Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 3, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
228451 7.5 危険 turnkey web tools - TurnkeyWebTools SunShop Shopping Cart の index.php における SQL インジェクションの脆弱性 - CVE-2007-2549 2012-12-20 18:19 2007-05-9 Show GitHub Exploit DB Packet Storm
228452 6.4 警告 turnkey web tools - TurnkeyWebTools SunShop Shopping Cart の index.php における脆弱性 - CVE-2007-2548 2012-12-20 18:19 2007-05-9 Show GitHub Exploit DB Packet Storm
228453 4.3 警告 turnkey web tools - TurnkeyWebTools SunShop Shopping Cart の index.php におけるクロスサイトスクリプティングの脆弱性 - CVE-2007-2547 2012-12-20 18:19 2007-05-9 Show GitHub Exploit DB Packet Storm
228454 6.8 警告 Simple Machines - SMF におけるセッションをハイジャックされる脆弱性 CWE-287
不適切な認証 		CVE-2007-2546 2012-12-20 18:19 2007-05-9 Show GitHub Exploit DB Packet Storm
228455 7.5 危険 XOOPS - XOOPS 用の Flashgames モジュールにおける SQL インジェクションの脆弱性 - CVE-2007-2543 2012-12-20 18:19 2007-05-8 Show GitHub Exploit DB Packet Storm
228456 7.5 危険 workbench survival guide - workbench survival guide の header.php における PHP リモートファイルインクルージョンの脆弱性 - CVE-2007-2542 2012-12-20 18:19 2007-05-8 Show GitHub Exploit DB Packet Storm
228457 7.5 危険 versado cms - Versado CMS の includes/ajax_listado.php における PHP リモートファイルインクルージョンの脆弱性 - CVE-2007-2541 2012-12-20 18:19 2007-05-8 Show GitHub Exploit DB Packet Storm
228458 7.5 危険 pmecms - PMECMS における PHP リモートファイルインクルージョンの脆弱性 - CVE-2007-2540 2012-12-20 18:19 2007-05-8 Show GitHub Exploit DB Packet Storm
228459 7.8 危険 runcms - RunCms の show_files 関数における重要な情報 (ファイルの存在およびファイルメタデータ) を取得される脆弱性 - CVE-2007-2539 2012-12-20 18:19 2007-05-8 Show GitHub Exploit DB Packet Storm
228460 7.5 危険 runcms - RunCms の class/debug/debug_show.php における SQL インジェクションの脆弱性 - CVE-2007-2538 2012-12-20 18:19 2007-05-8 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 3, 2026, 4:06 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
223611 6.5 MEDIUM
Network 		themooltipass moolticute Stephan Mooltipass Moolticute through 0.42.1 (and possibly earlier versions) has Incorrect Access Control. CWE-319
Cleartext Transmission of Sensitive Information 		CVE-2019-12967 2024-11-21 13:23 2019-10-23 Show GitHub Exploit DB Packet Storm
223612 4.4 MEDIUM
Local 		bitdefender box_firmware An issue was discovered in Bitdefender BOX firmware versions before 2.1.37.37-34 that affects the general reliability of the product. Specially crafted packets sent to the miniupnpd implementation in… CWE-770
 Allocation of Resources Without Limits or Throttling 		CVE-2019-12611 2024-11-21 13:23 2019-10-18 Show GitHub Exploit DB Packet Storm
223613 6.5 MEDIUM
Network 		cisco spa112_firmware
spa122_firmware 		A vulnerability in the web-based management interface of Cisco SPA100 Series Analog Telephone Adapters (ATAs) could allow an authenticated, remote attacker to access sensitive information on an affec… CWE-200
Information Exposure 		CVE-2019-12708 2024-11-21 13:23 2019-10-17 Show GitHub Exploit DB Packet Storm
223614 6.1 MEDIUM
Network 		cisco telepresence_video_communication_server A vulnerability in the web-based management interface of Cisco Expressway Series and Cisco TelePresence Video Communication Server (VCS) could allow an unauthenticated, remote attacker to conduct a c… CWE-79
Cross-site Scripting 		CVE-2019-12705 2024-11-21 13:23 2019-10-17 Show GitHub Exploit DB Packet Storm
223615 6.1 MEDIUM
Network 		cisco sf250-24_firmware
sf250-24p_firmware
sf250-48_firmware
sf250-48hp_firmware
sf250-08_firmware
sf250-08hp_firmware
sf250-10p_firmware
sf250-18_firmware
sf250-26_firmware
sf25… 		A vulnerability in the web-based interface of Cisco Small Business Smart and Managed Switches could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a … CWE-79
Cross-site Scripting 		CVE-2019-12718 2024-11-21 13:23 2019-10-17 Show GitHub Exploit DB Packet Storm
223616 6.5 MEDIUM
Network 		cisco spa112_firmware
spa122_firmware 		A vulnerability in the web-based management interface of Cisco SPA100 Series Analog Telephone Adapters (ATAs) could allow an authenticated, remote attacker to view the contents of arbitrary files on … CWE-22
Path Traversal 		CVE-2019-12704 2024-11-21 13:23 2019-10-17 Show GitHub Exploit DB Packet Storm
223617 5.2 MEDIUM
Adjacent 		cisco spa122_firmware A vulnerability in the web-based management interface of Cisco SPA122 ATA with Router Devices could allow an unauthenticated, adjacent attacker to conduct cross-site scripting attacks. The vulnerabil… CWE-79
Cross-site Scripting 		CVE-2019-12703 2024-11-21 13:23 2019-10-17 Show GitHub Exploit DB Packet Storm
223618 5.4 MEDIUM
Network 		cisco spa112_firmware
spa122_firmware 		A vulnerability in the web-based management interface of Cisco SPA100 Series Analog Telephone Adapters (ATAs) could allow an authenticated, remote attacker to conduct cross-site scripting attacks. Th… CWE-79
Cross-site Scripting 		CVE-2019-12702 2024-11-21 13:23 2019-10-17 Show GitHub Exploit DB Packet Storm
223619 5.4 MEDIUM
Network 		cisco identity_services_engine A vulnerability in the web-based management interface of Cisco Identity Services Engine (ISE) could allow an authenticated, remote attacker to conduct cross-site scripting (XSS) attacks against a use… CWE-79
Cross-site Scripting 		CVE-2019-12638 2024-11-21 13:23 2019-10-17 Show GitHub Exploit DB Packet Storm
223620 5.4 MEDIUM
Network 		cisco identity_services_engine Multiple vulnerabilities in the web-based management interface of Cisco Identity Services Engine (ISE) could allow an authenticated, remote attacker to conduct cross-site scripting (XSS) attacks agai… CWE-79
Cross-site Scripting 		CVE-2019-12637 2024-11-21 13:23 2019-10-17 Show GitHub Exploit DB Packet Storm