversary and …	CWE-20 Improper Input Validation	CVE-2019-6690	2024-11-21 13:46	2019-03-22	Show	GitHub Exploit DB Packet Storm

220016	5.5	MEDIUM Local	qemu fedoraproject	qemu fedora	In QEMU 3.1, scsi_handle_inquiry_reply in hw/scsi/scsi-generic.c allows out-of-bounds write and read operations.	CWE-125 CWE-787 Out-of-bounds Read Out-of-bounds Write	CVE-2019-6501	2024-11-21 13:46	2019-03-22	Show	GitHub Exploit DB Packet Storm

220017	5.5	MEDIUM Local	iobit	smart_defrag	SmartDefragDriver.sys (2.0) in IObit Smart Defrag 6 never frees an executable kernel pool that is allocated with user defined bytes and size when IOCTL 0x9C401CC4 is called. This kernel pointer can b…	CWE-401 Missing Release of Memory after Effective Lifetime	CVE-2019-6492	2024-11-21 13:46	2019-03-22	Show	GitHub Exploit DB Packet Storm

220018	8.8	HIGH Network	chinamobileltd	gpn2.4p21-c-cn_firmware	ChinaMobile PLC Wireless Router GPN2.4P21-C-CN devices with firmware W2001EN-00 have CSRF via the cgi-bin/webproc?getpage=html/index.html subpage=wlsecurity URI, allowing an Attacker to change the Wi…	CWE-352 Origin Validation Error	CVE-2019-6282	2024-11-21 13:46	2019-03-22	Show	GitHub Exploit DB Packet Storm

220019	8.8	HIGH Network	chinamobileltd	gpn2.4p21-c-cn_firmware	ChinaMobile PLC Wireless Router GPN2.4P21-C-CN devices with firmware W2001EN-00 have an Incorrect Access Control vulnerability via the cgi-bin/webproc?getpage=html/index.html subpage=wlsecurity URI, …	NVD-CWE-noinfo	CVE-2019-6279	2024-11-21 13:46	2019-03-22	Show	GitHub Exploit DB Packet Storm

220020	8.8	HIGH Network	gl-inet	gl-ar300m-lite_firmware	Command injection vulnerability in firmware_cgi in GL.iNet GL-AR300M-Lite devices with firmware 2.27 allows remote attackers to execute arbitrary code.	CWE-77 Command Injection	CVE-2019-6275	2024-11-21 13:46	2019-03-22	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed