Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 10, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
228861	7.5	危険	popscript.com	-	Expert Advisor の index.php における SQL インジェクションの脆弱性	-	CVE-2007-3882	2012-12-20 18:33	2007-07-18	Show	GitHub Exploit DB Packet Storm

228862	7.5	危険	pictures rating	-	Picture Rating の index.php における SQL インジェクションの脆弱性	-	CVE-2007-3881	2012-12-20 18:33	2007-07-18	Show	GitHub Exploit DB Packet Storm

228863	7.2	危険	サン・マイクロシステムズ	-	SUNWsrspx パッケージで同梱されている SRS Net Connect の srsexec におけるフォーマットストリングの脆弱性	CWE-134 書式文字列の問題	CVE-2007-3880	2012-12-20 18:33	2007-11-2	Show	GitHub Exploit DB Packet Storm

228864	6.9	警告	トレンドマイクロ	-	Trend Micro AntiSpyware および PC-Cillin Internet Security 2007 の SSAPI Engine におけるスタックベースのバッファオーバーフローの脆弱性	-	CVE-2007-3873	2012-12-20 18:33	2007-08-22	Show	GitHub Exploit DB Packet Storm

228865	6	警告	TortoiseSVN CollabNet, Inc.	-	TortoiseSVN で使用されている Subversion におけるディレクトリトラバーサルの脆弱性	CWE-22 パス・トラバーサル	CVE-2007-3846	2012-12-20 18:33	2007-08-27	Show	GitHub Exploit DB Packet Storm

228866	9	危険	Pidgin	-	Linux 用の Pidgin における特定のコマンドを実行される脆弱性	-	CVE-2007-3841	2012-12-20 18:33	2007-07-17	Show	GitHub Exploit DB Packet Storm

228867	7.5	危険	sitetrafficstats	-	Traffic Stats の referralUrl.php における SQL インジェクションの脆弱性	-	CVE-2007-3840	2012-12-20 18:33	2007-07-17	Show	GitHub Exploit DB Packet Storm

228868	4	警告	tbdev.net	-	TBDev.NET の takeprofedit.php におけるクロスサイトスクリプティングの脆弱性	-	CVE-2007-3839	2012-12-20 18:33	2007-07-17	Show	GitHub Exploit DB Packet Storm

228869	2.6	注意	tbdev.net	-	takeprofedit.php の takeprofedit.php におけるクロスサイトスクリプティングの脆弱性	-	CVE-2007-3838	2012-12-20 18:33	2007-07-17	Show	GitHub Exploit DB Packet Storm

228870	4.9	警告	republike slovenije	-	PIRS の pirs32.exe におけるバッファオーバーフローの脆弱性	-	CVE-2007-3815	2012-12-20 18:33	2007-07-16	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 11, 2026, 4:09 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
222211	8.8	HIGH Network	tp-link	tl-wr841n_firmware	This vulnerability allows remote attackers to execute arbitrary code on affected installations of TP-LINK TL-WR841N routers. Authentication is not required to exploit this vulnerability. The specific…	CWE-120 Classic Buffer Overflow	CVE-2019-17147	2024-11-21 13:31	2020-01-8	Show	GitHub Exploit DB Packet Storm

222212	9.8	CRITICAL Network	dlink	dcs-935l_firmware dcs-960l_firmware	This vulnerability allows remote attackers to execute arbitrary code on affected installations of D-Link DCS-960L v1.07.102. Authentication is not required to exploit this vulnerability. The specific…	CWE-306 Missing Authentication for Critical Function	CVE-2019-17146	2024-11-21 13:31	2020-01-8	Show	GitHub Exploit DB Packet Storm

222213	6.1	MEDIUM Network	open-xchange	open-xchange_appsuite	OX App Suite through 7.10.2 has XSS.	CWE-79 Cross-site Scripting	CVE-2019-16717	2024-11-21 13:31	2020-01-7	Show	GitHub Exploit DB Packet Storm

222214	6.6	MEDIUM Network	open-xchange	open-xchange_appsuite	OX App Suite through 7.10.2 has Incorrect Access Control.	CWE-276 Incorrect Default Permissions	CVE-2019-16716	2024-11-21 13:31	2020-01-7	Show	GitHub Exploit DB Packet Storm

222215	8.8	HIGH Network	tiny_file_manager_project	tiny_file_manager	In Tiny File Manager before 2.3.9, there is a remote code execution via Upload from URL and Edit/Rename files. Only authenticated users are impacted.	CWE-434 Unrestricted Upload of File with Dangerous Type	CVE-2019-16790	2024-11-21 13:31	2019-12-31	Show	GitHub Exploit DB Packet Storm

222216	7.8	HIGH Local	k7computing	k7_ultimate_security	In K7 Ultimate Security 16.0.0117, the module K7BKCExt.dll (aka the backup module) improperly validates the administrative privileges of the user, allowing an arbitrary file write via a symbolic link…	CWE-59 Link Following	CVE-2019-16896	2024-11-21 13:31	2019-12-28	Show	GitHub Exploit DB Packet Storm

222217	5.4	MEDIUM Network	wordpress debian	wordpress debian_linux	In WordPress before 5.3.1, authenticated users with lower privileges (like contributors) can inject JavaScript code in the block editor, which is executed within the dashboard. It can lead to an admi…	CWE-79 Cross-site Scripting	CVE-2019-16781	2024-11-21 13:31	2019-12-27	Show	GitHub Exploit DB Packet Storm

222218	8.2	HIGH Network	agendaless oracle debian fedoraproject redhat	waitress communications_cloud_native_core_network_function_cloud_native_environment debian_linux fedora openstack	In Waitress through version 1.4.0, if a proxy server is used in front of waitress, an invalid request may be sent by an attacker that bypasses the front-end and is parsed differently by waitress lead…	CWE-444 HTTP Request Smuggling	CVE-2019-16789	2024-11-21 13:31	2019-12-27	Show	GitHub Exploit DB Packet Storm

222219	5.4	MEDIUM Network	wordpress debian	wordpress debian_linux	WordPress users with lower privileges (like contributors) can inject JavaScript code in the block editor using a specific payload, which is executed within the dashboard. This can lead to XSS if an a…	CWE-79 Cross-site Scripting	CVE-2019-16780	2024-11-21 13:31	2019-12-27	Show	GitHub Exploit DB Packet Storm

222220	7.5	HIGH Network	agendaless oracle debian fedoraproject redhat	waitress communications_cloud_native_core_network_function_cloud_native_environment debian_linux fedora openstack	Waitress through version 1.3.1 would parse the Transfer-Encoding header and only look for a single string value, if that value was not chunked it would fall through and use the Content-Length header …	CWE-444 HTTP Request Smuggling	CVE-2019-16786	2024-11-21 13:31	2019-12-21	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed