Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 2, 2026, noon

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
227831	4.3	警告	WordPress.org	-	WordPress の wp-register.php におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2007-5105	2012-12-20 18:33	2007-09-26	Show	GitHub Exploit DB Packet Storm

227832	6.8	警告	wordsmith	-	Wordsmith の config.inc.php におけるディレクトリトラバーサルの脆弱性	CWE-22 パス・トラバーサル	CVE-2007-5103	2012-12-20 18:33	2007-09-26	Show	GitHub Exploit DB Packet Storm

227833	6.8	警告	wordsmith	-	Wordsmith の config.inc.php における PHP リモートファイルインクルージョンの脆弱性	CWE-94 コード・インジェクション	CVE-2007-5102	2012-12-20 18:33	2007-09-26	Show	GitHub Exploit DB Packet Storm

227834	6.8	警告	phpBB	-	phpBB Plus における PHP リモートファイルインクルージョンの脆弱性	CWE-94 コード・インジェクション	CVE-2007-5100	2012-12-20 18:33	2007-09-26	Show	GitHub Exploit DB Packet Storm

227835	7.5	危険	sk.log	-	sk.log の php-inc/log.inc.php における PHP リモートファイルインクルージョンの脆弱性	CWE-94 コード・インジェクション	CVE-2007-5089	2012-12-20 18:33	2007-09-26	Show	GitHub Exploit DB Packet Storm

227836	4.3	警告	sisd	-	Freeside の search/cust_bill_event.cgi におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2007-5088	2012-12-20 18:33	2007-09-26	Show	GitHub Exploit DB Packet Storm

227837	10	危険	quiksoft	-	Quiksoft EasyMail MessagePrinter Object の emprint.DLL におけるヒープベースのバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2007-5070	2012-12-20 18:33	2007-09-24	Show	GitHub Exploit DB Packet Storm

227838	7.5	危険	phpfullannu	-	PFA の index.php における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2007-5068	2012-12-20 18:33	2007-09-24	Show	GitHub Exploit DB Packet Storm

227839	6.8	警告	迅雷	-	Xunlei Web Thunder の特定の ActiveX コントロールなどにおけるバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2007-5064	2012-12-20 18:33	2007-09-24	Show	GitHub Exploit DB Packet Storm

227840	4.3	警告	xcms	-	XCMS の index.php におけるクロスサイトリクエストフォージェリの脆弱性	CWE-352 同一生成元ポリシー違反	CVE-2007-5060	2012-12-20 18:33	2007-09-24	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 2, 2026, 4:08 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
223421	8.8	HIGH Network	trendnet	tew-827dru_firmware	An issue was discovered in TRENDnet TEW-827DRU firmware before 2.05B11. There is a command injection in apply.cgi (exploitable with authentication) via the IP Address in Add Gaming Rule.	CWE-77 Command Injection	CVE-2019-13152	2024-11-21 13:24	2019-07-2	Show	GitHub Exploit DB Packet Storm

223422	8.8	HIGH Network	trendnet	tew-827dru_firmware	An issue was discovered in TRENDnet TEW-827DRU firmware before 2.05B11. There is a command injection in apply.cgi (exploitable with authentication) via the action set_sta_enrollee_pin_5g and the key …	CWE-78 OS Command	CVE-2019-13151	2024-11-21 13:24	2019-07-2	Show	GitHub Exploit DB Packet Storm

223423	8.8	HIGH Network	trendnet	tew-827dru_firmware	An issue was discovered in TRENDnet TEW-827DRU firmware before 2.05B11. There is a command injection in apply.cgi (exploitable with authentication). The command injection exists in the key ip_addr.	CWE-77 Command Injection	CVE-2019-13150	2024-11-21 13:24	2019-07-2	Show	GitHub Exploit DB Packet Storm

223424	8.8	HIGH Network	trendnet	tew-827dru_firmware	An issue was discovered in TRENDnet TEW-827DRU firmware before 2.05B11. There is a command injection in apply.cgi (exploitable with authentication) via the key passwd in Routing RIP Settings.	CWE-78 OS Command	CVE-2019-13149	2024-11-21 13:24	2019-07-2	Show	GitHub Exploit DB Packet Storm

223425	8.8	HIGH Network	trendnet	tew-827dru_firmware	An issue was discovered in TRENDnet TEW-827DRU firmware before 2.05B11. There is a command injection in apply.cgi (exploitable with authentication) via the UDP Ports To Open in Add Gaming Rule.	CWE-77 Command Injection	CVE-2019-13148	2024-11-21 13:24	2019-07-2	Show	GitHub Exploit DB Packet Storm

223426	6.5	MEDIUM Network	audio_file_library_project debian	audio_file_library debian_linux	In Audio File Library (aka audiofile) 0.3.6, there exists one NULL pointer dereference bug in ulaw2linear_buf in G711.cpp in libmodules.a that allows an attacker to cause a denial of service via a cr…	CWE-476 NULL Pointer Dereference	CVE-2019-13147	2024-11-21 13:24	2019-07-2	Show	GitHub Exploit DB Packet Storm

223427	6.5	MEDIUM Network	imagemagick debian canonical	imagemagick debian_linux ubuntu_linux	ImageMagick before 7.0.8-50 has a memory leak vulnerability in the function ReadPSImage in coders/ps.c.	CWE-401 Missing Release of Memory after Effective Lifetime	CVE-2019-13137	2024-11-21 13:24	2019-07-2	Show	GitHub Exploit DB Packet Storm

223428	7.8	HIGH Local	imagemagick	imagemagick	ImageMagick before 7.0.8-50 has an integer overflow vulnerability in the function TIFFSeekCustomStream in coders/tiff.c.	CWE-190 Integer Overflow or Wraparound	CVE-2019-13136	2024-11-21 13:24	2019-07-2	Show	GitHub Exploit DB Packet Storm

223429	8.8	HIGH Network	imagemagick debian canonical f5	imagemagick debian_linux ubuntu_linux big-ip_application_acceleration_manager big-ip_webaccelerator	ImageMagick before 7.0.8-50 has a "use of uninitialized value" vulnerability in the function ReadCUTImage in coders/cut.c.	CWE-908 Use of Uninitialized Resource	CVE-2019-13135	2024-11-21 13:24	2019-07-2	Show	GitHub Exploit DB Packet Storm

223430	5.5	MEDIUM Local	imagemagick opensuse	imagemagick leap	ImageMagick before 7.0.8-50 has a memory leak vulnerability in the function ReadVIFFImage in coders/viff.c.	CWE-401 Missing Release of Memory after Effective Lifetime	CVE-2019-13134	2024-11-21 13:24	2019-07-2	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed