Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 5, 2026, 4 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
227551	7.5	危険	Trivantis Corporation Inc.	-	Trivantis CourseMill Enterprise Learning Management System の userlogin.jsp における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2007-6338	2012-12-20 18:34	2007-12-14	Show	GitHub Exploit DB Packet Storm

227552	5	警告	sergey lyubka	-	Windows 上で稼動する Sergey Lyubka Simple HTTPD におけるサービス運用妨害 (DoS) の脆弱性	CWE-20 不適切な入力確認	CVE-2007-6326	2012-12-20 18:34	2007-12-13	Show	GitHub Exploit DB Packet Storm

227553	5	警告	xml2owl	-	xml2owl の filedownload.php におけるディレクトリトラバーサルの脆弱性	CWE-22 パス・トラバーサル	CVE-2007-6322	2012-12-20 18:34	2007-12-13	Show	GitHub Exploit DB Packet Storm

227554	4.3	警告	Roundcube.net	-	RoundCube webmail におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2007-6321	2012-12-20 18:34	2007-12-11	Show	GitHub Exploit DB Packet Storm

227555	6.8	警告	WordPress.org	-	WordPress の wp-includes/query.php における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2007-6318	2012-12-20 18:34	2007-12-11	Show	GitHub Exploit DB Packet Storm

227556	5.5	警告	Real Time Logic	-	BarracudaDrive Web Server におけるディレクトリトラバーサルの脆弱性	CWE-22 パス・トラバーサル	CVE-2007-6317	2012-12-20 18:34	2007-12-11	Show	GitHub Exploit DB Packet Storm

227557	4.3	警告	Real Time Logic	-	BarracudaDrive Web Server におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2007-6316	2012-12-20 18:34	2007-12-11	Show	GitHub Exploit DB Packet Storm

227558	4	警告	Real Time Logic	-	Group Chat の BarracudaDrive Web Server におけるサービス運用妨害 (DoS) の脆弱性	CWE-119 バッファエラー	CVE-2007-6315	2012-12-20 18:34	2007-12-11	Show	GitHub Exploit DB Packet Storm

227559	5	警告	Real Time Logic	-	BarracudaDrive Web Server における Web スクリプトに対するソースコードを読まれる脆弱性	CWE-20 不適切な入力確認	CVE-2007-6314	2012-12-20 18:34	2007-12-11	Show	GitHub Exploit DB Packet Storm

227560	4.3	警告	ウェブセンス	-	Websense Enterprise および Web Security Suite の Web Reporting Tools portal におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2007-6312	2012-12-20 18:34	2007-12-11	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 5, 2026, 4:51 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
222911	8.8	HIGH Network	cpanel	cpanel	cPanel before 80.0.5 allows demo accounts to execute arbitrary code via ajax_maketext_syntax_util.pl (SEC-498).	NVD-CWE-noinfo	CVE-2019-14398	2024-11-21 13:26	2019-07-31	Show	GitHub Exploit DB Packet Storm

222912	5.3	MEDIUM Network	cpanel	cpanel	cPanel before 80.0.5 allows demo accounts to modify arbitrary files via the extractfile API1 call (SEC-496).	NVD-CWE-noinfo	CVE-2019-14397	2024-11-21 13:26	2019-07-31	Show	GitHub Exploit DB Packet Storm

222913	3.3	LOW Local	cpanel	cpanel	API Analytics adminbin in cPanel before 80.0.5 allows spoofed insertions of log data (SEC-495).	NVD-CWE-noinfo	CVE-2019-14396	2024-11-21 13:26	2019-07-31	Show	GitHub Exploit DB Packet Storm

222914	3.3	LOW Local	cpanel	cpanel	cPanel before 80.0.5 uses world-readable permissions for the Queueprocd log (SEC-494).	CWE-732 Incorrect Permission Assignment for Critical Resource	CVE-2019-14395	2024-11-21 13:26	2019-07-31	Show	GitHub Exploit DB Packet Storm

222915	5.5	MEDIUM Local	cpanel	cpanel	cPanel before 80.0.5 allows unsafe file operations in the context of the root account via the fetch_ssl_certificates_for_fqdns API (SEC-489).	NVD-CWE-noinfo	CVE-2019-14394	2024-11-21 13:26	2019-07-31	Show	GitHub Exploit DB Packet Storm

222916	5.3	MEDIUM Local	cpanel	cpanel	cPanel before 80.0.5 allows local code execution in the context of a different cPanel account because of insecure cpphp execution (SEC-486).	NVD-CWE-noinfo	CVE-2019-14393	2024-11-21 13:26	2019-07-31	Show	GitHub Exploit DB Packet Storm

222917	8.8	HIGH Network	cpanel	cpanel	cPanel before 80.0.22 allows remote code execution by a demo account because of incorrect URI dispatching (SEC-501).	NVD-CWE-noinfo	CVE-2019-14392	2024-11-21 13:26	2019-07-30	Show	GitHub Exploit DB Packet Storm

222918	5.5	MEDIUM Local	gnu opensuse canonical netapp	binutils leap ubuntu_linux solidfire hci_management_node	apply_relocations in readelf.c in GNU Binutils 2.32 contains an integer overflow that allows attackers to trigger a write access violation (in byte_put_little_endian function in elfcomm.c) via an ELF…	CWE-190 Integer Overflow or Wraparound	CVE-2019-14444	2024-11-21 13:26	2019-07-30	Show	GitHub Exploit DB Packet Storm

222919	6.5	MEDIUM Network	libav debian	libav debian_linux	An issue was discovered in Libav 12.3. Division by zero in range_decode_culshift in libavcodec/apedec.c allows remote attackers to cause a denial of service (application crash), as demonstrated by av…	CWE-369 Divide By Zero	CVE-2019-14443	2024-11-21 13:26	2019-07-30	Show	GitHub Exploit DB Packet Storm

222920	6.5	MEDIUM Network	libav debian	libav debian_linux	In mpc8_read_header in libavformat/mpc8.c in Libav 12.3, an input file can result in an avio_seek infinite loop and hang, with 100% CPU consumption. Attackers could leverage this vulnerability to cau…	CWE-835 Loop with Unreachable Exit Condition ('Infinite Loop')	CVE-2019-14442	2024-11-21 13:26	2019-07-30	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed