Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 12, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
229301 6.8 警告 ufmod - uFMOD における脆弱性 - CVE-2007-3965 2012-12-20 18:33 2007-07-25 Show GitHub Exploit DB Packet Storm
229302 9.3 危険 usebb - UseBB におけるクロスサイトスクリプティングの脆弱性 - CVE-2007-3963 2012-12-20 18:33 2007-07-25 Show GitHub Exploit DB Packet Storm
229303 7.8 危険 TeamSpeak Systems GmbH - Windows 用の TeamSpeak WebServer におけるサービス運用妨害 (DoS) の脆弱性 - CVE-2007-3956 2012-12-20 18:33 2007-07-24 Show GitHub Exploit DB Packet Storm
229304 6.4 警告 rsbac - RSBAC における認証の制御を回避される脆弱性 - CVE-2007-3945 2012-12-20 18:33 2007-07-23 Show GitHub Exploit DB Packet Storm
229305 4.3 警告 quickersite - QuickerSite の default.asp におけるクロスサイトスクリプティングの脆弱性 - CVE-2007-3940 2012-12-20 18:33 2007-07-20 Show GitHub Exploit DB Packet Storm
229306 6.8 警告 spoonlabs - SpoonLabs Vivvo Article Management CMS の index.php における SQL インジェクションの脆弱性 - CVE-2007-3939 2012-12-20 18:33 2007-07-20 Show GitHub Exploit DB Packet Storm
229307 9.3 危険 phpBB - phpBB 用の SupaNav モジュールにおける PHP リモートファイルインクルージョンの脆弱性 - CVE-2007-3935 2012-12-20 18:33 2007-07-20 Show GitHub Exploit DB Packet Storm
229308 7.5 危険 quickestore - QuickEStore の insertorder.cfm における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2007-3933 2012-12-20 18:33 2007-07-20 Show GitHub Exploit DB Packet Storm
229309 4.4 警告 サムスン - Samsung SCX-4200 Driver のインストールスクリプトにおける権限を取得される脆弱性 - CVE-2007-3931 2012-12-20 18:33 2007-07-20 Show GitHub Exploit DB Packet Storm
229310 7.6 危険 Yahoo! - Yahoo! Messenger におけるバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2007-3928 2012-12-20 18:33 2007-07-20 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 13, 2026, 5:05 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
214231 6.1 MEDIUM
Network 		ipandao editor.md Editor.md 1.5.0 has DOM-based XSS via vectors involving the '<EMBED SRC="data:image/svg+xml' substring. CWE-79
Cross-site Scripting 		CVE-2019-9737 2024-11-21 13:52 2019-03-13 Show GitHub Exploit DB Packet Storm
214232 6.1 MEDIUM
Network 		1024tools 1024tools DOM-based XSS exists in 1024Tools Markdown 1.0 via vectors involving the '<EMBED SRC="data:image/svg+xml' substring. CWE-79
Cross-site Scripting 		CVE-2019-9736 2024-11-21 13:52 2019-03-13 Show GitHub Exploit DB Packet Storm
214233 6.5 MEDIUM
Network 		openstack
redhat
debian 		neutron
openstack
debian_linux 		An issue was discovered in the iptables firewall module in OpenStack Neutron before 10.0.8, 11.x before 11.0.7, 12.x before 12.0.6, and 13.x before 13.0.3. By setting a destination port in a security… CWE-755
 Improper Handling of Exceptional Conditions 		CVE-2019-9735 2024-11-21 13:52 2019-03-13 Show GitHub Exploit DB Packet Storm
214234 7.8 HIGH
Local 		shanda maplestory_online In Shanda MapleStory Online V160, the SdoKeyCrypt.sys driver allows privilege escalation to NT AUTHORITY\SYSTEM because of not validating the IOCtl 0x8000c01c input value, leading to an integer signe… CWE-787
CWE-129
 Out-of-bounds Write
 Improper Validation of Array Index 		CVE-2019-9729 2024-11-21 13:52 2019-03-13 Show GitHub Exploit DB Packet Storm
214235 6.1 MEDIUM
Network 		korenix jetport_web_manager
jetport_5601_firmware
jetport_5601f_firmware 		The Web manager (aka Commander) on Korenix JetPort 5601 and 5601f devices has Persistent XSS via the Port Alias field under Serial Setting. CWE-79
Cross-site Scripting 		CVE-2019-9725 2024-11-21 13:52 2019-03-13 Show GitHub Exploit DB Packet Storm
214236 6.1 MEDIUM
Network 		joomla joomla\! An issue was discovered in Joomla! before 3.9.4. The media form field lacks escaping, leading to XSS. CWE-79
Cross-site Scripting 		CVE-2019-9714 2024-11-21 13:52 2019-03-13 Show GitHub Exploit DB Packet Storm
214237 7.5 HIGH
Network 		joomla joomla\! An issue was discovered in Joomla! before 3.9.4. The sample data plugins lack ACL checks, allowing unauthorized access. CWE-862
 Missing Authorization 		CVE-2019-9713 2024-11-21 13:52 2019-03-13 Show GitHub Exploit DB Packet Storm
214238 6.1 MEDIUM
Network 		joomla joomla\! An issue was discovered in Joomla! before 3.9.4. The JSON handler in com_config lacks input validation, leading to XSS. CWE-79
Cross-site Scripting 		CVE-2019-9712 2024-11-21 13:52 2019-03-13 Show GitHub Exploit DB Packet Storm
214239 6.1 MEDIUM
Network 		joomla joomla\! An issue was discovered in Joomla! before 3.9.4. The item_title layout in edit views lacks escaping, leading to XSS. CWE-79
Cross-site Scripting 		CVE-2019-9711 2024-11-21 13:52 2019-03-13 Show GitHub Exploit DB Packet Storm
214240 6.5 MEDIUM
Network 		ffmpeg
canonical 		ffmpeg
ubuntu_linux 		A denial of service in the subtitle decoder in FFmpeg 3.2 and 4.1 allows attackers to hog the CPU via a crafted video file in Matroska format, because handle_open_brace in libavcodec/htmlsubtitles.c … CWE-125
Out-of-bounds Read 		CVE-2019-9721 2024-11-21 13:52 2019-03-12 Show GitHub Exploit DB Packet Storm