Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":April 30, 2026, 6 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
228081 7.8 危険 zenturi - Zenturi ProgramChecker の sasatl.dll における任意のファイルをダウンロードされる脆弱性 - CVE-2007-3076 2012-12-20 18:19 2007-06-6 Show GitHub Exploit DB Packet Storm
228082 7.5 危険 phpreactor - Reactor における PHP リモートファイルインクルージョンの脆弱性 - CVE-2007-3066 2012-12-20 18:19 2007-06-5 Show GitHub Exploit DB Packet Storm
228083 5 警告 sendcard - SendCard における重要な情報を取得される脆弱性 - CVE-2007-3059 2012-12-20 18:19 2007-06-5 Show GitHub Exploit DB Packet Storm
228084 6.8 警告 XOOPS - XOOPS 用の icontent モジュールにおける PHP リモートファイルインクルージョンの脆弱性 - CVE-2007-3057 2012-12-20 18:19 2007-06-5 Show GitHub Exploit DB Packet Storm
228085 4.3 警告 WebSVN - WebSVN の filedetails.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2007-3056 2012-12-20 18:19 2007-06-5 Show GitHub Exploit DB Packet Storm
228086 7.5 危険 postnuke software foundation - PostNuke 用の PNphpBB2 モジュールにおける SQL インジェクションの脆弱性 - CVE-2007-3052 2012-12-20 18:19 2007-06-5 Show GitHub Exploit DB Packet Storm
228087 7.5 危険 revokesoft - RevokeSoft RevokeBB の inc/class_users.php における SQL インジェクションの脆弱性 - CVE-2007-3051 2012-12-20 18:19 2007-06-5 Show GitHub Exploit DB Packet Storm
228088 10 危険 Vonage - Vonage VoIP Telephone Adapter における管理アクセス権限を取得される脆弱性 - CVE-2007-3047 2012-12-20 18:19 2007-06-5 Show GitHub Exploit DB Packet Storm
228089 4.3 警告 シマンテック - Symantec Client Security および SAV CE などで使用される Symantec Reporting Server における総当たり攻撃を実行される脆弱性 - CVE-2007-3022 2012-12-20 18:19 2007-06-5 Show GitHub Exploit DB Packet Storm
228090 7.5 危険 シマンテック - Symantec Client Security および SAV CE などで使用される Symantec Reporting Server における任意の実行可能なファイルを作成される脆弱性 - CVE-2007-3021 2012-12-20 18:19 2007-06-5 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:April 30, 2026, 4:58 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
223401 9.8 CRITICAL
Network
glpi_dashboard_project glpi_dashboard Incorrect access control was discovered in the stdonato Dashboard plugin through 0.9.7 for GLPI, affecting df.php, issue.php, load.php, mem.php, traf.php, and uptime.php in front/sh. CWE-287
Improper Authentication
CVE-2019-12530 2024-11-21 13:23 2019-06-3 Show GitHub Exploit DB Packet Storm
223402 7.1 HIGH
Local
glyphandcog xpdfreader There is an out-of-bounds read vulnerability in the function FlateStream::getChar() located at Stream.cc in Xpdf 4.01.01. It can, for example, be triggered by sending a crafted PDF document to the pd… CWE-125
Out-of-bounds Read
CVE-2019-12515 2024-11-21 13:23 2019-06-2 Show GitHub Exploit DB Packet Storm
223403 7.2 HIGH
Network
zzcms zzcms An issue was discovered in zzcms 2019. There is a SQL injection Vulnerability in /admin/ztliuyan_sendmail.php (when the attacker has admin authority) via the id parameter. CWE-89
SQL Injection
CVE-2019-12359 2024-11-21 13:22 2022-06-17 Show GitHub Exploit DB Packet Storm
223404 8.8 HIGH
Network
zzcms zzcms An issue was discovered in zzcms 2019. There is a SQL injection Vulnerability in /dl/dl_sendsms.php (when the attacker has dls_print authority) via a dlid cookie. CWE-89
SQL Injection
CVE-2019-12358 2024-11-21 13:22 2022-06-17 Show GitHub Exploit DB Packet Storm
223405 7.2 HIGH
Network
zzcms zzcms An issue was discovered in zzcms 2019. There is a SQL injection Vulnerability in /admin/deluser.php (when the attacker has admin authority) via the id parameter. CWE-89
SQL Injection
CVE-2019-12357 2024-11-21 13:22 2022-06-17 Show GitHub Exploit DB Packet Storm
223406 8.8 HIGH
Network
zzcms zzcms An issue was discovered in zzcms 2019. There is a SQL injection Vulnerability in /user/dls_download.php (when the attacker has dls_download authority) via the id parameter. CWE-89
SQL Injection
CVE-2019-12356 2024-11-21 13:22 2022-06-17 Show GitHub Exploit DB Packet Storm
223407 8.8 HIGH
Network
zzcms zzcms An issue was discovered in zzcms 2019. There is a SQL injection Vulnerability in /user/dls_print.php (when the attacker has dls_print authority) via the id parameter. CWE-89
SQL Injection
CVE-2019-12355 2024-11-21 13:22 2022-06-17 Show GitHub Exploit DB Packet Storm
223408 7.2 HIGH
Network
zzcms zzcms An issue was discovered in zzcms 2019. There is a SQL injection Vulnerability in /admin/showbad.php (when the attacker has admin authority) via the id parameter. CWE-89
SQL Injection
CVE-2019-12354 2024-11-21 13:22 2022-06-17 Show GitHub Exploit DB Packet Storm
223409 7.2 HIGH
Network
zzcms zzcms An issue was discovered in zzcms 2019. There is a SQL injection Vulnerability in /admin/dl_sendmail.php (when the attacker has admin authority) via the id parameter. CWE-89
SQL Injection
CVE-2019-12353 2024-11-21 13:22 2022-06-17 Show GitHub Exploit DB Packet Storm
223410 8.8 HIGH
Network
zzcms zzcms An issue was discovered in zzcms 2019. There is a SQL injection Vulnerability in /dl/dl_sendmail.php (when the attacker has dls_print authority) via a dlid cookie. CWE-89
SQL Injection
CVE-2019-12352 2024-11-21 13:22 2022-06-17 Show GitHub Exploit DB Packet Storm