Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 10, 2026, noon

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
228951	6.4	警告	qt-cute	-	QuickTalk フォーラムにおけるディレクトリトラバーサルの脆弱性	-	CVE-2007-3505	2012-12-20 18:19	2007-07-2	Show	GitHub Exploit DB Packet Storm

228952	10	危険	xeforum	-	Xeweb XEForum における権限を取得される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2007-3500	2012-12-20 18:19	2007-06-29	Show	GitHub Exploit DB Packet Storm

228953	6.4	警告	slackroll	-	SlackRoll におけるサービス運用妨害 (DoS) の脆弱性	-	CVE-2007-3499	2012-12-20 18:19	2007-06-29	Show	GitHub Exploit DB Packet Storm

228954	4.3	警告	SAP	-	SAP NetWeaver Nw04 の BC-WD-JAV におけるクロスサイトスクリプティングの脆弱性	-	CVE-2007-3496	2012-12-20 18:19	2007-06-29	Show	GitHub Exploit DB Packet Storm

228955	4.3	警告	SAP	-	SAP Basis コンポーネントの BC-MID-ICF におけるクロスサイトスクリプティングの脆弱性	-	CVE-2007-3495	2012-12-20 18:19	2007-06-29	Show	GitHub Exploit DB Packet Storm

228956	7.5	危険	Progress Software Corporation	-	Progress Software OpenEdge の _mprosrv におけるバッファオーバーフローの脆弱性	-	CVE-2007-3491	2012-12-20 18:19	2007-06-29	Show	GitHub Exploit DB Packet Storm

228957	4.3	警告	Yandex	-	Yandex Server におけるクロスサイトスクリプティングの脆弱性	-	CVE-2007-3485	2012-12-20 18:19	2007-06-28	Show	GitHub Exploit DB Packet Storm

228958	10	危険	BlackBerry	-	Research in Motion BlackBerry Enterprise Server におけるマルウェアを読み込む脆弱性	-	CVE-2007-3483	2012-12-20 18:19	2007-06-28	Show	GitHub Exploit DB Packet Storm

228959	7.8	危険	VideoLAN	-	VideoLAN VLC Media Player の input.c におけるサービス運用妨害 (DoS) の脆弱性	-	CVE-2007-3468	2012-12-20 18:19	2007-06-27	Show	GitHub Exploit DB Packet Storm

228960	7.8	危険	VideoLAN	-	VideoLAN VLC Media Player の stats.c における整数オーバーフローの脆弱性	-	CVE-2007-3467	2012-12-20 18:19	2007-06-27	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 10, 2026, 4:58 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
214241	3.3	LOW Local	qemu opensuse	qemu leap	hw/ppc/spapr.c in QEMU through 3.1.0 allows Information Exposure because the hypervisor shares the /proc/device-tree/system-id and /proc/device-tree/model system attributes with a guest.	CWE-668 Exposure of Resource to Wrong Sphere	CVE-2019-8934	2024-11-21 13:50	2019-03-22	Show	GitHub Exploit DB Packet Storm

214242	7.7	HIGH Network	tibco	jasperreports_server	The SOAP API component vulnerability of TIBCO Software Inc.'s TIBCO JasperReports Server, and TIBCO JasperReports Server for ActiveMatrix BPM contains a vulnerability that may allow a malicious authe…	NVD-CWE-noinfo	CVE-2019-8986	2024-11-21 13:50	2019-03-8	Show	GitHub Exploit DB Packet Storm

214243	6.1	MEDIUM Network	wuzhicms	wuzhicms	XSS exists in WUZHI CMS 4.1.0 via index.php?m=core&f=map&v=baidumap&x=[XSS]&y=[XSS] to coreframe/app/core/map.php.	CWE-79 Cross-site Scripting	CVE-2019-9108	2024-11-21 13:50	2019-02-25	Show	GitHub Exploit DB Packet Storm

214244	6.1	MEDIUM Network	wuzhicms	wuzhi_cms	XSS exists in WUZHI CMS 4.1.0 via index.php?m=attachment&f=imagecut&v=init&imgurl=[XSS] to coreframe/app/attachment/imagecut.php.	CWE-79 Cross-site Scripting	CVE-2019-9107	2024-11-21 13:50	2019-02-25	Show	GitHub Exploit DB Packet Storm

214245	8.8	HIGH Network	thinkphp opensourcebms zzzcms	thinkphp open_source_background_management_system zzzphp	ThinkPHP before 3.2.4, as used in Open Source BMS v1.1.1 and other products, allows Remote Command Execution via public//?s=index/\think\app/invokefunction&function=call_user_func_array&vars[0]=syste…	CWE-94 CWE-306 Code Injection Missing Authentication for Critical Function	CVE-2019-9082	2024-11-21 13:50	2019-02-25	Show	GitHub Exploit DB Packet Storm

214246	5.4	MEDIUM Network	zzcms	zzcms	zzcms 2019 has XSS via an arbitrary user/ask.php?do=modify parameter because inc/stopsqlin.php does not block a mixed-case string such as sCrIpT.	CWE-79 Cross-site Scripting	CVE-2019-9078	2024-11-21 13:50	2019-02-25	Show	GitHub Exploit DB Packet Storm

214247	7.8	HIGH Local	gnu netapp canonical f5	binutils element_software ubuntu_linux traffix_signaling_delivery_controller	An issue was discovered in GNU Binutils 2.32. It is a heap-based buffer overflow in process_mips_specific in readelf.c via a malformed MIPS option section.	CWE-787 Out-of-bounds Write	CVE-2019-9077	2024-11-21 13:50	2019-02-24	Show	GitHub Exploit DB Packet Storm

214248	5.5	MEDIUM Local	gnu netapp	binutils element_software_management	An issue was discovered in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.32. It is an attempted excessive memory allocation in elf_read_notes in elf.c.	CWE-770 Allocation of Resources Without Limits or Throttling	CVE-2019-9076	2024-11-21 13:50	2019-02-24	Show	GitHub Exploit DB Packet Storm

214249	5.5	MEDIUM Local	gnu netapp canonical	binutils solidfire hci_management_node ubuntu_linux	An issue was discovered in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.32. It is an out-of-bounds read leading to a SEGV in bfd_getl32 in libbfd.c, when ca…	CWE-125 Out-of-bounds Read	CVE-2019-9074	2024-11-21 13:50	2019-02-24	Show	GitHub Exploit DB Packet Storm

214250	7.8	HIGH Local	gnu netapp canonical f5	binutils solidfire hci_management_node ubuntu_linux big-ip_edge_gateway big-ip_advanced_firewall_manager big-ip_access_policy_manager big-ip_application_acceleration_manager b…	An issue was discovered in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.32. It is a heap-based buffer overflow in _bfd_archive_64_bit_slurp_armap in archive…	CWE-787 Out-of-bounds Write	CVE-2019-9075	2024-11-21 13:50	2019-02-24	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed