Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 4, 2026, 6 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
227711 6.4 警告 sitebar - SiteBar の command.php におけるオープンリダイレクトの脆弱性 CWE-59
リンク解釈の問題
CVE-2007-5695 2012-12-20 18:33 2007-10-29 Show GitHub Exploit DB Packet Storm
227712 6.8 警告 sitebar - SiteBar の translator.php における絶対パストラバーサルの脆弱性 CWE-22
パス・トラバーサル
CVE-2007-5694 2012-12-20 18:33 2007-10-29 Show GitHub Exploit DB Packet Storm
227713 6 警告 sitebar - SiteBar の translator.php における任意の PHP コードを実行される脆弱性 CWE-94
コード・インジェクション
CVE-2007-5693 2012-12-20 18:33 2007-10-29 Show GitHub Exploit DB Packet Storm
227714 4.3 警告 sitebar - SiteBar におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2007-5692 2012-12-20 18:33 2007-10-29 Show GitHub Exploit DB Packet Storm
227715 4.9 警告 rPath, Inc - rPath Linux の initscripts における認証試行の重要な情報を取得される脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2007-5686 2012-12-20 18:33 2007-10-11 Show GitHub Exploit DB Packet Storm
227716 5 警告 serverkit - shttp の safe_path 関数におけるディレクトリトラバーサル攻撃を実行される脆弱性 CWE-22
パス・トラバーサル
CVE-2007-5685 2012-12-20 18:33 2007-10-28 Show GitHub Exploit DB Packet Storm
227717 7.5 危険 Tiki Software Community Association - TikiWiki におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル
CVE-2007-5684 2012-12-20 18:33 2007-10-23 Show GitHub Exploit DB Packet Storm
227718 4.3 警告 Tiki Software Community Association - TikiWiki におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2007-5683 2012-12-20 18:33 2007-10-23 Show GitHub Exploit DB Packet Storm
227719 7.5 危険 Tiki Software Community Association - TikiWiki の tiki-graph_formula.php における任意のコードを実行される脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2007-5682 2012-12-20 18:33 2007-10-26 Show GitHub Exploit DB Packet Storm
227720 7.5 危険 phpbasic - phpBasic の Music モジュールにおける SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2007-5678 2012-12-20 18:33 2007-10-24 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 5, 2026, 4:51 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
223711 8.8 HIGH
Network
trendnet tew-827dru_firmware An issue was discovered in TRENDnet TEW-827DRU firmware before 2.05B11. There is a command injection in apply.cgi (exploitable with authentication). The command injection exists in the key ip_addr. CWE-77
Command Injection
CVE-2019-13150 2024-11-21 13:24 2019-07-2 Show GitHub Exploit DB Packet Storm
223712 8.8 HIGH
Network
trendnet tew-827dru_firmware An issue was discovered in TRENDnet TEW-827DRU firmware before 2.05B11. There is a command injection in apply.cgi (exploitable with authentication) via the key passwd in Routing RIP Settings. CWE-78
OS Command 
CVE-2019-13149 2024-11-21 13:24 2019-07-2 Show GitHub Exploit DB Packet Storm
223713 8.8 HIGH
Network
trendnet tew-827dru_firmware An issue was discovered in TRENDnet TEW-827DRU firmware before 2.05B11. There is a command injection in apply.cgi (exploitable with authentication) via the UDP Ports To Open in Add Gaming Rule. CWE-77
Command Injection
CVE-2019-13148 2024-11-21 13:24 2019-07-2 Show GitHub Exploit DB Packet Storm
223714 6.5 MEDIUM
Network
audio_file_library_project
debian
audio_file_library
debian_linux
In Audio File Library (aka audiofile) 0.3.6, there exists one NULL pointer dereference bug in ulaw2linear_buf in G711.cpp in libmodules.a that allows an attacker to cause a denial of service via a cr… CWE-476
 NULL Pointer Dereference
CVE-2019-13147 2024-11-21 13:24 2019-07-2 Show GitHub Exploit DB Packet Storm
223715 6.5 MEDIUM
Network
imagemagick
debian
canonical
imagemagick
debian_linux
ubuntu_linux
ImageMagick before 7.0.8-50 has a memory leak vulnerability in the function ReadPSImage in coders/ps.c. CWE-401
 Missing Release of Memory after Effective Lifetime
CVE-2019-13137 2024-11-21 13:24 2019-07-2 Show GitHub Exploit DB Packet Storm
223716 7.8 HIGH
Local
imagemagick imagemagick ImageMagick before 7.0.8-50 has an integer overflow vulnerability in the function TIFFSeekCustomStream in coders/tiff.c. CWE-190
 Integer Overflow or Wraparound
CVE-2019-13136 2024-11-21 13:24 2019-07-2 Show GitHub Exploit DB Packet Storm
223717 8.8 HIGH
Network
imagemagick
debian
canonical
f5
imagemagick
debian_linux
ubuntu_linux
big-ip_application_acceleration_manager
big-ip_webaccelerator
ImageMagick before 7.0.8-50 has a "use of uninitialized value" vulnerability in the function ReadCUTImage in coders/cut.c. CWE-908
 Use of Uninitialized Resource
CVE-2019-13135 2024-11-21 13:24 2019-07-2 Show GitHub Exploit DB Packet Storm
223718 5.5 MEDIUM
Local
imagemagick
opensuse
imagemagick
leap
ImageMagick before 7.0.8-50 has a memory leak vulnerability in the function ReadVIFFImage in coders/viff.c. CWE-401
 Missing Release of Memory after Effective Lifetime
CVE-2019-13134 2024-11-21 13:24 2019-07-2 Show GitHub Exploit DB Packet Storm
223719 5.5 MEDIUM
Local
imagemagick
opensuse
imagemagick
leap
ImageMagick before 7.0.8-50 has a memory leak vulnerability in the function ReadBMPImage in coders/bmp.c. CWE-401
 Missing Release of Memory after Effective Lifetime
CVE-2019-13133 2024-11-21 13:24 2019-07-2 Show GitHub Exploit DB Packet Storm
223720 8.8 HIGH
Network
centreon centreon Centreon 18.x before 18.10.6, 19.x before 19.04.3, and Centreon web before 2.8.29 allows the attacker to execute arbitrary system commands by using the value "init_script"-"Monitoring Engine Binary" … CWE-77
Command Injection
CVE-2019-13024 2024-11-21 13:24 2019-07-2 Show GitHub Exploit DB Packet Storm