Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 8, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
228951 6.4 警告 qt-cute - QuickTalk フォーラムにおけるディレクトリトラバーサルの脆弱性 - CVE-2007-3505 2012-12-20 18:19 2007-07-2 Show GitHub Exploit DB Packet Storm
228952 10 危険 xeforum - Xeweb XEForum における権限を取得される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2007-3500 2012-12-20 18:19 2007-06-29 Show GitHub Exploit DB Packet Storm
228953 6.4 警告 slackroll - SlackRoll におけるサービス運用妨害 (DoS) の脆弱性 - CVE-2007-3499 2012-12-20 18:19 2007-06-29 Show GitHub Exploit DB Packet Storm
228954 4.3 警告 SAP - SAP NetWeaver Nw04 の BC-WD-JAV におけるクロスサイトスクリプティングの脆弱性 - CVE-2007-3496 2012-12-20 18:19 2007-06-29 Show GitHub Exploit DB Packet Storm
228955 4.3 警告 SAP - SAP Basis コンポーネントの BC-MID-ICF におけるクロスサイトスクリプティングの脆弱性 - CVE-2007-3495 2012-12-20 18:19 2007-06-29 Show GitHub Exploit DB Packet Storm
228956 7.5 危険 Progress Software Corporation - Progress Software OpenEdge の _mprosrv におけるバッファオーバーフローの脆弱性 - CVE-2007-3491 2012-12-20 18:19 2007-06-29 Show GitHub Exploit DB Packet Storm
228957 4.3 警告 Yandex - Yandex Server におけるクロスサイトスクリプティングの脆弱性 - CVE-2007-3485 2012-12-20 18:19 2007-06-28 Show GitHub Exploit DB Packet Storm
228958 10 危険 BlackBerry - Research in Motion BlackBerry Enterprise Server におけるマルウェアを読み込む脆弱性 - CVE-2007-3483 2012-12-20 18:19 2007-06-28 Show GitHub Exploit DB Packet Storm
228959 7.8 危険 VideoLAN - VideoLAN VLC Media Player の input.c におけるサービス運用妨害 (DoS) の脆弱性 - CVE-2007-3468 2012-12-20 18:19 2007-06-27 Show GitHub Exploit DB Packet Storm
228960 7.8 危険 VideoLAN - VideoLAN VLC Media Player の stats.c における整数オーバーフローの脆弱性 - CVE-2007-3467 2012-12-20 18:19 2007-06-27 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 8, 2026, 4:54 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
223831 9.8 CRITICAL
Network 		datagrid_project datagrid The datagrid gem 1.0.6 for Ruby, as distributed on RubyGems.org, included a code-execution backdoor inserted by a third party. CWE-94
Code Injection 		CVE-2019-14281 2024-11-21 13:26 2019-07-26 Show GitHub Exploit DB Packet Storm
223832 5.3 MEDIUM
Network 		craftcms craft_cms In some circumstances, Craft 2 before 2.7.10 and 3 before 3.2.6 wasn't stripping EXIF data from user-uploaded images when it was configured to do so, potentially exposing personal/geolocation data to… CWE-200
Information Exposure 		CVE-2019-14280 2024-11-21 13:26 2019-07-26 Show GitHub Exploit DB Packet Storm
223833 9.8 CRITICAL
Network 		axway securetransport Axway SecureTransport 5.x through 5.3 (or 5.x through 5.5 with certain API configuration) is vulnerable to unauthenticated blind XML injection (and XXE) in the resetPassword functionality via the RES… CWE-91
Blind XPath Injection 		CVE-2019-14277 2024-11-21 13:26 2019-07-26 Show GitHub Exploit DB Packet Storm
223834 5.5 MEDIUM
Local 		xfig_project
debian
opensuse 		fig2dev
debian_linux
leap 		Xfig fig2dev 3.2.7a has a stack-based buffer overflow in the calc_arrow function in bound.c. CWE-787
 Out-of-bounds Write 		CVE-2019-14275 2024-11-21 13:26 2019-07-26 Show GitHub Exploit DB Packet Storm
223835 5.5 MEDIUM
Local 		mcpp_project
opensuse 		mcpp
leap
backports_sle 		MCPP 2.7.2 has a heap-based buffer overflow in the do_msg() function in support.c. CWE-787
 Out-of-bounds Write 		CVE-2019-14274 2024-11-21 13:26 2019-07-26 Show GitHub Exploit DB Packet Storm
223836 7.1 HIGH
Local 		comodo firewall
internet_security
antivirus 		Comodo Antivirus through 12.0.0.6870, Comodo Firewall through 12.0.0.6870, and Comodo Internet Security Premium through 12.0.0.6870, with the Comodo Container feature, are vulnerable to Sandbox Escap… NVD-CWE-noinfo
CVE-2019-14270 2024-11-21 13:26 2019-07-26 Show GitHub Exploit DB Packet Storm
223837 6.5 MEDIUM
Network 		octopus octopus_deploy In Octopus Deploy versions 3.0.19 to 2019.7.2, when a web request proxy is configured, an authenticated user (in certain limited circumstances) could trigger a deployment that writes the web request … CWE-532
 Inclusion of Sensitive Information in Log Files 		CVE-2019-14268 2024-11-21 13:26 2019-07-26 Show GitHub Exploit DB Packet Storm
223838 8.8 HIGH
Network 		opensns opensns OpenSNS v6.1.0 allows SQL Injection via the index.php?s=/ucenter/Config/ uid parameter because of the getNeedQueryData function in Application/Common/Model/UserModel.class.php. CWE-89
SQL Injection 		CVE-2019-14266 2024-11-21 13:26 2019-07-26 Show GitHub Exploit DB Packet Storm
223839 7.5 HIGH
Network 		metadataextractor_project metadataextractor MetadataExtractor 2.1.0 allows stack consumption. CWE-400
 Uncontrolled Resource Consumption 		CVE-2019-14262 2024-11-21 13:26 2019-07-25 Show GitHub Exploit DB Packet Storm
223840 5.5 MEDIUM
Local 		gnu
canonical
opensuse 		binutils
ubuntu_linux
leap 		An issue was discovered in GNU libiberty, as distributed in GNU Binutils 2.32. simple_object_elf_match in simple-object-elf.c does not check for a zero shstrndx value, leading to an integer overflow … CWE-787
CWE-190
 Out-of-bounds Write
 Integer Overflow or Wraparound 		CVE-2019-14250 2024-11-21 13:26 2019-07-24 Show GitHub Exploit DB Packet Storm