Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 9, 2026, 6 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
228241 6.4 警告 socialengine - Social Engine におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル
CVE-2007-6581 2012-12-20 18:34 2007-12-28 Show GitHub Exploit DB Packet Storm
228242 7.5 危険 wallpaper - Wallpaper Site における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2007-6580 2012-12-20 18:34 2007-12-28 Show GitHub Exploit DB Packet Storm
228243 10 危険 Xfce - Xfce の Widget Library におけるメモリ二重解放の脆弱性 CWE-119
バッファエラー
CVE-2007-6532 2012-12-20 18:34 2008-01-9 Show GitHub Exploit DB Packet Storm
228244 5 警告 Xfce - Xfce の Panel コンポーネントにおけるスタックベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー
CVE-2007-6531 2012-12-20 18:34 2008-01-9 Show GitHub Exploit DB Packet Storm
228245 7.5 危険 zeak.net - PHP ZLink の go.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2007-6578 2012-12-20 18:34 2007-12-28 Show GitHub Exploit DB Packet Storm
228246 7.5 危険 zsuite - zBlog の index.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2007-6577 2012-12-20 18:34 2007-12-28 Show GitHub Exploit DB Packet Storm
228247 7.8 危険 qksoft - QK SMTP Server におけるサービス運用妨害 (DoS) の脆弱性 CWE-20
不適切な入力確認
CVE-2007-6573 2012-12-20 18:34 2007-12-28 Show GitHub Exploit DB Packet Storm
228248 4.3 警告 サン・マイクロシステムズ - Windows 上で稼動している Sun Java System Web Proxy Server におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2007-6571 2012-12-20 18:34 2007-12-21 Show GitHub Exploit DB Packet Storm
228249 4.3 警告 サン・マイクロシステムズ - Sun Java System Web Proxy Server の View URL Database 関数におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2007-6570 2012-12-20 18:34 2007-12-21 Show GitHub Exploit DB Packet Storm
228250 7.5 危険 xzeroscripts - XZero Community Classifieds の config.inc.php における PHP リモートファイルインクルージョンの脆弱性 CWE-94
コード・インジェクション
CVE-2007-6568 2012-12-20 18:34 2007-12-28 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 9, 2026, 5:07 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
222001 9.8 CRITICAL
Network
beckhoff twincat Beckhoff Embedded Windows PLCs through 3.1.4024.0, and Beckhoff Twincat on Windows Engineering stations, allow an attacker to achieve Remote Code Execution (as SYSTEM) via the Beckhoff ADS protocol. CWE-290
 Authentication Bypass by Spoofing
CVE-2019-16871 2024-11-21 13:31 2019-12-20 Show GitHub Exploit DB Packet Storm
222002 5.9 MEDIUM
Network
rack_project
fedoraproject
opensuse
rack
fedora
leap
There's a possible information leak / session hijack vulnerability in Rack (RubyGem rack). This vulnerability is patched in versions 1.6.12 and 2.0.8. Attackers may be able to find and hijack session… CWE-203
 Information Exposure Through Discrepancy
CVE-2019-16782 2024-11-21 13:31 2019-12-19 Show GitHub Exploit DB Packet Storm
222003 9.8 CRITICAL
Network
google tensorflow In TensorFlow before 1.15, a heap buffer overflow in UnsortedSegmentSum can be produced when the Index template argument is int32. In this case data_size and num_segments fields are truncated from in… CWE-681
 Incorrect Conversion between Numeric Types
CVE-2019-16778 2024-11-21 13:31 2019-12-17 Show GitHub Exploit DB Packet Storm
222004 5.9 MEDIUM
Network
excon_project
opensuse
debian
excon
leap
backports_sle
debian_linux
In RubyGem excon before 0.71.0, there was a race condition around persistent connections, where a connection which is interrupted (such as by a timeout) would leave data on the socket. Subsequent req… CWE-362
Race Condition
CVE-2019-16779 2024-11-21 13:31 2019-12-17 Show GitHub Exploit DB Packet Storm
222005 9.8 CRITICAL
Network
skymee
petwant
petalk_ai_firmware
pf-103_firmware
The processCommandSetMac() function of libcommon.so in Petwant PF-103 firmware 4.22.2.42 and Petalk AI 3.2.2.30 allows remote attackers to execute arbitrary system commands as the root user. CWE-78
OS Command 
CVE-2019-16737 2024-11-21 13:31 2019-12-14 Show GitHub Exploit DB Packet Storm
222006 9.8 CRITICAL
Network
skymee
petwant
petalk_ai_firmware
pf-103_firmware
A stack-based buffer overflow in processCommandUploadSnapshot in libcommon.so in Petwant PF-103 firmware 4.22.2.42 and Petalk AI 3.2.2.30 allows remote attackers to cause denial of service or run arb… CWE-787
 Out-of-bounds Write
CVE-2019-16736 2024-11-21 13:31 2019-12-14 Show GitHub Exploit DB Packet Storm
222007 9.8 CRITICAL
Network
skymee
petwant
petalk_ai_firmware
pf-103_firmware
A stack-based buffer overflow in processCommandUploadLog in libcommon.so in Petwant PF-103 firmware 4.22.2.42 and Petalk AI 3.2.2.30 allows remote attackers to cause denial of service or run arbitrar… CWE-787
 Out-of-bounds Write
CVE-2019-16735 2024-11-21 13:31 2019-12-14 Show GitHub Exploit DB Packet Storm
222008 9.8 CRITICAL
Network
skymee
petwant
petalk_ai_firmware
pf-103_firmware
Use of default credentials for the TELNET server in Petwant PF-103 firmware 4.3.2.50 and Petalk AI 3.2.2.30 allows remote attackers to execute arbitrary system commands as the root user. CWE-798
 Use of Hard-coded Credentials
CVE-2019-16734 2024-11-21 13:31 2019-12-14 Show GitHub Exploit DB Packet Storm
222009 9.8 CRITICAL
Network
skymee
petwant
petalk_ai_firmware
pf-103_firmware
processCommandSetUid() in libcommon.so in Petwant PF-103 firmware 4.22.2.42 and Petalk AI 3.2.2.30 allows remote attackers to execute arbitrary system commands as the root user. CWE-78
OS Command 
CVE-2019-16733 2024-11-21 13:31 2019-12-14 Show GitHub Exploit DB Packet Storm
222010 8.1 HIGH
Network
skymee
petwant
petalk_ai_firmware
pf-103_firmware
Unencrypted HTTP communications for firmware upgrades in Petalk AI and PF-103 allow man-in-the-middle attackers to run arbitrary code as the root user. CWE-347
CWE-319
 Improper Verification of Cryptographic Signature
Cleartext Transmission of Sensitive Information
CVE-2019-16732 2024-11-21 13:31 2019-12-14 Show GitHub Exploit DB Packet Storm