Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 2, 2026, 2 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
227881 7.5 危険 WordPress.org - Wordpress および MU における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2007-4894 2012-12-20 18:33 2007-09-8 Show GitHub Exploit DB Packet Storm
227882 4.3 警告 WordPress.org - Wordpress および MU の wp-admin/admin-functions.php におけるクロスサイトスクリプティング (XSS) 攻撃を実行される脆弱性 CWE-352
同一生成元ポリシー違反 		CVE-2007-4893 2012-12-20 18:33 2007-09-8 Show GitHub Exploit DB Packet Storm
227883 7.5 危険 swsoft - Windows 用の SWSoft Plesk における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2007-4892 2012-12-20 18:33 2007-09-14 Show GitHub Exploit DB Packet Storm
227884 3.5 注意 XWiki - XWiki の "You are not allowed ..." のエラーハンドラにおける任意のドキュメントを読み取られる脆弱性 CWE-DesignError
CVE-2007-4888 2012-12-20 18:33 2007-01-11 Show GitHub Exploit DB Packet Storm
227885 4.3 警告 techexcel inc. - TechExcel CustomerWise におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2007-4882 2012-12-20 18:33 2007-09-13 Show GitHub Exploit DB Packet Storm
227886 7.5 危険 psi-labs - psisns の profile/myprofile.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2007-4881 2012-12-20 18:33 2007-09-13 Show GitHub Exploit DB Packet Storm
227887 5 警告 Simplenews Project - SimpNews における任意の .inc ファイルをダウンロードされる脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2007-4873 2012-12-20 18:33 2007-09-27 Show GitHub Exploit DB Packet Storm
227888 5 警告 Simplenews Project - SimpleNews における重要な情報を取得される脆弱性 CWE-DesignError
CVE-2007-4872 2012-12-20 18:33 2007-09-27 Show GitHub Exploit DB Packet Storm
227889 6.8 警告 Quirm - SAXON の example.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2007-4863 2012-12-20 18:33 2007-10-30 Show GitHub Exploit DB Packet Storm
227890 4.3 警告 Quirm - SAXON の admin/menu.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2007-4862 2012-12-20 18:33 2007-10-30 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 2, 2026, 4:08 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
213431 7.5 HIGH
Network 		live555 streaming_media In Live555 0.95, there is a buffer overflow via a large integer in a Content-Length HTTP header because handleRequestBytes has an unrestricted memmove. CWE-190
 Integer Overflow or Wraparound 		CVE-2019-7733 2024-11-21 13:48 2019-02-12 Show GitHub Exploit DB Packet Storm
213432 7.5 HIGH
Network 		live555 streaming_media In Live555 0.95, a setup packet can cause a memory leak leading to DoS because, when there are multiple instances of a single field (username, realm, nonce, uri, or response), only the last instance … CWE-401
 Missing Release of Memory after Effective Lifetime 		CVE-2019-7732 2024-11-21 13:48 2019-02-12 Show GitHub Exploit DB Packet Storm
213433 9.8 CRITICAL
Network 		mywebsql mywebsql MyWebSQL 3.7 has a remote code execution (RCE) vulnerability after an attacker writes shell code into the database, and executes the Backup Database function with a .php filename for the backup's arc… CWE-706
 Use of Incorrectly-Resolved Name or Reference 		CVE-2019-7731 2024-11-21 13:48 2019-02-12 Show GitHub Exploit DB Packet Storm
213434 5.7 MEDIUM
Network 		mywebsql mywebsql MyWebSQL 3.7 has a Cross-site request forgery (CSRF) vulnerability for deleting a database via the /?q=wrkfrm&type=databases URI. CWE-352
 Origin Validation Error 		CVE-2019-7730 2024-11-21 13:48 2019-02-12 Show GitHub Exploit DB Packet Storm
213435 8.1 HIGH
Network 		pmd_project pmd PMD 5.8.1 and earlier processes XML external entities in ruleset files it parses as part of the analysis process, allowing attackers tampering it (either by direct modification or MITM attacks when u… CWE-611
XXE 		CVE-2019-7722 2024-11-21 13:48 2019-02-11 Show GitHub Exploit DB Packet Storm
213436 7.5 HIGH
Network 		nconsulting nc-cms lib/NCCms.class.php in nc-cms 3.5 allows upload of .php files via the index.php?action=save name and editordata parameters. CWE-434
 Unrestricted Upload of File with Dangerous Type  		CVE-2019-7721 2024-11-21 13:48 2019-02-11 Show GitHub Exploit DB Packet Storm
213437 9.8 CRITICAL
Network 		taogogo taocms taocms through 2014-05-24 allows eval injection by placing PHP code in the install.php db_name parameter and then making a config.php request. CWE-94
Code Injection 		CVE-2019-7720 2024-11-21 13:48 2019-02-11 Show GitHub Exploit DB Packet Storm
213438 9.8 CRITICAL
Network 		nibbleblog nibbleblog Nibbleblog 4.0.5 allows eval injection by placing PHP code in the install.php username parameter and then making a content/private/shadow.php request. CWE-94
Code Injection 		CVE-2019-7719 2024-11-21 13:48 2019-02-11 Show GitHub Exploit DB Packet Storm
213439 8.1 HIGH
Network 		metinfo metinfo An issue was discovered in Metinfo 6.x. An attacker can leverage a race condition in the backend database backup function to execute arbitrary PHP code via admin/index.php?n=databack&c=index&a=dogets… CWE-362
Race Condition 		CVE-2019-7718 2024-11-21 13:48 2019-02-11 Show GitHub Exploit DB Packet Storm
213440 6.5 MEDIUM
Network 		webassembly binaryen wasm::WasmBinaryBuilder::readUserSection in wasm-binary.cpp in Binaryen 1.38.22 triggers an attempt at excessive memory allocation, as demonstrated by wasm-merge and wasm-opt. CWE-770
 Allocation of Resources Without Limits or Throttling 		CVE-2019-7704 2024-11-21 13:48 2019-02-11 Show GitHub Exploit DB Packet Storm