Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 28, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
245491 7.5 危険 arnos toolbox
WordPress.org		 - WordPress の WP-Download プラグインにおける SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-1646 2012-06-26 16:02 2008-04-2 Show GitHub Exploit DB Packet Storm
245492 7.5 危険 efestech - EfesTECH Video の default.asp における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-1641 2012-06-26 16:02 2008-04-2 Show GitHub Exploit DB Packet Storm
245493 7.5 危険 emedia office gmbh - CuteFlow における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-1632 2012-06-26 16:02 2008-04-2 Show GitHub Exploit DB Packet Storm
245494 7.5 危険 emedia office gmbh - CuteFlow の login.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-1631 2012-06-26 16:02 2008-04-2 Show GitHub Exploit DB Packet Storm
245495 4.3 警告 emedia office gmbh - CuteFlow におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2008-1630 2012-06-26 16:02 2008-04-2 Show GitHub Exploit DB Packet Storm
245496 3.5 注意 cds software consortium - CDS Invenio における任意のユーザの電子メール通知アラートを削除される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2008-1627 2012-06-26 16:02 2008-04-2 Show GitHub Exploit DB Packet Storm
245497 7.5 危険 eggblog - eggBlog における SQL インジェクションの脆弱性 CWE-20
CWE-89
CVE-2008-1626 2012-06-26 16:02 2008-03-28 Show GitHub Exploit DB Packet Storm
245498 6.8 警告 AVAST Software s.r.o. - avast! Home and Professional の aavmker4.sys における権限を取得される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2008-1625 2012-06-26 16:02 2008-04-2 Show GitHub Exploit DB Packet Storm
245499 6.8 警告 geertsen holdings inc - GeeCarts における PHP リモートファイルインクルージョンの脆弱性 CWE-94
コード・インジェクション 		CVE-2008-1622 2012-06-26 16:02 2008-04-2 Show GitHub Exploit DB Packet Storm
245500 4.3 警告 geertsen holdings inc - GeeCarts におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2008-1621 2012-06-26 16:02 2008-04-2 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 28, 2026, 4:16 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
220291 7.1 HIGH
Local 		nvidia virtual_gpu_manager NVIDIA Virtual GPU Manager, all versions, contains a vulnerability in which it may grant a guest access to memory that it does not own, which may lead to information disclosure or denial of service. NVD-CWE-noinfo
CVE-2019-5697 2024-11-21 13:45 2019-11-9 Show GitHub Exploit DB Packet Storm
220292 5.5 MEDIUM
Local 		nvidia virtual_gpu_manager NVIDIA Virtual GPU Manager, all versions, contains a vulnerability in which the provision of an incorrectly sized buffer by a guest VM leads to GPU out-of-bound access, which may lead to a denial of … CWE-131
Incorrect Calculation of Buffer Size 		CVE-2019-5696 2024-11-21 13:45 2019-11-9 Show GitHub Exploit DB Packet Storm
220293 6.5 MEDIUM
Local 		nvidia gpu_driver NVIDIA Windows GPU Display Driver, R390 driver version, contains a vulnerability in NVIDIA Control Panel in which it incorrectly loads Windows system DLLs without validating the path or signature (al… CWE-427
 Uncontrolled Search Path Element 		CVE-2019-5694 2024-11-21 13:45 2019-11-9 Show GitHub Exploit DB Packet Storm
220294 5.5 MEDIUM
Local 		nvidia gpu_driver NVIDIA Windows GPU Display Driver, all versions, contains a vulnerability in the kernel mode layer (nvlddmkm.sys) in which the program accesses or uses a pointer that has not been initialized, which … CWE-824
 Access of Uninitialized Pointer 		CVE-2019-5693 2024-11-21 13:45 2019-11-9 Show GitHub Exploit DB Packet Storm
220295 7.8 HIGH
Local 		nvidia gpu_driver NVIDIA Windows GPU Display Driver, all versions, contains a vulnerability in the kernel mode layer (nvlddmkm.sys) handler for DxgkDdiEscape in which the product uses untrusted input when calculating … CWE-129
 Improper Validation of Array Index 		CVE-2019-5692 2024-11-21 13:45 2019-11-9 Show GitHub Exploit DB Packet Storm
220296 7.8 HIGH
Local 		nvidia gpu_driver NVIDIA Windows GPU Display Driver, all versions, contains a vulnerability in the kernel mode layer (nvlddmkm.sys) handler for DxgkDdiEscape in which a NULL pointer is dereferenced, which may lead to … CWE-476
 NULL Pointer Dereference 		CVE-2019-5691 2024-11-21 13:45 2019-11-9 Show GitHub Exploit DB Packet Storm
220297 7.8 HIGH
Local 		nvidia gpu_driver NVIDIA Windows GPU Display Driver, all versions, contains a vulnerability in the kernel mode layer (nvlddmkm.sys) handler for DxgkDdiEscape in which the size of an input buffer is not validated, whic… CWE-787
 Out-of-bounds Write 		CVE-2019-5690 2024-11-21 13:45 2019-11-9 Show GitHub Exploit DB Packet Storm
220298 7.8 HIGH
Local 		nvidia geforce_experience NVIDIA GeForce Experience, all versions prior to 3.20.1, contains a vulnerability in the Downloader component in which a user with local system access can craft input that may allow malicious files t… NVD-CWE-noinfo
CVE-2019-5689 2024-11-21 13:45 2019-11-9 Show GitHub Exploit DB Packet Storm
220299 9.8 CRITICAL
Network 		gatech computing_for_good\'s_basic_laboratory_information_system Computing For Good's Basic Laboratory Information System (also known as C4G BLIS) version 3.5 and earlier suffers from an instance of CWE-284, "Improper Access Control." As a result, an unauthenticat… CWE-306
Missing Authentication for Critical Function 		CVE-2019-5644 2024-11-21 13:45 2019-11-7 Show GitHub Exploit DB Packet Storm
220300 5.3 MEDIUM
Network 		gatech computing_for_good\'s_basic_laboratory_information_system Computing For Good's Basic Laboratory Information System (also known as C4G BLIS) version 3.5 and earlier suffers from an instance of CWE-284, "Improper Access Control." As a result, an unauthenticat… CWE-306
Missing Authentication for Critical Function 		CVE-2019-5643 2024-11-21 13:45 2019-11-7 Show GitHub Exploit DB Packet Storm