Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 3, 2026, 6 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
228591 7.5 危険 really simple php and ajax - RSPA における PHP リモートファイルインクルージョンの脆弱性 - CVE-2007-1982 2012-12-20 18:19 2007-04-11 Show GitHub Exploit DB Packet Storm
228592 7.5 危険 有限会社ブルームーン - XOOPS 用の PopnupBlog モジュールにおける SQL インジェクションの脆弱性 - CVE-2007-1979 2012-12-20 18:19 2007-04-11 Show GitHub Exploit DB Packet Storm
228593 7.5 危険 slaed - SLAED CMS における PHP リモートファイルインクルージョンの脆弱性 - CVE-2007-1975 2012-12-20 18:19 2007-04-11 Show GitHub Exploit DB Packet Storm
228594 7.5 危険 wf-sections
XOOPS
- Xoops モジュールで使用される WF-Section における SQL インジェクションの脆弱性 - CVE-2007-1974 2012-12-20 18:19 2007-04-9 Show GitHub Exploit DB Packet Storm
228595 4.3 警告 sam crew - Sam Crew MyBlog の admin/modify.php におけるクロスサイトスクリプティングの脆弱性 - CVE-2007-1969 2012-12-20 18:19 2007-04-11 Show GitHub Exploit DB Packet Storm
228596 6.8 警告 sam crew - Sam Crew MyBlog の games.php における PHP リモートファイルインクルージョンの脆弱性 - CVE-2007-1968 2012-12-20 18:19 2007-04-11 Show GitHub Exploit DB Packet Storm
228597 7.5 危険 XOOPS - XOOPS 用の WF-Snippets モジュールにおける SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2007-1962 2012-12-20 18:19 2007-04-11 Show GitHub Exploit DB Packet Storm
228598 7.5 危険 phpBB - phpBB 用の Mutant ポータルの mutant_functions.php における PHP リモートファイルインクルージョンの脆弱性 - CVE-2007-1961 2012-12-20 18:19 2007-04-11 Show GitHub Exploit DB Packet Storm
228599 7.5 危険 XOOPS - XOOPS 用の Rha7 Downloads モジュールにおける SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2007-1960 2012-12-20 18:19 2007-04-11 Show GitHub Exploit DB Packet Storm
228600 10 危険 tinymux - TinyMUX の command.cpp における脆弱性 - CVE-2007-1959 2012-12-20 18:19 2007-04-11 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 3, 2026, 4:06 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
223491 7.0 HIGH
Local
linux linux_kernel In arch/x86/lib/insn-eval.c in the Linux kernel before 5.1.9, there is a use-after-free for access to an LDT entry because of a race condition between modify_ldt() and a #BR exception for an MPX boun… CWE-362
CWE-416
Race Condition
 Use After Free
CVE-2019-13233 2024-11-21 13:24 2019-07-4 Show GitHub Exploit DB Packet Storm
223492 3.3 LOW
Local
unzip_project
debian
unzip
debian_linux
Info-ZIP UnZip 6.0 mishandles the overlapping of files inside a ZIP container, leading to denial of service (resource consumption), aka a "better zip bomb" issue. CWE-400
 Uncontrolled Resource Consumption
CVE-2019-13232 2024-11-21 13:24 2019-07-4 Show GitHub Exploit DB Packet Storm
223493 5.5 MEDIUM
Local
deepin deepin_clone deepin-clone before 1.1.3 uses a fixed path /tmp/partclone.log in the Helper::getPartitionSizeInfo() function to write a log file as root, and follows symlinks there. An unprivileged user can prepare… CWE-59
Link Following
CVE-2019-13229 2024-11-21 13:24 2019-07-4 Show GitHub Exploit DB Packet Storm
223494 4.7 MEDIUM
Local
deepin deepin-clone deepin-clone before 1.1.3 uses a fixed path /tmp/repo.iso in the BootDoctor::fix() function to download an ISO file, and follows symlinks there. An unprivileged user can prepare a symlink attack ther… CWE-59
Link Following
CVE-2019-13228 2024-11-21 13:24 2019-07-4 Show GitHub Exploit DB Packet Storm
223495 5.5 MEDIUM
Local
deepin deepin-clone In GUI mode, deepin-clone before 1.1.3 creates a log file at the fixed path /tmp/.deepin-clone.log as root, and follows symlinks there. An unprivileged user can prepare a symlink attack there to crea… CWE-59
Link Following
CVE-2019-13227 2024-11-21 13:24 2019-07-4 Show GitHub Exploit DB Packet Storm
223496 7.0 HIGH
Local
deepin
fedoraproject
deepin-clone
fedora
deepin-clone before 1.1.3 uses a predictable path /tmp/.deepin-clone/mount/<block-dev-basename> in the Helper::temporaryMountDevice() function to temporarily mount a file system as root. An unprivile… CWE-362
CWE-59
Race Condition
Link Following
CVE-2019-13226 2024-11-21 13:24 2019-07-4 Show GitHub Exploit DB Packet Storm
223497 7.3 HIGH
Local
maxx waves_maxx_audio WavesSysSvc in Waves MAXX Audio allows privilege escalation because the General registry key has Full Control access for the Users group, leading to DLL side loading. This affects WavesSysSvc64.exe 1… CWE-732
 Incorrect Permission Assignment for Critical Resource
CVE-2019-13208 2024-11-21 13:24 2019-07-4 Show GitHub Exploit DB Packet Storm
223498 7.5 HIGH
Network
mikrotik routeros A vulnerability in the FTP daemon on MikroTik routers through 6.44.3 could allow remote attackers to exhaust all available memory, causing the device to reboot because of uncontrolled resource manage… CWE-770
 Allocation of Resources Without Limits or Throttling
CVE-2019-13074 2024-11-21 13:24 2019-07-4 Show GitHub Exploit DB Packet Storm
223499 9.8 CRITICAL
Network
nlnetlabs name_server_daemon nsd-checkzone in NLnet Labs NSD 4.2.0 has a Stack-based Buffer Overflow in the dname_concatenate() function in dname.c. CWE-787
 Out-of-bounds Write
CVE-2019-13207 2024-11-21 13:24 2019-07-4 Show GitHub Exploit DB Packet Storm
223500 6.1 MEDIUM
Network
1234n minicms In MiniCMS V1.10, stored XSS was found in mc-admin/post-edit.php via the tags box. An attacker can use it to get a user's cookie. This is different from CVE-2018-10296, CVE-2018-16233, and CVE-2018-2… CWE-79
Cross-site Scripting
CVE-2019-13186 2024-11-21 13:24 2019-07-4 Show GitHub Exploit DB Packet Storm