Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 4, 2026, 2 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
227461 10 危険 synce - SynCE (SynCE-dccm) の vdccm におけるサービス運用妨害 (DoS) の脆弱性 CWE-noinfo
情報不足 		CVE-2007-6703 2012-12-20 18:34 2008-03-4 Show GitHub Exploit DB Packet Storm
227462 7.5 危険 Simple DirectMedia Layer - SDL_image の IMG_gif.c におけるバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2007-6697 2012-12-20 18:34 2008-02-1 Show GitHub Exploit DB Packet Storm
227463 2.1 注意 webcalendar - WebCalendar におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2007-6696 2012-12-20 18:34 2008-02-1 Show GitHub Exploit DB Packet Storm
227464 5 警告 VideoLAN - VideoLAN VLC の RTSP モジュールにおけるサービス運用妨害 (DoS) の脆弱性 CWE-20
不適切な入力確認 		CVE-2007-6684 2012-12-20 18:34 2008-01-16 Show GitHub Exploit DB Packet Storm
227465 5 警告 VideoLAN - VideoLAN VLC のブラウザプラグインにおける任意のファイルを上書きされる脆弱性 CWE-DesignError
CVE-2007-6683 2012-12-20 18:34 2008-01-16 Show GitHub Exploit DB Packet Storm
227466 7.5 危険 VideoLAN - VideoLAN VLC の httpd_FileCallBack 関数 におけるフォーマットストリングの脆弱性 CWE-DesignError
CVE-2007-6682 2012-12-20 18:34 2008-01-16 Show GitHub Exploit DB Packet Storm
227467 7.5 危険 VideoLAN - VideoLAN VLC の modules/demux/subtitle.c におけるスタックベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2007-6681 2012-12-20 18:34 2008-01-16 Show GitHub Exploit DB Packet Storm
227468 5 警告 uber uploader - UU の初期設定におけるアップロードに危険な拡張子を使用される脆弱性 CWE-16
環境設定 		CVE-2007-6676 2012-12-20 18:34 2008-01-8 Show GitHub Exploit DB Packet Storm
227469 4.3 警告 rapidshare - RapidShare Database の Default.asp におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2007-6674 2012-12-20 18:34 2008-01-8 Show GitHub Exploit DB Packet Storm
227470 7.5 危険 phpcredo - PHCDownload の search.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2007-6670 2012-12-20 18:34 2008-01-7 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 4, 2026, 4:06 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
213531 6.1 MEDIUM
Network 		samsung syncthru_web_service
x7400gx_firmware 		XSS exists in SAMSUNG X7400GX SyncThru Web Service V6.A6.25 V11.01.05.25_08-21-2015 in "/sws/leftmenu.sws" in multiple parameters: ruiFw_id, ruiFw_pid, ruiFw_title. CWE-79
Cross-site Scripting 		CVE-2019-7419 2024-11-21 13:48 2019-03-22 Show GitHub Exploit DB Packet Storm
213532 6.1 MEDIUM
Network 		samsung syncthru_web_service
x7400gx_firmware 		XSS exists in SAMSUNG X7400GX SyncThru Web Service V6.A6.25 V11.01.05.25_08-21-2015 in "/sws/swsAlert.sws" in multiple parameters: flag, frame, func, and Nfunc. CWE-79
Cross-site Scripting 		CVE-2019-7418 2024-11-21 13:48 2019-03-22 Show GitHub Exploit DB Packet Storm
213533 6.1 MEDIUM
Network 		ericsson active_library_explorer XSS exists in Ericsson Active Library Explorer (ALEX) 14.3 in multiple parameters in the "/cgi-bin/alexserv" servlet, as demonstrated by the DB, FN, fn, or id parameter. CWE-79
Cross-site Scripting 		CVE-2019-7417 2024-11-21 13:48 2019-03-22 Show GitHub Exploit DB Packet Storm
213534 6.1 MEDIUM
Network 		opentext documentum_webtop XSS and/or a Client Side URL Redirect exists in OpenText Documentum Webtop 5.3 SP2. The parameter startat in "/webtop/help/en/default.htm" is vulnerable. CWE-79
CWE-601
Cross-site Scripting
Open Redirect 		CVE-2019-7416 2024-11-21 13:48 2019-03-22 Show GitHub Exploit DB Packet Storm
213535 8.8 HIGH
Network 		zyxel dsl-491hnu-b10b_firmware
dsl-491hnu-b1b_v2_firmware 		ZyXEL VMG3312-B10B DSL-491HNU-B1B v2 devices allow login/login-page.cgi CSRF. CWE-352
 Origin Validation Error 		CVE-2019-7391 2024-11-21 13:48 2019-03-22 Show GitHub Exploit DB Packet Storm
213536 6.5 MEDIUM
Network 		kaiostech
nokia 		kaios
8810_4g_firmware 		A Denial of Service issue has been discovered in the Gecko component of KaiOS 2.5 10.05 (platform 48.0.a2) on Nokia 8810 4G devices. When a crafted web page is visited with the internal browser, the … NVD-CWE-noinfo
CVE-2019-7386 2024-11-21 13:48 2019-03-22 Show GitHub Exploit DB Packet Storm
213537 7.8 HIGH
Local 		raisecom iscom_ht803g-u_firmware
iscom_ht803g-w_firmware
iscom_ht803g-1ge_firmware
iscom_ht803g_gpon_firmware 		An authenticated shell command injection issue has been discovered in Raisecom ISCOM HT803G-U, HT803G-W, HT803G-1GE, and HT803G GPON products with the firmware version ISCOMHT803G-U_2.0.0_140521_R4.1… CWE-78
OS Command  		CVE-2019-7385 2024-11-21 13:48 2019-03-22 Show GitHub Exploit DB Packet Storm
213538 7.8 HIGH
Local 		raisecom iscom_ht803g-u_firmware
iscom_ht803g-w_firmware
iscom_ht803g-1ge_firmware
iscom_ht803g_gpon_firmware 		An authenticated shell command injection issue has been discovered in Raisecom ISCOM HT803G-U, HT803G-W, HT803G-1GE, and HT803G GPON products with the firmware version ISCOMHT803G-U_2.0.0_140521_R4.1… CWE-78
OS Command  		CVE-2019-7384 2024-11-21 13:48 2019-03-22 Show GitHub Exploit DB Packet Storm
213539 7.8 HIGH
Local 		systrome cumilon_isg-600c_firmware
cumilon_isg-600h_firmware
cumilon_isg-800w_firmware 		An issue was discovered on Systrome Cumilon ISG-600C, ISG-600H, and ISG-800W devices with firmware V1.1-R2.1_TRUNK-20181105.bin. A shell command injection occurs by editing the description of an ISP … CWE-78
OS Command  		CVE-2019-7383 2024-11-21 13:48 2019-03-22 Show GitHub Exploit DB Packet Storm
213540 6.1 MEDIUM
Network 		phpmywind phpmywind An issue was discovered in PHPMyWind 5.5. The method parameter of the data/api/oauth/connect.php page has a reflected Cross-site Scripting (XSS) vulnerability. CWE-79
Cross-site Scripting 		CVE-2019-7661 2024-11-21 13:48 2019-03-8 Show GitHub Exploit DB Packet Storm