Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 6, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
228861 9.3 危険 rsbr-software - News File Grabber におけるスタックベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2007-1037 2012-12-20 18:19 2007-02-21 Show GitHub Exploit DB Packet Storm
228862 7.5 危険 PHPNUKE - PHP-Nuke 用の Emporium モジュールにおける SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2007-1034 2012-12-20 18:19 2007-02-21 Show GitHub Exploit DB Packet Storm
228863 6.8 警告 phpMyFAQ - phpMyFAQ における "サーバ上にファイルをアップロードする権限を取得される" 脆弱性 CWE-noinfo
情報不足 		CVE-2007-1032 2012-12-20 18:19 2007-02-8 Show GitHub Exploit DB Packet Storm
228864 6.8 警告 spoonlabs - SpoonLabs Vivvo Article Management CMS の include/db_conn.php におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2007-1031 2012-12-20 18:19 2007-02-21 Show GitHub Exploit DB Packet Storm
228865 7.6 危険 quicksoft - Quiksoft EasyMail Objects の IMAP4 コンポーネントにおけるスタックベースのバッファオーバーフローの脆弱性 - CVE-2007-1029 2012-12-20 18:19 2007-02-21 Show GitHub Exploit DB Packet Storm
228866 7.5 危険 scriptdungeon - XLAtunes の view.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2007-1026 2012-12-20 18:19 2007-02-21 Show GitHub Exploit DB Packet Storm
228867 7.5 危険 virtualsystem - VS-Link-Partner の inc/functions_inc.php における PHP リモートファイルインクルージョンの脆弱性 - CVE-2007-1025 2012-12-20 18:19 2007-02-21 Show GitHub Exploit DB Packet Storm
228868 7.5 危険 Snitz - Snitz Forums 2000 の pop_profile.asp における SQL インジェクションの脆弱性 - CVE-2007-1023 2012-12-20 18:19 2007-02-21 Show GitHub Exploit DB Packet Storm
228869 7.5 危険 turuncu portal - Turuncu Portal の h_goster.asp における SQL インジェクションの脆弱性 - CVE-2007-1022 2012-12-20 18:19 2007-02-21 Show GitHub Exploit DB Packet Storm
228870 10 危険 xfairguy - CodeAvalanche News の inc_listnews.asp における SQL インジェクションの脆弱性 - CVE-2007-1021 2012-12-20 18:19 2007-02-21 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 6, 2026, 4:08 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
223711 5.9 MEDIUM
Network 		w1.fi
fedoraproject
canonical
debian 		hostapd
fedora
ubuntu_linux
debian_linux 		The implementations of SAE and EAP-pwd in hostapd and wpa_supplicant 2.x through 2.8 are vulnerable to side-channel attacks as a result of observable timing differences and cache access patterns when… CWE-203
 Information Exposure Through Discrepancy 		CVE-2019-13377 2024-11-21 13:24 2019-08-16 Show GitHub Exploit DB Packet Storm
223712 5.5 MEDIUM
Local 		stb_vorbis_project
debian 		stb_vorbis
debian_linux 		A reachable assertion in the lookup1_values function in stb_vorbis through 2019-03-04 allows an attacker to cause a denial of service by opening a crafted Ogg Vorbis file. CWE-617
 Reachable Assertion 		CVE-2019-13223 2024-11-21 13:24 2019-08-16 Show GitHub Exploit DB Packet Storm
223713 7.1 HIGH
Local 		stb_vorbis_project
debian 		stb_vorbis
debian_linux 		An out-of-bounds read of a global buffer in the draw_line function in stb_vorbis through 2019-03-04 allows an attacker to cause a denial of service or disclose sensitive information by opening a craf… CWE-125
Out-of-bounds Read 		CVE-2019-13222 2024-11-21 13:24 2019-08-16 Show GitHub Exploit DB Packet Storm
223714 7.8 HIGH
Local 		stb_vorbis_project
debian 		stb_vorbis
debian_linux 		A stack buffer overflow in the compute_codewords function in stb_vorbis through 2019-03-04 allows an attacker to cause a denial of service or execute arbitrary code by opening a crafted Ogg Vorbis fi… CWE-787
 Out-of-bounds Write 		CVE-2019-13221 2024-11-21 13:24 2019-08-16 Show GitHub Exploit DB Packet Storm
223715 7.1 HIGH
Local 		stb_vorbis_project
debian 		stb_vorbis
debian_linux 		Use of uninitialized stack variables in the start_decoder function in stb_vorbis through 2019-03-04 allows an attacker to cause a denial of service or disclose sensitive information by opening a craf… CWE-908
 Use of Uninitialized Resource 		CVE-2019-13220 2024-11-21 13:24 2019-08-16 Show GitHub Exploit DB Packet Storm
223716 5.5 MEDIUM
Local 		stb_vorbis_project
debian 		stb_vorbis
debian_linux 		A NULL pointer dereference in the get_window function in stb_vorbis through 2019-03-04 allows an attacker to cause a denial of service by opening a crafted Ogg Vorbis file. CWE-476
 NULL Pointer Dereference 		CVE-2019-13219 2024-11-21 13:24 2019-08-16 Show GitHub Exploit DB Packet Storm
223717 5.5 MEDIUM
Local 		stb_vorbis_project
debian 		stb_vorbis
debian_linux 		Division by zero in the predict_point function in stb_vorbis through 2019-03-04 allows an attacker to cause a denial of service by opening a crafted Ogg Vorbis file. CWE-369
 Divide By Zero 		CVE-2019-13218 2024-11-21 13:24 2019-08-16 Show GitHub Exploit DB Packet Storm
223718 7.8 HIGH
Local 		stb_vorbis_project
debian 		stb_vorbis
debian_linux 		A heap buffer overflow in the start_decoder function in stb_vorbis through 2019-03-04 allows an attacker to cause a denial of service or execute arbitrary code by opening a crafted Ogg Vorbis file. CWE-787
 Out-of-bounds Write 		CVE-2019-13217 2024-11-21 13:24 2019-08-16 Show GitHub Exploit DB Packet Storm
223719 8.2 HIGH
Network 		mediola neo_server eQ-3 Homematic CCU3 AddOn 'Mediola NEO Server for Homematic CCU3' prior to 2.4.5 allows uncontrolled admin access to start or stop the Node.js process, resulting in the ability to obtain mediola conf… CWE-425
 Direct Request ('Forced Browsing') 		CVE-2019-13030 2024-11-21 13:24 2019-08-15 Show GitHub Exploit DB Packet Storm
223720 6.5 MEDIUM
Network 		search-guard search_guard Search Guard versions before 24.3 had an issue when Cross Cluster Search (CCS) was enabled, authenticated users are always authorized on the local cluster ignoring their roles on the remote cluster(s… NVD-CWE-Other
CVE-2019-13416 2024-11-21 13:24 2019-08-14 Show GitHub Exploit DB Packet Storm