Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 4, 2026, 4 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
227751	5	警告	wwwisis	-	WWWISIS の wxis.exe におけるディレクトリトラバーサルの脆弱性	CWE-22 パス・トラバーサル	CVE-2007-5484	2012-12-20 18:33	2007-10-16	Show	GitHub Exploit DB Packet Storm

227752	6.4	警告	サン・マイクロシステムズ	-	Sun StorEdge/StorageTek 3510 FC Array の FTP サービスにおけるサービス運用妨害 (DoS) の脆弱性	CWE-noinfo 情報不足	CVE-2007-5482	2012-12-20 18:33	2007-10-15	Show	GitHub Exploit DB Packet Storm

227753	4.3	警告	xcomputer	-	Xcomputer の Search.asp におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2007-5479	2012-12-20 18:33	2007-10-16	Show	GitHub Exploit DB Packet Storm

227754	4.3	警告	valve software	-	WebMod Half-Life Dedicated Server プラグインの auth.w におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2007-5477	2012-12-20 18:33	2007-10-16	Show	GitHub Exploit DB Packet Storm

227755	7.8	危険	SUSE	-	SUSE Linux Enterprise Server の ISC BIND named デーモンで使用される libgssapi におけるサービス運用妨害 (DoS) の脆弱性	CWE-DesignError	CVE-2007-5471	2012-12-20 18:33	2007-10-15	Show	GitHub Exploit DB Packet Storm

227756	5	警告	viart	-	ViArt Shop の iDEAL payment モジュールにおける証明書および鍵ファイルのパス名を取得される脆弱性	CWE-22 パス・トラバーサル	CVE-2007-5463	2012-12-20 18:33	2007-10-15	Show	GitHub Exploit DB Packet Storm

227757	4.3	警告	wwwisis	-	WWWISIS の wxis.exe におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2007-5455	2012-12-20 18:33	2007-10-14	Show	GitHub Exploit DB Packet Storm

227758	8.5	危険	php-stats	-	Php-Stats における任意のコードを実行される脆弱性	CWE-94 コード・インジェクション	CVE-2007-5453	2012-12-20 18:33	2007-10-14	Show	GitHub Exploit DB Packet Storm

227759	10	危険	php-stats	-	Php-Stats の php-stats.recjs.php における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2007-5452	2012-12-20 18:33	2007-10-14	Show	GitHub Exploit DB Packet Storm

227760	7.5	危険	softbiz	-	Softbiz Recipes Portal Script の searchresult.php における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2007-5449	2012-12-20 18:33	2007-10-14	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 4, 2026, 4:06 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
223661	8.8	HIGH Network	cisco	sf250-24_firmware sf250-24p_firmware sf250-48_firmware sf250-48hp_firmware sf250-08_firmware sf250-08hp_firmware sf250-10p_firmware sf250-18_firmware sf250-26_firmware sf25…	A vulnerability in the web-based management interface of Cisco Small Business Smart and Managed Switches could allow an unauthenticated, remote attacker to conduct a cross-site request forgery (CSRF)…	CWE-352 Origin Validation Error	CVE-2019-12636	2024-11-21 13:23	2019-10-17	Show	GitHub Exploit DB Packet Storm

223662	7.5	HIGH Network	gluehome	glue_smart_lock_firmware	Glue Smart Lock 2.7.8 devices do not properly block guest access in certain situations where the network connection is unavailable.	CWE-862 Missing Authorization	CVE-2019-12944	2024-11-21 13:23	2019-10-15	Show	GitHub Exploit DB Packet Storm

223663	9.8	CRITICAL Network	autopi	wi-fi\/nb_firmware 4g\/lte_firmware	AutoPi Wi-Fi/NB and 4G/LTE devices before 2019-10-15 allows an attacker to perform a brute-force attack or dictionary attack to gain access to the WiFi network, which provides root access to the devi…	CWE-307 mproper Restriction of Excessive Authentication Attempts	CVE-2019-12941	2024-11-21 13:23	2019-10-15	Show	GitHub Exploit DB Packet Storm

223664	9.8	CRITICAL Network	activesoft	mybuilder	MyBuilder viewer before 6.2.2019.814 allow an attacker to execute arbitrary command via specifically crafted configuration file. This can be leveraged for code execution.	NVD-CWE-noinfo	CVE-2019-12812	2024-11-21 13:23	2019-10-8	Show	GitHub Exploit DB Packet Storm

223665	9.8	CRITICAL Network	activesoft	mybuilder	ActiveX Control in MyBuilder before 6.2.2019.814 allow an attacker to execute arbitrary command via the ShellOpen method. This can be leveraged for code execution	CWE-78 OS Command	CVE-2019-12811	2024-11-21 13:23	2019-10-8	Show	GitHub Exploit DB Packet Storm

223666	5.3	MEDIUM Network	jetbrains	ktor	UserHashedTableAuth in JetBrains Ktor framework before 1.2.0-rc uses a One-Way Hash with a Predictable Salt for storing user credentials.	CWE-916 Use of Password Hash With Insufficient Computational Effort	CVE-2019-12737	2024-11-21 13:23	2019-10-3	Show	GitHub Exploit DB Packet Storm

223667	9.8	CRITICAL Network	jetbrains	ktor	JetBrains Ktor framework before 1.2.0-rc does not sanitize the username provided by the user for the LDAP protocol, leading to command injection.	CWE-77 Command Injection	CVE-2019-12736	2024-11-21 13:23	2019-10-3	Show	GitHub Exploit DB Packet Storm

223668	6.1	MEDIUM Network	cisco	unified_communications_manager	A vulnerability in the web-based interface of Cisco Unified Communications Manager and Cisco Unified Communications Manager Session Management Edition (SME) could allow an unauthenticated, remote att…	CWE-79 Cross-site Scripting	CVE-2019-12716	2024-11-21 13:23	2019-10-3	Show	GitHub Exploit DB Packet Storm

223669	6.1	MEDIUM Network	cisco	unified_communications_manager	A vulnerability in the web-based interface of Cisco Unified Communications Manager and Cisco Unified Communications Manager Session Management Edition (SME) could allow an unauthenticated, remote att…	CWE-79 Cross-site Scripting	CVE-2019-12715	2024-11-21 13:23	2019-10-3	Show	GitHub Exploit DB Packet Storm

223670	6.5	MEDIUM Network	cisco	ic3000_industrial_compute_gateway_firmware	A vulnerability in the web-based management interface of Cisco IC3000 Industrial Compute Gateway could allow an authenticated, remote attacker to cause a denial of service (DoS) condition on an affec…	CWE-770 Allocation of Resources Without Limits or Throttling	CVE-2019-12714	2024-11-21 13:23	2019-10-3	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed