Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 11, 2026, 6:01 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
229201 6.5 警告 WordPress.org - WordPress の options.php における SQL インジェクションの脆弱性 - CVE-2007-4154 2012-12-20 18:33 2007-08-3 Show GitHub Exploit DB Packet Storm
229202 2.1 注意 WordPress.org - WordPress におけるクロスサイトスクリプティングの脆弱性 - CVE-2007-4153 2012-12-20 18:33 2007-08-3 Show GitHub Exploit DB Packet Storm
229203 9.3 危険 visionsoft - Visionsoft Audit の VSAOD におけるリプレイ攻撃を実行される脆弱性 - CVE-2007-4152 2012-12-20 18:33 2007-08-3 Show GitHub Exploit DB Packet Storm
229204 4.3 警告 visionsoft - Visionsoft Audit の VSAOD における重要な情報を取得される脆弱性 - CVE-2007-4151 2012-12-20 18:33 2007-08-3 Show GitHub Exploit DB Packet Storm
229205 10 危険 visionsoft - Visionsoft Audit の VSAOD における重要な情報を取得される脆弱性 - CVE-2007-4150 2012-12-20 18:33 2007-08-3 Show GitHub Exploit DB Packet Storm
229206 10 危険 visionsoft - Visionsoft Audit の VSAOD における任意のファイルを作成される脆弱性 - CVE-2007-4149 2012-12-20 18:33 2007-08-3 Show GitHub Exploit DB Packet Storm
229207 10 危険 visionsoft - Visionsoft Audit の VSAOD におけるヒープベースのバッファオーバーフローの脆弱性 - CVE-2007-4148 2012-12-20 18:33 2007-08-3 Show GitHub Exploit DB Packet Storm
229208 4.3 警告 webevents - ebEvent の webevent.cgi におけるクロスサイトスクリプティングの脆弱性 - CVE-2007-4146 2012-12-20 18:33 2007-08-3 Show GitHub Exploit DB Packet Storm
229209 4 警告 phpcoupon - phpCoupon の Billing Control Panel における Premium Member ステイタスを取得される脆弱性 - CVE-2007-4143 2012-12-20 18:33 2007-08-3 Show GitHub Exploit DB Packet Storm
229210 4.3 警告 WordPress.org - WordPress の Temporary Uploads 編集機能におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2007-4139 2012-12-20 18:33 2007-08-3 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 12, 2026, 5:06 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
222531 8.8 HIGH
Network 		wikidsystems 2fa_enterprise_server A SQL injection vulnerability in processPref.jsp in WiKID 2FA Enterprise Server through 4.2.0-b2053 allows an authenticated user to execute arbitrary SQL commands via the processPref.jsp key paramete… CWE-89
SQL Injection 		CVE-2019-17117 2024-11-21 13:31 2019-10-18 Show GitHub Exploit DB Packet Storm
222532 6.1 MEDIUM
Network 		wikidsystems two_factor_authentication_enterprise_server A stored and reflected cross-site scripting (XSS) vulnerability in WiKID 2FA Enterprise Server through 4.2.0-b2047 allow remote attackers to inject arbitrary web script or HTML via /WiKIDAdmin/groups… CWE-79
Cross-site Scripting 		CVE-2019-17116 2024-11-21 13:31 2019-10-18 Show GitHub Exploit DB Packet Storm
222533 6.1 MEDIUM
Network 		wikidsystems two_factor_authentication_enterprise_server Multiple cross-site scripting (XSS) vulnerabilities in WiKID 2FA Enterprise Server through 4.2.0-b2047 allow remote attackers to inject arbitrary web script or HTML that is triggered when Logs.jsp is… CWE-79
Cross-site Scripting 		CVE-2019-17115 2024-11-21 13:31 2019-10-18 Show GitHub Exploit DB Packet Storm
222534 6.1 MEDIUM
Network 		wikidsystems two_factor_authentication_enterprise_server A stored and reflected cross-site scripting (XSS) vulnerability in WiKID 2FA Enterprise Server through 4.2.0-b2047 allows remote attackers to inject arbitrary web script or HTML via /WiKIDAdmin/userP… CWE-79
Cross-site Scripting 		CVE-2019-17114 2024-11-21 13:31 2019-10-18 Show GitHub Exploit DB Packet Storm
222535 8.8 HIGH
Network 		wikidsystems two_factor_authentication_enterprise_server WiKID Enterprise 2FA (two factor authentication) Enterprise Server through 4.2.0-b2047 is vulnerable to SQL injection through the searchDevices.jsp endpoint. The uid and domain parameters are used, u… CWE-89
SQL Injection 		CVE-2019-16917 2024-11-21 13:31 2019-10-18 Show GitHub Exploit DB Packet Storm
222536 9.8 CRITICAL
Network 		slub-dresden slub_events The slub_events (aka SLUB: Event Registration) extension through 3.0.2 for TYPO3 allows uploading of arbitrary files to the webserver. For versions 1.2.2 and below, this results in Remote Code Execut… CWE-434
 Unrestricted Upload of File with Dangerous Type  		CVE-2019-16700 2024-11-21 13:31 2019-10-17 Show GitHub Exploit DB Packet Storm
222537 9.8 CRITICAL
Network 		sr_freecap_project sr_freecap The sr_freecap (aka freeCap CAPTCHA) extension 2.4.5 and below and 2.5.2 and below for TYPO3 fails to sanitize user input, which allows execution of arbitrary Extbase actions, resulting in Remote Cod… CWE-20
 Improper Input Validation  		CVE-2019-16699 2024-11-21 13:31 2019-10-17 Show GitHub Exploit DB Packet Storm
222538 4.3 MEDIUM
Network 		dkd direct_mail The direct_mail (aka Direct Mail) extension through 5.2.2 for TYPO3 has a missing access check in the backend module, allowing a user (with restricted permissions to the fe_users table) to view and e… CWE-862
 Missing Authorization 		CVE-2019-16698 2024-11-21 13:31 2019-10-17 Show GitHub Exploit DB Packet Storm
222539 6.1 MEDIUM
Network 		dolibarr dolibarr_erp\/crm There is HTML Injection in the Note field in Dolibarr ERP/CRM 10.0.2 via user/note.php. CWE-79
Cross-site Scripting 		CVE-2019-17223 2024-11-21 13:31 2019-10-15 Show GitHub Exploit DB Packet Storm
222540 7.8 HIGH
Local 		bmc patrol_agent An issue was discovered in BMC Patrol Agent 9.0.10i. Weak execution permissions on the PatrolAgent SUID binary could allow an attacker with "patrol" privileges to elevate his/her privileges to the on… CWE-276
Incorrect Default Permissions  		CVE-2019-17044 2024-11-21 13:31 2019-10-15 Show GitHub Exploit DB Packet Storm