Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":April 30, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
228091 9.3 危険 zenturi - Zenturi ProgramChecker の sasatl.dll におけるバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2007-2987 2012-12-20 18:19 2007-06-1 Show GitHub Exploit DB Packet Storm
228092 7.8 危険 techno dreams - Techno Dreams Web Directory / Search Engine におけるデータベースをダウンロードされる脆弱性 - CVE-2007-2979 2012-12-20 18:19 2007-05-31 Show GitHub Exploit DB Packet Storm
228093 7.5 危険 Wanewsletter - WAnewsletter の newsletter.php における PHP リモートファイルインクルージョンの脆弱性 - CVE-2007-2969 2012-12-20 18:19 2007-05-31 Show GitHub Exploit DB Packet Storm
228094 7.5 危険 scallywag.org - Scallywag におけるディレクトリトラバーサルの脆弱性 - CVE-2007-2960 2012-12-20 18:19 2007-05-31 Show GitHub Exploit DB Packet Storm
228095 6.8 警告 sylpheed-claws
Sylpheed		 - Sylpheed および Sylpheed-Claws の src/inc.c におけるフォーマットストリングの脆弱性 - CVE-2007-2958 2012-12-20 18:19 2007-08-27 Show GitHub Exploit DB Packet Storm
228096 6.8 警告 シマンテック - Norton AntiVirus などの製品で使用される NavComUI.dll における任意のコードを実行される脆弱性 - CVE-2007-2955 2012-12-20 18:19 2007-08-9 Show GitHub Exploit DB Packet Storm
228097 5 警告 rmforum - RMForum におけるデータベースをダウンロードされる脆弱性 - CVE-2007-2945 2012-12-20 18:19 2007-05-30 Show GitHub Exploit DB Packet Storm
228098 5 警告 wabcms - WabCMS におけるデータベースをダウンロードされる脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2007-2944 2012-12-20 18:19 2007-05-30 Show GitHub Exploit DB Packet Storm
228099 6.8 警告 webavis - Webavis の class/class.php における PHP リモートファイルインクルージョンの脆弱性 - CVE-2007-2943 2012-12-20 18:19 2007-05-30 Show GitHub Exploit DB Packet Storm
228100 7.5 危険 troforum - TROforum の admin/admin.php における PHP リモートファイルインクルージョンの脆弱性 - CVE-2007-2937 2012-12-20 18:19 2007-05-30 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:April 30, 2026, 4:58 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
223411 9.8 CRITICAL
Network 		zzcms zzcms An issue was discovered in zzcms 2019. SQL Injection exists in dl/dl_print.php via an id parameter value with a trailing comma. CWE-89
SQL Injection 		CVE-2019-12351 2024-11-21 13:22 2022-06-2 Show GitHub Exploit DB Packet Storm
223412 9.8 CRITICAL
Network 		zzcms zzcms An issue was discovered in zzcms 2019. SQL Injection exists in dl/dl_download.php via an id parameter value with a trailing comma. CWE-89
SQL Injection 		CVE-2019-12350 2024-11-21 13:22 2022-06-2 Show GitHub Exploit DB Packet Storm
223413 9.8 CRITICAL
Network 		zzcms zzcms An issue was discovered in zzcms 2019. SQL Injection exists in /admin/dl_sendsms.php via the id parameter. CWE-89
SQL Injection 		CVE-2019-12349 2024-11-21 13:22 2022-06-2 Show GitHub Exploit DB Packet Storm
223414 9.8 CRITICAL
Network 		gok
tecson 		smartbox_4_lan_firmware
smartbox_4_lan_pro_firmware
lx-q-net_firmware
lx-net_firmware
e-litro_net_firmware 		In multiple Tecson Tankspion and GOKs SmartBox 4 products the affected application doesn't properly restrict access to an endpoint that is responsible for saving settings, to a unauthenticated user w… - CVE-2019-12254 2024-11-21 13:22 2022-05-7 Show GitHub Exploit DB Packet Storm
223415 9.8 CRITICAL
Network 		wyze cam_pan_v2_firmware
cam_v2_firmware
cam_v3_firmware 		Stack-based Buffer Overflow vulnerability in Wyze Cam Pan v2, Cam v2, Cam v3 allows an attacker to run arbitrary code on the affected device. This issue affects: Wyze Cam Pan v2 versions prior to 4.4… CWE-787
 Out-of-bounds Write 		CVE-2019-12266 2024-11-21 13:22 2022-03-31 Show GitHub Exploit DB Packet Storm
223416 6.5 MEDIUM
Local 		qemu
debian
fedoraproject
redhat 		qemu
debian_linux
fedora
enterprise_linux
openstack_platform 		The ahci_commit_buf function in ide/ahci.c in QEMU allows attackers to cause a denial of service (NULL dereference) when the command header 'ad->cur_cmd' is null. CWE-476
 NULL Pointer Dereference 		CVE-2019-12067 2024-11-21 13:22 2021-06-3 Show GitHub Exploit DB Packet Storm
223417 9.8 CRITICAL
Network 		zzcms zzcms An issue was discovered in zzcms 2019. SQL Injection exists in user/ztconfig.php via the daohang or img POST parameter. CWE-89
SQL Injection 		CVE-2019-12348 2024-11-21 13:22 2021-05-25 Show GitHub Exploit DB Packet Storm
223418 7.5 HIGH
Network 		apache libapreq2 A flaw in the libapreq2 v2.07 to v2.13 multipart parser can deference a null pointer leading to a process crash. A remote attacker could send a request causing a process crash which could lead to a d… CWE-476
 NULL Pointer Dereference 		CVE-2019-12412 2024-11-21 13:22 2020-11-19 Show GitHub Exploit DB Packet Storm
223419 6.5 MEDIUM
Adjacent 		actions-micro ezcast_pro_ii_firmware In EZCast Pro II, the administrator password md5 hash is provided upon a web request. This hash can be cracked to access the administration panel of the device. NVD-CWE-noinfo
CVE-2019-12305 2024-11-21 13:22 2020-10-17 Show GitHub Exploit DB Packet Storm
223420 6.1 MEDIUM
Network 		whatsapp whatsapp_desktop An input validation issue in WhatsApp Desktop versions prior to v0.3.4932 could have allowed cross-site scripting upon clicking on a link from a specially crafted live location message. CWE-79
Cross-site Scripting 		CVE-2019-11928 2024-11-21 13:22 2020-09-4 Show GitHub Exploit DB Packet Storm