Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 7, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
226541 6.8 警告 シスコシステムズ - 複数の Cisco 製品のコマンドラインインタフェースにおける root 権限を取得される脆弱性 CWE-20
不適切な入力確認 		CVE-2013-1196 2013-05-1 12:34 2013-04-12 Show GitHub Exploit DB Packet Storm
226542 9.3 危険 IBM - IBM SPSS SamplePower の vsflex7l ActiveX コントロールにおけるバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2012-5947 2013-05-1 11:42 2013-04-26 Show GitHub Exploit DB Packet Storm
226543 9.3 危険 IBM - IBM SPSS SamplePower の C1sizer.ocx におけるバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2012-5946 2013-05-1 11:42 2013-04-26 Show GitHub Exploit DB Packet Storm
226544 9.3 危険 IBM - IBM SPSS SamplePower の Vsflex8l ActiveX コントロールにおけるバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2012-5945 2013-05-1 11:41 2013-04-26 Show GitHub Exploit DB Packet Storm
226545 4.3 警告 ヒューレット・パッカード - HP Managed Printing Administration におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2012-5219 2013-05-1 11:22 2013-04-25 Show GitHub Exploit DB Packet Storm
226546 3.5 注意 IBM - 複数の IBM 製品で使用される IBM Sametime のクライアントの実装におけるコマンドを送信される脆弱性 CWE-noinfo
情報不足 		CVE-2013-0553 2013-05-1 11:21 2013-04-22 Show GitHub Exploit DB Packet Storm
226547 3.5 注意 IBM - IBM Sametime の Sametime Links サーバにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2013-0533 2013-05-1 11:15 2013-04-22 Show GitHub Exploit DB Packet Storm
226548 9.3 危険 IBM - IBM SPSS SamplePower の olch2x32 ActiveX コントロールにおける任意のコードを実行される脆弱性 CWE-noinfo
情報不足 		CVE-2013-0593 2013-05-1 11:14 2013-04-26 Show GitHub Exploit DB Packet Storm
226549 2.3 注意 IBM - IBM Application Support Facility for z/OS の IBM Document Connect for Application Support Facility におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2013-0572 2013-05-1 11:13 2013-04-25 Show GitHub Exploit DB Packet Storm
226550 2.9 注意 IBM - IBM Application Support Facility for z/OS の IBM Document Connect for Application Support Facility におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2013-0571 2013-05-1 11:11 2013-04-25 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 7, 2026, 4:13 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
221681 6.1 MEDIUM
Network 		vegadesign profiledesign_cms Multiple cross-site scripting (XSS) vulnerabilities in ProfileDesign CMS v6.0.2.5 allows remote attackers to inject arbitrary web script or HTML via the (1) page, (2) gbs, (3) side, (4) id, (5) imgid… CWE-79
Cross-site Scripting 		CVE-2019-7409 2024-11-21 13:48 2019-05-13 Show GitHub Exploit DB Packet Storm
221682 7.5 HIGH
Network 		lg gamp-7100_firmware
gapm-7200_firmware
gapm-8000_firmware 		An issue was discovered on LG GAMP-7100, GAPM-7200, and GAPM-8000 routers. An unauthenticated user can read a log file via an HTTP request containing its full pathname, such as http://192.168.0.1/var… CWE-306
Missing Authentication for Critical Function 		CVE-2019-7404 2024-11-21 13:48 2019-05-13 Show GitHub Exploit DB Packet Storm
221683 7.7 HIGH
Network 		thehive-project cortex-analyzers TheHive Project UnshortenLink analyzer before 1.1, included in Cortex-Analyzers before 1.15.2, has SSRF. To exploit the vulnerability, an attacker must create a new analysis, select URL for Data Type… CWE-918
Server-Side Request Forgery (SSRF)  		CVE-2019-7652 2024-11-21 13:48 2019-05-10 Show GitHub Exploit DB Packet Storm
221684 9.8 CRITICAL
Network 		cyberark enterprise_password_vault An XML external entity (XXE) vulnerability in the Password Vault Web Access (PVWA) of CyberArk Enterprise Password Vault <=10.7 allows remote attackers to read arbitrary files or potentially bypass a… CWE-611
XXE 		CVE-2019-7442 2024-11-21 13:48 2019-05-9 Show GitHub Exploit DB Packet Storm
221685 8.1 HIGH
Network 		jio jmr1140_firmware JioFi 4 jmr1140 Amtel_JMR1140_R12.07 devices allow remote attackers to obtain an admin token by making a /cgi-bin/qcmap_auth type=getuser request and then reading the token field. This token value ca… CWE-352
 Origin Validation Error 		CVE-2019-7746 2024-11-21 13:48 2019-05-8 Show GitHub Exploit DB Packet Storm
221686 9.8 CRITICAL
Network 		jio jmr1140_firmware JioFi 4 jmr1140 Amtel_JMR1140_R12.07 devices allow remote attackers to obtain the Wi-Fi password by making a cgi-bin/qcmap_web_cgi Page=GetWiFi_Setting request and then reading the wpa_security_key f… NVD-CWE-noinfo
CVE-2019-7745 2024-11-21 13:48 2019-05-8 Show GitHub Exploit DB Packet Storm
221687 6.1 MEDIUM
Network 		jio jmr1140_firmware cgi-bin/qcmap_web_cgi on JioFi 4 jmr1140 Amtel_JMR1140_R12.07 devices has POST based reflected XSS via the Page parameter. No sanitization is performed for user input data. CWE-79
Cross-site Scripting 		CVE-2019-7687 2024-11-21 13:48 2019-05-8 Show GitHub Exploit DB Packet Storm
221688 9.8 CRITICAL
Network 		coship rt3052_firmware
rt3050_firmware
wm3300_firmware
rt7620_firmware 		An issue was discovered on Shenzhen Coship WM3300 WiFi Router 5.0.0.55 devices. The password reset functionality of the Wireless SSID doesn't require any type of authentication. By making a POST requ… CWE-306
Missing Authentication for Critical Function 		CVE-2019-7564 2024-11-21 13:48 2019-05-8 Show GitHub Exploit DB Packet Storm
221689 6.1 MEDIUM
Network 		rukovoditel rukovoditel Rukovoditel through 2.4.1 allows XSS via a URL that lacks a module=users%2flogin substring. CWE-79
Cross-site Scripting 		CVE-2019-7541 2024-11-21 13:48 2019-05-8 Show GitHub Exploit DB Packet Storm
221690 8.1 HIGH
Network 		kde
opensuse
fedoraproject 		kauth
leap
backports
fedora 		KDE KAuth before 5.55 allows the passing of parameters with arbitrary types to helpers running as root over DBus via DBusHelperProxy.cpp. Certain types can cause crashes, and trigger the decoding of … CWE-20
 Improper Input Validation  		CVE-2019-7443 2024-11-21 13:48 2019-05-8 Show GitHub Exploit DB Packet Storm