Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":June 8, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
253681	4.3	警告	Atlassian	-	Atlassian FishEye のユーザプロファイル機能におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2011-4822	2011-12-19 15:05	2011-10-24	Show	GitHub Exploit DB Packet Storm

253682	3.6	注意	Artsoft Entertainment	-	Artsoft Entertainment の Rocks'n'Diamonds における任意のファイルを上書きされる脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2011-4606	2011-12-19 15:05	2011-12-15	Show	GitHub Exploit DB Packet Storm

253683	4.3	警告	Digium	-	Asterisk の channels/chan_sip.c におけるサービス運用妨害 (DoS) の脆弱性	CWE-200 情報漏えい	CVE-2011-4598	2011-12-19 15:03	2011-11-2	Show	GitHub Exploit DB Packet Storm

253684	5	警告	Digium	-	Asterisk の UDP 実装での SIP におけるユーザ名を列挙される脆弱性	CWE-200 情報漏えい	CVE-2011-4597	2011-12-19 15:01	2011-07-18	Show	GitHub Exploit DB Packet Storm

253685	7.5	危険	Caupo.Net	-	CaupoShop Pro および CaupoShop Classic におけるディレクトリトラバーサルの脆弱性	CWE-22 パス・トラバーサル	CVE-2011-4832	2011-12-19 13:44	2011-12-15	Show	GitHub Exploit DB Packet Storm

253686	4	警告	David Azoulay	-	Web File Browser の webFileBrowser.php におけるディレクトリトラバーサルの脆弱性	CWE-22 パス・トラバーサル	CVE-2011-4831	2011-12-19 13:43	2011-12-15	Show	GitHub Exploit DB Packet Storm

253687	7.5	危険	e4j Extensions for Joomla	-	Joomla! 用 Vik Real Estate コンポーネントにおける SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2011-4823	2011-12-19 11:52	2011-12-15	Show	GitHub Exploit DB Packet Storm

253688	3.5	注意	Barter Sites	-	Joomla! 用 Barter Sites の com_listing コンポーネントにおけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2011-4830	2011-12-19 11:51	2011-12-15	Show	GitHub Exploit DB Packet Storm

253689	7.5	危険	Barter Sites	-	Joomla! 用 Barter Sites の com_listing コンポーネントにおける SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2011-4829	2011-12-19 11:50	2011-12-15	Show	GitHub Exploit DB Packet Storm

253690	7.5	危険	AutoSec Tools	-	AutoSec Tools V-CMS のファイルアップロードにおける任意のコードを実行される脆弱性	CWE-94 コード・インジェクション	CVE-2011-4828	2011-12-19 11:49	2011-11-27	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:June 8, 2026, 4:09 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
220991	7.5	HIGH Network	wtcms_project	wtcms	An issue was discovered in WTCMS 1.0. It allows remote attackers to cause a denial of service (resource consumption) via crafted dimensions for the verification code image.	CWE-400 Uncontrolled Resource Consumption	CVE-2019-8909	2024-11-21 13:50	2019-02-19	Show	GitHub Exploit DB Packet Storm

220992	9.8	CRITICAL Network	wtcms_project	wtcms	An issue was discovered in WTCMS 1.0. It allows remote attackers to execute arbitrary PHP code by going to the "Setting -> Mailbox configuration -> Registration email template" screen, and uploading …	CWE-706 Use of Incorrectly-Resolved Name or Reference	CVE-2019-8908	2024-11-21 13:50	2019-02-19	Show	GitHub Exploit DB Packet Storm

220993	8.8	HIGH Network	file_project debian opensuse canonical	file debian_linux leap ubuntu_linux	do_core_note in readelf.c in libmagic.a in file 5.35 allows remote attackers to cause a denial of service (stack corruption and application crash) or possibly have unspecified other impact.	CWE-787 Out-of-bounds Write	CVE-2019-8907	2024-11-21 13:50	2019-02-19	Show	GitHub Exploit DB Packet Storm

220994	4.4	MEDIUM Local	file_project canonical opensuse apple	file ubuntu_linux leap mac_os_x iphone_os watchos tvos	do_core_note in readelf.c in libmagic.a in file 5.35 has an out-of-bounds read because memcpy is misused.	CWE-125 Out-of-bounds Read	CVE-2019-8906	2024-11-21 13:50	2019-02-19	Show	GitHub Exploit DB Packet Storm

220995	4.4	MEDIUM Local	debian file_project canonical opensuse	debian_linux file ubuntu_linux leap	do_core_note in readelf.c in libmagic.a in file 5.35 has a stack-based buffer over-read, related to file_printable, a different vulnerability than CVE-2018-10360.	CWE-125 Out-of-bounds Read	CVE-2019-8905	2024-11-21 13:50	2019-02-19	Show	GitHub Exploit DB Packet Storm

220996	8.8	HIGH Network	file_project canonical	file ubuntu_linux	do_bid_note in readelf.c in libmagic.a in file 5.35 has a stack-based buffer over-read, related to file_printf and file_vprintf.	CWE-125 Out-of-bounds Read	CVE-2019-8904	2024-11-21 13:50	2019-02-19	Show	GitHub Exploit DB Packet Storm

220997	7.5	HIGH Network	totaljs	total.js	index.js in Total.js Platform before 3.2.3 allows path traversal.	CWE-22 Path Traversal	CVE-2019-8903	2024-11-21 13:50	2019-02-19	Show	GitHub Exploit DB Packet Storm

220998	5.7	MEDIUM Network	idreamsoft	icms	An issue was discovered in idreamsoft iCMS through 7.0.14. A CSRF vulnerability can delete users' articles via the public/api.php?app=user URI.	CWE-352 Origin Validation Error	CVE-2019-8902	2024-11-21 13:50	2019-02-18	Show	GitHub Exploit DB Packet Storm

220999	7.8	HIGH Local	apple	mac_os_x	This issue was addressed by removing the vulnerable code. This issue is fixed in macOS Catalina 10.15.1, Security Update 2019-001, and Security Update 2019-006, macOS Catalina 10.15. A malicious appl…	NVD-CWE-noinfo	CVE-2019-8509	2024-11-21 13:49	2020-10-28	Show	GitHub Exploit DB Packet Storm

221000	5.5	MEDIUM Local	adobe	acrobat_dc acrobat_reader_dc	Adobe Acrobat and Reader versions 2019.012.20035 and earlier, 2019.012.20035 and earlier, 2017.011.30142 and earlier, 2017.011.30143 and earlier, 2015.006.30497 and earlier, and 2015.006.30498 and ea…	CWE-843 Type Confusion	CVE-2019-8252	2024-11-21 13:49	2020-07-7	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed