Vulnerability Search Top

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

Vulnerability Information Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 2, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
228021	4.3	警告	ZyXEL	-	Zyxel Zywall 2 デバイス上で稼動する ZyNOS の管理インターフェースにおけるクロスサイトスクリプティングの脆弱性	-	CVE-2007-4318	2012-12-20 18:33	2007-08-13	Show	GitHub Exploit DB Packet Storm

228022	4.3	警告	ZyXEL	-	Zyxel Zywall 2 デバイス上で稼動する ZyNOS の管理インターフェースにおけるクロスサイトリクエストフォージェリの脆弱性	-	CVE-2007-4317	2012-12-20 18:33	2007-08-13	Show	GitHub Exploit DB Packet Storm

228023	4.3	警告	ZyXEL	-	Zyxel Zywall 2 上で稼動する ZyNOS の管理インターフェースにおける管理アクションを実行される脆弱性	-	CVE-2007-4316	2012-12-20 18:33	2007-08-13	Show	GitHub Exploit DB Packet Storm

228024	6.8	警告	pixlie	-	Pixlie の pixlie.php におけるリモートディレクトリツリーのファイルを読み込まれる脆弱性	-	CVE-2007-4314	2012-12-20 18:33	2007-08-13	Show	GitHub Exploit DB Packet Storm

228025	4.3	警告	サン・マイクロシステムズ	-	Sun Solaris の finger デーモンにおける特定の非標準 GECOS フィールドを伴うアカウントを全てリスト化される脆弱性	-	CVE-2007-4310	2012-12-20 18:33	2007-08-13	Show	GitHub Exploit DB Packet Storm

228026	4.3	警告	Lamp Design	-	Storesprite におけるクロスサイトスクリプティングの脆弱性	-	CVE-2007-4307	2012-12-20 18:33	2007-08-13	Show	GitHub Exploit DB Packet Storm

228027	4.3	警告	The phpMyAdmin Project	-	phpMyAdmin におけるクロスサイトスクリプティングの脆弱性	-	CVE-2007-4306	2012-12-20 18:33	2007-08-13	Show	GitHub Exploit DB Packet Storm

228028	6.2	警告	systrace Todd C. Miller sysjail	-	NetBSD および OpenBSD 上で稼動している Systrace の Sudo monitor mode などにおけるシステムコール割り込みを無効にされる脆弱性	-	CVE-2007-4305	2012-12-20 18:33	2007-08-13	Show	GitHub Exploit DB Packet Storm

228029	6.8	警告	サン・マイクロシステムズ	-	Sun Java System Portal Server における任意の Java メソッドを実行される脆弱性	-	CVE-2007-4289	2012-12-20 18:33	2007-08-3	Show	GitHub Exploit DB Packet Storm

228030	5	警告	s9y	-	Serendipity の entryproperties プラグインにおけるパスワード保護を回避される脆弱性	-	CVE-2007-4282	2012-12-20 18:33	2007-08-8	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 2, 2026, 4:08 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
222991	9.8	CRITICAL Network	givewp	givewp	A SQL injection vulnerability exists in the Impress GiveWP Give plugin through 2.5.0 for WordPress. Successful exploitation of this vulnerability would allow a remote attacker to execute arbitrary SQ…	CWE-89 SQL Injection	CVE-2019-13578	2024-11-21 13:25	2019-08-16	Show	GitHub Exploit DB Packet Storm

222992	9.8	CRITICAL Network	adenion	blog2social	The Adenion Blog2Social plugin through 5.5.0 for WordPress allows SQL Injection.	CWE-89 SQL Injection	CVE-2019-13572	2024-11-21 13:25	2019-08-2	Show	GitHub Exploit DB Packet Storm

222993	8.8	HIGH Network	cimg	cimg	CImg through 2.6.7 has a heap-based buffer overflow in _load_bmp in CImg.h because of erroneous memory allocation for a malformed BMP image.	CWE-787 Out-of-bounds Write	CVE-2019-13568	2024-11-21 13:25	2019-08-1	Show	GitHub Exploit DB Packet Storm

222994	9.1	CRITICAL Network	wpfastestcache	wp_fastest_cache	The WP Fastest Cache plugin through 0.8.9.5 for WordPress allows wpFastestCache.php and inc/cache.php Directory Traversal.	CWE-22 Path Traversal	CVE-2019-13635	2024-11-21 13:25	2019-07-30	Show	GitHub Exploit DB Packet Storm

222995	6.5	MEDIUM Network	imgix	imgix	Imgix through 2019-06-19 allows remote attackers to cause a denial of service (resource consumption) by manipulating a small JPEG file to specify dimensions of 64250x64250 pixels, which is mishandled…	CWE-400 Uncontrolled Resource Consumption	CVE-2019-13655	2024-11-21 13:25	2019-07-30	Show	GitHub Exploit DB Packet Storm

222996	9.8	CRITICAL Network	vsourz	advanced_cf7_db	A SQL injection vulnerability exists in the Vsourz Digital Advanced CF7 DB plugin through 1.6.1 for WordPress. Successful exploitation of this vulnerability would allow a remote attacker to execute a…	CWE-89 SQL Injection	CVE-2019-13571	2024-11-21 13:25	2019-07-30	Show	GitHub Exploit DB Packet Storm

222997	7.4	HIGH Network	oneidentity	cloud_access_manager	One Identity Cloud Access Manager 8.1.3 does not use HTTP Strict Transport Security (HSTS), which may allow man-in-the-middle (MITM) attacks. This issue is fixed in version 8.1.4.	CWE-319 Cleartext Transmission of Sensitive Information	CVE-2019-13498	2024-11-21 13:25	2019-07-30	Show	GitHub Exploit DB Packet Storm

222998	6.1	MEDIUM Network	wikindx_project	wikindx	A cross-site scripting (XSS) vulnerability in getPagingStart() in core/lists/PAGING.php in WIKINDX before 5.8.2 allows remote attackers to inject arbitrary web script or HTML via the PagingStart para…	CWE-79 Cross-site Scripting	CVE-2019-13588	2024-11-21 13:25	2019-07-27	Show	GitHub Exploit DB Packet Storm

222999	9.8	CRITICAL Network	softwareag oracle apache netapp atlassian	quartz flexcube_investor_servicing retail_xstore_point_of_service flexcube_private_banking primavera_unifier retail_integration_bus retail_back_office webcenter_sites fusion_m…	initDocumentParser in xml/XMLSchedulingDataProcessor.java in Terracotta Quartz Scheduler through 2.3.0 allows XXE attacks via a job description.	CWE-611 XXE	CVE-2019-13990	2024-11-21 13:25	2019-07-27	Show	GitHub Exploit DB Packet Storm

223000	6.5	MEDIUM Network	mikrotik	routeros	Mikrotik RouterOS before 6.44.5 (long-term release tree) is vulnerable to stack exhaustion. By sending a crafted HTTP request, an authenticated remote attacker can crash the HTTP server via recursive…	CWE-674 Uncontrolled Recursion	CVE-2019-13955	2024-11-21 13:25	2019-07-26	Show	GitHub Exploit DB Packet Storm