Vulnerability Search Top

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

Vulnerability Information Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 8, 2026, noon

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
228441	4	警告	ZyXEL	-	Zyxel Zywall 2 デバイス上で稼動する ZyNOS の管理インターフェースにおけるサービス運用妨害 (DoS) の脆弱性	-	CVE-2007-4319	2012-12-20 18:33	2007-08-13	Show	GitHub Exploit DB Packet Storm

228442	4.3	警告	ZyXEL	-	Zyxel Zywall 2 デバイス上で稼動する ZyNOS の管理インターフェースにおけるクロスサイトスクリプティングの脆弱性	-	CVE-2007-4318	2012-12-20 18:33	2007-08-13	Show	GitHub Exploit DB Packet Storm

228443	4.3	警告	ZyXEL	-	Zyxel Zywall 2 デバイス上で稼動する ZyNOS の管理インターフェースにおけるクロスサイトリクエストフォージェリの脆弱性	-	CVE-2007-4317	2012-12-20 18:33	2007-08-13	Show	GitHub Exploit DB Packet Storm

228444	4.3	警告	ZyXEL	-	Zyxel Zywall 2 上で稼動する ZyNOS の管理インターフェースにおける管理アクションを実行される脆弱性	-	CVE-2007-4316	2012-12-20 18:33	2007-08-13	Show	GitHub Exploit DB Packet Storm

228445	6.8	警告	pixlie	-	Pixlie の pixlie.php におけるリモートディレクトリツリーのファイルを読み込まれる脆弱性	-	CVE-2007-4314	2012-12-20 18:33	2007-08-13	Show	GitHub Exploit DB Packet Storm

228446	4.3	警告	サン・マイクロシステムズ	-	Sun Solaris の finger デーモンにおける特定の非標準 GECOS フィールドを伴うアカウントを全てリスト化される脆弱性	-	CVE-2007-4310	2012-12-20 18:33	2007-08-13	Show	GitHub Exploit DB Packet Storm

228447	4.3	警告	Lamp Design	-	Storesprite におけるクロスサイトスクリプティングの脆弱性	-	CVE-2007-4307	2012-12-20 18:33	2007-08-13	Show	GitHub Exploit DB Packet Storm

228448	4.3	警告	The phpMyAdmin Project	-	phpMyAdmin におけるクロスサイトスクリプティングの脆弱性	-	CVE-2007-4306	2012-12-20 18:33	2007-08-13	Show	GitHub Exploit DB Packet Storm

228449	6.2	警告	systrace Todd C. Miller sysjail	-	NetBSD および OpenBSD 上で稼動している Systrace の Sudo monitor mode などにおけるシステムコール割り込みを無効にされる脆弱性	-	CVE-2007-4305	2012-12-20 18:33	2007-08-13	Show	GitHub Exploit DB Packet Storm

228450	6.8	警告	サン・マイクロシステムズ	-	Sun Java System Portal Server における任意の Java メソッドを実行される脆弱性	-	CVE-2007-4289	2012-12-20 18:33	2007-08-3	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 8, 2026, 4:54 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
222201	5.4	MEDIUM Network	wordpress debian	wordpress debian_linux	WordPress before 5.2.3 allows XSS in post previews by authenticated users.	CWE-79 Cross-site Scripting	CVE-2019-16223	2024-11-21 13:30	2019-09-11	Show	GitHub Exploit DB Packet Storm

222202	6.1	MEDIUM Network	wordpress debian	wordpress debian_linux	WordPress before 5.2.3 has an issue with URL sanitization in wp_kses_bad_protocol_once in wp-includes/kses.php that can lead to cross-site scripting (XSS) attacks.	CWE-79 Cross-site Scripting	CVE-2019-16222	2024-11-21 13:30	2019-09-11	Show	GitHub Exploit DB Packet Storm

222203	6.1	MEDIUM Network	wordpress debian	wordpress debian_linux	WordPress before 5.2.3 allows reflected XSS in the dashboard.	CWE-79 Cross-site Scripting	CVE-2019-16221	2024-11-21 13:30	2019-09-11	Show	GitHub Exploit DB Packet Storm

222204	6.1	MEDIUM Network	wordpress debian	wordpress debian_linux	In WordPress before 5.2.3, validation and sanitization of a URL in wp_validate_redirect in wp-includes/pluggable.php could lead to an open redirect if a provided URL path does not start with a forwar…	CWE-601 Open Redirect	CVE-2019-16220	2024-11-21 13:30	2019-09-11	Show	GitHub Exploit DB Packet Storm

222205	6.1	MEDIUM Network	wordpress debian	wordpress debian_linux	WordPress before 5.2.3 allows XSS in shortcode previews.	CWE-79 Cross-site Scripting	CVE-2019-16219	2024-11-21 13:30	2019-09-11	Show	GitHub Exploit DB Packet Storm

222206	6.1	MEDIUM Network	wordpress debian	wordpress debian_linux	WordPress before 5.2.3 allows XSS in stored comments.	CWE-79 Cross-site Scripting	CVE-2019-16218	2024-11-21 13:30	2019-09-11	Show	GitHub Exploit DB Packet Storm

222207	6.1	MEDIUM Network	wordpress debian	wordpress debian_linux	WordPress before 5.2.3 allows XSS in media uploads because wp_ajax_upload_attachment is mishandled.	CWE-79 Cross-site Scripting	CVE-2019-16217	2024-11-21 13:30	2019-09-11	Show	GitHub Exploit DB Packet Storm

222208	5.4	MEDIUM Network	esri	arcgis_enterprise	In ArcGIS Enterprise 10.6.1, a crafted IFRAME element can be used to trigger a Cross Frame Scripting (XFS) attack through the EDIT MY PROFILE feature.	CWE-79 Cross-site Scripting	CVE-2019-16193	2024-11-21 13:30	2019-09-11	Show	GitHub Exploit DB Packet Storm

222209	5.7	MEDIUM Network	libra	libra_core	Libra Core before 2019-09-03 has an erroneous regular expression for inline comments, which makes it easier for attackers to interfere with code auditing by using a nonstandard line-break character f…	NVD-CWE-noinfo	CVE-2019-16214	2024-11-21 13:30	2019-09-11	Show	GitHub Exploit DB Packet Storm

222210	7.5	HIGH Network	humanica	humatrix	The Recruitment module in Humanica Humatrix 7 1.0.0.203 and 1.0.0.681 allows an unauthenticated attacker to change the password of any user via the recruitment_online/personalData/act_acounttab.cfm t…	CWE-276 Incorrect Default Permissions	CVE-2019-16106	2024-11-21 13:30	2019-09-11	Show	GitHub Exploit DB Packet Storm