Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 4, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
228161 2.1 注意 Vtiger - vtiger CRM における特定ユーザのカレンダー項目を読まれる脆弱性 - CVE-2007-3601 2012-12-20 18:33 2007-05-31 Show GitHub Exploit DB Packet Storm
228162 4 警告 Vtiger - vtiger CRM の wordintegration コンポーネントにおけるフィールドレベルのセキュリティパーミッションを回避される脆弱性 - CVE-2007-3600 2012-12-20 18:33 2007-05-9 Show GitHub Exploit DB Packet Storm
228163 8.5 危険 Vtiger - vtiger CRM における連絡先情報をインポートされるなどの脆弱性 - CVE-2007-3599 2012-12-20 18:33 2007-02-9 Show GitHub Exploit DB Packet Storm
228164 5.5 警告 Vtiger - index.php の vtiger CRM における全ユーザ名などを取得される脆弱性 - CVE-2007-3598 2012-12-20 18:33 2007-02-5 Show GitHub Exploit DB Packet Storm
228165 6.5 警告 Vtiger - vtiger CRM の index.php における管理の変更を実行される脆弱性 - CVE-2007-3616 2012-12-20 18:33 2006-10-24 Show GitHub Exploit DB Packet Storm
228166 8.5 危険 Zen Cart - Zen Cart におけるセッションをハイジャックされる脆弱性 CWE-287
不適切な認証 		CVE-2007-3597 2012-12-20 18:33 2007-07-6 Show GitHub Exploit DB Packet Storm
228167 7.5 危険 vbzoom - VBZooM の reply.php における SQL インジェクションの脆弱性 - CVE-2007-3588 2012-12-20 18:33 2007-07-5 Show GitHub Exploit DB Packet Storm
228168 7.5 危険 postnuke software foundation - PNphpBB2 の viewforum.php における SQL インジェクションの脆弱性 - CVE-2007-3584 2012-12-20 18:33 2007-07-5 Show GitHub Exploit DB Packet Storm
228169 4.3 警告 PHPIDS - PHPIDS における任意の Web スクリプトを挿入される脆弱性 - CVE-2007-3580 2012-12-20 18:33 2007-07-2 Show GitHub Exploit DB Packet Storm
228170 4.3 警告 PHPIDS - PHPIDS における任意の Web スクリプトを挿入される脆弱性 - CVE-2007-3579 2012-12-20 18:33 2007-07-2 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 4, 2026, 4:06 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
214101 5.5 MEDIUM
Local 		foxitsoftware 3d An issue was discovered in Foxit 3D Plugin Beta before 9.4.0.16807 for Foxit Reader and PhantomPDF. The application could encounter an Out-of-Bounds Write and crash during the handling of certain PDF… CWE-787
 Out-of-bounds Write 		CVE-2019-6982 2024-11-21 13:47 2019-01-28 Show GitHub Exploit DB Packet Storm
214102 6.1 MEDIUM
Network 		ip_history_logs_project ip_history_logs An issue was discovered in the User IP History Logs (aka IP_History_Logs) plugin 1.0.2 for MyBB. There is XSS via the admin/modules/tools/ip_history_logs.php useragent field. CWE-79
Cross-site Scripting 		CVE-2019-6979 2024-11-21 13:47 2019-01-28 Show GitHub Exploit DB Packet Storm
214103 9.8 CRITICAL
Network 		libgd
debian
canonical 		libgd
debian_linux
ubuntu_linux 		The GD Graphics Library (aka LibGD) 2.2.5 has a double free in the gdImage*Ptr() functions in gd_gif_out.c, gd_jpeg.c, and gd_wbmp.c. NOTE: PHP is unaffected. CWE-415
 Double Free 		CVE-2019-6978 2024-11-21 13:47 2019-01-28 Show GitHub Exploit DB Packet Storm
214104 8.8 HIGH
Network 		libgd
php
debian
canonical
netapp 		libgd
php
debian_linux
ubuntu_linux
storage_automation_store 		gdImageColorMatch in gd_color_match.c in the GD Graphics Library (aka LibGD) 2.2.5, as used in the imagecolormatch function in PHP before 5.6.40, 7.x before 7.1.26, 7.2.x before 7.2.14, and 7.3.x bef… CWE-787
 Out-of-bounds Write 		CVE-2019-6977 2024-11-21 13:47 2019-01-27 Show GitHub Exploit DB Packet Storm
214105 5.3 MEDIUM
Network 		libvips libvips libvips before 8.7.4 generates output images from uninitialized memory locations when processing corrupted input image data because iofuncs/memory.c does not zero out allocated memory. This can resul… CWE-908
 Use of Uninitialized Resource 		CVE-2019-6976 2024-11-21 13:47 2019-01-27 Show GitHub Exploit DB Packet Storm
214106 5.9 MEDIUM
Network 		phpmyadmin
debian 		phpmyadmin
debian_linux 		An issue was discovered in phpMyAdmin before 4.8.5. When the AllowArbitraryServer configuration setting is set to true, with the use of a rogue MySQL server, an attacker can read any file on the serv… NVD-CWE-noinfo
CVE-2019-6799 2024-11-21 13:47 2019-01-27 Show GitHub Exploit DB Packet Storm
214107 9.8 CRITICAL
Network 		phpmyadmin phpmyadmin An issue was discovered in phpMyAdmin before 4.8.5. A vulnerability was reported where a specially crafted username can be used to trigger a SQL injection attack through the designer feature. CWE-89
SQL Injection 		CVE-2019-6798 2024-11-21 13:47 2019-01-27 Show GitHub Exploit DB Packet Storm
214108 6.5 MEDIUM
Network 		axiosys bento4 An issue was discovered in Bento4 1.5.1-628. The AP4_ElstAtom class in Core/Ap4ElstAtom.cpp has an attempted excessive memory allocation related to AP4_Array<AP4_ElstEntry>::EnsureCapacity in Core/Ap… CWE-770
 Allocation of Resources Without Limits or Throttling 		CVE-2019-6966 2024-11-21 13:47 2019-01-26 Show GitHub Exploit DB Packet Storm
214109 7.1 HIGH
Local 		audiocoding
debian 		freeware_advanced_audio_decoder_2
debian_linux 		An issue was discovered in Freeware Advanced Audio Decoder 2 (FAAD2) 2.8.8. It is a buffer over-read in ps_mix_phase in libfaad/ps_dec.c. CWE-125
Out-of-bounds Read 		CVE-2019-6956 2024-11-21 13:47 2019-01-26 Show GitHub Exploit DB Packet Storm
214110 9.8 CRITICAL
Network 		s-cms s-cms SQL Injection was found in S-CMS version V3.0 via the alipay/alipayapi.php O_id parameter. CWE-89
SQL Injection 		CVE-2019-6805 2024-11-21 13:47 2019-01-25 Show GitHub Exploit DB Packet Storm