Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 13, 2026, 2:01 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
229121	5	警告	typolight	-	TYPOlight webCMS の preview.php における任意のファイルをダウンロードされる脆弱性	CWE-20 不適切な入力確認	CVE-2007-5318	2012-12-20 18:33	2007-10-9	Show	GitHub Exploit DB Packet Storm

229122	5	警告	SoftbizScripts	-	Softbiz Jobs and Recruitment Script の browsecats.php における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2007-5316	2012-12-20 18:33	2007-10-9	Show	GitHub Exploit DB Packet Storm

229123	6.8	警告	softpedia	-	Softonic International SciTE における PHP リモートファイルインクルージョンの脆弱性	CWE-94 コード・インジェクション	CVE-2007-5315	2012-12-20 18:33	2007-10-9	Show	GitHub Exploit DB Packet Storm

229124	6.8	警告	xkiosk	-	xKiosk WEB の system/funcs/xkurl.php における PHP リモートファイルインクルージョンの脆弱性	CWE-94 コード・インジェクション	CVE-2007-5314	2012-12-20 18:33	2007-10-9	Show	GitHub Exploit DB Packet Storm

229125	7.5	危険	script-solution.de	-	Picturesolution の install/config.php における PHP リモートファイルインクルージョンの脆弱性	CWE-94 コード・インジェクション	CVE-2007-5313	2012-12-20 18:33	2007-10-9	Show	GitHub Exploit DB Packet Storm

229126	4.3	警告	torrenttrader	-	TorrentTrader Classic におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2007-5312	2012-12-20 18:33	2007-10-9	Show	GitHub Exploit DB Packet Storm

229127	7.5	危険	torrenttrader	-	TorrentTrader Classic Edition の backend/admin-functions.php におけるディレクトリトラバーサルの脆弱性	CWE-22 パス・トラバーサル	CVE-2007-5311	2012-12-20 18:33	2007-10-9	Show	GitHub Exploit DB Packet Storm

229128	7.5	危険	yannick tanguy	-	ELSEIF CMS における任意の PHP コードを実行される脆弱性	CWE-94 コード・インジェクション	CVE-2007-5307	2012-12-20 18:33	2007-10-9	Show	GitHub Exploit DB Packet Storm

229129	5	警告	yannick tanguy	-	ELSEIF CMS における重要な情報を取得される脆弱性	CWE-22 パス・トラバーサル	CVE-2007-5306	2012-12-20 18:33	2007-10-9	Show	GitHub Exploit DB Packet Storm

229130	7.5	危険	yannick tanguy	-	ELSEIF CMS における PHP リモートファイルインクルージョンの脆弱性	CWE-94 コード・インジェクション	CVE-2007-5305	2012-12-20 18:33	2007-10-9	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 13, 2026, 5:05 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
222331	9.8	CRITICAL Network	-	-	eQ-3 Homematic CCU2 2.47.20 and CCU3 3.47.18 with the HM-Print AddOn through 1.2a installed allow Remote Code Execution by unauthenticated attackers with access to the web interface via the exec.cgi …	CWE-306 Missing Authentication for Critical Function	CVE-2019-18939	2024-11-21 13:33	2019-11-15	Show	GitHub Exploit DB Packet Storm

222332	9.8	CRITICAL Network	eq-3 hm_email_project	homematic_ccu2_firmware hm_email homematic_ccu3_firmware	eQ-3 Homematic CCU2 2.47.20 and CCU3 3.47.18 with the E-Mail AddOn through 1.6.8.c installed allow Remote Code Execution by unauthenticated attackers with access to the web interface via the save.cgi…	CWE-306 Missing Authentication for Critical Function	CVE-2019-18938	2024-11-21 13:33	2019-11-15	Show	GitHub Exploit DB Packet Storm

222333	9.8	CRITICAL Network	-	-	eQ-3 Homematic CCU2 2.47.20 and CCU3 3.47.18 with the Script Parser AddOn through 1.8 installed allow Remote Code Execution by unauthenticated attackers with access to the web interface via the exec.…	CWE-306 Missing Authentication for Critical Function	CVE-2019-18937	2024-11-21 13:33	2019-11-15	Show	GitHub Exploit DB Packet Storm

222334	4.8	MEDIUM Network	untangle	ng_firewall	When logged in as an admin user, the Title input field (under Reports) within Untangle NG firewall 14.2.0 is vulnerable to stored XSS.	CWE-79 Cross-site Scripting	CVE-2019-18649	2024-11-21 13:33	2019-11-15	Show	GitHub Exploit DB Packet Storm

222335	4.8	MEDIUM Network	untangle	ng_firewall	When logged in as an admin user, the Untangle NG firewall 14.2.0 is vulnerable to reflected XSS at multiple places and specific user input fields.	CWE-79 Cross-site Scripting	CVE-2019-18648	2024-11-21 13:33	2019-11-15	Show	GitHub Exploit DB Packet Storm

222336	7.2	HIGH Network	untangle	ng_firewall	The Untangle NG firewall 14.2.0 is vulnerable to an authenticated command injection when logged in as an admin user.	CWE-77 Command Injection	CVE-2019-18647	2024-11-21 13:33	2019-11-15	Show	GitHub Exploit DB Packet Storm

222337	7.2	HIGH Network	untangle	ng_firewall	The Untangle NG firewall 14.2.0 is vulnerable to authenticated inline-query SQL injection within the timeDataDynamicColumn parameter when logged in as an admin user.	CWE-89 SQL Injection	CVE-2019-18646	2024-11-21 13:33	2019-11-15	Show	GitHub Exploit DB Packet Storm

222338	6.1	MEDIUM Network	microstrategy	microstrategy_library	Microstrategy Library in MicroStrategy before 2019 before 11.1.3 has reflected XSS.	CWE-79 Cross-site Scripting	CVE-2019-18957	2024-11-21 13:33	2019-11-14	Show	GitHub Exploit DB Packet Storm

222339	7.8	HIGH Local	scanguard	scanguard_antivirus	Scanguard through 2019-11-12 on Windows has Insecure Permissions for the installation directory, leading to privilege escalation via a Trojan horse executable file.	CWE-732 Incorrect Permission Assignment for Critical Resource	CVE-2019-18895	2024-11-21 13:33	2019-11-14	Show	GitHub Exploit DB Packet Storm

222340	5.5	MEDIUM Local	linux	linux_kernel	fs/btrfs/volumes.c in the Linux kernel before 5.1 allows a btrfs_verify_dev_extents NULL pointer dereference via a crafted btrfs image because fs_devices->devices is mishandled within find_device, ak…	CWE-476 NULL Pointer Dereference	CVE-2019-18885	2024-11-21 13:33	2019-11-14	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed