Vulnerability Search Top
Show Search Menu
|
You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database). |
JVN Vulnerability Information
Update Date":May 25, 2026, 6 p.m.
| No | CVSS | Level Attach Vector |
Vendor Name | Project Name | Title | CWE | CVE | Update Date | Publication Date | Impact Show |
Exploit PoC Search |
|---|---|---|---|---|---|---|---|---|---|---|---|
| 245421 | 7.5 | 危険 | BEAシステムズ | - | BEA WebLogic Portal Maintenance Pack 2 におけるセッションを傍受される脆弱性 |
CWE-59
リンク解釈の問題 |
CVE-2008-0870 | 2012-06-26 15:55 | 2008-02-20 | Show | GitHub Exploit DB Packet Storm |
| 245422 | 4.3 | 警告 | BEAシステムズ | - | BEA WebLogic Workshop におけるクロスサイトスクリプティングの脆弱性 |
CWE-79
クロスサイト・スクリプティング（XSS） |
CVE-2008-0869 | 2012-06-26 15:55 | 2008-02-20 | Show | GitHub Exploit DB Packet Storm |
| 245423 | 4.3 | 警告 | BEAシステムズ | - | BEA WebLogic Portal Maintenance Pack 1 の Groupspace におけるクロスサイトスクリプティングの脆弱性 |
CWE-79
クロスサイト・スクリプティング（XSS） |
CVE-2008-0868 | 2012-06-26 15:55 | 2008-02-20 | Show | GitHub Exploit DB Packet Storm |
| 245424 | 4.3 | 警告 | bea systems | - | BEA AquaLogic Interaction MP1 の portal/server.pt におけるクロスサイトスクリプティングの脆弱性 |
CWE-79
クロスサイト・スクリプティング（XSS） |
CVE-2008-0867 | 2012-06-26 15:55 | 2008-02-20 | Show | GitHub Exploit DB Packet Storm |
| 245425 | 4.3 | 警告 | BEAシステムズ | - | BEA WebLogic Workshop におけるクロスサイトスクリプティングの脆弱性 |
CWE-79
クロスサイト・スクリプティング（XSS） |
CVE-2008-0866 | 2012-06-26 15:55 | 2008-02-20 | Show | GitHub Exploit DB Packet Storm |
| 245426 | 5 | 警告 | BEAシステムズ | - | BEA WebLogic Portal における浮動可能な WLP ポートレットのインスタンスに対して資格を回避される脆弱性 |
CWE-264
認可・権限・アクセス制御 |
CVE-2008-0865 | 2012-06-26 15:55 | 2008-02-20 | Show | GitHub Exploit DB Packet Storm |
| 245427 | 5 | 警告 | BEAシステムズ | - | BEA WebLogic Portal の Admin Tools におけるアクセス制限を回避される脆弱性 |
CWE-264
認可・権限・アクセス制御 |
CVE-2008-0864 | 2012-06-26 15:55 | 2008-02-20 | Show | GitHub Exploit DB Packet Storm |
| 245428 | 7.5 | 危険 | e-vision | - | e-Vision CMS における SQL インジェクションの脆弱性 |
CWE-89
SQLインジェクション |
CVE-2008-0856 | 2012-06-26 15:55 | 2008-02-20 | Show | GitHub Exploit DB Packet Storm |
| 245429 | 5 | 警告 | freeSSHd | - | freeSSHd におけるサービス運用妨害 (DoS) の脆弱性 |
CWE-DesignError
|
CVE-2008-0852 | 2012-06-26 15:55 | 2008-02-20 | Show | GitHub Exploit DB Packet Storm |
| 245430 | 4.3 | 警告 | craftysyntax | - | CSLH の lostsheep.php におけるクロスサイトスクリプティングの脆弱性 |
CWE-79
クロスサイト・スクリプティング（XSS） |
CVE-2008-0848 | 2012-06-26 15:55 | 2008-02-20 | Show | GitHub Exploit DB Packet Storm |
NVD Vulnerability Information
Update Date:May 25, 2026, 4:01 a.m.
| No | CVSS | Level Attach Vector |
Vendor Name | Project Name | Title | CWE | CVE | Update Date | Publication Date | Show Affected | Exploit PoC Search |
|---|---|---|---|---|---|---|---|---|---|---|---|
| 218581 | 7.2 |
HIGH
Network |
f5 |
big-ip_access_policy_manager big-ip_advanced_firewall_manager big-ip_application_acceleration_manager big-ip_link_controller big-ip_policy_enforcement_manager big-ip_webaccelerator … |
On BIG-IP 14.1.0-14.1.0.5, 14.0.0-14.0.0.5, 13.0.0-13.1.1.4, 12.1.0-12.1.4.1, and 11.5.1-11.6.4, an undisclosed iControl REST worker is vulnerable to command injection by an administrator or resource… |
CWE-77
Command Injection |
CVE-2019-6622 | 2024-11-21 13:46 | 2019-07-3 | Show | GitHub Exploit DB Packet Storm |
| 218582 | 7.2 |
HIGH
Network |
f5 |
big-ip_access_policy_manager big-ip_advanced_firewall_manager big-ip_application_acceleration_manager big-ip_link_controller big-ip_policy_enforcement_manager big-ip_webaccelerator … |
On BIG-IP 14.1.0-14.1.0.5, 14.0.0-14.0.0.4, 13.0.0-13.1.1.4, 12.1.0-12.1.4.1, 11.6.1-11.6.3.4, and 11.5.2-11.5.8 and BIG-IQ 7.0.0-7.1.0.2, 6.0.0-6.1.0, and 5.1.0-5.4.0, an undisclosed iControl REST w… |
CWE-78
OS Command |
CVE-2019-6621 | 2024-11-21 13:46 | 2019-07-3 | Show | GitHub Exploit DB Packet Storm |
| 218583 | 7.2 |
HIGH
Network |
f5 |
big-ip_access_policy_manager big-ip_advanced_firewall_manager big-ip_application_acceleration_manager big-ip_link_controller big-ip_policy_enforcement_manager big-ip_webaccelerator … |
On BIG-IP 14.1.0-14.1.0.5, 14.0.0-14.0.0.5, 13.0.0-13.1.1.4, 12.1.0-12.1.4.1, and 11.5.1-11.6.4 and BIG-IQ 6.0.0-6.1.0 and 5.1.0-5.4.0, an undisclosed iControl REST worker vulnerable to command injec… |
CWE-78
OS Command |
CVE-2019-6620 | 2024-11-21 13:46 | 2019-07-3 | Show | GitHub Exploit DB Packet Storm |
| 218584 | 8.8 |
HIGH
Network |
f5 |
big-ip_access_policy_manager big-ip_advanced_firewall_manager big-ip_application_acceleration_manager big-ip_link_controller big-ip_policy_enforcement_manager big-ip_webaccelerator … |
In BIG-IP 15.0.0, 14.0.0-14.1.0.5, 13.0.0-13.1.1.5, 12.1.0-12.1.4.2, and 11.5.2-11.6.4, BIG-IQ 6.0.0-6.1.0 and 5.1.0-5.4.0, iWorkflow 2.3.0, and Enterprise Manager 3.1.1, authenticated users with the… |
NVD-CWE-noinfo
|
CVE-2019-6642 | 2024-11-21 13:46 | 2019-07-2 | Show | GitHub Exploit DB Packet Storm |
| 218585 | 7.5 |
HIGH
Network |
lenovo | service_bridge | A vulnerability reported in Lenovo Service Bridge before version 4.1.0.1 could allow unencrypted downloads over FTP. |
CWE-311
Missing Encryption of Sensitive Data |
CVE-2019-6169 | 2024-11-21 13:46 | 2019-06-26 | Show | GitHub Exploit DB Packet Storm |
| 218586 | 9.8 |
CRITICAL
Network |
lenovo | service_bridge | A vulnerability reported in Lenovo Service Bridge before version 4.1.0.1 could allow remote code execution. |
NVD-CWE-noinfo
|
CVE-2019-6168 | 2024-11-21 13:46 | 2019-06-26 | Show | GitHub Exploit DB Packet Storm |
| 218587 | 9.8 |
CRITICAL
Network |
lenovo | service_bridge | A vulnerability reported in Lenovo Service Bridge before version 4.1.0.1 could allow remote code execution. |
NVD-CWE-noinfo
|
CVE-2019-6167 | 2024-11-21 13:46 | 2019-06-26 | Show | GitHub Exploit DB Packet Storm |
| 218588 | 8.8 |
HIGH
Network |
lenovo | service_bridge | A vulnerability reported in Lenovo Service Bridge before version 4.1.0.1 could allow cross-site request forgery. |
CWE-352
Origin Validation Error |
CVE-2019-6166 | 2024-11-21 13:46 | 2019-06-26 | Show | GitHub Exploit DB Packet Storm |
| 218589 | 7.5 |
HIGH
Network |
lenovo | system_update | A denial of service vulnerability was reported in Lenovo System Update before version 5.07.0084 that could allow service log files to be written to non-standard locations. |
CWE-404
Improper Resource Shutdown or Release |
CVE-2019-6163 | 2024-11-21 13:46 | 2019-06-26 | Show | GitHub Exploit DB Packet Storm |
| 218590 | 7.8 |
HIGH
Local |
hp | support_assistant | HP Support Assistant 8.7.50 and earlier allows a user to gain system privilege and allows unauthorized modification of directories or files. Note: A different vulnerability than CVE-2019-6328. |
NVD-CWE-noinfo
|
CVE-2019-6329 | 2024-11-21 13:46 | 2019-06-26 | Show | GitHub Exploit DB Packet Storm |