Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 5, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
228691 7.5 危険 scriptmagix - ScriptMagix Lyrics の index.php における SQL インジェクションの脆弱性 - CVE-2007-1616 2012-12-20 18:19 2007-03-22 Show GitHub Exploit DB Packet Storm
228692 7.5 危険 scriptmagix - ScriptMagix Jokes の index.php における SQL インジェクションの脆弱性 - CVE-2007-1615 2012-12-20 18:19 2007-03-22 Show GitHub Exploit DB Packet Storm
228693 9.3 危険 zziplib project - ZZIPlib Library の zzip/file.c におけるスタックベースのバッファオーバーフローの脆弱性 - CVE-2007-1614 2012-12-20 18:19 2007-03-17 Show GitHub Exploit DB Packet Storm
228694 5 警告 W-Agora - Web-Agora の search.php における重要な情報を取得される脆弱性 - CVE-2007-1607 2012-12-20 18:19 2007-03-22 Show GitHub Exploit DB Packet Storm
228695 4.3 警告 W-Agora - Web-Agora におけるクロスサイトスクリプティングの脆弱性 - CVE-2007-1606 2012-12-20 18:19 2007-03-22 Show GitHub Exploit DB Packet Storm
228696 5 警告 W-Agora - Web-Agora における重要な情報を取得される脆弱性 - CVE-2007-1605 2012-12-20 18:19 2007-03-22 Show GitHub Exploit DB Packet Storm
228697 7.5 危険 W-Agora - Web-Agora における任意のコードを実行される脆弱性 - CVE-2007-1604 2012-12-20 18:19 2007-03-22 Show GitHub Exploit DB Packet Storm
228698 7.5 危険 weekly drawing contest - Weekly Drawing Contest の admin/contest.php における新規のコンテスト情報をデータベースに挿入される脆弱性 - CVE-2007-1603 2012-12-20 18:19 2007-03-22 Show GitHub Exploit DB Packet Storm
228699 7.5 危険 weekly drawing contest - Weekly Drawing Contest の check_vote.php における SQL インジェクションの脆弱性 - CVE-2007-1602 2012-12-20 18:19 2007-03-22 Show GitHub Exploit DB Packet Storm
228700 6.5 警告 WordPress.org - WordPress の wp-login.php における認証ユーザを他の Web サイトへリダイレクトされる脆弱性 - CVE-2007-1599 2012-12-20 18:19 2007-03-22 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 6, 2026, 4:08 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
223761 8.8 HIGH
Network 		dlink dir-818lw_firmware An issue was discovered on D-Link DIR-818LW devices with firmware 2.06betab01. There is a command injection in HNAP1 (exploitable with Authentication) via shell metacharacters in the MTU field to Set… CWE-78
OS Command  		CVE-2019-13481 2024-11-21 13:24 2019-07-11 Show GitHub Exploit DB Packet Storm
223762 9.8 CRITICAL
Network 		zeromq
debian
canonical
fedoraproject 		libzmq
debian_linux
ubuntu_linux
fedora 		In ZeroMQ libzmq before 4.0.9, 4.1.x before 4.1.7, and 4.2.x before 4.3.2, a remote, unauthenticated client connecting to a libzmq application, running with a socket listening with CURVE encryption/a… CWE-787
 Out-of-bounds Write 		CVE-2019-13132 2024-11-21 13:24 2019-07-11 Show GitHub Exploit DB Packet Storm
223763 9.8 CRITICAL
Network 		trendnet tew-827dru_firmware TRENDnet TEW-827DRU with firmware up to and including 2.04B03 contains multiple stack-based buffer overflows when processing user input for the setup wizard, allowing an unauthenticated user to execu… CWE-787
 Out-of-bounds Write 		CVE-2019-13279 2024-11-21 13:24 2019-07-11 Show GitHub Exploit DB Packet Storm
223764 9.8 CRITICAL
Network 		trendnet tew-827dru_firmware TRENDnet TEW-827DRU with firmware up to and including 2.04B03 contains multiple command injections when processing user input for the setup wizard, allowing an unauthenticated user to run arbitrary c… CWE-78
OS Command  		CVE-2019-13278 2024-11-21 13:24 2019-07-11 Show GitHub Exploit DB Packet Storm
223765 9.8 CRITICAL
Network 		trendnet tew-827dru_firmware TRENDnet TEW-827DRU with firmware up to and including 2.04B03 contains a stack-based buffer overflow in the ssi binary. The overflow allows an unauthenticated user to execute arbitrary code by provid… CWE-787
 Out-of-bounds Write 		CVE-2019-13276 2024-11-21 13:24 2019-07-11 Show GitHub Exploit DB Packet Storm
223766 6.1 MEDIUM
Network 		ozlabs patchwork A Cross Site Scripting (XSS) vulnerability exists in the template tag used to render message ids in Patchwork v1.1 through v2.1.x. This allows an attacker to insert JavaScript or HTML into the patch … CWE-79
Cross-site Scripting 		CVE-2019-13122 2024-11-21 13:24 2019-07-11 Show GitHub Exploit DB Packet Storm
223767 5.3 MEDIUM
Network 		getflightpath flightpath FlightPath 4.x and 5.0-x allows directory traversal and Local File Inclusion through the form_include parameter in an index.php?q=system-handle-form-submit POST request because of an include_once in … CWE-22
Path Traversal 		CVE-2019-13396 2024-11-21 13:24 2019-07-10 Show GitHub Exploit DB Packet Storm
223768 5.9 MEDIUM
Network 		glpi-project glpi An issue was discovered in GLPI before 9.4.1. After a successful password reset by a user, it is possible to change that user's password again during the next 24 hours without any information except … CWE-640
 Weak Password Recovery Mechanism for Forgotten Password 		CVE-2019-13240 2024-11-21 13:24 2019-07-10 Show GitHub Exploit DB Packet Storm
223769 6.5 MEDIUM
Network 		oniguruma_project
fedoraproject 		oniguruma
fedora 		A NULL Pointer Dereference in match_at() in regexec.c in Oniguruma 6.9.2 allows attackers to potentially cause denial of service by providing a crafted regular expression. Oniguruma issues often affe… CWE-476
 NULL Pointer Dereference 		CVE-2019-13225 2024-11-21 13:24 2019-07-10 Show GitHub Exploit DB Packet Storm
223770 8.8 HIGH
Network 		cyberpowersystems powerpanel CSRF in the Agent/Center component of CyberPower PowerPanel Business Edition 3.4.0 allows an attacker to submit POST requests to any forms in the web application. This can be exploited by tricking an… CWE-352
 Origin Validation Error 		CVE-2019-13071 2024-11-21 13:24 2019-07-10 Show GitHub Exploit DB Packet Storm