Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 5, 2026, 2 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
228291 6 警告 WordPress.org - WordPress のデフォルトテーマの functions.php におけるクロスサイトスクリプティングの脆弱性 - CVE-2007-3238 2012-12-20 18:19 2007-06-14 Show GitHub Exploit DB Packet Storm
228292 6.8 警告 XOOPS - XOOPS 用の TinyContent モジュールにおける PHP リモートファイルインクルージョンの脆弱性 - CVE-2007-3237 2012-12-20 18:19 2007-06-12 Show GitHub Exploit DB Packet Storm
228293 7.5 危険 XOOPS - XOOPS 用の Horoscope モジュールにおける PHP リモートファイルインクルージョンの脆弱性 - CVE-2007-3236 2012-12-20 18:19 2007-06-14 Show GitHub Exploit DB Packet Storm
228294 5 警告 tec-it - TEC-IT TBarCode OCX ActiveX コントロール における任意のファイルを上書きされる脆弱性 - CVE-2007-3233 2012-12-20 18:19 2007-06-14 Show GitHub Exploit DB Packet Storm
228295 6.8 警告 simian systems inc - Idan Sofer PHP::HTML の phphtml.php における PHP リモートファイルインクルージョンの脆弱性 - CVE-2007-3230 2012-12-20 18:19 2007-06-14 Show GitHub Exploit DB Packet Storm
228296 6.8 警告 singapore - Singapore Gallery の index.php における重要な情報を取得される脆弱性 - CVE-2007-3229 2012-12-20 18:19 2007-06-14 Show GitHub Exploit DB Packet Storm
228297 6.8 警告 simian systems inc - Sitellite CMS における PHP リモートファイルインクルージョンの脆弱性 - CVE-2007-3228 2012-12-20 18:19 2007-06-14 Show GitHub Exploit DB Packet Storm
228298 4.3 警告 Ruby on Rails project - Ruby on Rails の to_json 関数におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2007-3227 2012-12-20 18:19 2007-06-14 Show GitHub Exploit DB Packet Storm
228299 6.4 警告 サン・マイクロシステムズ - slapd における特定のデータを変更される脆弱性 - CVE-2007-3225 2012-12-20 18:19 2007-06-13 Show GitHub Exploit DB Packet Storm
228300 5 警告 サン・マイクロシステムズ - slapd におけるエントリの属性の存在を特定される脆弱性 - CVE-2007-3224 2012-12-20 18:19 2007-06-13 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 5, 2026, 4:51 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
224031 5.5 MEDIUM
Local 		imagemagick imagemagick A NULL pointer dereference in the function ReadPANGOImage in coders/pango.c and the function ReadVIDImage in coders/vid.c in ImageMagick 7.0.8-34 allows remote attackers to cause a denial of service … CWE-476
 NULL Pointer Dereference 		CVE-2019-12974 2024-11-21 13:23 2019-06-27 Show GitHub Exploit DB Packet Storm
224032 5.5 MEDIUM
Local 		uclouvain
opensuse
debian
oracle 		openjpeg
leap
debian_linux
database_server
outside_in_technology 		In OpenJPEG 2.3.1, there is excessive iteration in the opj_t1_encode_cblks function of openjp2/t1.c. Remote attackers could leverage this vulnerability to cause a denial of service via a crafted bmp … CWE-834
 Excessive Iteration 		CVE-2019-12973 2024-11-21 13:23 2019-06-27 Show GitHub Exploit DB Packet Storm
224033 5.5 MEDIUM
Local 		gnu
opensuse
canonical 		binutils
leap
ubuntu_linux 		An issue was discovered in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.32. There is a heap-based buffer over-read in _bfd_doprnt in bfd.c because elf_objec… CWE-125
Out-of-bounds Read 		CVE-2019-12972 2024-11-21 13:23 2019-06-26 Show GitHub Exploit DB Packet Storm
224034 5.3 MEDIUM
Network 		drdteam doomseeker A vulnerability was found in the Sonic Robo Blast 2 (SRB2) plugin (EP_Versions 9 to 11 inclusive) distributed with Doomseeker 1.1 and 1.2. Affected plugin versions did not discard IP packets with an … CWE-119
Incorrect Access of Indexable Resource ('Range Error')  		CVE-2019-12968 2024-11-21 13:23 2019-06-26 Show GitHub Exploit DB Packet Storm
224035 9.8 CRITICAL
Network 		fehelper_project fehelper FeHelper through 2019-06-19 allows arbitrary code execution during a JSON format operation, as demonstrated by the {"a":(function(){confirm(1)})()} input. CWE-74
Injection 		CVE-2019-12966 2024-11-21 13:23 2019-06-26 Show GitHub Exploit DB Packet Storm
224036 6.1 MEDIUM
Network 		livezilla livezilla LiveZilla Server before 8.0.1.1 is vulnerable to XSS in the ticket.php Subject. CWE-79
Cross-site Scripting 		CVE-2019-12964 2024-11-21 13:23 2019-06-25 Show GitHub Exploit DB Packet Storm
224037 6.1 MEDIUM
Network 		livezilla livezilla LiveZilla Server before 8.0.1.1 is vulnerable to XSS in the chat.php Create Ticket Action. CWE-79
Cross-site Scripting 		CVE-2019-12963 2024-11-21 13:23 2019-06-25 Show GitHub Exploit DB Packet Storm
224038 6.1 MEDIUM
Network 		livezilla livezilla LiveZilla Server before 8.0.1.1 is vulnerable to XSS in mobile/index.php via the Accept-Language HTTP header. CWE-79
Cross-site Scripting 		CVE-2019-12962 2024-11-21 13:23 2019-06-25 Show GitHub Exploit DB Packet Storm
224039 8.8 HIGH
Network 		livezilla livezilla LiveZilla Server before 8.0.1.1 is vulnerable to CSV Injection in the Export Function. CWE-1236
 Improper Neutralization of Formula Elements in a CSV File 		CVE-2019-12961 2024-11-21 13:23 2019-06-25 Show GitHub Exploit DB Packet Storm
224040 9.8 CRITICAL
Network 		livezilla livezilla LiveZilla Server before 8.0.1.1 is vulnerable to SQL Injection in functions.internal.build.inc.php via the parameter p_dt_s_d. CWE-89
SQL Injection 		CVE-2019-12960 2024-11-21 13:23 2019-06-25 Show GitHub Exploit DB Packet Storm