Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":April 30, 2026, 2:16 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
227341	7.5	危険	vu	-	VU Case Manager の default.asp における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2007-6168	2012-12-20 18:34	2007-11-28	Show	GitHub Exploit DB Packet Storm

227342	7.2	危険	SUSE	-	SUSE Linux の yast2-core における任意のコードを実行される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2007-6167	2012-12-20 18:34	2007-11-22	Show	GitHub Exploit DB Packet Storm

227343	4.3	警告	wsdeluxe	-	FMDeluxe の index.php におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2007-6162	2012-12-20 18:34	2007-11-28	Show	GitHub Exploit DB Packet Storm

227344	5	警告	tilde.dk	-	Tilde CMS の index.php における重要な情報を取得される脆弱性	CWE-200 情報漏えい	CVE-2007-6161	2012-12-20 18:34	2007-11-28	Show	GitHub Exploit DB Packet Storm

227345	4.3	警告	tilde.dk	-	Tilde CMS の index.php におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2007-6160	2012-12-20 18:34	2007-11-28	Show	GitHub Exploit DB Packet Storm

227346	7.5	危険	tilde.dk	-	Tilde CMS の index.php における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2007-6159	2012-12-20 18:34	2007-11-28	Show	GitHub Exploit DB Packet Storm

227347	7.5	危険	proverbs	-	Proverbs Web Calendar の caladmin.inc.php における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2007-6158	2012-12-20 18:34	2007-11-28	Show	GitHub Exploit DB Packet Storm

227348	4.3	警告	simplegallery	-	SimpleGallery の index.php におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2007-6157	2012-12-20 18:34	2007-11-28	Show	GitHub Exploit DB Packet Storm

227349	6	警告	迅雷	-	Xunlei Thunder の pplayer.dll_1_work におけるヒープベースのバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2007-6144	2012-12-20 18:34	2007-11-27	Show	GitHub Exploit DB Packet Storm

227350	7.5	危険	vu	-	VU Case Manager の default.asp における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2007-6143	2012-12-20 18:34	2007-11-27	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:April 30, 2026, 4:58 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
211541	7.5	HIGH Network	ikiwiki	ikiwiki	ikiwiki before 3.20170111.1 and 3.2018x and 3.2019x before 3.20190228 allows SSRF via the aggregate plugin. The impact also includes reading local files via file: URIs.	CWE-918 Server-Side Request Forgery (SSRF)	CVE-2019-9187	2024-11-21 13:51	2019-06-6	Show	GitHub Exploit DB Packet Storm

211542	10.0	CRITICAL Network	citrix	application_delivery_management	Citrix Application Delivery Management (ADM) 12.1.x before 12.1.50.33 has Incorrect Access Control.	NVD-CWE-noinfo	CVE-2019-9548	2024-11-21 13:51	2019-06-6	Show	GitHub Exploit DB Packet Storm

211543	9.8	CRITICAL Network	gitlab	gitlab	An issue was discovered in GitLab Community and Enterprise Edition before 11.6.10, 11.7.x before 11.7.6, and 11.8.x before 11.8.1. It has Insecure Permissions.	NVD-CWE-noinfo	CVE-2019-9485	2024-11-21 13:51	2019-05-30	Show	GitHub Exploit DB Packet Storm

211544	5.5	MEDIUM Local	gitlab	gitlab	An issue was discovered in GitLab Community and Enterprise Edition before 11.6.10, 11.7.x before 11.7.6, and 11.8.x before 11.8.1. It has Incorrect Access Control (issue 3 of 5).	CWE-20 Improper Input Validation	CVE-2019-9221	2024-11-21 13:51	2019-05-30	Show	GitHub Exploit DB Packet Storm

211545	9.8	CRITICAL Network	gitlab	gitlab	An issue was discovered in GitLab Community and Enterprise Edition before 11.6.10, 11.7.x before 11.7.6, and 11.8.x before 11.8.1. It has Incorrect Access Control (issue 1 of 5).	NVD-CWE-noinfo	CVE-2019-9218	2024-11-21 13:51	2019-05-30	Show	GitHub Exploit DB Packet Storm

211546	7.5	HIGH Network	aware	knomi	The Face authentication component in Aware mobile liveness 2.2.1 sdk 2.2.0 for Knomi allows a Biometrical Liveness authentication bypass via parameter tampering of the /knomi/analyze security_level f…	NVD-CWE-noinfo	CVE-2019-9196	2024-11-21 13:51	2019-05-16	Show	GitHub Exploit DB Packet Storm

211547	9.8	CRITICAL Network	gracemedia_media_player_project	gracemedia_media_player	The GraceMedia Media Player plugin 1.0 for WordPress allows Local File Inclusion via the "cfg" parameter.	CWE-22 Path Traversal	CVE-2019-9618	2024-11-21 13:51	2019-05-14	Show	GitHub Exploit DB Packet Storm

211548	9.8	CRITICAL Network	printerlogic	print_management	The PrinterLogic Print Management software, versions up to and including 18.3.1.96, does not sanitize special characters allowing for remote unauthorized changes to configuration files. An unauthenti…	NVD-CWE-Other	CVE-2019-9505	2024-11-21 13:51	2019-05-9	Show	GitHub Exploit DB Packet Storm

211549	8.8	HIGH Network	strato telekom ionos	hidrive_desktop_client magentacloud 1\&1_online_storage	STRATO HiDrive Desktop Client 5.0.1.0 for Windows suffers from a SYSTEM privilege escalation vulnerability through the HiDriveMaintenanceService service. This service establishes a NetNamedPipe endpo…	CWE-367 Time-of-check Time-of-use (TOCTOU) Race Condition	CVE-2019-9486	2024-11-21 13:51	2019-05-1	Show	GitHub Exploit DB Packet Storm

211550	7.5	HIGH Network	zimbra	collaboration_server	Zimbra Collaboration Suite before 8.6 patch 13, 8.7.x before 8.7.11 patch 10, and 8.8.x before 8.8.10 patch 7 or 8.8.x before 8.8.11 patch 3 allows SSRF via the ProxyServlet component.	CWE-918 Server-Side Request Forgery (SSRF)	CVE-2019-9621	2024-11-21 13:51	2019-05-1	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed