Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 24, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
244461 4.3 警告 autonessus - AutoNessus の bulk_update.pl におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2008-4520 2012-06-26 16:02 2008-10-9 Show GitHub Exploit DB Packet Storm
244462 7.5 危険 fastpublish - Fastpublish CMS におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2008-4519 2012-06-26 16:02 2008-10-9 Show GitHub Exploit DB Packet Storm
244463 7.5 危険 fastpublish - Fastpublish CMS における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-4518 2012-06-26 16:02 2008-10-9 Show GitHub Exploit DB Packet Storm
244464 7.5 危険 geccbblite - geccBBlite の leggi.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-4517 2012-06-26 16:02 2008-10-9 Show GitHub Exploit DB Packet Storm
244465 7.5 危険 galerie - Galerie の galerie.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-4516 2012-06-26 16:02 2008-10-9 Show GitHub Exploit DB Packet Storm
244466 7.5 危険 ブルーコートシステムズ - Blue Coat K9 Web Protection における認証を回避される脆弱性 CWE-287
不適切な認証 		CVE-2008-4515 2012-06-26 16:02 2008-10-9 Show GitHub Exploit DB Packet Storm
244467 10 危険 foss gallery - FOSS Gallery Admin などの processFiles.php における任意のコードを実行される脆弱性 CWE-20
不適切な入力確認 		CVE-2008-4509 2012-06-26 16:02 2008-10-9 Show GitHub Exploit DB Packet Storm
244468 10 危険 datafeedfile - DFF PHP Framework API における PHP リモートファイルインクルージョンの脆弱性 CWE-94
コード・インジェクション 		CVE-2008-4502 2012-06-26 16:02 2008-10-8 Show GitHub Exploit DB Packet Storm
244469 7.5 危険 built2go - Built2Go Real Estate Listings の event_detail.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-4497 2012-06-26 16:02 2008-10-8 Show GitHub Exploit DB Packet Storm
244470 5 警告 アップル - Apple Mail.app における重要なメールを読まれる脆弱性 CWE-200
情報漏えい 		CVE-2008-4491 2012-06-26 16:02 2008-10-8 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 24, 2026, 4:05 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
219741 7.6 HIGH
Physics 		capsuletech smartlinx_neuron_2_firmware A restricted environment escape vulnerability exists in the “kiosk mode” function of Capsule Technologies SmartLinx Neuron 2 medical information collection devices running versions 9.0.3 or lower. A … NVD-CWE-noinfo
CVE-2019-5024 2024-11-21 13:44 2019-04-12 Show GitHub Exploit DB Packet Storm
219742 4.8 MEDIUM
Network 		ui edgeswitch_x In Ubiquiti Networks EdgeSwitch X v1.1.0 and prior, an unauthenticated user can use the "local port forwarding" and "dynamic port forwarding" (SOCKS proxy) functionalities. Remote attackers without c… CWE-287
Improper Authentication 		CVE-2019-5426 2024-11-21 13:44 2019-04-11 Show GitHub Exploit DB Packet Storm
219743 8.8 HIGH
Network 		ui edgeswitch_x In Ubiquiti Networks EdgeSwitch X v1.1.0 and prior, an authenticated user can execute arbitrary shell commands over the SSH interface bypassing the CLI interface, which allow them to escalate privile… CWE-78
OS Command  		CVE-2019-5425 2024-11-21 13:44 2019-04-11 Show GitHub Exploit DB Packet Storm
219744 8.8 HIGH
Network 		ui edgeswitch_x In Ubiquiti Networks EdgeSwitch X v1.1.0 and prior, a privileged user can execute arbitrary shell commands over the SSH CLI interface. This allows to execute shell commands under the root user. CWE-78
OS Command  		CVE-2019-5424 2024-11-21 13:44 2019-04-11 Show GitHub Exploit DB Packet Storm
219745 7.5 HIGH
Network 		http-live-simulator_project http-live-simulator Path traversal vulnerability in http-live-simulator npm package version 1.0.5 allows arbitrary path to be accessed on the file system by a remote attacker. CWE-22
Path Traversal 		CVE-2019-5423 2024-11-21 13:44 2019-04-4 Show GitHub Exploit DB Packet Storm
219746 6.1 MEDIUM
Network 		buttle_project buttle XSS in buttle npm package version 0.2.0 causes execution of attacker-provided code in the victim's browser when an attacker creates an arbitrary file on the server. CWE-79
Cross-site Scripting 		CVE-2019-5422 2024-11-21 13:44 2019-04-4 Show GitHub Exploit DB Packet Storm
219747 9.8 CRITICAL
Network 		plataformatec devise Plataformatec Devise version 4.5.0 and earlier, using the lockable module contains a CWE-367 vulnerability in The `Devise::Models::Lockable` class, more specifically at the `#increment_failed_attempt… CWE-307
mproper Restriction of Excessive Authentication Attempts 		CVE-2019-5421 2024-11-21 13:44 2019-04-4 Show GitHub Exploit DB Packet Storm
219748 9.8 CRITICAL
Network 		rubyonrails
debian
fedoraproject 		rails
debian_linux
fedora 		A remote code execution vulnerability in development mode Rails <5.2.2.1, <6.0.0.beta3 can allow an attacker to guess the automatically generated development mode secret token. This secret token can … CWE-330
 Use of Insufficiently Random Values 		CVE-2019-5420 2024-11-21 13:44 2019-03-27 Show GitHub Exploit DB Packet Storm
219749 7.5 HIGH
Network 		rubyonrails
debian
redhat
opensuse
fedoraproject 		rails
debian_linux
software_collections
cloudforms
leap
fedora 		There is a possible denial of service vulnerability in Action View (Rails) <5.2.2.1, <5.1.6.2, <5.0.7.2, <4.2.11.1 where specially crafted accept headers can cause action view to consume 100% cpu and… CWE-770
 Allocation of Resources Without Limits or Throttling 		CVE-2019-5419 2024-11-21 13:44 2019-03-27 Show GitHub Exploit DB Packet Storm
219750 7.5 HIGH
Network 		rubyonrails
debian
redhat
opensuse
fedoraproject 		rails
debian_linux
cloudforms
leap
fedora
software_collections 		There is a File Content Disclosure vulnerability in Action View <5.2.2.1, <5.1.6.2, <5.0.7.2, <4.2.11.1 and v3 where specially crafted accept headers can cause contents of arbitrary files on the targ… NVD-CWE-noinfo
CVE-2019-5418 2024-11-21 13:44 2019-03-27 Show GitHub Exploit DB Packet Storm