Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 5, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
227551	7.5	危険	Trivantis Corporation Inc.	-	Trivantis CourseMill Enterprise Learning Management System の userlogin.jsp における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2007-6338	2012-12-20 18:34	2007-12-14	Show	GitHub Exploit DB Packet Storm

227552	5	警告	sergey lyubka	-	Windows 上で稼動する Sergey Lyubka Simple HTTPD におけるサービス運用妨害 (DoS) の脆弱性	CWE-20 不適切な入力確認	CVE-2007-6326	2012-12-20 18:34	2007-12-13	Show	GitHub Exploit DB Packet Storm

227553	5	警告	xml2owl	-	xml2owl の filedownload.php におけるディレクトリトラバーサルの脆弱性	CWE-22 パス・トラバーサル	CVE-2007-6322	2012-12-20 18:34	2007-12-13	Show	GitHub Exploit DB Packet Storm

227554	4.3	警告	Roundcube.net	-	RoundCube webmail におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2007-6321	2012-12-20 18:34	2007-12-11	Show	GitHub Exploit DB Packet Storm

227555	6.8	警告	WordPress.org	-	WordPress の wp-includes/query.php における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2007-6318	2012-12-20 18:34	2007-12-11	Show	GitHub Exploit DB Packet Storm

227556	5.5	警告	Real Time Logic	-	BarracudaDrive Web Server におけるディレクトリトラバーサルの脆弱性	CWE-22 パス・トラバーサル	CVE-2007-6317	2012-12-20 18:34	2007-12-11	Show	GitHub Exploit DB Packet Storm

227557	4.3	警告	Real Time Logic	-	BarracudaDrive Web Server におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2007-6316	2012-12-20 18:34	2007-12-11	Show	GitHub Exploit DB Packet Storm

227558	4	警告	Real Time Logic	-	Group Chat の BarracudaDrive Web Server におけるサービス運用妨害 (DoS) の脆弱性	CWE-119 バッファエラー	CVE-2007-6315	2012-12-20 18:34	2007-12-11	Show	GitHub Exploit DB Packet Storm

227559	5	警告	Real Time Logic	-	BarracudaDrive Web Server における Web スクリプトに対するソースコードを読まれる脆弱性	CWE-20 不適切な入力確認	CVE-2007-6314	2012-12-20 18:34	2007-12-11	Show	GitHub Exploit DB Packet Storm

227560	4.3	警告	ウェブセンス	-	Websense Enterprise および Web Security Suite の Web Reporting Tools portal におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2007-6312	2012-12-20 18:34	2007-12-11	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 5, 2026, 4:51 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
223731	5.5	MEDIUM Local	exiv2 fedoraproject	exiv2 fedora	A WebPImage::decodeChunks integer overflow in Exiv2 through 0.27.1 allows an attacker to cause a denial of service (large heap allocation followed by a very long running loop) via a crafted WEBP imag…	CWE-190 Integer Overflow or Wraparound	CVE-2019-13111	2024-11-21 13:24	2019-07-1	Show	GitHub Exploit DB Packet Storm

223732	6.5	MEDIUM Network	exiv2 fedoraproject canonical debian	exiv2 fedora ubuntu_linux debian_linux	A CiffDirectory::readDirectory integer overflow and out-of-bounds read in Exiv2 through 0.27.1 allows an attacker to cause a denial of service (SIGSEGV) via a crafted CRW image file.	CWE-125 CWE-190 Out-of-bounds Read Integer Overflow or Wraparound	CVE-2019-13110	2024-11-21 13:24	2019-07-1	Show	GitHub Exploit DB Packet Storm

223733	6.5	MEDIUM Network	exiv2 fedoraproject	exiv2 fedora	An integer overflow in Exiv2 through 0.27.1 allows an attacker to cause a denial of service (SIGSEGV) via a crafted PNG image file, because PngImage::readMetadata mishandles a chunkLength - iccOffset…	CWE-190 Integer Overflow or Wraparound	CVE-2019-13109	2024-11-21 13:24	2019-07-1	Show	GitHub Exploit DB Packet Storm

223734	6.5	MEDIUM Network	exiv2 fedoraproject	exiv2 fedora	An integer overflow in Exiv2 through 0.27.1 allows an attacker to cause a denial of service (SIGSEGV) via a crafted PNG image file, because PngImage::readMetadata mishandles a zero value for iccOffse…	CWE-190 Integer Overflow or Wraparound	CVE-2019-13108	2024-11-21 13:24	2019-07-1	Show	GitHub Exploit DB Packet Storm

223735	9.8	CRITICAL Network	matio_project fedoraproject	matio fedora	Multiple integer overflows exist in MATIO before 1.5.16, related to mat.c, mat4.c, mat5.c, mat73.c, and matvar_struct.c	CWE-190 Integer Overflow or Wraparound	CVE-2019-13107	2024-11-21 13:24	2019-07-1	Show	GitHub Exploit DB Packet Storm

223736	9.8	CRITICAL Network	cszcms	csz_cms	core/MY_Security.php in CSZ CMS 1.2.2 before 2019-06-20 has member/login/check SQL injection by sending a crafted HTTP User-Agent header and omitting the csrf_csz parameter.	CWE-89 SQL Injection	CVE-2019-13086	2024-11-21 13:24	2019-07-1	Show	GitHub Exploit DB Packet Storm

223737	7.8	HIGH Local	xnview	xnview	XnView Classic 2.48 has a User Mode Write AV starting at xnview+0x000000000030ecfa.	CWE-787 Out-of-bounds Write	CVE-2019-13085	2024-11-21 13:24	2019-07-1	Show	GitHub Exploit DB Packet Storm

223738	7.8	HIGH Local	xnview	xnview	XnView Classic 2.48 has a User Mode Write AV starting at xnview+0x000000000026b739.	CWE-787 Out-of-bounds Write	CVE-2019-13084	2024-11-21 13:24	2019-07-1	Show	GitHub Exploit DB Packet Storm

223739	7.8	HIGH Local	xnview	xnview	XnView Classic 2.48 has a User Mode Write AV starting at xnview+0x0000000000384e2a.	CWE-787 Out-of-bounds Write	CVE-2019-13083	2024-11-21 13:24	2019-07-1	Show	GitHub Exploit DB Packet Storm

223740	9.8	CRITICAL Network	chamilo	chamilo_lms	Chamilo LMS 1.11.8 and 2.x allows remote code execution through an lp_upload.php unauthenticated file upload feature. It extracts a ZIP archive before checking its content, and once it has been extra…	CWE-434 Unrestricted Upload of File with Dangerous Type	CVE-2019-13082	2024-11-21 13:24	2019-07-1	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed