Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 3, 2026, noon

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
228581 6.8 警告 wabbit - Wabbit PHP Gallery の showpic.php におけるクロスサイトスクリプティングの脆弱性 - CVE-2007-2098 2012-12-20 18:19 2007-04-18 Show GitHub Exploit DB Packet Storm
228582 7.5 危険 tsdisplay4xoops - TSD4XOOPS の blocks/tsdisplay4xoops_block2.php における PHP リモートファイルインクルージョンの脆弱性 CWE-94
コード・インジェクション 		CVE-2007-2091 2012-12-20 18:19 2007-04-18 Show GitHub Exploit DB Packet Storm
228583 6.8 警告 tumusika evolution - TuMusika Evolution の index.php におけるクロスサイトスクリプティングの脆弱性 - CVE-2007-2090 2012-12-20 18:19 2007-04-18 Show GitHub Exploit DB Packet Storm
228584 7.5 危険 pl-php - pL-PHP の admin.php における認証を回避される脆弱性 - CVE-2007-2007 2012-12-20 18:19 2007-04-12 Show GitHub Exploit DB Packet Storm
228585 7.5 危険 pl-php - pL-PHP の login.php における SQL インジェクションの脆弱性 - CVE-2007-2006 2012-12-20 18:19 2007-04-12 Show GitHub Exploit DB Packet Storm
228586 7.5 危険 raphael limbach - Crea-Book の admin/admin.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2007-2000 2012-12-20 18:19 2007-04-12 Show GitHub Exploit DB Packet Storm
228587 4.3 警告 Youngzsoft - CmailServer WebMail の mail/signup.asp におけるクロスサイトスクリプティングの脆弱性 - CVE-2007-1991 2012-12-20 18:19 2007-04-12 Show GitHub Exploit DB Packet Storm
228588 7.5 危険 sam crew - Sam Crew MyBlog の games.php における PHP リモートファイルインクルージョンの脆弱性 - CVE-2007-1990 2012-12-20 18:19 2007-04-12 Show GitHub Exploit DB Packet Storm
228589 4.3 警告 phpecho cms - PHPEcho CMS の kernel/filters.inc.php におけるクロスサイトスクリプティングの脆弱性 - CVE-2007-1988 2012-12-20 18:19 2007-04-11 Show GitHub Exploit DB Packet Storm
228590 7.5 危険 phpexplorator - phpexplorator の phpexplorator.php における PHP リモートファイルインクルージョンの脆弱性 - CVE-2007-1985 2012-12-20 18:19 2007-04-11 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 3, 2026, 4:06 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
213621 6.1 MEDIUM
Network 		zoneminder zoneminder Reflected Cross Site Scripting (XSS) exists in ZoneMinder through 1.32.3, allowing an attacker to execute HTML or JavaScript code via a vulnerable 'Exportfile' parameter value in the view download (d… CWE-79
Cross-site Scripting 		CVE-2019-7333 2024-11-21 13:48 2019-02-5 Show GitHub Exploit DB Packet Storm
213622 6.1 MEDIUM
Network 		zoneminder zoneminder Reflected Cross Site Scripting (XSS) exists in ZoneMinder through 1.32.3, allowing an attacker to execute HTML or JavaScript code via a vulnerable 'eid' (aka Event ID) parameter value in the view dow… CWE-79
Cross-site Scripting 		CVE-2019-7332 2024-11-21 13:48 2019-02-5 Show GitHub Exploit DB Packet Storm
213623 6.1 MEDIUM
Network 		zoneminder zoneminder Self - Stored Cross Site Scripting (XSS) exists in ZoneMinder through 1.32.3 while editing an existing monitor field named "signal check color" (monitor.php). There exists no input validation or outp… CWE-79
Cross-site Scripting 		CVE-2019-7331 2024-11-21 13:48 2019-02-5 Show GitHub Exploit DB Packet Storm
213624 6.1 MEDIUM
Network 		zoneminder zoneminder Reflected Cross Site Scripting (XSS) exists in ZoneMinder through 1.32.3, allowing an attacker to execute HTML or JavaScript code via a vulnerable 'show' parameter value in the view frame (frame.php)… CWE-79
Cross-site Scripting 		CVE-2019-7330 2024-11-21 13:48 2019-02-5 Show GitHub Exploit DB Packet Storm
213625 6.1 MEDIUM
Network 		zoneminder zoneminder Reflected Cross Site Scripting (XSS) exists in ZoneMinder through 1.32.3, as the form action on multiple views utilizes $_SERVER['PHP_SELF'] insecurely, mishandling any arbitrary input appended to th… CWE-79
Cross-site Scripting 		CVE-2019-7329 2024-11-21 13:48 2019-02-5 Show GitHub Exploit DB Packet Storm
213626 6.1 MEDIUM
Network 		zoneminder zoneminder Reflected Cross Site Scripting (XSS) exists in ZoneMinder through 1.32.3, allowing an attacker to execute HTML or JavaScript code via a vulnerable 'scale' parameter value in the view frame (frame.php… CWE-79
Cross-site Scripting 		CVE-2019-7328 2024-11-21 13:48 2019-02-5 Show GitHub Exploit DB Packet Storm
213627 6.1 MEDIUM
Network 		zoneminder zoneminder Reflected Cross Site Scripting (XSS) exists in ZoneMinder through 1.32.3, allowing an attacker to execute HTML or JavaScript code via a vulnerable 'scale' parameter value in the view frame (frame.php… CWE-79
Cross-site Scripting 		CVE-2019-7327 2024-11-21 13:48 2019-02-5 Show GitHub Exploit DB Packet Storm
213628 6.1 MEDIUM
Network 		zoneminder zoneminder Self - Stored Cross Site Scripting (XSS) exists in ZoneMinder through 1.32.3, allowing an attacker to execute HTML or JavaScript code via a vulnerable 'Host' parameter value in the view console (cons… CWE-79
Cross-site Scripting 		CVE-2019-7326 2024-11-21 13:48 2019-02-5 Show GitHub Exploit DB Packet Storm
213629 6.1 MEDIUM
Network 		zoneminder zoneminder Reflected Cross Site Scripting (XSS) exists in ZoneMinder through 1.32.3, as multiple views under web/skins/classic/views insecurely utilize $_REQUEST['PHP_SELF'], without applying any proper filtrat… CWE-79
Cross-site Scripting 		CVE-2019-7325 2024-11-21 13:48 2019-02-5 Show GitHub Exploit DB Packet Storm
213630 6.1 MEDIUM
Network 		kanboard kanboard app/Core/Paginator.php in Kanboard before 1.2.8 has XSS in pagination sorting. CWE-79
Cross-site Scripting 		CVE-2019-7324 2024-11-21 13:48 2019-02-5 Show GitHub Exploit DB Packet Storm