Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 7, 2026, 10 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
228061	6.4	警告	The Tor Project	-	Tor における仕様に反して重要な情報を取得される脆弱性	-	CVE-2007-4097	2012-12-20 18:33	2007-07-30	Show	GitHub Exploit DB Packet Storm

228062	5.8	警告	The Tor Project	-	Tor におけるバッファオーバーフローの脆弱性	-	CVE-2007-4096	2012-12-20 18:33	2007-07-30	Show	GitHub Exploit DB Packet Storm

228063	6.8	警告	rsync.samba.org	-	rsync の sender.c における任意のコードを実行される脆弱性	-	CVE-2007-4091	2012-12-20 18:33	2007-08-15	Show	GitHub Exploit DB Packet Storm

228064	4.3	警告	vikingboard	-	Vikingboard におけるクロスサイトスクリプティングの脆弱性	-	CVE-2007-4090	2012-12-20 18:33	2007-07-30	Show	GitHub Exploit DB Packet Storm

228065	4.3	警告	wp-feedstats	-	WordPress 用の WP-FeedStats プラグインにおけるクロスサイトスクリプティングの脆弱性	-	CVE-2007-4104	2012-12-20 18:33	2006-08-17	Show	GitHub Exploit DB Packet Storm

228066	7.5	危険	wikiwebweaver	-	WikiWebWeaver の index.php における任意のコードを実行される脆弱性	-	CVE-2007-4182	2012-12-20 18:33	2007-08-7	Show	GitHub Exploit DB Packet Storm

228067	5.8	警告	The Tor Project	-	Tor における torrc 設定ファイルを変更される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2007-4174	2012-12-20 18:33	2007-08-7	Show	GitHub Exploit DB Packet Storm

228068	5	警告	WordPress.org	-	WordPress 用の Unnamed テーマなどの index.php におけるクロスサイトスクリプティングの脆弱性	-	CVE-2007-4166	2012-12-20 18:33	2007-08-7	Show	GitHub Exploit DB Packet Storm

228069	4.3	警告	WordPress.org xu yiyang	-	WordPress 用の Blue Memories テーマの index.php におけるクロスサイトスクリプティングの脆弱性	-	CVE-2007-4165	2012-12-20 18:33	2007-08-7	Show	GitHub Exploit DB Packet Storm

228070	7.8	危険	TIBCO Software	-	TIBCO RV におけるトラフィックをキャプチャされる脆弱性	-	CVE-2007-4162	2012-12-20 18:33	2007-08-3	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 7, 2026, 4:22 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
214331	7.5	HIGH Network	imagemagick graphicsmagick opensuse debian canonical	imagemagick graphicsmagick leap debian_linux ubuntu_linux	In ImageMagick before 7.0.8-25 and GraphicsMagick through 1.3.31, several memory leaks exist in WritePDFImage in coders/pdf.c.	CWE-401 Missing Release of Memory after Effective Lifetime	CVE-2019-7397	2024-11-21 13:48	2019-02-5	Show	GitHub Exploit DB Packet Storm

214332	7.5	HIGH Network	imagemagick opensuse debian canonical	imagemagick leap debian_linux ubuntu_linux	In ImageMagick before 7.0.8-25, a memory leak exists in ReadSIXELImage in coders/sixel.c.	CWE-401 Missing Release of Memory after Effective Lifetime	CVE-2019-7396	2024-11-21 13:48	2019-02-5	Show	GitHub Exploit DB Packet Storm

214333	7.5	HIGH Network	imagemagick opensuse debian canonical	imagemagick leap debian_linux ubuntu_linux	In ImageMagick before 7.0.8-25, a memory leak exists in WritePSDChannel in coders/psd.c.	CWE-401 Missing Release of Memory after Effective Lifetime	CVE-2019-7395	2024-11-21 13:48	2019-02-5	Show	GitHub Exploit DB Packet Storm

214334	8.6	HIGH Network	dlink	dir-823g_firmware	An issue was discovered in /bin/goahead on D-Link DIR-823G devices with firmware 1.02B03. There is incorrect access control allowing remote attackers to hijack the DNS service configuration of all cl…	CWE-306 Missing Authentication for Critical Function	CVE-2019-7390	2024-11-21 13:48	2019-02-5	Show	GitHub Exploit DB Packet Storm

214335	7.5	HIGH Network	dlink	dir-823g_firmware	An issue was discovered in /bin/goahead on D-Link DIR-823G devices with the firmware 1.02B03. There is incorrect access control allowing remote attackers to reset the router without authentication vi…	CWE-306 Missing Authentication for Critical Function	CVE-2019-7389	2024-11-21 13:48	2019-02-5	Show	GitHub Exploit DB Packet Storm

214336	7.5	HIGH Network	dlink	dir-823g_firmware	An issue was discovered in /bin/goahead on D-Link DIR-823G devices with firmware 1.02B03. There is incorrect access control allowing remote attackers to get sensitive information (such as MAC address…	CWE-200 Information Exposure	CVE-2019-7388	2024-11-21 13:48	2019-02-5	Show	GitHub Exploit DB Packet Storm

214337	6.5	MEDIUM Network	systrome	isg-600c_firmware isg-600h_firmware isg-800w_firmware	A local file inclusion vulnerability exists in the web interface of Systrome Cumilon ISG-600C, ISG-600H, and ISG-800W 1.1-R2.1_TRUNK-20180914.bin devices. When the export function is called from syst…	CWE-22 Path Traversal	CVE-2019-7387	2024-11-21 13:48	2019-02-5	Show	GitHub Exploit DB Packet Storm

214338	6.1	MEDIUM Network	zoneminder	zoneminder	Self - Stored Cross Site Scripting (XSS) exists in ZoneMinder through 1.32.3, as the view 'state' (aka Run State) (state.php) does no input validation to the value supplied to the 'New State' (aka ne…	CWE-79 Cross-site Scripting	CVE-2019-7352	2024-11-21 13:48	2019-02-5	Show	GitHub Exploit DB Packet Storm

214339	6.5	MEDIUM Network	zoneminder	zoneminder	Log Injection exists in ZoneMinder through 1.32.3, as an attacker can entice the victim to visit a specially crafted link, which in turn will inject a custom Log message provided by the attacker in t…	CWE-74 Injection	CVE-2019-7351	2024-11-21 13:48	2019-02-5	Show	GitHub Exploit DB Packet Storm

214340	7.3	HIGH Network	zoneminder	zoneminder	Session fixation exists in ZoneMinder through 1.32.3, as an attacker can fixate his own session cookies to the next logged-in user, thereby hijacking the victim's account. This occurs because a set o…	CWE-384 Session Fixation	CVE-2019-7350	2024-11-21 13:48	2019-02-5	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed