Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 1, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
228371 9.3 危険 phpPgAdmin - phpPgAdmin の sqledit.php におけるクロスサイトスクリプティングの脆弱性 - CVE-2007-2865 2012-12-20 18:19 2007-05-25 Show GitHub Exploit DB Packet Storm
228372 7.5 危険 saxon - SAXON における PHP リモートファイルインクルージョンの脆弱性 - CVE-2007-2861 2012-12-20 18:19 2007-05-24 Show GitHub Exploit DB Packet Storm
228373 7.5 危険 simpgb - SimpGB における PHP リモートファイルインクルージョンの脆弱性 - CVE-2007-2859 2012-12-20 18:19 2007-05-24 Show GitHub Exploit DB Packet Storm
228374 6.5 警告 phpBB - phpBB 用の IP-Tracking Mod における SQL インジェクションの脆弱性 - CVE-2007-2858 2012-12-20 18:19 2007-05-24 Show GitHub Exploit DB Packet Storm
228375 7.5 危険 zakkis technology corporation - ABC Excel Parser の sample/xls2mysql における PHP リモートファイルインクルージョンの脆弱性 - CVE-2007-2857 2012-12-20 18:19 2007-05-24 Show GitHub Exploit DB Packet Storm
228376 10 危険 sky software - Sky Software Shell MegaPack ActiveX の shComboBox ActiveX コントロールにおけるスタックベースのバッファオーバーフローの脆弱性 - CVE-2007-2848 2012-12-20 18:19 2007-05-24 Show GitHub Exploit DB Packet Storm
228377 6.8 警告 unicon-imc2 - unicon-imc2 の ImmModules/cce/ におけるスタックベースのバッファオーバーフローの脆弱性 - CVE-2007-2835 2012-12-20 18:19 2007-07-1 Show GitHub Exploit DB Packet Storm
228378 9.3 危険 wavelink media - TutorialCMS における認証を回避される脆弱性 - CVE-2007-2822 2012-12-20 18:19 2007-05-22 Show GitHub Exploit DB Packet Storm
228379 7.5 危険 WordPress.org - WordPress の wp-admin/admin-ajax.php における SQL インジェクションの脆弱性 - CVE-2007-2821 2012-12-20 18:19 2007-05-22 Show GitHub Exploit DB Packet Storm
228380 4.3 警告 track+ - Track+ の reportItem.do におけるクロスサイトスクリプティングの脆弱性 - CVE-2007-2819 2012-12-20 18:19 2007-05-22 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 2, 2026, 4:08 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
223301 8.8 HIGH
Network 		mobatek mobaxterm In MobaXterm 11.1, the mobaxterm: URI handler has an argument injection vulnerability that allows remote attackers to execute arbitrary commands when the user visits a specially crafted URL. Based on… CWE-88
Argument Injection 		CVE-2019-13475 2024-11-21 13:24 2019-07-10 Show GitHub Exploit DB Packet Storm
223302 6.1 MEDIUM
Network 		phpwind phpwind PHPWind 9.1.0 has XSS vulnerabilities in the c and m parameters of the index.php file. CWE-79
Cross-site Scripting 		CVE-2019-13472 2024-11-21 13:24 2019-07-10 Show GitHub Exploit DB Packet Storm
223303 9.8 CRITICAL
Network 		matrixssl matrixssl MatrixSSL before 4.2.1 has an out-of-bounds read during ASN.1 handling. CWE-125
Out-of-bounds Read 		CVE-2019-13470 2024-11-21 13:24 2019-07-10 Show GitHub Exploit DB Packet Storm
223304 6.1 MEDIUM
Network 		keynto team_password_manager KEYNTO Team Password Manager 1.5.0 allows XSS because data saved from websites is mishandled in the online vault. CWE-79
Cross-site Scripting 		CVE-2019-13380 2024-11-21 13:24 2019-07-10 Show GitHub Exploit DB Packet Storm
223305 7.5 HIGH
Network 		trendnet tew-827dru_firmware TRENDnet TEW-827DRU with firmware up to and including 2.04B03 allows an unauthenticated attacker to execute setup wizard functionality, giving this attacker the ability to change configuration values… NVD-CWE-noinfo
CVE-2019-13277 2024-11-21 13:24 2019-07-10 Show GitHub Exploit DB Packet Storm
223306 7.5 HIGH
Network 		weseek growi In WESEEK GROWI before 3.5.0, a remote attacker can obtain the password hash of the creator of a page by leveraging wiki access to make API calls for page metadata. In other words, the password hash … CWE-306
Missing Authentication for Critical Function 		CVE-2019-13338 2024-11-21 13:24 2019-07-10 Show GitHub Exploit DB Packet Storm
223307 7.5 HIGH
Network 		weseek growi In WESEEK GROWI before 3.5.0, the site-wide basic authentication can be bypassed by adding a URL parameter access_token (this is the parameter used by the API). No valid token is required since it is… CWE-639
CWE-863
 Authorization Bypass Through User-Controlled Key
 Incorrect Authorization 		CVE-2019-13337 2024-11-21 13:24 2019-07-10 Show GitHub Exploit DB Packet Storm
223308 7.5 HIGH
Network 		modsecurity owasp_modsecurity_core_rule_set An issue was discovered in OWASP ModSecurity Core Rule Set (CRS) 3.0.2. Use of X.Filename instead of X_Filename can bypass some PHP Script Uploads rules, because PHP automatically transforms dots int… CWE-434
 Unrestricted Upload of File with Dangerous Type  		CVE-2019-13464 2024-11-21 13:24 2019-07-10 Show GitHub Exploit DB Packet Storm
223309 8.8 HIGH
Network 		trendnet tew-827dru_firmware TRENDnet TEW-827DRU with firmware up to and including 2.04B03 contains a stack-based buffer overflow while returning an error message to the user about failure to resolve a hostname during a ping or … CWE-787
 Out-of-bounds Write 		CVE-2019-13280 2024-11-21 13:24 2019-07-10 Show GitHub Exploit DB Packet Storm
223310 5.4 MEDIUM
Network 		cyberpowersystems powerpanel A stored XSS vulnerability in the Agent/Center component of CyberPower PowerPanel Business Edition 3.4.0 allows a privileged attacker to embed malicious JavaScript in the SNMP trap receivers form. Up… CWE-79
Cross-site Scripting 		CVE-2019-13070 2024-11-21 13:24 2019-07-10 Show GitHub Exploit DB Packet Storm