Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":April 28, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
227881 10 危険 webo - Leo West WEBO の modules/abook/foldertree.php における PHP リモートファイルインクルージョンの脆弱性 - CVE-2007-1391 2012-12-20 18:19 2007-03-10 Show GitHub Exploit DB Packet Storm
227882 4.3 警告 Snitz - Snitz Forums 2000 の pop_profile.asp におけるクロスサイトスクリプティングの脆弱性 - CVE-2007-1374 2012-12-20 18:19 2007-03-9 Show GitHub Exploit DB Packet Storm
227883 10 危険 Pegasus Mail - Mercury/32 におけるスタックベースのバッファオーバーフローの脆弱性 - CVE-2007-1373 2012-12-20 18:19 2007-03-9 Show GitHub Exploit DB Packet Storm
227884 10 危険 postguestbook - PHP-Nuke 用の PostGuestbook モジュールにおける PHP リモートファイルインクルージョンの脆弱性 - CVE-2007-1372 2012-12-20 18:19 2007-03-9 Show GitHub Exploit DB Packet Storm
227885 6.9 警告 Jon Trulson - Conquest におけるバッファオーバーフローの脆弱性 - CVE-2007-1371 2012-12-20 18:19 2007-03-9 Show GitHub Exploit DB Packet Storm
227886 6.2 警告 Zend Technologies Ltd. - Zend Platform におけるルート権限を取得される脆弱性 - CVE-2007-1370 2012-12-20 18:19 2007-03-9 Show GitHub Exploit DB Packet Storm
227887 4.4 警告 Zend Technologies Ltd. - Zend Platform の ini_modifier における system.ini ファイルを変更される脆弱性 - CVE-2007-1369 2012-12-20 18:19 2007-03-9 Show GitHub Exploit DB Packet Storm
227888 4.3 警告 VirtueMart - VirtueMart の virtuemart_parser.php におけるクロスサイトスクリプティングの脆弱性 - CVE-2007-1361 2012-12-20 18:19 2007-03-8 Show GitHub Exploit DB Packet Storm
227889 6.6 警告 サン・マイクロシステムズ - Sun Fire X2100M2 および X2200M2 用の ipmitool における権限を取得される脆弱性 - CVE-2007-1346 2012-12-20 18:19 2007-03-7 Show GitHub Exploit DB Packet Storm
227890 7.5 危険 webcalendar - Craig Knudsen WebCalendar の includes/functions.php における任意のグローバル変数を設定される脆弱性 - CVE-2007-1343 2012-12-20 18:19 2007-03-8 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:April 29, 2026, 4:51 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
213021 8.8 HIGH
Network 		rdkcentral rdkb_ccsppandm A heap-based buffer over-read in Service_SetParamStringValue in cosa_x_cisco_com_ddns_dml.c of the RDK RDKB-20181217-1 CcspPandM module may allow attackers with login credentials to achieve informati… CWE-125
Out-of-bounds Read 		CVE-2019-6964 2024-11-21 13:47 2019-06-20 Show GitHub Exploit DB Packet Storm
213022 6.5 MEDIUM
Network 		rdkcentral rdkb_ccsppandm Incorrect access control in actionHandlerUtility.php in the RDK RDKB-20181217-1 WebUI module allows a logged in user to control DDNS, QoS, RIP, and other privileged configurations (intended only for … CWE-862
 Missing Authorization 		CVE-2019-6961 2024-11-21 13:47 2019-06-20 Show GitHub Exploit DB Packet Storm
213023 7.5 HIGH
Network 		tp-link tl-wr1043nd_firmware An issue was discovered on TP-Link TL-WR1043ND V2 devices. The credentials can be easily decoded and cracked by brute-force, WordList, or Rainbow Table attacks. Specifically, credentials in the "Auth… CWE-326
Inadequate Encryption Strength 		CVE-2019-6972 2024-11-21 13:47 2019-06-20 Show GitHub Exploit DB Packet Storm
213024 9.8 CRITICAL
Network 		tp-link tl-wr1043nd_firmware An issue was discovered on TP-Link TL-WR1043ND V2 devices. An attacker can send a cookie in an HTTP authentication packet to the router management web interface, and fully control the router without … NVD-CWE-noinfo
CVE-2019-6971 2024-11-21 13:47 2019-06-20 Show GitHub Exploit DB Packet Storm
213025 7.5 HIGH
Network 		open-xchange open-xchange_appsuite OX App Suite 7.10.1 and earlier allows Information Exposure. NVD-CWE-noinfo
CVE-2019-7159 2024-11-21 13:47 2019-06-18 Show GitHub Exploit DB Packet Storm
213026 6.1 MEDIUM
Network 		i-doit i-doit An XSS issue was discovered in i-doit Open 1.12 via the src/tools/php/qr/qr.php url parameter. CWE-79
Cross-site Scripting 		CVE-2019-6965 2024-11-21 13:47 2019-06-18 Show GitHub Exploit DB Packet Storm
213027 9.8 CRITICAL
Network 		open-xchange open-xchange_appsuite OX App Suite 7.10.0 and earlier has Incorrect Access Control. NVD-CWE-noinfo
CVE-2019-7158 2024-11-21 13:47 2019-06-18 Show GitHub Exploit DB Packet Storm
213028 7.5 HIGH
Network 		genieaccess wip3bvaf_firmware Genie Access WIP3BVAF WISH IP 3MP IR Auto Focus Bullet Camera devices through 3.x are vulnerable to directory traversal via the web interface, as demonstrated by reading /etc/shadow. NOTE: this produ… CWE-22
Path Traversal 		CVE-2019-7315 2024-11-21 13:47 2019-06-18 Show GitHub Exploit DB Packet Storm
213029 8.8 HIGH
Network 		tp-link tl-wr940n_firmware
tl-wr941nd_firmware 		TP-Link TL-WR940N is vulnerable to a stack-based buffer overflow, caused by improper bounds checking by the ipAddrDispose function. By sending specially crafted ICMP echo request packets, a remote au… CWE-787
 Out-of-bounds Write 		CVE-2019-6989 2024-11-21 13:47 2019-06-7 Show GitHub Exploit DB Packet Storm
213030 6.5 MEDIUM
Network 		progress sitefinity Progress Sitefinity 10.1.6536 does not invalidate session cookies upon logouts. It instead tries to overwrite the cookie in the browser, but it remains valid on the server side. This means the cookie… CWE-613
 Insufficient Session Expiration 		CVE-2019-7215 2024-11-21 13:47 2019-06-7 Show GitHub Exploit DB Packet Storm