Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 23, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
245251 5 警告 BEAシステムズ - BEA WebLogic Portal の Admin Tools におけるアクセス制限を回避される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2008-0864 2012-06-26 15:55 2008-02-20 Show GitHub Exploit DB Packet Storm
245252 7.5 危険 e-vision - e-Vision CMS における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-0856 2012-06-26 15:55 2008-02-20 Show GitHub Exploit DB Packet Storm
245253 5 警告 freeSSHd - freeSSHd におけるサービス運用妨害 (DoS) の脆弱性 CWE-DesignError
CVE-2008-0852 2012-06-26 15:55 2008-02-20 Show GitHub Exploit DB Packet Storm
245254 4.3 警告 craftysyntax - CSLH の lostsheep.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2008-0848 2012-06-26 15:55 2008-02-20 Show GitHub Exploit DB Packet Storm
245255 7.5 危険 freephpgallery - freePHPgallery におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2008-0818 2012-06-26 15:55 2008-02-19 Show GitHub Exploit DB Packet Storm
245256 7.5 危険 com sg - Joomla! の com_sg コンポーネントにおける SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-0816 2012-06-26 15:55 2008-02-18 Show GitHub Exploit DB Packet Storm
245257 7.5 危険 Joomla!
egitimhost		 - Joomla! の com_mezun コンポーネントにおける SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-0815 2012-06-26 15:55 2008-02-18 Show GitHub Exploit DB Packet Storm
245258 6.4 警告 banpro - BanPro DMS の DMS/index.php におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2008-0812 2012-06-26 15:55 2008-02-18 Show GitHub Exploit DB Packet Storm
245259 7.5 危険 AuraCMS - AuraCMS における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-0811 2012-06-26 15:55 2008-02-18 Show GitHub Exploit DB Packet Storm
245260 4.3 警告 artmedic webdesign - artmedic webdesign weblog におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2008-0798 2012-06-26 15:55 2008-02-15 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 24, 2026, 4:05 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
220221 7.5 HIGH
Network 		360 p0_router_firmware
f5c_router_firmware 		By adding some special fields to the uri ofrouter app function, the user could abuse background app cgi functions withoutauthentication. This affects 360 router P0 and F5C. NVD-CWE-noinfo
CVE-2019-3404 2024-11-21 13:42 2020-03-4 Show GitHub Exploit DB Packet Storm
220222 7.3 HIGH
Local 		opensuse pcp A Improper Limitation of a Pathname to a Restricted Directory vulnerability in the packaging of pcp of SUSE Linux Enterprise High Performance Computing 15-ESPOS, SUSE Linux Enterprise High Performanc… CWE-22
Path Traversal 		CVE-2019-3696 2024-11-21 13:42 2020-03-3 Show GitHub Exploit DB Packet Storm
220223 7.8 HIGH
Local 		opensuse pcp A Improper Control of Generation of Code vulnerability in the packaging of pcp of SUSE Linux Enterprise High Performance Computing 15-ESPOS, SUSE Linux Enterprise High Performance Computing 15-LTSS, … CWE-94
Code Injection 		CVE-2019-3695 2024-11-21 13:42 2020-03-3 Show GitHub Exploit DB Packet Storm
220224 7.0 HIGH
Local 		nagios
opensuse 		nagios
leap
backports_sle 		UNIX Symbolic Link (Symlink) Following vulnerability in the cronjob shipped with nagios of SUSE Linux Enterprise Server 12, SUSE Linux Enterprise Server 11; openSUSE Factory allows local attackers to… - CVE-2019-3698 2024-11-21 13:42 2020-02-28 Show GitHub Exploit DB Packet Storm
220225 6.1 MEDIUM
Network 		mcafee web_advisor Remote Code Execution vulnerability in the web interface in McAfee Web Advisor (WA) 8.0.34745 and earlier allows remote unauthenticated attacker to execute arbitrary code via a cross site scripting a… CWE-79
Cross-site Scripting 		CVE-2019-3670 2024-11-21 13:42 2020-02-24 Show GitHub Exploit DB Packet Storm
220226 3.3 LOW
Local 		suse yast2-security yast2-security didn't use secure defaults to protect passwords. This became a problem on 2019-10-07 when configuration files that set secure settings were moved to a different location. As of the 201… CWE-327
 Use of a Broken or Risky Cryptographic Algorithm 		CVE-2019-3700 2024-11-21 13:42 2020-01-24 Show GitHub Exploit DB Packet Storm
220227 7.8 HIGH
Local 		privoxy privoxy UNIX Symbolic Link (Symlink) Following vulnerability in the packaging of privoxy on openSUSE Leap 15.1, Factory allows local attackers to escalate from user privoxy to root. This issue affects: openS… - CVE-2019-3699 2024-11-21 13:42 2020-01-24 Show GitHub Exploit DB Packet Storm
220228 7.8 HIGH
Local 		opensuse
gnu 		leap
gnump3d 		UNIX Symbolic Link (Symlink) Following vulnerability in the packaging of gnump3d in openSUSE Leap 15.1 allows local attackers to escalate from user gnump3d to root. This issue affects: openSUSE Leap … - CVE-2019-3697 2024-11-21 13:42 2020-01-24 Show GitHub Exploit DB Packet Storm
220229 7.8 HIGH
Local 		opensuse
suse 		munin A Symbolic Link (Symlink) Following vulnerability in the packaging of munin in openSUSE Factory, Leap 15.1 allows local attackers to escalate from user munin to root. This issue affects: openSUSE Fac… - CVE-2019-3694 2024-11-21 13:42 2020-01-24 Show GitHub Exploit DB Packet Storm
220230 7.8 HIGH
Local 		suse
opensuse 		mailman
backports_sle 		A symlink following vulnerability in the packaging of mailman in SUSE Linux Enterprise Server 11, SUSE Linux Enterprise Server 12; openSUSE Leap 15.1 allowed local attackers to escalate their privile… - CVE-2019-3693 2024-11-21 13:42 2020-01-24 Show GitHub Exploit DB Packet Storm