Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 1, 2026, 2:01 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
244781 9.3 危険 マイクロソフト
ClamAV
- ClamAV における HTML ドキュメント内のマルウェアの検出を回避される脆弱性 CWE-20
不適切な入力確認
CVE-2008-5525 2012-06-26 16:03 2008-12-12 Show GitHub Exploit DB Packet Storm
244782 9.3 危険 マイクロソフト
AVAST Software s.r.o.
- avast! antivirus における HTML ドキュメント内のマルウェアの検出を回避される脆弱性 CWE-20
不適切な入力確認
CVE-2008-5523 2012-06-26 16:03 2008-12-12 Show GitHub Exploit DB Packet Storm
244783 9.3 危険 マイクロソフト
AVG Technologies
- AVG Anti-Virus における HTML ドキュメント内のマルウェアの検出を回避される脆弱性 CWE-20
不適切な入力確認
CVE-2008-5522 2012-06-26 16:03 2008-12-12 Show GitHub Exploit DB Packet Storm
244784 9.3 危険 マイクロソフト
free-av
- Avira AntiVir における HTML 文書内のマルウェアの検知を回避される脆弱性 CWE-20
不適切な入力確認
CVE-2008-5521 2012-06-26 16:03 2008-12-12 Show GitHub Exploit DB Packet Storm
244785 9.4 危険 マイクロソフト
Apache Software Foundation
- Apache Geronimo Application Server の Web 管理コンソールにおけるファイルを任意のディレクトリにアップロードされる脆弱性 CWE-22
パス・トラバーサル
CVE-2008-5518 2012-06-26 16:03 2009-04-17 Show GitHub Exploit DB Packet Storm
244786 7.5 危険 Git project - gitweb の Web インターフェースにおける任意のコマンドを実行される脆弱性 CWE-94
コード・インジェクション
CVE-2008-5517 2012-06-26 16:03 2009-01-13 Show GitHub Exploit DB Packet Storm
244787 9.3 危険 マイクロソフト
アンラボ
- AhnLab V3 における HTML ドキュメント内のマルウェアの検出を回避される脆弱性 CWE-20
不適切な入力確認
CVE-2008-5520 2012-06-26 16:03 2008-12-12 Show GitHub Exploit DB Packet Storm
244788 7.5 危険 bandsitecms - BandSite CMS における認証を回避される脆弱性 CWE-287
不適切な認証
CVE-2008-5497 2012-06-26 16:03 2008-12-12 Show GitHub Exploit DB Packet Storm
244789 7.5 危険 Joomla!
digitalgreys
- Joomla! の contactinfo コンポーネントにおける SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2008-5494 2012-06-26 16:03 2008-12-12 Show GitHub Exploit DB Packet Storm
244790 7.5 危険 clip-share - ClipShare の channel_detail.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2008-5489 2012-06-26 16:03 2008-12-12 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 1, 2026, 4:12 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
218451 7.5 HIGH
Network
google android In Bluetooth, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclosure with no additional execution privileges needed. User interaction i… CWE-125
Out-of-bounds Read
CVE-2019-9474 2024-11-21 13:51 2020-03-16 Show GitHub Exploit DB Packet Storm
218452 7.5 HIGH
Network
google android In Bluetooth, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclosure with no additional execution privileges needed. User interaction i… CWE-125
Out-of-bounds Read
CVE-2019-9473 2024-11-21 13:51 2020-03-16 Show GitHub Exploit DB Packet Storm
218453 8.8 HIGH
Adjacent
synology
broadcom
router_manager
bcm4339_firmware
The Broadcom wl WiFi driver is vulnerable to a heap buffer overflow. If the vendor information element data length is larger than 164 bytes, a heap buffer overflow is triggered in wlc_wpa_plumb_gtk. … CWE-787
 Out-of-bounds Write
CVE-2019-9502 2024-11-21 13:51 2020-02-4 Show GitHub Exploit DB Packet Storm
218454 8.8 HIGH
Adjacent
synology
broadcom
router_manager
bcm4339_firmware
The Broadcom wl WiFi driver is vulnerable to a heap buffer overflow. By supplying a vendor information element with a data length larger than 32 bytes, a heap buffer overflow is triggered in wlc_wpa_… CWE-787
 Out-of-bounds Write
CVE-2019-9501 2024-11-21 13:51 2020-02-4 Show GitHub Exploit DB Packet Storm
218455 8.3 HIGH
Adjacent
broadcom
redhat
brcmfmac_driver
enterprise_linux
The Broadcom brcmfmac WiFi driver prior to commit a4176ec356c73a46c07c181c6d04039fafa34a9f is vulnerable to a frame validation bypass. If the brcmfmac driver receives a firmware event frame from a re… CWE-20
 Improper Input Validation 
CVE-2019-9503 2024-11-21 13:51 2020-01-17 Show GitHub Exploit DB Packet Storm
218456 8.3 HIGH
Adjacent
broadcom
linux
brcmfmac_driver
linux_kernel
The Broadcom brcmfmac WiFi driver prior to commit 1b5e2423164b3670e8bc9174e4762d297990deff is vulnerable to a heap buffer overflow. If the Wake-up on Wireless LAN functionality is configured, a malic… CWE-787
 Out-of-bounds Write
CVE-2019-9500 2024-11-21 13:51 2020-01-17 Show GitHub Exploit DB Packet Storm
218457 7.8 HIGH
Local
microsoft windows_10
windows_server_2019
A vulnerability in Microsoft Windows 10 1803 and Windows Server 2019 and later systems can allow authenticated RDP-connected clients to gain access to user sessions without needing to interact with t… CWE-755
 Improper Handling of Exceptional Conditions
CVE-2019-9510 2024-11-21 13:51 2020-01-16 Show GitHub Exploit DB Packet Storm
218458 9.8 CRITICAL
Network
mycarcontrols mycar_controls The MyCar Controls of AutoMobility Distribution Inc., mobile application contains hard-coded admin credentials. A remote unauthenticated attacker may be able to send commands to and retrieve data fro… CWE-798
 Use of Hard-coded Credentials
CVE-2019-9493 2024-11-21 13:51 2020-01-16 Show GitHub Exploit DB Packet Storm
218459 5.5 MEDIUM
Local
google android In the Titan M handling of cryptographic operations, there is a possible information disclosure due to an unusual root cause. This could lead to local information disclosure with no additional execut… NVD-CWE-noinfo
CVE-2019-9465 2024-11-21 13:51 2020-01-8 Show GitHub Exploit DB Packet Storm
218460 5.5 MEDIUM
Local
google android In DCRYPTO_equals of compare.c, there is a possible timing attack due to improperly used crypto. This could lead to local information disclosure with no additional execution privileges needed. User i… CWE-203
 Information Exposure Through Discrepancy
CVE-2019-9472 2024-11-21 13:51 2020-01-7 Show GitHub Exploit DB Packet Storm