Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 10, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
228491 5 警告 XScreenSaver project - xscreensaver におけるロックされたセッションへのアクセス権を取得される脆弱性 CWE-399
リソース管理の問題 		CVE-2007-5585 2012-12-20 18:33 2007-10-19 Show GitHub Exploit DB Packet Storm
228492 7.5 危険 Pligg - Pligg CMS の login.php におけるユーザのパスワードを再設定される脆弱性 CWE-255
証明書・パスワード管理 		CVE-2007-5579 2012-12-20 18:33 2007-10-18 Show GitHub Exploit DB Packet Storm
228493 7.5 危険 Secure Ideas - BASE における認証を回避される脆弱性 CWE-287
不適切な認証 		CVE-2007-5578 2012-12-20 18:33 2007-10-18 Show GitHub Exploit DB Packet Storm
228494 4.3 警告 treble designs - 1024 CMS におけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反 		CVE-2007-5575 2012-12-20 18:33 2007-10-18 Show GitHub Exploit DB Packet Storm
228495 6.8 警告 phpdj - PHPDJ の djpage.php における PHP リモートファイルインクルージョンの脆弱性 CWE-94
コード・インジェクション 		CVE-2007-5574 2012-12-20 18:33 2007-10-18 Show GitHub Exploit DB Packet Storm
228496 4.3 警告 sphpblog - Simple PHP Blog におけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反 		CVE-2007-5572 2012-12-20 18:33 2007-10-18 Show GitHub Exploit DB Packet Storm
228497 2.6 注意 simple php forum - NSSboard におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2007-5564 2012-12-20 18:33 2007-10-18 Show GitHub Exploit DB Packet Storm
228498 7.5 危険 VirtueMart - VirtueMart における任意の PHP コードを実行される脆弱性 CWE-20
不適切な入力確認 		CVE-2007-5563 2012-12-20 18:33 2007-10-18 Show GitHub Exploit DB Packet Storm
228499 6.9 警告 シマンテック - Symantec Altiris Deployment Solution における認証資格情報を取得される脆弱性 CWE-200
情報漏えい 		CVE-2007-5555 2012-12-20 18:33 2007-08-13 Show GitHub Exploit DB Packet Storm
228500 9.3 危険 TIBCO Software - TIBCO SmartPGM FX におけるスタックベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2007-5546 2012-12-20 18:33 2007-10-18 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 11, 2026, 4:09 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
221991 9.8 CRITICAL
Network 		doordash doordash In the DoorDash application through 11.5.2 for Android, the username and password are stored in the log during authentication, and may be available to attackers via logcat. CWE-532
 Inclusion of Sensitive Information in Log Files 		CVE-2019-17397 2024-11-21 13:32 2019-10-16 Show GitHub Exploit DB Packet Storm
221992 9.8 CRITICAL
Network 		intelbras iwr_1000n_firmware Intelbras IWR 1000N 1.6.4 devices allow disclosure of the administrator login name and password because v1/system/user is mishandled. CWE-352
 Origin Validation Error 		CVE-2019-17600 2024-11-21 13:32 2019-10-15 Show GitHub Exploit DB Packet Storm
221993 5.4 MEDIUM
Network 		gnu
opensuse 		ncurses
leap 		There is a heap-based buffer over-read in the fmt_entry function in tinfo/comp_hash.c in the terminfo library in ncurses before 6.1-20191012. CWE-125
Out-of-bounds Read 		CVE-2019-17595 2024-11-21 13:32 2019-10-15 Show GitHub Exploit DB Packet Storm
221994 5.3 MEDIUM
Local 		gnu
opensuse 		ncurses
leap 		There is a heap-based buffer over-read in the _nc_find_entry function in tinfo/comp_hash.c in the terminfo library in ncurses before 6.1-20191012. CWE-125
Out-of-bounds Read 		CVE-2019-17594 2024-11-21 13:32 2019-10-15 Show GitHub Exploit DB Packet Storm
221995 8.8 HIGH
Network 		jizhicms jizhicms JIZHICMS 1.5.1 allows admin.php/Admin/adminadd.html CSRF to add an administrator. CWE-352
 Origin Validation Error 		CVE-2019-17593 2024-11-21 13:32 2019-10-15 Show GitHub Exploit DB Packet Storm
221996 7.5 HIGH
Network 		csv-parse_project
fedoraproject 		csv-parse
fedora 		The csv-parse module before 4.4.6 for Node.js is vulnerable to Regular Expression Denial of Service. The __isInt() function contains a malformed regular expression that processes large crafted input … CWE-400
 Uncontrolled Resource Consumption 		CVE-2019-17592 2024-11-21 13:32 2019-10-15 Show GitHub Exploit DB Packet Storm
221997 7.5 HIGH
Network 		idreamsoft icms idreamsoft iCMS 7.0.15 allows remote attackers to cause a denial of service (resource consumption) via a query for many comments, as demonstrated by the admincp.php?app=comment&perpage= substring fol… CWE-770
 Allocation of Resources Without Limits or Throttling 		CVE-2019-17583 2024-11-21 13:32 2019-10-15 Show GitHub Exploit DB Packet Storm
221998 9.8 CRITICAL
Network 		dormsystem_project dormsystem tonyy dormsystem through 1.3 allows SQL Injection in admin.php. CWE-89
SQL Injection 		CVE-2019-17580 2024-11-21 13:32 2019-10-15 Show GitHub Exploit DB Packet Storm
221999 7.5 HIGH
Network 		dlink dir-412_firmware There are some web interfaces without authentication requirements on D-Link DIR-412 A1-1.14WW routers. An attacker can get the router's log file via log_get.php, which could be used to discover the i… CWE-306
Missing Authentication for Critical Function 		CVE-2019-17511 2024-11-21 13:32 2019-10-15 Show GitHub Exploit DB Packet Storm
222000 6.1 MEDIUM
Network 		sonarsource sonarqube SonarSource SonarQube before 7.8 has XSS in project links on account/projects. CWE-79
Cross-site Scripting 		CVE-2019-17579 2024-11-21 13:32 2019-10-15 Show GitHub Exploit DB Packet Storm