Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":April 30, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
227231	6.4	警告	socialengine	-	Social Engine におけるディレクトリトラバーサルの脆弱性	CWE-22 パス・トラバーサル	CVE-2007-6581	2012-12-20 18:34	2007-12-28	Show	GitHub Exploit DB Packet Storm

227232	7.5	危険	wallpaper	-	Wallpaper Site における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2007-6580	2012-12-20 18:34	2007-12-28	Show	GitHub Exploit DB Packet Storm

227233	10	危険	Xfce	-	Xfce の Widget Library におけるメモリ二重解放の脆弱性	CWE-119 バッファエラー	CVE-2007-6532	2012-12-20 18:34	2008-01-9	Show	GitHub Exploit DB Packet Storm

227234	5	警告	Xfce	-	Xfce の Panel コンポーネントにおけるスタックベースのバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2007-6531	2012-12-20 18:34	2008-01-9	Show	GitHub Exploit DB Packet Storm

227235	7.5	危険	zeak.net	-	PHP ZLink の go.php における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2007-6578	2012-12-20 18:34	2007-12-28	Show	GitHub Exploit DB Packet Storm

227236	7.5	危険	zsuite	-	zBlog の index.php における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2007-6577	2012-12-20 18:34	2007-12-28	Show	GitHub Exploit DB Packet Storm

227237	7.8	危険	qksoft	-	QK SMTP Server におけるサービス運用妨害 (DoS) の脆弱性	CWE-20 不適切な入力確認	CVE-2007-6573	2012-12-20 18:34	2007-12-28	Show	GitHub Exploit DB Packet Storm

227238	4.3	警告	サン・マイクロシステムズ	-	Windows 上で稼動している Sun Java System Web Proxy Server におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2007-6571	2012-12-20 18:34	2007-12-21	Show	GitHub Exploit DB Packet Storm

227239	4.3	警告	サン・マイクロシステムズ	-	Sun Java System Web Proxy Server の View URL Database 関数におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2007-6570	2012-12-20 18:34	2007-12-21	Show	GitHub Exploit DB Packet Storm

227240	7.5	危険	xzeroscripts	-	XZero Community Classifieds の config.inc.php における PHP リモートファイルインクルージョンの脆弱性	CWE-94 コード・インジェクション	CVE-2007-6568	2012-12-20 18:34	2007-12-28	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:April 30, 2026, 4:58 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
211681	9.8	CRITICAL Network	gnu netapp mcafee canonical	glibc steelstore_cloud_integrated_storage ontap_select_deploy_administration_utility cloud_backup web_gateway ubuntu_linux	In the GNU C Library (aka glibc or libc6) through 2.29, proceed_next_node in posix/regexec.c has a heap-based buffer over-read via an attempted case-insensitive regular-expression match.	CWE-125 Out-of-bounds Read	CVE-2019-9169	2024-11-21 13:51	2019-02-26	Show	GitHub Exploit DB Packet Storm

211682	6.1	MEDIUM Network	woocommerce	woocommerce	WooCommerce before 3.5.5 allows XSS via a Photoswipe caption.	CWE-79 Cross-site Scripting	CVE-2019-9168	2024-11-21 13:51	2019-02-26	Show	GitHub Exploit DB Packet Storm

211683	7.8	HIGH Local	linux netapp canonical	linux_kernel solidfire hci_management_node snapprotect ubuntu_linux cn1610_firmware	In the Linux kernel before 4.20.12, net/ipv4/netfilter/nf_nat_snmp_basic_main.c in the SNMP NAT module has insufficient ASN.1 length checks (aka an array index error), making out-of-bounds read and w…	CWE-787 Out-of-bounds Write	CVE-2019-9162	2024-11-21 13:51	2019-02-26	Show	GitHub Exploit DB Packet Storm

211684	8.8	HIGH Network	hdfgroup	hdf5	An issue was discovered in the HDF HDF5 1.10.4 library. There is an out of bounds read in the function H5MM_xstrdup in H5MM.c when called from H5O_dtype_decode_helper in H5Odtype.c.	CWE-125 Out-of-bounds Read	CVE-2019-9152	2024-11-21 13:51	2019-02-26	Show	GitHub Exploit DB Packet Storm

211685	8.8	HIGH Network	hdfgroup	hdf5	An issue was discovered in the HDF HDF5 1.10.4 library. There is an out of bounds read in the function H5VM_memcpyvv in H5VM.c when called from H5D__compact_readvv in H5Dcompact.c.	CWE-125 Out-of-bounds Read	CVE-2019-9151	2024-11-21 13:51	2019-02-26	Show	GitHub Exploit DB Packet Storm

211686	7.5	HIGH Adjacent	jamf	self_service	Jamf Self Service 10.9.0 allows man-in-the-middle attackers to obtain a root shell by leveraging the "publish Bash shell scripts" feature to insert "/Applications/Utilities/Terminal app/Contents/MacO…	NVD-CWE-noinfo	CVE-2019-9146	2024-11-21 13:51	2019-02-26	Show	GitHub Exploit DB Packet Storm

211687	6.1	MEDIUM Network	hsycms	hsycms	An issue was discovered in Hsycms V1.1. There is an XSS vulnerability via the name field to the /book page.	CWE-79 Cross-site Scripting	CVE-2019-9145	2024-11-21 13:51	2019-02-26	Show	GitHub Exploit DB Packet Storm

211688	8.8	HIGH Network	exiv2	exiv2	An issue was discovered in Exiv2 0.27. There is infinite recursion at BigTiffImage::printIFD in the file bigtiffimage.cpp. This can be triggered by a crafted file. It allows an attacker to cause Deni…	CWE-674 Uncontrolled Recursion	CVE-2019-9144	2024-11-21 13:51	2019-02-26	Show	GitHub Exploit DB Packet Storm

211689	8.8	HIGH Network	exiv2	exiv2	An issue was discovered in Exiv2 0.27. There is infinite recursion at Exiv2::Image::printTiffStructure in the file image.cpp. This can be triggered by a crafted file. It allows an attacker to cause D…	CWE-674 Uncontrolled Recursion	CVE-2019-9143	2024-11-21 13:51	2019-02-26	Show	GitHub Exploit DB Packet Storm

211690	6.1	MEDIUM Network	b3log	symphony	An issue was discovered in b3log Symphony (aka Sym) before v3.4.7. XSS exists via the userIntro and userNickname fields to processor/SettingsProcessor.java.	CWE-79 Cross-site Scripting	CVE-2019-9142	2024-11-21 13:51	2019-02-26	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed