Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 9, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
228931 6.8 警告 wheatblog - wB の admin/login.php における SQL インジェクションの脆弱性 - CVE-2007-3557 2012-12-20 18:19 2007-07-4 Show GitHub Exploit DB Packet Storm
228932 7.5 危険 Vastal I-Tech & Co. - Buddy Zone の view_sub_cat.php における SQL インジェクションの脆弱性 - CVE-2007-3549 2012-12-20 18:19 2007-07-3 Show GitHub Exploit DB Packet Storm
228933 7.1 危険 w3filer - W3Filer におけるスタックベースのバッファオーバーフローの脆弱性 - CVE-2007-3548 2012-12-20 18:19 2007-07-3 Show GitHub Exploit DB Packet Storm
228934 7.8 危険 qt-cute - QuickTicket の qti_checkname.php におけるディレクトリトラバーサルの脆弱性 - CVE-2007-3547 2012-12-20 18:19 2007-07-3 Show GitHub Exploit DB Packet Storm
228935 7.1 危険 warzone - Warzone 2100 Resurrection におけるバッファオーバーフローの脆弱性 - CVE-2007-3545 2012-12-20 18:19 2007-06-22 Show GitHub Exploit DB Packet Storm
228936 6.5 警告 WordPress.org - WordPress および WordPress MU の wp-app.php などにおける任意の PHP コードを実行される脆弱性 - CVE-2007-3544 2012-12-20 18:19 2007-07-3 Show GitHub Exploit DB Packet Storm
228937 6 警告 WordPress.org - WordPress および WordPress MU における任意の PHP コードを実行される脆弱性 - CVE-2007-3543 2012-12-20 18:19 2007-07-3 Show GitHub Exploit DB Packet Storm
228938 4.3 警告 PluXml - Pluxml の admin/auth.php におけるクロスサイトスクリプティングの脆弱性 - CVE-2007-3542 2012-12-20 18:19 2007-07-3 Show GitHub Exploit DB Packet Storm
228939 4.3 警告 rainworx - rwAuction Pro の search.asp におけるクロスサイトスクリプティングの脆弱性 - CVE-2007-3540 2012-12-20 18:19 2007-07-3 Show GitHub Exploit DB Packet Storm
228940 7.5 危険 qt-cute - QuickTicket およびの QuickTalk フォーラムにおける SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2007-3539 2012-12-20 18:19 2007-07-3 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 9, 2026, 5:07 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
214201 9.8 CRITICAL
Network 		kohanaframework kohana Kohana through 3.3.6 has SQL Injection when the order_by() parameter can be controlled. CWE-89
SQL Injection 		CVE-2019-8979 2024-11-21 13:50 2019-02-21 Show GitHub Exploit DB Packet Storm
214202 8.8 HIGH
Network 		indexhibit indexhibit In Indexhibit 2.1.5, remote attackers can execute arbitrary code via the v parameter (in conjunction with the id parameter) in a upd_jxcode=true action to the ndxzstudio/?a=system URI. CWE-20
 Improper Input Validation  		CVE-2019-8954 2024-11-21 13:50 2019-02-21 Show GitHub Exploit DB Packet Storm
214203 6.1 MEDIUM
Network 		netgate haproxy The HAProxy package before 0.59_16 for pfSense has XSS via the desc (aka Description) or table_actionsaclN parameter, related to haproxy_listeners.php and haproxy_listeners_edit.php. CWE-79
Cross-site Scripting 		CVE-2019-8953 2024-11-21 13:50 2019-02-21 Show GitHub Exploit DB Packet Storm
214204 9.8 CRITICAL
Network 		dasannetworks h665_firmware The backdoor account dnsekakf2$$ in /bin/login on DASAN H665 devices with firmware 1.46p1-0028 allows an attacker to login to the admin account via TELNET. CWE-798
 Use of Hard-coded Credentials 		CVE-2019-8950 2024-11-21 13:50 2019-02-20 Show GitHub Exploit DB Packet Storm
214205 9.8 CRITICAL
Network 		papercut papercut_mf
papercut_ng 		PaperCut MF before 18.3.6 and PaperCut NG before 18.3.6 allow script injection via the user interface, aka PC-15163. CWE-74
Injection 		CVE-2019-8948 2024-11-21 13:50 2019-02-20 Show GitHub Exploit DB Packet Storm
214206 6.5 MEDIUM
Network 		octopus octopus_deploy
octopus_server 		An Information Exposure issue in the Terraform deployment step in Octopus Deploy before 2019.1.8 (and before 2018.10.4 LTS) allows remote authenticated users to view sensitive Terraform output variab… CWE-532
 Inclusion of Sensitive Information in Log Files 		CVE-2019-8944 2024-11-21 13:50 2019-02-20 Show GitHub Exploit DB Packet Storm
214207 6.5 MEDIUM
Network 		wordpress wordpress WordPress through 5.0.3 allows Path Traversal in wp_crop_image(). An attacker (who has privileges to crop an image) can write the output image to an arbitrary directory via a filename containing two … CWE-22
Path Traversal 		CVE-2019-8943 2024-11-21 13:50 2019-02-20 Show GitHub Exploit DB Packet Storm
214208 8.8 HIGH
Network 		wordpress
debian 		wordpress
debian_linux 		WordPress before 4.9.9 and 5.x before 5.0.1 allows remote code execution because an _wp_attached_file Post Meta entry can be changed to an arbitrary string, such as one ending with a .jpg?file.php su… CWE-434
 Unrestricted Upload of File with Dangerous Type  		CVE-2019-8942 2024-11-21 13:50 2019-02-20 Show GitHub Exploit DB Packet Storm
214209 6.1 MEDIUM
Network 		tautulli tautulli data/interfaces/default/history.html in Tautulli 2.1.26 has XSS via a crafted Plex username that is mishandled when constructing the History page. CWE-79
Cross-site Scripting 		CVE-2019-8939 2024-11-21 13:50 2019-02-20 Show GitHub Exploit DB Packet Storm
214210 5.4 MEDIUM
Network 		o-dyn collabtive Collabtive 3.1 allows XSS via the manageuser.php?action=profile id parameter. CWE-79
Cross-site Scripting 		CVE-2019-8935 2024-11-21 13:50 2019-02-20 Show GitHub Exploit DB Packet Storm