Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 1, 2026, 2 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
227631 6.8 警告 WordPress.org - Wordpress における認証を回避される脆弱性 CWE-287
不適切な認証 		CVE-2007-6013 2012-12-20 18:33 2007-11-19 Show GitHub Exploit DB Packet Storm
227632 7.8 危険 pioneers - pioneers におけるサービス運用妨害 (DoS) の脆弱性 CWE-20
不適切な入力確認 		CVE-2007-6010 2012-12-20 18:33 2007-11-15 Show GitHub Exploit DB Packet Storm
227633 10 危険 TestLink Development Team - TestLink における脆弱性 CWE-287
不適切な認証 		CVE-2007-6006 2012-12-20 18:33 2007-11-15 Show GitHub Exploit DB Packet Storm
227634 4.3 警告 webex communications - WebEx の GpcContainer.GpcContainer.1 ActiveX コントロールにおけるサービス運用妨害 (DoS) の脆弱性 CWE-399
リソース管理の問題 		CVE-2007-6005 2012-12-20 18:33 2007-11-15 Show GitHub Exploit DB Packet Storm
227635 7.5 危険 toko - Toko Instan の index.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2007-6004 2012-12-20 18:33 2007-11-15 Show GitHub Exploit DB Packet Storm
227636 4.3 警告 Thomson - Thomson SpeedTouch 716 の cgi/b/ic/connect におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2007-6003 2012-12-20 18:33 2007-11-15 Show GitHub Exploit DB Packet Storm
227637 7.5 危険 SoftbizScripts - Softbiz Auctions Script の product_desc.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2007-5999 2012-12-20 18:33 2007-11-15 Show GitHub Exploit DB Packet Storm
227638 4.3 警告 Trolltech - Trolltech Qt の QSslSocket における偽装サービスの無効なサーバ証明書を承認するようにユーザを騙す脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2007-5965 2012-12-20 18:33 2008-01-7 Show GitHub Exploit DB Packet Storm
227639 4.3 警告 レッドハット - RHN および Red Hat Network Satellite で使用されている Red Hat Network チャンネル検索機能におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2007-5961 2012-12-20 18:33 2008-05-20 Show GitHub Exploit DB Packet Storm
227640 6.5 警告 SoftbizScripts - Softbiz Ad Management plus Script の ads.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2007-5998 2012-12-20 18:33 2007-11-15 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 1, 2026, 4:54 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
213171 9.8 CRITICAL
Network 		bo-blog bw Bo-blog Wind through 1.6.0-r allows SQL Injection via the admin.php/comments/batchdel/ comID parameter because this parameter is mishandled in the mode/admin.mode.php delBlockedBatch function. CWE-89
SQL Injection 		CVE-2019-7587 2024-11-21 13:48 2019-02-8 Show GitHub Exploit DB Packet Storm
213172 9.8 CRITICAL
Network 		bijiadao waimai_super_cms An issue was discovered in Waimai Super Cms 20150505. web/Lib/Action/PublicAction.class.php allows time-based SQL Injection via the param array parameter to the /index.php?m=public&a=checkemail URI. CWE-89
SQL Injection 		CVE-2019-7585 2024-11-21 13:48 2019-02-8 Show GitHub Exploit DB Packet Storm
213173 8.8 HIGH
Network 		libming libming The readBytes function in util/read.c in libming through 0.4.8 allows remote attackers to have unspecified impact via a crafted swf file that triggers a memory allocation failure. CWE-770
 Allocation of Resources Without Limits or Throttling 		CVE-2019-7582 2024-11-21 13:48 2019-02-8 Show GitHub Exploit DB Packet Storm
213174 8.8 HIGH
Network 		libming libming The parseSWF_ACTIONRECORD function in util/parser.c in libming through 0.4.8 allows remote attackers to have unspecified impact via a crafted swf file that triggers a memory allocation failure, a dif… CWE-770
 Allocation of Resources Without Limits or Throttling 		CVE-2019-7581 2024-11-21 13:48 2019-02-8 Show GitHub Exploit DB Packet Storm
213175 8.8 HIGH
Network 		thinkcmf thinkcmf ThinkCMF 5.0.190111 allows remote attackers to execute arbitrary PHP code via the portal/admin_category/addpost.html alias parameter because the mishandling of a single quote character allows data/co… CWE-94
Code Injection 		CVE-2019-7580 2024-11-21 13:48 2019-02-8 Show GitHub Exploit DB Packet Storm
213176 5.3 MEDIUM
Network 		gurock testrail index.php in Gurock TestRail 5.3.0.3603 returns potentially sensitive information for an invalid request, as demonstrated by full path disclosure and the identification of PHP as the backend technolo… CWE-200
Information Exposure 		CVE-2019-7535 2024-11-21 13:48 2019-02-8 Show GitHub Exploit DB Packet Storm
213177 8.1 HIGH
Network 		libsdl
opensuse
debian
fedoraproject
canonical 		simple_directmedia_layer
leap
debian_linux
fedora
ubuntu_linux 		SDL (Simple DirectMedia Layer) through 1.2.15 and 2.x through 2.0.9 has a heap-based buffer over-read in InitIMA_ADPCM in audio/SDL_wave.c. CWE-125
Out-of-bounds Read 		CVE-2019-7578 2024-11-21 13:48 2019-02-7 Show GitHub Exploit DB Packet Storm
213178 8.8 HIGH
Network 		libsdl
opensuse
debian
fedoraproject
canonical 		simple_directmedia_layer
leap
debian_linux
fedora
ubuntu_linux 		SDL (Simple DirectMedia Layer) through 1.2.15 and 2.x through 2.0.9 has a buffer over-read in SDL_LoadWAV_RW in audio/SDL_wave.c. CWE-125
Out-of-bounds Read 		CVE-2019-7577 2024-11-21 13:48 2019-02-7 Show GitHub Exploit DB Packet Storm
213179 8.8 HIGH
Network 		libsdl
debian
opensuse
fedoraproject
canonical 		simple_directmedia_layer
debian_linux
leap
fedora
ubuntu_linux 		SDL (Simple DirectMedia Layer) through 1.2.15 and 2.x through 2.0.9 has a heap-based buffer over-read in InitMS_ADPCM in audio/SDL_wave.c (outside the wNumCoef loop). CWE-125
Out-of-bounds Read 		CVE-2019-7576 2024-11-21 13:48 2019-02-7 Show GitHub Exploit DB Packet Storm
213180 8.8 HIGH
Network 		libsdl
debian
opensuse
fedoraproject
canonical 		simple_directmedia_layer
debian_linux
leap
fedora
ubuntu_linux 		SDL (Simple DirectMedia Layer) through 1.2.15 and 2.x through 2.0.9 has a heap-based buffer overflow in MS_ADPCM_decode in audio/SDL_wave.c. CWE-787
 Out-of-bounds Write 		CVE-2019-7575 2024-11-21 13:48 2019-02-7 Show GitHub Exploit DB Packet Storm