Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 1, 2026, 12:10 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
227751 4.3 警告 xcomputer - Xcomputer の Search.asp におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2007-5479 2012-12-20 18:33 2007-10-16 Show GitHub Exploit DB Packet Storm
227752 4.3 警告 valve software - WebMod Half-Life Dedicated Server プラグインの auth.w におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2007-5477 2012-12-20 18:33 2007-10-16 Show GitHub Exploit DB Packet Storm
227753 7.8 危険 SUSE - SUSE Linux Enterprise Server の ISC BIND named デーモンで使用される libgssapi におけるサービス運用妨害 (DoS) の脆弱性 CWE-DesignError
CVE-2007-5471 2012-12-20 18:33 2007-10-15 Show GitHub Exploit DB Packet Storm
227754 5 警告 viart - ViArt Shop の iDEAL payment モジュール における証明書および鍵ファイルのパス名を取得される脆弱性 CWE-22
パス・トラバーサル 		CVE-2007-5463 2012-12-20 18:33 2007-10-15 Show GitHub Exploit DB Packet Storm
227755 4.3 警告 wwwisis - WWWISIS の wxis.exe におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2007-5455 2012-12-20 18:33 2007-10-14 Show GitHub Exploit DB Packet Storm
227756 8.5 危険 php-stats - Php-Stats における任意のコードを実行される脆弱性 CWE-94
コード・インジェクション 		CVE-2007-5453 2012-12-20 18:33 2007-10-14 Show GitHub Exploit DB Packet Storm
227757 10 危険 php-stats - Php-Stats の php-stats.recjs.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2007-5452 2012-12-20 18:33 2007-10-14 Show GitHub Exploit DB Packet Storm
227758 7.5 危険 softbiz - Softbiz Recipes Portal Script の searchresult.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2007-5449 2012-12-20 18:33 2007-10-14 Show GitHub Exploit DB Packet Storm
227759 1.9 注意 VMware - VMware Workstation などの Reconfig.DLL における vmount2.exe がサービス運用妨害 (DoS) 状態となる脆弱性 CWE-20
不適切な入力確認 		CVE-2007-5438 2012-12-20 18:33 2007-10-12 Show GitHub Exploit DB Packet Storm
227760 4.3 警告 pro.setun - PRO-search におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2007-5434 2012-12-20 18:33 2007-10-12 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 1, 2026, 4:54 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
213281 4.8 MEDIUM
Network 		qnap qts A stored cross-site scripting (XSS) vulnerability has been reported to affect multiple versions of QTS. If exploited, this vulnerability may allow an attacker to inject and execute scripts on the adm… CWE-79
Cross-site Scripting 		CVE-2019-7197 2024-11-21 13:47 2019-12-5 Show GitHub Exploit DB Packet Storm
213282 6.1 MEDIUM
Network 		schneider-electric andover_continuum_9680_firmware
andover_continuum_5740_firmware
andover_continuum_5720_firmware
andover_continuum_bcx4040_firmware
andover_continuum_bcx9640_firmware
andover_continuum_… 		A CWE-79: Failure to Preserve Web Page Structure vulnerability exists in Andover Continuum (models 9680, 5740 and 5720, bCX4040, bCX9640, 9900, 9940, 9924 and 9702) , which could enable a successful … CWE-79
Cross-site Scripting 		CVE-2019-6853 2024-11-21 13:47 2019-11-21 Show GitHub Exploit DB Packet Storm
213283 7.5 HIGH
Network 		schneider-electric bmx_p34x_firmware
bmx_noe_0100_firmware
bmx_noe_0110_firmware
bmx_noc_0401_firmware
tsx_p57x_firmware
tsx_ety_x103_firmware
140_cpu6x_firmware
140_noe_771x1_firmware
140_noc_7… 		A CWE-200: Information Exposure vulnerability exists in Modicon Controllers (M340 CPUs, M340 communication modules, Premium CPUs, Premium communication modules, Quantum CPUs, Quantum communication mo… CWE-200
Information Exposure 		CVE-2019-6852 2024-11-21 13:47 2019-11-21 Show GitHub Exploit DB Packet Storm
213284 7.5 HIGH
Network 		schneider-electric modicon_m580_firmware
modicon_m340_firmware
tsxmcpc002m_firmware
tsxmcpc512k_firmware
tsxmfpp001m_firmware
tsxmfpp002m_firmware
tsxmfpp004m_firmware
tsxmfpp512k_firmware
tsxmr… 		A CWE-538: File and Directory Information Exposure vulnerability exists in Modicon M580, Modicon M340, Modicon Premium , Modicon Quantum (all firmware versions), which could cause the disclosure of i… CWE-200
Information Exposure 		CVE-2019-6851 2024-11-21 13:47 2019-10-30 Show GitHub Exploit DB Packet Storm
213285 7.5 HIGH
Network 		schneider-electric modicon_m580_firmware
modicon_bmenoc_0311_firmware
modicon_bmenoc_0321_firmware 		A CWE-200: Information Exposure vulnerability exists in Modicon M580, Modicon BMENOC 0311, and Modicon BMENOC 0321, which could cause the disclosure of sensitive information when reading specific reg… CWE-200
Information Exposure 		CVE-2019-6850 2024-11-21 13:47 2019-10-30 Show GitHub Exploit DB Packet Storm
213286 7.5 HIGH
Network 		schneider-electric modicon_m580_firmware
modicon_bmenoc_0311_firmware
modicon_bmenoc_0321_firmware 		A CWE-200: Information Exposure vulnerability exists in Modicon M580, Modicon BMENOC 0311, and Modicon BMENOC 0321, which could cause the disclosure of sensitive information when using specific Modbu… CWE-200
Information Exposure 		CVE-2019-6849 2024-11-21 13:47 2019-10-30 Show GitHub Exploit DB Packet Storm
213287 8.6 HIGH
Network 		schneider-electric modicon_m580_firmware
modicon_bmenoc_0311_firmware
modicon_bmenoc_0321_firmware 		A CWE-755: Improper Handling of Exceptional Conditions vulnerability exists in Modicon M580 CPU (BMEx58*) and Modicon M580 communication module (BMENOC0311, BMENOC0321) (see notification for version … CWE-755
 Improper Handling of Exceptional Conditions 		CVE-2019-6848 2024-11-21 13:47 2019-10-30 Show GitHub Exploit DB Packet Storm
213288 4.9 MEDIUM
Network 		schneider-electric modicon_m580_firmware
modicon_m340_firmware
modicon_bmxcra_firmware
modicon_140cra_firmware 		A CWE-755: Improper Handling of Exceptional Conditions vulnerability exists in Modicon M580, Modicon M340, Modicon BMxCRA and 140CRA modules (all firmware versions), which could cause a Denial of Ser… CWE-755
 Improper Handling of Exceptional Conditions 		CVE-2019-6847 2024-11-21 13:47 2019-10-30 Show GitHub Exploit DB Packet Storm
213289 6.5 MEDIUM
Network 		schneider-electric modicon_m580_firmware
modicon_m340_firmware
modicon_bmxcra_firmware
modicon_140cra_firmware 		A CWE-319: Cleartext Transmission of Sensitive Information vulnerability exists in Modicon M580, Modicon M340, Modicon BMxCRA and 140CRA modules (all firmware versions), which could cause information… CWE-319
Cleartext Transmission of Sensitive Information 		CVE-2019-6846 2024-11-21 13:47 2019-10-30 Show GitHub Exploit DB Packet Storm
213290 4.9 MEDIUM
Network 		schneider-electric modicon_m580_firmware
modicon_m340_firmware
modicon_bmxcra_firmware
modicon_140cra_firmware 		A CWE-755: Improper Handling of Exceptional Conditions vulnerability exists in Modicon M580, Modicon M340, Modicon BMxCRA and 140CRA modules (all firmware versions), which could cause a Denial of Ser… CWE-755
 Improper Handling of Exceptional Conditions 		CVE-2019-6844 2024-11-21 13:47 2019-10-30 Show GitHub Exploit DB Packet Storm