Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 9, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
228631	4.3	警告	RSAセキュリティ	-	RSA EnVision のログオンページにおけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2007-4900	2012-12-20 18:33	2007-09-14	Show	GitHub Exploit DB Packet Storm

228632	2.1	注意	XWiki	-	XWiki Enterprise の Multiwiki プラグインにおける重要な情報を取得される脆弱性	CWE-noinfo 情報不足	CVE-2007-4898	2012-12-20 18:33	2007-09-14	Show	GitHub Exploit DB Packet Storm

228633	4.3	警告	toms-seiten.at	-	Toms Gaestebuch の admin/header.php におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2007-4896	2012-12-20 18:33	2007-09-14	Show	GitHub Exploit DB Packet Storm

228634	5	警告	sisfo kampus	-	Semarang 3 の dwoprn.php におけるディレクトリトラバーサルの脆弱性	CWE-22 パス・トラバーサル	CVE-2007-4895	2012-12-20 18:33	2007-09-14	Show	GitHub Exploit DB Packet Storm

228635	7.5	危険	WordPress.org	-	Wordpress および MU における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2007-4894	2012-12-20 18:33	2007-09-8	Show	GitHub Exploit DB Packet Storm

228636	4.3	警告	WordPress.org	-	Wordpress および MU の wp-admin/admin-functions.php におけるクロスサイトスクリプティング (XSS) 攻撃を実行される脆弱性	CWE-352 同一生成元ポリシー違反	CVE-2007-4893	2012-12-20 18:33	2007-09-8	Show	GitHub Exploit DB Packet Storm

228637	7.5	危険	swsoft	-	Windows 用の SWSoft Plesk における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2007-4892	2012-12-20 18:33	2007-09-14	Show	GitHub Exploit DB Packet Storm

228638	3.5	注意	XWiki	-	XWiki の "You are not allowed ..." のエラーハンドラにおける任意のドキュメントを読み取られる脆弱性	CWE-DesignError	CVE-2007-4888	2012-12-20 18:33	2007-01-11	Show	GitHub Exploit DB Packet Storm

228639	4.3	警告	techexcel inc.	-	TechExcel CustomerWise におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2007-4882	2012-12-20 18:33	2007-09-13	Show	GitHub Exploit DB Packet Storm

228640	7.5	危険	psi-labs	-	psisns の profile/myprofile.php における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2007-4881	2012-12-20 18:33	2007-09-13	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 9, 2026, 5:07 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
222211	9.8	CRITICAL Network	openmpt	libopenmpt	In libopenmpt before 0.3.19 and 0.4.x before 0.4.9, ModPlug_InstrumentName and ModPlug_SampleName in libopenmpt_modplug.c do not restrict the lengths of libmodplug output-buffer strings in the C API,…	CWE-120 Classic Buffer Overflow	CVE-2019-17113	2024-11-21 13:31	2019-10-4	Show	GitHub Exploit DB Packet Storm

222212	6.1	MEDIUM Network	themeisle	visualizer	A stored XSS vulnerability in the Visualizer plugin 3.3.0 for WordPress allows an unauthenticated attacker to execute arbitrary JavaScript when an admin or other privileged user edits the chart via t…	CWE-79 Cross-site Scripting	CVE-2019-16931	2024-11-21 13:31	2019-10-4	Show	GitHub Exploit DB Packet Storm

222213	7.5	HIGH Network	nlnetlabs canonical	unbound ubuntu_linux	Unbound before 1.9.4 accesses uninitialized memory, which allows remote attackers to trigger a crash via a crafted NOTIFY query. The source IP address of the query must match an access-control rule.	CWE-755 CWE-908 Improper Handling of Exceptional Conditions Use of Uninitialized Resource	CVE-2019-16866	2024-11-21 13:31	2019-10-4	Show	GitHub Exploit DB Packet Storm

222214	7.8	HIGH Local	linuxmint	mintinstall	mintinstall (aka Software Manager) 7.9.9 for Linux Mint allows code execution if a REVIEWS_CACHE file is controlled by an attacker, because an unpickle occurs. This is resolved in 8.0.0 and backports.	CWE-502 Deserialization of Untrusted Data	CVE-2019-17080	2024-11-21 13:31	2019-10-2	Show	GitHub Exploit DB Packet Storm

222215	7.5	HIGH Network	linux	linux_kernel	An issue was discovered in write_tpt_entry in drivers/infiniband/hw/cxgb4/mem.c in the Linux kernel through 5.3.2. The cxgb4 driver is directly calling dma_map_single (a DMA function) from a stack va…	NVD-CWE-noinfo	CVE-2019-17075	2024-11-21 13:31	2019-10-2	Show	GitHub Exploit DB Packet Storm

222216	5.4	MEDIUM Network	xunruicms	xunruicms	An issue was discovered in XunRuiCMS 4.3.1. There is a stored XSS in the module_category area.	CWE-79 Cross-site Scripting	CVE-2019-17074	2024-11-21 13:31	2019-10-2	Show	GitHub Exploit DB Packet Storm

222217	6.5	MEDIUM Network	emlog	emlog	emlog through 6.0.0beta allows remote authenticated users to delete arbitrary files via admin/template.php?action=del&tpl=../ directory traversal.	CWE-22 Path Traversal	CVE-2019-17073	2024-11-21 13:31	2019-10-2	Show	GitHub Exploit DB Packet Storm

222218	6.1	MEDIUM Network	eclipse oracle	mojarra mojarra_javaserver_faces retail_service_backbone retail_integration_bus retail_merchandising_system application_testing_suite secure_global_desktop retail_financial_integ…	faces/context/PartialViewContextImpl.java in Eclipse Mojarra, as used in Mojarra for Eclipse EE4J before 2.3.10 and Mojarra JavaServer Faces before 2.2.20, allows Reflected XSS because a client windo…	CWE-79 Cross-site Scripting	CVE-2019-17091	2024-11-21 13:31	2019-10-2	Show	GitHub Exploit DB Packet Storm

222219	7.5	HIGH Network	putty opensuse netapp	putty leap oncommand_unified_manager_core_package	PuTTY before 0.73 might allow remote SSH-1 servers to cause a denial of service by accessing freed memory locations via an SSH1_MSG_DISCONNECT message.	CWE-416 Use After Free	CVE-2019-17069	2024-11-21 13:31	2019-10-2	Show	GitHub Exploit DB Packet Storm

222220	7.5	HIGH Network	putty opensuse	putty leap	PuTTY before 0.73 mishandles the "bracketed paste mode" protection mechanism, which may allow a session to be affected by malicious clipboard content.	CWE-74 Injection	CVE-2019-17068	2024-11-21 13:31	2019-10-2	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed