Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 7, 2026, 2:09 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
227521 5 警告 seattle lab software - SLMail Pro の SLMail.exe におけるサービス運用妨害 (DoS) の脆弱性 CWE-20
不適切な入力確認
CVE-2008-1691 2012-12-20 18:52 2008-04-7 Show GitHub Exploit DB Packet Storm
227522 10 危険 seattle lab software - SLMail Pro の WebContainer.exe におけるサービス運用妨害 (DoS) の脆弱性 CWE-399
リソース管理の問題
CVE-2008-1690 2012-12-20 18:52 2008-04-7 Show GitHub Exploit DB Packet Storm
227523 5 警告 seattle lab software - SLMail Pro の WebContainer.exe におけるサービス運用妨害 (DoS) の脆弱性 CWE-399
リソース管理の問題
CVE-2008-1689 2012-12-20 18:52 2008-04-7 Show GitHub Exploit DB Packet Storm
227524 7.5 危険 レッドハット - Red Hat Directory Server の正規表現ハンドラにおけるバッファオーバーフローの脆弱性 CWE-119
バッファエラー
CVE-2008-1677 2012-12-20 18:52 2008-04-30 Show GitHub Exploit DB Packet Storm
227525 6.8 警告 savas place - Sava's Link Manager の index.php におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル
CVE-2008-1653 2012-12-20 18:52 2008-04-2 Show GitHub Exploit DB Packet Storm
227526 5 警告 Sympa - Sympa におけるサービス運用妨害 (DoS) の脆弱性 CWE-20
不適切な入力確認
CVE-2008-1648 2012-12-20 18:52 2008-04-2 Show GitHub Exploit DB Packet Storm
227527 7.5 危険 savas place - Sava's Link Manager の viewlinks.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2008-1644 2012-12-20 18:52 2008-04-2 Show GitHub Exploit DB Packet Storm
227528 7.5 危険 savas place - Sava's GuestBook の index.php におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル
CVE-2008-1642 2012-12-20 18:52 2008-04-2 Show GitHub Exploit DB Packet Storm
227529 6.8 警告 PowerDNS - PowerDNS Recursor における DNS を偽装される脆弱性 CWE-189
数値処理の問題
CVE-2008-1637 2012-12-20 18:52 2008-03-31 Show GitHub Exploit DB Packet Storm
227530 7.5 危険 ravenphpscripts - KISGB の view_private.php におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル
CVE-2008-1635 2012-12-20 18:52 2008-04-2 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 7, 2026, 4:22 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
223891 7.5 HIGH
Network
altn mdaemon_email_server MDaemon Email Server 19 through 20.0.1 skips SpamAssassin checks by default for e-mail messages larger than 2 MB (and limits checks to 10 MB even with special configuration), which is arguably incons… CWE-20
 Improper Input Validation 
CVE-2019-13612 2024-11-21 13:25 2019-07-16 Show GitHub Exploit DB Packet Storm
223892 8.8 HIGH
Network
python-engineio_project python-engineio An issue was discovered in python-engineio through 3.8.2. There is a Cross-Site WebSocket Hijacking (CSWSH) vulnerability that allows attackers to make WebSocket connections to a server by using a vi… CWE-352
 Origin Validation Error
CVE-2019-13611 2024-11-21 13:25 2019-07-16 Show GitHub Exploit DB Packet Storm
223893 5.9 MEDIUM
Network
assaabloy hid_digitalpersona_4500_firmware There is a short key vulnerability in HID Global DigitalPersona (formerly Crossmatch) U.are.U 4500 Fingerprint Reader v24. The key for obfuscating the fingerprint image is vulnerable to brute-force a… CWE-327
 Use of a Broken or Risky Cryptographic Algorithm
CVE-2019-13604 2024-11-21 13:25 2019-07-15 Show GitHub Exploit DB Packet Storm
223894 7.8 HIGH
Local
videolan
debian
canonical
opensuse
vlc_media_player
debian_linux
ubuntu_linux
leap
backports_sle
An Integer Underflow in MP4_EIA608_Convert() in modules/demux/mp4/mp4.c in VideoLAN VLC media player through 3.0.7.1 allows remote attackers to cause a denial of service (heap-based buffer overflow a… CWE-787
CWE-191
 Out-of-bounds Write
 Integer Underflow (Wrap or Wraparound)
CVE-2019-13602 2024-11-21 13:25 2019-07-15 Show GitHub Exploit DB Packet Storm
223895 9.8 CRITICAL
Network
getvera vera_edge_firmware LuaUPnP in Vera Edge Home Controller 1.7.4452 allows remote unauthenticated users to execute arbitrary OS commands via the code parameter to /port_3480/data_request because the "No unsafe lua allowed… CWE-78
OS Command 
CVE-2019-13598 2024-11-21 13:25 2019-07-15 Show GitHub Exploit DB Packet Storm
223896 9.8 CRITICAL
Network
sahipro sahi_pro _s_/sprm/_s_/dyn/Player_setScriptFile in Sahi Pro 8.0.0 allows command execution. It allows one to run ".sah" scripts via Sahi Launcher. Also, one can create a new script with an editor. It is possib… CWE-78
OS Command 
CVE-2019-13597 2024-11-21 13:25 2019-07-15 Show GitHub Exploit DB Packet Storm
223897 8.8 HIGH
Network
mirumee saleor In Mirumee Saleor 2.7.0 (fixed in 2.8.0), CSRF protection middleware was accidentally disabled, which allowed attackers to send a POST request without a valid CSRF token and be accepted by the server. CWE-352
 Origin Validation Error
CVE-2019-13594 2024-11-21 13:25 2019-07-15 Show GitHub Exploit DB Packet Storm
223898 5.5 MEDIUM
Local
sound_exchange_project sound_exchange An issue was discovered in libsox.a in SoX 14.4.2. In sox-fmt.h (startread function), there is an integer overflow on the result of integer addition (wraparound to 0) fed into the lsx_calloc macro th… CWE-190
CWE-476
 Integer Overflow or Wraparound
 NULL Pointer Dereference
CVE-2019-13590 2024-11-21 13:25 2019-07-15 Show GitHub Exploit DB Packet Storm
223899 9.8 CRITICAL
Network
anjlab paranoid2 The paranoid2 gem 1.1.6 for Ruby, as distributed on RubyGems.org, included a code-execution backdoor inserted by a third party. The current version, without this backdoor, is 1.1.5. CWE-829
 Inclusion of Functionality from Untrusted Control Sphere
CVE-2019-13589 2024-11-21 13:25 2019-07-15 Show GitHub Exploit DB Packet Storm
223900 8.8 HIGH
Network
zoom zoom The Zoom Client before 4.4.53932.0709 on macOS allows remote code execution, a different vulnerability than CVE-2019-13450. If the ZoomOpener daemon (aka the hidden web server) is running, but the Zo… CWE-78
OS Command 
CVE-2019-13567 2024-11-21 13:25 2019-07-12 Show GitHub Exploit DB Packet Storm