Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 3, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
228291	6	警告	WordPress.org	-	WordPress のデフォルトテーマの functions.php におけるクロスサイトスクリプティングの脆弱性	-	CVE-2007-3238	2012-12-20 18:19	2007-06-14	Show	GitHub Exploit DB Packet Storm

228292	6.8	警告	XOOPS	-	XOOPS 用の TinyContent モジュールにおける PHP リモートファイルインクルージョンの脆弱性	-	CVE-2007-3237	2012-12-20 18:19	2007-06-12	Show	GitHub Exploit DB Packet Storm

228293	7.5	危険	XOOPS	-	XOOPS 用の Horoscope モジュールにおける PHP リモートファイルインクルージョンの脆弱性	-	CVE-2007-3236	2012-12-20 18:19	2007-06-14	Show	GitHub Exploit DB Packet Storm

228294	5	警告	tec-it	-	TEC-IT TBarCode OCX ActiveX コントロールにおける任意のファイルを上書きされる脆弱性	-	CVE-2007-3233	2012-12-20 18:19	2007-06-14	Show	GitHub Exploit DB Packet Storm

228295	6.8	警告	simian systems inc	-	Idan Sofer PHP::HTML の phphtml.php における PHP リモートファイルインクルージョンの脆弱性	-	CVE-2007-3230	2012-12-20 18:19	2007-06-14	Show	GitHub Exploit DB Packet Storm

228296	6.8	警告	singapore	-	Singapore Gallery の index.php における重要な情報を取得される脆弱性	-	CVE-2007-3229	2012-12-20 18:19	2007-06-14	Show	GitHub Exploit DB Packet Storm

228297	6.8	警告	simian systems inc	-	Sitellite CMS における PHP リモートファイルインクルージョンの脆弱性	-	CVE-2007-3228	2012-12-20 18:19	2007-06-14	Show	GitHub Exploit DB Packet Storm

228298	4.3	警告	Ruby on Rails project	-	Ruby on Rails の to_json 関数におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2007-3227	2012-12-20 18:19	2007-06-14	Show	GitHub Exploit DB Packet Storm

228299	6.4	警告	サン・マイクロシステムズ	-	slapd における特定のデータを変更される脆弱性	-	CVE-2007-3225	2012-12-20 18:19	2007-06-13	Show	GitHub Exploit DB Packet Storm

228300	5	警告	サン・マイクロシステムズ	-	slapd におけるエントリの属性の存在を特定される脆弱性	-	CVE-2007-3224	2012-12-20 18:19	2007-06-13	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 4, 2026, 4:06 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
223861	6.1	MEDIUM Network	zyxel	uag2100_firmware uag4100_firmware uag5100_firmware usg110_firmware usg210_firmware usg310_firmware usg1100_firmware usg1900_firmware usg2200-vpn_firmware	A reflective Cross-site scripting (XSS) vulnerability in the free_time_failed.cgi CGI program in selected Zyxel ZyWall, USG, and UAG devices allows remote attackers to inject arbitrary web script or …	CWE-79 Cross-site Scripting	CVE-2019-12581	2024-11-21 13:23	2019-06-28	Show	GitHub Exploit DB Packet Storm

223862	8.1	HIGH Network	keyidentity	linotp	KeyIdentity LinOTP before 2.10.5.3 has Incorrect Access Control (issue 1 of 2).	CWE-294 Authentication Bypass by Capture-replay	CVE-2019-12887	2024-11-21 13:23	2019-06-27	Show	GitHub Exploit DB Packet Storm

223863	9.1	CRITICAL Network	zyxel	uag2100_firmware uag4100_firmware uag5100_firmware usg110_firmware usg210_firmware usg310_firmware usg1100_firmware usg1900_firmware usg2200-vpn_firmware zywall_vpn100_firm…	Missing Access Control in the "Free Time" component of several Zyxel UAG, USG, and ZyWall devices allows a remote attacker to generate guest accounts by directly accessing the account generator. This…	CWE-425 Direct Request ('Forced Browsing')	CVE-2019-12583	2024-11-21 13:23	2019-06-27	Show	GitHub Exploit DB Packet Storm

223864	5.5	MEDIUM Local	linux	linux_kernel	A NULL pointer dereference vulnerability in the function nfc_genl_deactivate_target() in net/nfc/netlink.c in the Linux kernel before 5.1.13 can be triggered by a malicious user-mode program that omi…	CWE-476 NULL Pointer Dereference	CVE-2019-12984	2024-11-21 13:23	2019-06-27	Show	GitHub Exploit DB Packet Storm

223865	6.5	MEDIUM Network	libming	libming	Ming (aka libming) 0.4.8 has a heap buffer overflow and underflow in the decompileCAST function in util/decompile.c in libutil.a. Remote attackers could leverage this vulnerability to cause a denial …	CWE-119 Incorrect Access of Indexable Resource ('Range Error')	CVE-2019-12982	2024-11-21 13:23	2019-06-27	Show	GitHub Exploit DB Packet Storm

223866	8.8	HIGH Network	libming	libming	Ming (aka libming) 0.4.8 has an "fill overflow" vulnerability in the function SWFShape_setLeftFillStyle in blocks/shape.c.	CWE-20 Improper Input Validation	CVE-2019-12981	2024-11-21 13:23	2019-06-27	Show	GitHub Exploit DB Packet Storm

223867	6.5	MEDIUM Network	libming	libming	In Ming (aka libming) 0.4.8, there is an integer overflow (caused by an out-of-range left shift) in the SWFInput_readSBits function in blocks/input.c. Remote attackers could leverage this vulnerabili…	CWE-190 Integer Overflow or Wraparound	CVE-2019-12980	2024-11-21 13:23	2019-06-27	Show	GitHub Exploit DB Packet Storm

223868	7.8	HIGH Local	imagemagick debian canonical opensuse	imagemagick debian_linux ubuntu_linux leap	ImageMagick 7.0.8-34 has a "use of uninitialized value" vulnerability in the SyncImageSettings function in MagickCore/image.c. This is related to AcquireImage in magick/image.c.	CWE-665 Improper Initialization	CVE-2019-12979	2024-11-21 13:23	2019-06-27	Show	GitHub Exploit DB Packet Storm

223869	7.8	HIGH Local	imagemagick	imagemagick	ImageMagick 7.0.8-34 has a "use of uninitialized value" vulnerability in the ReadPANGOImage function in coders/pango.c.	CWE-665 Improper Initialization	CVE-2019-12978	2024-11-21 13:23	2019-06-27	Show	GitHub Exploit DB Packet Storm

223870	7.8	HIGH Local	imagemagick	imagemagick	ImageMagick 7.0.8-34 has a "use of uninitialized value" vulnerability in the WriteJP2Image function in coders/jp2.c.	CWE-665 Improper Initialization	CVE-2019-12977	2024-11-21 13:23	2019-06-27	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed