Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 27, 2026, 10 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
244311	7.5	危険	Activewebsoftwares	-	Active Price Comparison の login.aspx における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2008-5974	2012-06-26 16:10	2009-01-26	Show	GitHub Exploit DB Packet Storm

244312	7.5	危険	Activewebsoftwares	-	Active Web Mail の login.aspx における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2008-5973	2012-06-26 16:10	2009-01-26	Show	GitHub Exploit DB Packet Storm

244313	7.5	危険	Activewebsoftwares	-	Active Business Directory の default.asp における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2008-5972	2012-06-26 16:10	2009-01-26	Show	GitHub Exploit DB Packet Storm

244314	7.5	危険	globsy	-	Globsy の globsy_edit.php における任意のファイルを上書きされる脆弱性	CWE-20 不適切な入力確認	CVE-2008-5966	2012-06-26 16:10	2009-01-26	Show	GitHub Exploit DB Packet Storm

244315	10	危険	gravity-gtd	-	Gravity GTD の library/setup/rpc.php における任意の PHP コードを実行される脆弱性	CWE-20 不適切な入力確認	CVE-2008-5963	2012-06-26 16:10	2009-01-23	Show	GitHub Exploit DB Packet Storm

244316	6.8	警告	gravity-gtd	-	Gravity GTD の library/setup/rpc.php におけるディレクトリトラバーサルの脆弱性	CWE-22 パス・トラバーサル	CVE-2008-5962	2012-06-26 16:10	2009-01-23	Show	GitHub Exploit DB Packet Storm

244317	7.5	危険	Activewebsoftwares	-	Active Test の start.asp における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2008-5959	2012-06-26 16:10	2009-01-23	Show	GitHub Exploit DB Packet Storm

244318	7.5	危険	Activewebsoftwares	-	Active Test における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2008-5958	2012-06-26 16:10	2009-01-23	Show	GitHub Exploit DB Packet Storm

244319	5	警告	aspapps	-	ASP Template Creature におけるデータベースをダウンロードされる脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2008-5951	2012-06-26 16:10	2009-01-23	Show	GitHub Exploit DB Packet Storm

244320	7.5	危険	aspapps	-	ASP Template Creature の media/media_level.asp における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2008-5950	2012-06-26 16:10	2009-01-23	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 27, 2026, 4:52 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
219831	7.8	HIGH Local	nvidia	gpu_driver	NVIDIA Windows GPU Display Driver contains a vulnerability in the kernel mode layer (nvlddmkm.sys) handler for DxgkDdiSetRootPageTable in which the application dereferences a pointer that it expects …	CWE-476 NULL Pointer Dereference	CVE-2019-5667	2024-11-21 13:45	2019-02-28	Show	GitHub Exploit DB Packet Storm

219832	7.8	HIGH Local	nvidia	gpu_driver	NVIDIA Windows GPU Display Driver contains a vulnerability in the kernel mode layer (nvlddmkm.sys) create context command DDI DxgkDdiCreateContext in which the product uses untrusted input when calcu…	CWE-129 Improper Validation of Array Index	CVE-2019-5666	2024-11-21 13:45	2019-02-28	Show	GitHub Exploit DB Packet Storm

219833	7.8	HIGH Local	nvidia	gpu_driver	NVIDIA Windows GPU Display driver contains a vulnerability in the 3D vision component in which the stereo service software, when opening a file, does not check for hard links. This behavior may lead …	CWE-59 Link Following	CVE-2019-5665	2024-11-21 13:45	2019-02-28	Show	GitHub Exploit DB Packet Storm

219834	7.5	HIGH Network	netapp	clustered_data_ontap	Clustered Data ONTAP versions prior to 9.1P15 and 9.3 prior to 9.3P7 are susceptible to a vulnerability which discloses sensitive information to an unauthenticated user.	NVD-CWE-noinfo	CVE-2019-5491	2024-11-21 13:45	2019-02-28	Show	GitHub Exploit DB Packet Storm

219835	5.4	MEDIUM Network	splunk	splunk	Splunk Web in Splunk Enterprise 6.5.x before 6.5.5, 6.4.x before 6.4.9, 6.3.x before 6.3.12, 6.2.x before 6.2.14, 6.1.x before 6.1.14, and 6.0.x before 6.0.15 and Splunk Light before 6.6.0 has Persis…	CWE-79 Cross-site Scripting	CVE-2019-5727	2024-11-21 13:45	2019-02-21	Show	GitHub Exploit DB Packet Storm

219836	8.8	HIGH Network	google debian	chrome debian_linux	Missing URI encoding of untrusted input in DevTools in Google Chrome prior to 72.0.3626.81 allowed a remote attacker to perform a Dangling Markup Injection attack via a crafted HTML page.	CWE-20 Improper Input Validation	CVE-2019-5783	2024-11-21 13:45	2019-02-20	Show	GitHub Exploit DB Packet Storm

219837	8.8	HIGH Network	google debian redhat fedoraproject	chrome debian_linux enterprise_linux_desktop enterprise_linux_server enterprise_linux_workstation fedora	Incorrect optimization assumptions in V8 in Google Chrome prior to 72.0.3626.81 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page.	CWE-125 CWE-787 Out-of-bounds Read Out-of-bounds Write	CVE-2019-5782	2024-11-21 13:45	2019-02-20	Show	GitHub Exploit DB Packet Storm

219838	6.5	MEDIUM Network	google debian redhat fedoraproject	chrome debian_linux enterprise_linux_desktop enterprise_linux_server enterprise_linux_workstation fedora	Incorrect handling of a confusable character in Omnibox in Google Chrome prior to 72.0.3626.81 allowed a remote attacker to spoof the contents of the Omnibox (URL bar) via a crafted domain name.	NVD-CWE-noinfo	CVE-2019-5781	2024-11-21 13:45	2019-02-20	Show	GitHub Exploit DB Packet Storm

219839	7.8	HIGH Local	google redhat debian fedoraproject	chrome enterprise_linux_desktop enterprise_linux_server enterprise_linux_workstation debian_linux fedora	Insufficient restrictions on what can be done with Apple Events in Google Chrome on macOS prior to 72.0.3626.81 allowed a local attacker to execute JavaScript via Apple Events.	CWE-20 Improper Input Validation	CVE-2019-5780	2024-11-21 13:45	2019-02-20	Show	GitHub Exploit DB Packet Storm

219840	4.3	MEDIUM Network	google debian redhat fedoraproject	chrome debian_linux enterprise_linux_desktop enterprise_linux_server enterprise_linux_workstation fedora	Insufficient policy validation in ServiceWorker in Google Chrome prior to 72.0.3626.81 allowed a remote attacker to bypass navigation restrictions via a crafted HTML page.	CWE-862 Missing Authorization	CVE-2019-5779	2024-11-21 13:45	2019-02-20	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed