Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 4, 2026, 4 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
227791 7.2 危険 VirusBlokAda Ltd. - VirusBlokAda Vba32 AntiVirus における権限を取得される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2007-5254 2012-12-20 18:33 2007-10-6 Show GitHub Exploit DB Packet Storm
227792 4.3 警告 webhost automation - Helm におけるクロスサイトスクリプティングの脆弱性 CWE-352
同一生成元ポリシー違反 		CVE-2007-5251 2012-12-20 18:33 2007-10-6 Show GitHub Exploit DB Packet Storm
227793 4.3 警告 uebimiau - Uebimiau の index.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2007-5235 2012-12-20 18:33 2007-10-5 Show GitHub Exploit DB Packet Storm
227794 4.6 警告 zomplog - Zomplog の admin/upload_files.php における任意の PHP ファイルを実行される脆弱性 CWE-20
不適切な入力確認 		CVE-2007-5231 2012-12-20 18:33 2007-10-5 Show GitHub Exploit DB Packet Storm
227795 7.5 危険 zomplog - Zomplog の admin/upload_files.php における管理アクションを実行される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2007-5230 2012-12-20 18:33 2007-10-5 Show GitHub Exploit DB Packet Storm
227796 6.8 警告 poppawid - Poppawid の mail/childwindow.inc.php における PHP リモートファイルインクルージョンの脆弱性 CWE-94
コード・インジェクション 		CVE-2007-5221 2012-12-20 18:33 2007-10-4 Show GitHub Exploit DB Packet Storm
227797 9.3 危険 アクシスコミュニケーションズ - AXIX 2100 Network Camera におけるクロスサイトスクリプティングの脆弱性 CWE-352
同一生成元ポリシー違反 		CVE-2007-5213 2012-12-20 18:33 2007-10-4 Show GitHub Exploit DB Packet Storm
227798 4.3 警告 アクシスコミュニケーションズ - AXIX 2100 Network Camera におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2007-5212 2012-12-20 18:33 2007-10-4 Show GitHub Exploit DB Packet Storm
227799 7.5 危険 SUSE - SUSE Linux Enterprise Desktop の novell-groupwise-client パッケージにおける資格情報を取得される脆弱性 CWE-200
CWE-310
CVE-2007-5196 2012-12-20 18:33 2007-10-12 Show GitHub Exploit DB Packet Storm
227800 6.8 警告 SUSE - SUSE Linux Enterprise Desktop の novell-groupwise-client パッケージにおける資格情報を取得される脆弱性 CWE-200
CWE-310
CVE-2007-5195 2012-12-20 18:33 2007-10-12 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 4, 2026, 4:06 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
213761 6.1 MEDIUM
Network 		gitlab gitlab An issue was discovered in GitLab Community and Enterprise Edition before 11.5.8, 11.6.x before 11.6.6, and 11.7.x before 11.7.1. It allows XSS (issue 1 of 2). Markdown fields contain a lack of input… CWE-79
Cross-site Scripting 		CVE-2019-6784 2024-11-21 13:47 2019-09-10 Show GitHub Exploit DB Packet Storm
213762 8.8 HIGH
Network 		gitlab gitlab An issue was discovered in GitLab Community and Enterprise Edition before 11.5.8, 11.6.x before 11.6.6, and 11.7.x before 11.7.1. GitLab Pages contains a directory traversal vulnerability that could … CWE-22
Path Traversal 		CVE-2019-6783 2024-11-21 13:47 2019-09-10 Show GitHub Exploit DB Packet Storm
213763 7.5 HIGH
Network 		gitlab gitlab An issue was discovered in GitLab Community and Enterprise Edition before 11.5.8, 11.6.x before 11.6.6, and 11.7.x before 11.7.1. It allows Information Disclosure (issue 1 of 6). An authorization iss… NVD-CWE-noinfo
CVE-2019-6782 2024-11-21 13:47 2019-09-10 Show GitHub Exploit DB Packet Storm
213764 7.0 HIGH
Local 		apport_project apport Apport before versions 2.14.1-0ubuntu3.29+esm1, 2.20.1-0ubuntu2.19, 2.20.9-0ubuntu7.7, 2.20.10-0ubuntu27.1, 2.20.11-0ubuntu5 contained a TOCTTOU vulnerability when reading the users ~/.apport-ignore.… CWE-367
 Time-of-check Time-of-use (TOCTOU) Race Condition 		CVE-2019-7307 2024-11-21 13:47 2019-08-30 Show GitHub Exploit DB Packet Storm
213765 9.8 CRITICAL
Network 		tcl alcatel_linkzone_firmware The web interface of Alcatel LINKZONE MW40-V-V1.0 MW40_LU_02.00_02 devices is vulnerable to an authentication bypass that allows an unauthenticated user to have access to the web interface without kn… CWE-287
Improper Authentication 		CVE-2019-7163 2024-11-21 13:47 2019-08-3 Show GitHub Exploit DB Packet Storm
213766 7.5 HIGH
Network 		dlink dva-5592_firmware The web interface of the D-Link DVA-5592 20180823 is vulnerable to an authentication bypass that allows an unauthenticated user to have access to sensitive information such as the Wi-Fi password and … CWE-79
Cross-site Scripting 		CVE-2019-6969 2024-11-21 13:47 2019-08-3 Show GitHub Exploit DB Packet Storm
213767 6.1 MEDIUM
Network 		dlink dva-5592_firmware The web interface of the D-Link DVA-5592 20180823 is vulnerable to XSS because HTML form parameters are directly reflected. CWE-79
Cross-site Scripting 		CVE-2019-6968 2024-11-21 13:47 2019-08-3 Show GitHub Exploit DB Packet Storm
213768 6.1 MEDIUM
Network 		avaya aura_conferencing A Cross-Site Scripting (XSS) vulnerability in the Web UI of Avaya Aura Conferencing may allow code execution and potentially disclose sensitive information. Affected versions of Avaya Aura Conferenci… CWE-79
Cross-site Scripting 		CVE-2019-7000 2024-11-21 13:47 2019-08-1 Show GitHub Exploit DB Packet Storm
213769 6.5 MEDIUM
Network 		wpfastestcache wp_fastest_cache The WP Fastest Cache plugin through 0.8.9.0 for WordPress allows remote attackers to delete arbitrary files because wp_postratings_clear_fastest_cache and rm_folder_recursively in wpFastestCache.php … CWE-22
Path Traversal 		CVE-2019-6726 2024-11-21 13:47 2019-07-30 Show GitHub Exploit DB Packet Storm
213770 7.8 HIGH
Local 		schneider-electric interactive_graphical_scada_system A CWE-787: Out-of-bounds Write vulnerability exists in Interactive Graphical SCADA System (IGSS), Version 14 and prior, which could cause a software crash when data in the mdb database is manipulated. CWE-787
 Out-of-bounds Write 		CVE-2019-6827 2024-11-21 13:47 2019-07-16 Show GitHub Exploit DB Packet Storm