Vulnerability Search Top

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

Vulnerability Information Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 2, 2026, noon

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
228481	4.9	警告	zonelabs	-	ZoneAlarm におけるサービス運用妨害 (DoS) の脆弱性	-	CVE-2007-2467	2012-12-20 18:19	2007-05-2	Show	GitHub Exploit DB Packet Storm

228482	7.8	危険	サン・マイクロシステムズ	-	Sun Java System Directory Server および Sun ONE Directory Server で使用されている C 用の LDAP SDK におけるサービス運用妨害 (DoS) の脆弱性	-	CVE-2007-2466	2012-12-20 18:19	2007-05-1	Show	GitHub Exploit DB Packet Storm

228483	7.8	危険	tony cook	-	Imager perl モジュールの BMP リーダにおけるヒープベースのバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2007-2459	2012-12-20 18:19	2007-05-2	Show	GitHub Exploit DB Packet Storm

228484	7.5	危険	pixaria	-	Pixaria Gallery における PHP リモートファイルインクルージョンの脆弱性	CWE-94 コード・インジェクション	CVE-2007-2458	2012-12-20 18:19	2007-04-15	Show	GitHub Exploit DB Packet Storm

228485	7.5	危険	pixaria	-	Pixaria Gallery の resources/includes/class.Smarty.php における PHP リモートファイルインクルージョンの脆弱性	-	CVE-2007-2457	2012-12-20 18:19	2007-04-15	Show	GitHub Exploit DB Packet Storm

228486	2.1	注意	CollabNet, Inc.	-	Subversion における重要な情報 (プロパティの改定) を取得される脆弱性	-	CVE-2007-2448	2012-12-20 18:19	2007-06-14	Show	GitHub Exploit DB Packet Storm

228487	6.8	警告	tecnick.com	-	TCExam の shared/config/tce_config.php におけるクロスサイトスクリプティング攻撃 (XSS) を実行される脆弱性	-	CVE-2007-2431	2012-12-20 18:19	2007-05-1	Show	GitHub Exploit DB Packet Storm

228488	7.8	危険	tecnick.com	-	TCExam の shared/code/tce_tmx.php における cache/ 配下の任意の PHP ファイルを作成される脆弱性	-	CVE-2007-2430	2012-12-20 18:19	2007-05-1	Show	GitHub Exploit DB Packet Storm

228489	7.5	危険	pnflashgames	-	PostNuke 用の pnFlashGames モジュールの index.php における SQL インジェクションの脆弱性	-	CVE-2007-2427	2012-12-20 18:19	2007-05-1	Show	GitHub Exploit DB Packet Storm

228490	7.5	危険	wildbits	-	WordPress 用の myGallery プラグインにおける PHP リモートファイルインクルージョンの脆弱性	-	CVE-2007-2426	2012-12-20 18:19	2007-05-1	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 2, 2026, 4:08 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
223201	7.5	HIGH Network	androvideo geovision	vd_1_firmware gv-vr360_firmware gv-vd8700_firmware	A relative path traversal vulnerability found in Advan VD-1 firmware versions up to 230. It allows attackers to download arbitrary files via url cgibin/ExportSettings.cgi?Download=filepath, without a…	CWE-22 CWE-862 Path Traversal Missing Authorization	CVE-2019-13408	2024-11-21 13:24	2019-08-29	Show	GitHub Exploit DB Packet Storm

223202	6.1	MEDIUM Network	androvideo geovision	vd_1_firmware gv-vr360_firmware gv-vd8700_firmware	A XSS found in Advan VD-1 firmware versions up to 230. VD-1 responses a path error message when a requested resource was not found in page cgibin/ssi.cgi. It leads to a reflected XSS because the erro…	CWE-79 Cross-site Scripting	CVE-2019-13407	2024-11-21 13:24	2019-08-29	Show	GitHub Exploit DB Packet Storm

223203	7.5	HIGH Network	androvideo	vd_1_firmware	A broken access control vulnerability found in Advan VD-1 firmware versions up to 230. An attacker can send a POST request to cgibin/ApkUpload.cgi to install arbitrary APK without any authentication.	CWE-306 Missing Authentication for Critical Function	CVE-2019-13406	2024-11-21 13:24	2019-08-29	Show	GitHub Exploit DB Packet Storm

223204	9.8	CRITICAL Network	androvideo	vd_1_firmware	A broken access control vulnerability found in Advan VD-1 firmware version 230 leads to insecure ADB service. An attacker can send a POST request to cgibin/AdbSetting.cgi to enable ADB without any au…	CWE-306 Missing Authentication for Critical Function	CVE-2019-13405	2024-11-21 13:24	2019-08-29	Show	GitHub Exploit DB Packet Storm

223205	8.8	HIGH Network	eng	knowage	In Knowage through 6.1.1, an authenticated user who accesses the datasources page will gain access to any data source credentials in cleartext, which includes databases.	CWE-522 Insufficiently Protected Credentials	CVE-2019-13348	2024-11-21 13:24	2019-08-29	Show	GitHub Exploit DB Packet Storm

223206	6.1	MEDIUM Network	eng	knowage	In Knowage through 6.1.1, there is XSS via the start_url or user_id field to the ChangePwdServlet page.	CWE-79 Cross-site Scripting	CVE-2019-13189	2024-11-21 13:24	2019-08-29	Show	GitHub Exploit DB Packet Storm

223207	8.8	HIGH Adjacent	edimax	br-6208ac_v1_firmware	Edimax BR-6208AC V1 devices have Insufficient Compartmentalization between a host network and a guest network that are established by the same device. In order to transfer data from the host network …	CWE-20 Improper Input Validation	CVE-2019-13270	2024-11-21 13:24	2019-08-28	Show	GitHub Exploit DB Packet Storm

223208	8.8	HIGH Adjacent	edimax	br-6208ac_v1_firmware	Edimax BR-6208AC V1 devices have Insufficient Compartmentalization between a host network and a guest network that are established by the same device. A DHCP Request is sent to the router with a cert…	CWE-20 Improper Input Validation	CVE-2019-13269	2024-11-21 13:24	2019-08-28	Show	GitHub Exploit DB Packet Storm

223209	8.8	HIGH Adjacent	tp-link	archer_c3200_v1_firmware archer_c2_v1_firmware	TP-Link Archer C3200 V1 and Archer C2 V1 devices have Insufficient Compartmentalization between a host network and a guest network that are established by the same device. They forward ARP requests, …	CWE-20 Improper Input Validation	CVE-2019-13268	2024-11-21 13:24	2019-08-28	Show	GitHub Exploit DB Packet Storm

223210	9.8	CRITICAL Network	xymon debian	xymon debian_linux	In Xymon through 4.3.28, a stack-based buffer overflow exists in the status-log viewer component because of   expansion in svcstatus.c.	CWE-787 Out-of-bounds Write	CVE-2019-13486	2024-11-21 13:24	2019-08-28	Show	GitHub Exploit DB Packet Storm