Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 7, 2026, 4:01 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
229051 4.9 警告 WordPress.org - WordPress の xmlrpc におけるアクセス制限を回避される脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2007-1893 2012-12-20 18:19 2007-04-9 Show GitHub Exploit DB Packet Storm
229052 7.8 危険 VMware - VMware Workstation におけるゲスト OS がサービス運用妨害 (DoS) 状態となる脆弱性 - CVE-2007-1877 2012-12-20 18:19 2007-05-2 Show GitHub Exploit DB Packet Storm
229053 7.2 危険 VMware - VMware Workstation における "仮想マシンに登録されたコンテキストが破損" する脆弱性 - CVE-2007-1876 2012-12-20 18:19 2007-05-2 Show GitHub Exploit DB Packet Storm
229054 4.3 警告 toenda software development - toendaCMS におけるクロスサイトスクリプティングの脆弱性 - CVE-2007-1872 2012-12-20 18:19 2007-04-13 Show GitHub Exploit DB Packet Storm
229055 7.5 危険 webasyst llc - Shop-Script FREE の smarty/smarty_class.php における PHP リモートファイルインクルージョンの脆弱性 - CVE-2007-1855 2012-12-20 18:19 2007-04-3 Show GitHub Exploit DB Packet Storm
229056 7.5 危険 really simple php and ajax - RSPA におけるディレクトリトラバーサルの脆弱性 - CVE-2007-1851 2012-12-20 18:19 2007-04-3 Show GitHub Exploit DB Packet Storm
229057 7.5 危険 XOOPS - XOOPS 用の Repository モジュールにおける SQL インジェクションの脆弱性 - CVE-2007-1847 2012-12-20 18:19 2007-04-3 Show GitHub Exploit DB Packet Storm
229058 7.5 危険 XOOPS - Xoops 用の MyAds モジュールにおける SQL インジェクションの脆弱性 - CVE-2007-1846 2012-12-20 18:19 2007-04-3 Show GitHub Exploit DB Packet Storm
229059 7.5 危険 XOOPS - Xoops 用の Friendfinder モジュールにおける SQL インジェクションの脆弱性 - CVE-2007-1838 2012-12-20 18:19 2007-04-2 Show GitHub Exploit DB Packet Storm
229060 5 警告 web-app.org - web-app.org WebAPP における特定のファイルをアップロードされる脆弱性 - CVE-2007-1832 2012-12-20 18:19 2007-04-2 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 7, 2026, 4:22 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
223631 6.5 MEDIUM
Network
google chrome Use-after-free in content delivery manager in Google Chrome prior to 78.0.3904.70 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. CWE-787
CWE-416
CWE-665
 Out-of-bounds Write
 Use After Free
 Improper Initialization
CVE-2019-13765 2024-11-21 13:25 2020-01-4 Show GitHub Exploit DB Packet Storm
223632 8.1 HIGH
Network
omron plc_cs_firmware
plc_cj_firmware
In Omron PLC CJ series, all versions, and Omron PLC CS series, all versions, an attacker could monitor traffic between the PLC and the controller and replay requests that could result in the opening … CWE-294
Authentication Bypass by Capture-replay 
CVE-2019-13533 2024-11-21 13:25 2019-12-17 Show GitHub Exploit DB Packet Storm
223633 4.9 MEDIUM
Network
siemens sinvr_3_video_server
sinvr_3_central_control_server
A vulnerability has been identified in Control Center Server (CCS) (All versions < V1.5.0). The user configuration menu in the web interface of the Control Center Server (CCS) transfers user password… - CVE-2019-13947 2024-11-21 13:25 2019-12-13 Show GitHub Exploit DB Packet Storm
223634 5.3 MEDIUM
Network
siemens en100_ethernet_module_with_firmware_variant_dnp3_tcp
en100_ethernet_module_with_firmware_variant_iec_61850
en100_ethernet_module_with_firmware_variant_iec104
en100_ethernet_module_with_firmw…
A vulnerability has been identified in EN100 Ethernet module DNP3 variant (All versions), EN100 Ethernet module IEC 61850 variant (All versions < V4.37), EN100 Ethernet module IEC104 variant (All ver… CWE-22
Path Traversal
CVE-2019-13944 2024-11-21 13:25 2019-12-13 Show GitHub Exploit DB Packet Storm
223635 6.1 MEDIUM
Network
siemens en100_ethernet_module_with_firmware_variant_dnp3_tcp
en100_ethernet_module_with_firmware_variant_iec_61850
en100_ethernet_module_with_firmware_variant_iec104
en100_ethernet_module_with_firmw…
A vulnerability has been identified in EN100 Ethernet module DNP3 variant (All versions), EN100 Ethernet module IEC 61850 variant (All versions < V4.37), EN100 Ethernet module IEC104 variant (All ver… CWE-79
Cross-site Scripting
CVE-2019-13943 2024-11-21 13:25 2019-12-13 Show GitHub Exploit DB Packet Storm
223636 7.5 HIGH
Network
siemens en100_ethernet_module_with_firmware_variant_dnp3_tcp
en100_ethernet_module_with_firmware_variant_iec_61850
en100_ethernet_module_with_firmware_variant_iec104
en100_ethernet_module_with_firmw…
A vulnerability has been identified in EN100 Ethernet module DNP3 variant (All versions), EN100 Ethernet module IEC 61850 variant (All versions < V4.37), EN100 Ethernet module IEC104 variant (All ver… CWE-119
Incorrect Access of Indexable Resource ('Range Error') 
CVE-2019-13942 2024-11-21 13:25 2019-12-13 Show GitHub Exploit DB Packet Storm
223637 9.1 CRITICAL
Network
siemens xhq A vulnerability has been identified in XHQ (All versions < V6.0.0.2). The web application requests could be manipulated, causing the the application to behave in unexpected ways for legitimate users.… CWE-20
 Improper Input Validation 
CVE-2019-13932 2024-11-21 13:25 2019-12-13 Show GitHub Exploit DB Packet Storm
223638 5.4 MEDIUM
Network
siemens xhq A vulnerability has been identified in XHQ (All versions < V6.0.0.2). The web interface could allow for an an attacker to craft the input in a form that is not expected, causing the application to be… CWE-79
Cross-site Scripting
CVE-2019-13931 2024-11-21 13:25 2019-12-13 Show GitHub Exploit DB Packet Storm
223639 8.1 HIGH
Network
siemens xhq A vulnerability has been identified in XHQ (All versions < V6.0.0.2). The web interface could allow a Cross-Site Request Forgery (CSRF) attack if an unsuspecting user is tricked into accessing a mali… CWE-352
 Origin Validation Error
CVE-2019-13930 2024-11-21 13:25 2019-12-13 Show GitHub Exploit DB Packet Storm
223640 6.8 MEDIUM
Physics
siemens simatic_s7-1200_firmware
s7-200_smart_firmware
simatic_s7-200_smart_cpu_st20_firmware
simatic_s7-200_smart_cpu_st30_firmware
simatic_s7-200_smart_cpu_st40_firmware
simatic_s7-200_smart…
A vulnerability has been identified in SIMATIC S7-1200 CPU family (incl. SIPLUS variants) (All versions), SIMATIC S7-1200 CPU family < V4.x (incl. SIPLUS variants) (All versions), SIMATIC S7-1200 CPU… NVD-CWE-Other
CVE-2019-13945 2024-11-21 13:25 2019-12-12 Show GitHub Exploit DB Packet Storm