Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 3, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
227621	6.8	警告	vigilecms	-	VigileCMS の index.php におけるクロスサイトリクエストフォージェリの脆弱性	CWE-352 同一生成元ポリシー違反	CVE-2007-6087	2012-12-20 18:33	2007-11-21	Show	GitHub Exploit DB Packet Storm

227622	9.3	危険	vigilecms	-	VigileCMS の index.php におけるディレクトリトラバーサルの脆弱性	CWE-22 パス・トラバーサル	CVE-2007-6086	2012-12-20 18:33	2007-11-21	Show	GitHub Exploit DB Packet Storm

227623	4.3	警告	vigilecms	-	VigileCMS の index.php におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2007-6085	2012-12-20 18:33	2007-11-21	Show	GitHub Exploit DB Packet Storm

227624	9.3	危険	sciurus	-	Sciurus Hosting Panel の acp/savenews.php における任意の PHP コードを挿入される脆弱性	CWE-94 コード・インジェクション	CVE-2007-6082	2012-12-20 18:33	2007-11-21	Show	GitHub Exploit DB Packet Storm

227625	7.5	危険	skyportal	-	SkyPortal における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2007-6078	2012-12-20 18:33	2007-11-21	Show	GitHub Exploit DB Packet Storm

227626	7.5	危険	profilecms	-	ProfileCMS の index.php における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2007-6058	2012-12-20 18:33	2007-11-20	Show	GitHub Exploit DB Packet Storm

227627	6.8	警告	swsoft	-	SWSoft Confixx Professional の fehler.inc.php における PHP リモートファイルインクルージョンの脆弱性	CWE-94 コード・インジェクション	CVE-2007-6042	2012-12-20 18:33	2007-11-20	Show	GitHub Exploit DB Packet Storm

227628	7.5	危険	rigs of rogs	-	RoR のサーバの sequencer.cpp におけるバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2007-6041	2012-12-20 18:33	2007-11-20	Show	GitHub Exploit DB Packet Storm

227629	9	危険	Wonderware	-	Invensys Wonderware InTouch における任意のプログラムを実行される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2007-6033	2012-12-20 18:33	2007-11-19	Show	GitHub Exploit DB Packet Storm

227630	7.8	危険	van dyke technologies	-	VanDyke VShell におけるサービス運用妨害 (DoS) の脆弱性	CWE-noinfo 情報不足	CVE-2007-6031	2012-12-20 18:33	2007-11-19	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 3, 2026, 4:06 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
213441	6.1	MEDIUM Network	rukovoditel	rukovoditel	Rukovoditel through 2.4.1 allows XSS via a URL that lacks a module=users%2flogin substring.	CWE-79 Cross-site Scripting	CVE-2019-7541	2024-11-21 13:48	2019-05-8	Show	GitHub Exploit DB Packet Storm

213442	8.1	HIGH Network	kde opensuse fedoraproject	kauth leap backports fedora	KDE KAuth before 5.55 allows the passing of parameters with arbitrary types to helpers running as root over DBus via DBusHelperProxy.cpp. Certain types can cause crashes, and trigger the decoding of …	CWE-20 Improper Input Validation	CVE-2019-7443	2024-11-21 13:48	2019-05-8	Show	GitHub Exploit DB Packet Storm

213443	6.1	MEDIUM Network	zohocorp	manageengine_netflow_analyzer	XSS exists in Zoho ManageEngine Netflow Analyzer Professional v7.0.0.2 in the Administration zone "/netflow/jspui/linkdownalertConfig.jsp" file in the autorefTime or graphTypes parameter.	CWE-79 Cross-site Scripting	CVE-2019-7427	2024-11-21 13:48	2019-05-8	Show	GitHub Exploit DB Packet Storm

213444	6.1	MEDIUM Network	zohocorp	manageengine_netflow_analyzer	XSS exists in Zoho ManageEngine Netflow Analyzer Professional v7.0.0.2 in the Administration zone "/netflow/jspui/linkdownalertConfig.jsp" file in the groupDesc, groupName, groupID, or task parameter.	CWE-79 Cross-site Scripting	CVE-2019-7426	2024-11-21 13:48	2019-05-8	Show	GitHub Exploit DB Packet Storm

213445	8.1	HIGH Network	sonicwall	global_management_system	A vulnerability in SonicWall Global Management System (GMS), allow a remote user to gain access to the appliance using existing SSH key. This vulnerability affects GMS versions 9.1, 9.0, 8.7, 8.6, 8.…	CWE-1188 Insecure Default Initialization of Resource	CVE-2019-7476	2024-11-21 13:48	2019-04-27	Show	GitHub Exploit DB Packet Storm

213446	9.8	CRITICAL Network	nice	engage	In NICE Engage through 6.5, the default configuration binds an unauthenticated JMX/RMI interface to all network interfaces, without restricting registration of MBeans, which allows remote attackers t…	CWE-306 Missing Authentication for Critical Function	CVE-2019-7727	2024-11-21 13:48	2019-04-24	Show	GitHub Exploit DB Packet Storm

213447	9.8	CRITICAL Network	auth0	auth0-wcf-service-jwt	Auth0 Auth0-WCF-Service-JWT before 1.0.4 leaks the expected JWT signature in an error message when it cannot successfully validate the JWT signature. If this error message is presented to an attacker…	CWE-209 Information Exposure Through an Error Message	CVE-2019-7644	2024-11-21 13:48	2019-04-12	Show	GitHub Exploit DB Packet Storm

213448	9.0	CRITICAL Network	cantemo	portal	Cantemo Portal before 3.2.13, 3.3.x before 3.3.8, and 3.4.x before 3.4.9 has XSS. Leveraging this vulnerability would enable performing actions as users, including administrative users. This could en…	CWE-79 Cross-site Scripting	CVE-2019-7551	2024-11-21 13:48	2019-04-11	Show	GitHub Exploit DB Packet Storm

213449	7.8	HIGH Local	autodesk	advance_steel autocad autocad_architecture autocad_electrical autocad_lt autocad_map_3d autocad_mechanical autocad_mep autocad_p\&id autocad_plant_3d civil_3d	An attacker may convince a victim to open a malicious action micro (.actm) file that has serialized data, which may trigger a code execution in Autodesk Advance Steel 2018, Autodesk AutoCAD 2018, Aut…	CWE-502 Deserialization of Untrusted Data	CVE-2019-7361	2024-11-21 13:48	2019-04-10	Show	GitHub Exploit DB Packet Storm

213450	7.8	HIGH Local	autodesk	advance_steel autocad autocad_architecture autocad_electrical autocad_lt autocad_map_3d autocad_mechanical autocad_mep autocad_p\&id autocad_plant_3d civil_3d	An exploitable use-after-free vulnerability in the DXF-parsing functionality in Autodesk Advance Steel 2018, Autodesk AutoCAD 2018, Autodesk AutoCAD Architecture 2018, Autodesk AutoCAD Electrical 201…	CWE-416 Use After Free	CVE-2019-7360	2024-11-21 13:48	2019-04-10	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed