Vulnerability Search Top
Show Search Menu
|
You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database). |
JVN Vulnerability Information
Update Date":May 4, 2026, 6 p.m.
| No | CVSS | Level Attach Vector |
Vendor Name | Project Name | Title | CWE | CVE | Update Date | Publication Date | Impact Show |
Exploit PoC Search |
|---|---|---|---|---|---|---|---|---|---|---|---|
| 227741 | 6.8 | 警告 | phpdj | - | PHPDJ の djpage.php における PHP リモートファイルインクルージョンの脆弱性 |
CWE-94
コード・インジェクション |
CVE-2007-5574 | 2012-12-20 18:33 | 2007-10-18 | Show | GitHub Exploit DB Packet Storm |
| 227742 | 4.3 | 警告 | sphpblog | - | Simple PHP Blog におけるクロスサイトリクエストフォージェリの脆弱性 |
CWE-352
同一生成元ポリシー違反 |
CVE-2007-5572 | 2012-12-20 18:33 | 2007-10-18 | Show | GitHub Exploit DB Packet Storm |
| 227743 | 2.6 | 注意 | simple php forum | - | NSSboard におけるクロスサイトスクリプティングの脆弱性 |
CWE-79
クロスサイト・スクリプティング（XSS） |
CVE-2007-5564 | 2012-12-20 18:33 | 2007-10-18 | Show | GitHub Exploit DB Packet Storm |
| 227744 | 7.5 | 危険 | VirtueMart | - | VirtueMart における任意の PHP コードを実行される脆弱性 |
CWE-20
不適切な入力確認 |
CVE-2007-5563 | 2012-12-20 18:33 | 2007-10-18 | Show | GitHub Exploit DB Packet Storm |
| 227745 | 6.9 | 警告 | シマンテック | - | Symantec Altiris Deployment Solution における認証資格情報を取得される脆弱性 |
CWE-200
情報漏えい |
CVE-2007-5555 | 2012-12-20 18:33 | 2007-08-13 | Show | GitHub Exploit DB Packet Storm |
| 227746 | 9.3 | 危険 | TIBCO Software | - | TIBCO SmartPGM FX におけるスタックベースのバッファオーバーフローの脆弱性 |
CWE-119
バッファエラー |
CVE-2007-5546 | 2012-12-20 18:33 | 2007-10-18 | Show | GitHub Exploit DB Packet Storm |
| 227747 | 7.5 | 危険 | TIBCO Software | - | TIBCO SmartPGM FX におけるフォーマットストリングの脆弱性 |
CWE-134
書式文字列の問題 |
CVE-2007-5545 | 2012-12-20 18:33 | 2007-10-18 | Show | GitHub Exploit DB Packet Storm |
| 227748 | 10 | 危険 | runcms | - | RunCms の newbb_plus における脆弱性 |
CWE-noinfo
情報不足 |
CVE-2007-5535 | 2012-12-20 18:33 | 2007-10-17 | Show | GitHub Exploit DB Packet Storm |
| 227749 | 4.6 | 警告 | sitebar | - | SiteBar の translator.php における任意の PHP コードを実行される脆弱性 |
CWE-94
コード・インジェクション |
CVE-2007-5492 | 2012-12-20 18:33 | 2007-10-17 | Show | GitHub Exploit DB Packet Storm |
| 227750 | 9 | 危険 | sitebar | - | SiteBar の translator.php におけるディレクトリトラバーサルの脆弱性 |
CWE-22
パス・トラバーサル |
CVE-2007-5491 | 2012-12-20 18:33 | 2007-10-17 | Show | GitHub Exploit DB Packet Storm |
NVD Vulnerability Information
Update Date:May 5, 2026, 4:51 a.m.
| No | CVSS | Level Attach Vector |
Vendor Name | Project Name | Title | CWE | CVE | Update Date | Publication Date | Show Affected | Exploit PoC Search |
|---|---|---|---|---|---|---|---|---|---|---|---|
| 213791 | 6.1 |
MEDIUM
Network |
rukovoditel | rukovoditel | Rukovoditel before 2.4.1 allows XSS. |
CWE-79
Cross-site Scripting |
CVE-2019-7400 | 2024-11-21 13:48 | 2019-02-5 | Show | GitHub Exploit DB Packet Storm |
| 213792 | 7.5 |
HIGH
Network |
imagemagick opensuse debian canonical |
imagemagick leap debian_linux ubuntu_linux |
In ImageMagick before 7.0.8-25, a memory leak exists in WriteDIBImage in coders/dib.c. |
CWE-401
Missing Release of Memory after Effective Lifetime |
CVE-2019-7398 | 2024-11-21 13:48 | 2019-02-5 | Show | GitHub Exploit DB Packet Storm |
| 213793 | 7.5 |
HIGH
Network |
imagemagick graphicsmagick opensuse debian canonical |
imagemagick graphicsmagick leap debian_linux ubuntu_linux |
In ImageMagick before 7.0.8-25 and GraphicsMagick through 1.3.31, several memory leaks exist in WritePDFImage in coders/pdf.c. |
CWE-401
Missing Release of Memory after Effective Lifetime |
CVE-2019-7397 | 2024-11-21 13:48 | 2019-02-5 | Show | GitHub Exploit DB Packet Storm |
| 213794 | 7.5 |
HIGH
Network |
imagemagick opensuse debian canonical |
imagemagick leap debian_linux ubuntu_linux |
In ImageMagick before 7.0.8-25, a memory leak exists in ReadSIXELImage in coders/sixel.c. |
CWE-401
Missing Release of Memory after Effective Lifetime |
CVE-2019-7396 | 2024-11-21 13:48 | 2019-02-5 | Show | GitHub Exploit DB Packet Storm |
| 213795 | 7.5 |
HIGH
Network |
imagemagick opensuse debian canonical |
imagemagick leap debian_linux ubuntu_linux |
In ImageMagick before 7.0.8-25, a memory leak exists in WritePSDChannel in coders/psd.c. |
CWE-401
Missing Release of Memory after Effective Lifetime |
CVE-2019-7395 | 2024-11-21 13:48 | 2019-02-5 | Show | GitHub Exploit DB Packet Storm |
| 213796 | 8.6 |
HIGH
Network |
dlink | dir-823g_firmware | An issue was discovered in /bin/goahead on D-Link DIR-823G devices with firmware 1.02B03. There is incorrect access control allowing remote attackers to hijack the DNS service configuration of all cl… |
CWE-306
Missing Authentication for Critical Function |
CVE-2019-7390 | 2024-11-21 13:48 | 2019-02-5 | Show | GitHub Exploit DB Packet Storm |
| 213797 | 7.5 |
HIGH
Network |
dlink | dir-823g_firmware | An issue was discovered in /bin/goahead on D-Link DIR-823G devices with the firmware 1.02B03. There is incorrect access control allowing remote attackers to reset the router without authentication vi… |
CWE-306
Missing Authentication for Critical Function |
CVE-2019-7389 | 2024-11-21 13:48 | 2019-02-5 | Show | GitHub Exploit DB Packet Storm |
| 213798 | 7.5 |
HIGH
Network |
dlink | dir-823g_firmware | An issue was discovered in /bin/goahead on D-Link DIR-823G devices with firmware 1.02B03. There is incorrect access control allowing remote attackers to get sensitive information (such as MAC address… |
CWE-200
Information Exposure |
CVE-2019-7388 | 2024-11-21 13:48 | 2019-02-5 | Show | GitHub Exploit DB Packet Storm |
| 213799 | 6.5 |
MEDIUM
Network |
systrome |
isg-600c_firmware isg-600h_firmware isg-800w_firmware |
A local file inclusion vulnerability exists in the web interface of Systrome Cumilon ISG-600C, ISG-600H, and ISG-800W 1.1-R2.1_TRUNK-20180914.bin devices. When the export function is called from syst… |
CWE-22
Path Traversal |
CVE-2019-7387 | 2024-11-21 13:48 | 2019-02-5 | Show | GitHub Exploit DB Packet Storm |
| 213800 | 6.1 |
MEDIUM
Network |
zoneminder | zoneminder | Self - Stored Cross Site Scripting (XSS) exists in ZoneMinder through 1.32.3, as the view 'state' (aka Run State) (state.php) does no input validation to the value supplied to the 'New State' (aka ne… |
CWE-79
Cross-site Scripting |
CVE-2019-7352 | 2024-11-21 13:48 | 2019-02-5 | Show | GitHub Exploit DB Packet Storm |