Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 4, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
228911 7.5 危険 woltlab - wBB Lite の pms.php における SQL インジェクションの脆弱性 - CVE-2007-0812 2012-12-20 18:19 2007-02-7 Show GitHub Exploit DB Packet Storm
228912 7.5 危険 ptirhiikmods - ptirhiikmods の Categories hierarchy における PHP リモートファイルインクルージョンの脆弱性 - CVE-2007-0809 2012-12-20 18:19 2007-02-7 Show GitHub Exploit DB Packet Storm
228913 6.8 警告 stlport - STLport におけるバッファオーバーフローの脆弱性 - CVE-2007-0803 2012-12-20 18:19 2007-02-7 Show GitHub Exploit DB Packet Storm
228914 7.5 危険 uapplication - Ublog Reload の badword.asp における SQL インジェクションの脆弱性 - CVE-2007-0799 2012-12-20 18:19 2007-02-6 Show GitHub Exploit DB Packet Storm
228915 4.3 警告 uapplication - Ublog Reload におけるクロスサイトスクリプティングの脆弱性 - CVE-2007-0798 2012-12-20 18:19 2007-02-6 Show GitHub Exploit DB Packet Storm
228916 7.5 危険 wap - Wap Portal Server における PHP リモートファイルインクルージョンの脆弱性 - CVE-2007-0795 2012-12-20 18:19 2007-02-6 Show GitHub Exploit DB Packet Storm
228917 7.5 危険 SmartSoft - SmartFTP におけるヒープベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2007-0790 2012-12-20 18:19 2007-02-6 Show GitHub Exploit DB Packet Storm
228918 6.8 警告 Simple Invoices - Simple Invoices の controller.php における PHP リモートファイルインクルージョンの脆弱性 - CVE-2007-0787 2012-12-20 18:19 2007-02-6 Show GitHub Exploit DB Packet Storm
228919 7.5 危険 rbl - Raymond BERTHOU script collection の tPassword 用の login.asp における SQL インジェクションの脆弱性 - CVE-2007-0784 2012-12-20 18:19 2007-02-6 Show GitHub Exploit DB Packet Storm
228920 4.3 警告 Yahoo! - Yahoo! Messenger の Contact Details 機能におけるクロスサイトスクリプティングの脆弱性 - CVE-2007-0768 2012-12-20 18:19 2007-02-5 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 5, 2026, 4:51 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
223351 8.8 HIGH
Network 		control-webpanel webpanel In CentOS-WebPanel.com (aka CWP) CentOS Web Panel 0.9.8.838 to 0.9.8.846, remote attackers can bypass authentication in the login process by leveraging the knowledge of a valid username. The attacker… CWE-639
 Authorization Bypass Through User-Controlled Key 		CVE-2019-13605 2024-11-21 13:25 2019-07-17 Show GitHub Exploit DB Packet Storm
223352 5.9 MEDIUM
Network 		hidglobal digital_persona_u.are.u_4500_driver_firmware An issue was discovered in the HID Global DigitalPersona (formerly Crossmatch) U.are.U 4500 Fingerprint Reader Windows Biometric Framework driver 5.0.0.5. It has a statically coded initialization vec… CWE-330
 Use of Insufficiently Random Values 		CVE-2019-13603 2024-11-21 13:25 2019-07-17 Show GitHub Exploit DB Packet Storm
223353 7.5 HIGH
Network 		altn mdaemon_email_server MDaemon Email Server 19 through 20.0.1 skips SpamAssassin checks by default for e-mail messages larger than 2 MB (and limits checks to 10 MB even with special configuration), which is arguably incons… CWE-20
 Improper Input Validation  		CVE-2019-13612 2024-11-21 13:25 2019-07-16 Show GitHub Exploit DB Packet Storm
223354 8.8 HIGH
Network 		python-engineio_project python-engineio An issue was discovered in python-engineio through 3.8.2. There is a Cross-Site WebSocket Hijacking (CSWSH) vulnerability that allows attackers to make WebSocket connections to a server by using a vi… CWE-352
 Origin Validation Error 		CVE-2019-13611 2024-11-21 13:25 2019-07-16 Show GitHub Exploit DB Packet Storm
223355 5.9 MEDIUM
Network 		assaabloy hid_digitalpersona_4500_firmware There is a short key vulnerability in HID Global DigitalPersona (formerly Crossmatch) U.are.U 4500 Fingerprint Reader v24. The key for obfuscating the fingerprint image is vulnerable to brute-force a… CWE-327
 Use of a Broken or Risky Cryptographic Algorithm 		CVE-2019-13604 2024-11-21 13:25 2019-07-15 Show GitHub Exploit DB Packet Storm
223356 7.8 HIGH
Local 		videolan
debian
canonical
opensuse 		vlc_media_player
debian_linux
ubuntu_linux
leap
backports_sle 		An Integer Underflow in MP4_EIA608_Convert() in modules/demux/mp4/mp4.c in VideoLAN VLC media player through 3.0.7.1 allows remote attackers to cause a denial of service (heap-based buffer overflow a… CWE-787
CWE-191
 Out-of-bounds Write
 Integer Underflow (Wrap or Wraparound) 		CVE-2019-13602 2024-11-21 13:25 2019-07-15 Show GitHub Exploit DB Packet Storm
223357 9.8 CRITICAL
Network 		getvera vera_edge_firmware LuaUPnP in Vera Edge Home Controller 1.7.4452 allows remote unauthenticated users to execute arbitrary OS commands via the code parameter to /port_3480/data_request because the "No unsafe lua allowed… CWE-78
OS Command  		CVE-2019-13598 2024-11-21 13:25 2019-07-15 Show GitHub Exploit DB Packet Storm
223358 9.8 CRITICAL
Network 		sahipro sahi_pro _s_/sprm/_s_/dyn/Player_setScriptFile in Sahi Pro 8.0.0 allows command execution. It allows one to run ".sah" scripts via Sahi Launcher. Also, one can create a new script with an editor. It is possib… CWE-78
OS Command  		CVE-2019-13597 2024-11-21 13:25 2019-07-15 Show GitHub Exploit DB Packet Storm
223359 8.8 HIGH
Network 		mirumee saleor In Mirumee Saleor 2.7.0 (fixed in 2.8.0), CSRF protection middleware was accidentally disabled, which allowed attackers to send a POST request without a valid CSRF token and be accepted by the server. CWE-352
 Origin Validation Error 		CVE-2019-13594 2024-11-21 13:25 2019-07-15 Show GitHub Exploit DB Packet Storm
223360 5.5 MEDIUM
Local 		sound_exchange_project sound_exchange An issue was discovered in libsox.a in SoX 14.4.2. In sox-fmt.h (startread function), there is an integer overflow on the result of integer addition (wraparound to 0) fed into the lsx_calloc macro th… CWE-190
CWE-476
 Integer Overflow or Wraparound
 NULL Pointer Dereference 		CVE-2019-13590 2024-11-21 13:25 2019-07-15 Show GitHub Exploit DB Packet Storm