Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":June 4, 2026, 4 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
229231	10	危険	UMN	-	MapServer の mapserv におけるディレクトリトラバーサルの脆弱性	CWE-22 パス・トラバーサル	CVE-2009-0841	2012-12-20 19:10	2009-03-31	Show	GitHub Exploit DB Packet Storm

229232	10	危険	UMN	-	MapServer の mapserv におけるヒープベースのバッファアンダーフローの脆弱性	CWE-119 バッファエラー	CVE-2009-0840	2012-12-20 19:10	2009-03-31	Show	GitHub Exploit DB Packet Storm

229233	10	危険	UMN	-	MapServer の mapserv におけるスタックベースのバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2009-0839	2012-12-20 19:10	2009-03-31	Show	GitHub Exploit DB Packet Storm

229234	6	警告	PHP-Fusion	-	PHP-Fusion 用の Members CV モジュールにおける SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2009-0831	2012-12-20 19:10	2009-03-5	Show	GitHub Exploit DB Packet Storm

229235	7.5	危険	torben sorensen	-	TinX/cms の system/rss.php における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2009-0825	2012-12-20 19:10	2009-03-9	Show	GitHub Exploit DB Packet Storm

229236	4.9	警告	slysoft	-	SlySoft AnyDVD などに同梱されている Elaborate Bytes ElbyCDIO.sys におけるサービス運用妨害 (DoS) の脆弱性	CWE-119 バッファエラー	CVE-2009-0824	2012-12-20 19:10	2009-03-14	Show	GitHub Exploit DB Packet Storm

229237	4.3	警告	TYPO3 Association	-	TYPO3 の backend ユーザインタフェースにおけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2009-0816	2012-12-20 19:10	2009-03-4	Show	GitHub Exploit DB Packet Storm

229238	5	警告	TYPO3 Association	-	TYPO3 の class.tslib_fe.php における任意のファイルを読まれる脆弱性	CWE-200 情報漏えい	CVE-2009-0815	2012-12-20 19:10	2009-03-4	Show	GitHub Exploit DB Packet Storm

229239	9.3	危険	SopCast	-	sopocx.ocx の SopCast SopCore ActiveX コントロールにおける任意のプログラムを実行される脆弱性	CWE-94 コード・インジェクション	CVE-2009-0811	2012-12-20 19:10	2009-03-4	Show	GitHub Exploit DB Packet Storm

229240	7.5	危険	xatrix	-	xGuestbook の login.php における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2009-0810	2012-12-20 19:10	2009-03-4	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:June 4, 2026, 4:17 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
220921	9.8	CRITICAL Network	mobotix	s14_firmware	An issue was discovered on MOBOTIX S14 MX-V4.2.1.61 devices. /admin/access accepts a request to set the "aaaaa" password, considered insecure for some use cases, from a user.	CWE-521 Weak Password Requirements	CVE-2019-7674	2024-11-21 13:48	2019-02-10	Show	GitHub Exploit DB Packet Storm

220922	7.5	HIGH Network	mobotix	s14_firmware	An issue was discovered on MOBOTIX S14 MX-V4.2.1.61 devices. Administrator Credentials are stored in the 13-character DES hash format.	CWE-327 Use of a Broken or Risky Cryptographic Algorithm	CVE-2019-7673	2024-11-21 13:48	2019-02-10	Show	GitHub Exploit DB Packet Storm

220923	5.5	MEDIUM Local	elfutils_project debian canonical opensuse redhat	elfutils debian_linux ubuntu_linux leap enterprise_linux_desktop enterprise_linux_workstation enterprise_linux_server enterprise_linux_eus enterprise_linux_server_tus enter…	In elfutils 0.175, a heap-based buffer over-read was discovered in the function elf32_xlatetom in elf32_xlatetom.c in libelf. A crafted ELF input can cause a segmentation fault leading to denial of s…	CWE-125 Out-of-bounds Read	CVE-2019-7665	2024-11-21 13:48	2019-02-10	Show	GitHub Exploit DB Packet Storm

220924	5.5	MEDIUM Local	elfutils_project redhat	elfutils enterprise_linux_desktop enterprise_linux_workstation enterprise_linux_server enterprise_linux enterprise_linux_eus enterprise_linux_server_tus enterprise_linux_server_a…	In elfutils 0.175, a negative-sized memcpy is attempted in elf_cvt_note in libelf/note_xlate.h because of an incorrect overflow check. Crafted elf input causes a segmentation fault, leading to denial…	CWE-787 Out-of-bounds Write	CVE-2019-7664	2024-11-21 13:48	2019-02-10	Show	GitHub Exploit DB Packet Storm

220925	6.5	MEDIUM Network	libtiff debian canonical opensuse	libtiff debian_linux ubuntu_linux leap	An Invalid Address dereference was discovered in TIFFWriteDirectoryTagTransferfunction in libtiff/tif_dirwrite.c in LibTIFF 4.0.10, affecting the cpSeparateBufToContigBuf function in tiffcp.c. Remote…	NVD-CWE-noinfo	CVE-2019-7663	2024-11-21 13:48	2019-02-10	Show	GitHub Exploit DB Packet Storm

220926	6.5	MEDIUM Network	webassembly	binaryen	An assertion failure was discovered in wasm::WasmBinaryBuilder::getType() in wasm-binary.cpp in Binaryen 1.38.22. This allows remote attackers to cause a denial of service (failed assertion and crash…	CWE-617 Reachable Assertion	CVE-2019-7662	2024-11-21 13:48	2019-02-10	Show	GitHub Exploit DB Packet Storm

220927	8.1	HIGH Network	genivia debian	gsoap debian_linux	Genivia gSOAP 2.7.x and 2.8.x before 2.8.75 allows attackers to cause a denial of service (application abort) or possibly have unspecified other impact if a server application is built with the -DWIT…	CWE-787 Out-of-bounds Write	CVE-2019-7659	2024-11-21 13:48	2019-02-9	Show	GitHub Exploit DB Packet Storm

220928	9.8	CRITICAL Network	rdflib_project debian canonical	rdflib debian_linux ubuntu_linux	The Debian python-rdflib-tools 4.2.2-1 package for RDFLib 4.2.2 has CLI tools that can load Python modules from the current working directory, allowing code injection, because "python -m" looks in th…	CWE-427 Uncontrolled Search Path Element	CVE-2019-7653	2024-11-21 13:48	2019-02-9	Show	GitHub Exploit DB Packet Storm

220929	7.5	HIGH Network	emsisoft	anti-malware	EPP.sys in Emsisoft Anti-Malware prior to version 2018.12 allows an attacker to bypass ACLs because Interpreted Device Characteristics lacks FILE_DEVICE_SECURE_OPEN and therefore files and directorie…	NVD-CWE-noinfo	CVE-2019-7651	2024-11-21 13:48	2019-02-9	Show	GitHub Exploit DB Packet Storm

220930	7.5	HIGH Network	hotels_server_project	hotels_server	controller/fetchpwd.php and controller/doAction.php in Hotels_Server through 2018-11-05 rely on base64 in an attempt to protect password storage.	CWE-326 Inadequate Encryption Strength	CVE-2019-7648	2024-11-21 13:48	2019-02-9	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed