Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 12, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
229401 7.5 危険 wesmo - phpEventCalendar の eventdisplay.php における SQL インジェクションの脆弱性 - CVE-2007-3519 2012-12-20 18:19 2007-07-3 Show GitHub Exploit DB Packet Storm
229402 10 危険 sweetphp - TotalCalendar の view_event.php における SQL インジェクションの脆弱性 - CVE-2007-3515 2012-12-20 18:19 2007-07-3 Show GitHub Exploit DB Packet Storm
229403 7.5 危険 シマンテック - Windows Servers 用の Symantec Backup Exec におけるヒープベースのバッファオーバーフローの脆弱性 - CVE-2007-3509 2012-12-20 18:19 2007-07-11 Show GitHub Exploit DB Packet Storm
229404 6.4 警告 qt-cute - QuickTalk フォーラムにおけるディレクトリトラバーサルの脆弱性 - CVE-2007-3505 2012-12-20 18:19 2007-07-2 Show GitHub Exploit DB Packet Storm
229405 10 危険 xeforum - Xeweb XEForum における権限を取得される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2007-3500 2012-12-20 18:19 2007-06-29 Show GitHub Exploit DB Packet Storm
229406 6.4 警告 slackroll - SlackRoll におけるサービス運用妨害 (DoS) の脆弱性 - CVE-2007-3499 2012-12-20 18:19 2007-06-29 Show GitHub Exploit DB Packet Storm
229407 4.3 警告 SAP - SAP NetWeaver Nw04 の BC-WD-JAV におけるクロスサイトスクリプティングの脆弱性 - CVE-2007-3496 2012-12-20 18:19 2007-06-29 Show GitHub Exploit DB Packet Storm
229408 4.3 警告 SAP - SAP Basis コンポーネントの BC-MID-ICF におけるクロスサイトスクリプティングの脆弱性 - CVE-2007-3495 2012-12-20 18:19 2007-06-29 Show GitHub Exploit DB Packet Storm
229409 7.5 危険 Progress Software Corporation - Progress Software OpenEdge の _mprosrv におけるバッファオーバーフローの脆弱性 - CVE-2007-3491 2012-12-20 18:19 2007-06-29 Show GitHub Exploit DB Packet Storm
229410 4.3 警告 Yandex - Yandex Server におけるクロスサイトスクリプティングの脆弱性 - CVE-2007-3485 2012-12-20 18:19 2007-06-28 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 13, 2026, 5:05 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
222771 8.8 HIGH
Network 		libtiff
osgeo 		libtiff
gdal 		tif_getimage.c in LibTIFF through 4.0.10, as used in GDAL through 3.0.1 and other products, has an integer overflow that potentially causes a heap-based buffer overflow via a crafted RGBA image, rela… CWE-787
CWE-190
 Out-of-bounds Write
 Integer Overflow or Wraparound 		CVE-2019-17546 2024-11-21 13:32 2019-10-14 Show GitHub Exploit DB Packet Storm
222772 9.8 CRITICAL
Network 		osgeo
oracle
debian
fedoraproject
opensuse 		gdal
spatial_and_graph
debian_linux
fedora
leap
backports_sle 		GDAL through 3.0.1 has a poolDestroy double free in OGRExpatRealloc in ogr/ogr_expat.cpp when the 10MB threshold is exceeded. CWE-415
 Double Free 		CVE-2019-17545 2024-11-21 13:32 2019-10-14 Show GitHub Exploit DB Packet Storm
222773 9.1 CRITICAL
Network 		gnu
canonical 		aspell
ubuntu_linux 		libaspell.a in GNU Aspell before 0.60.8 has a stack-based buffer over-read in acommon::unescape in common/getdata.cpp via an isolated \ character. CWE-125
Out-of-bounds Read 		CVE-2019-17544 2024-11-21 13:32 2019-10-14 Show GitHub Exploit DB Packet Storm
222774 8.1 HIGH
Network 		lz4_project lz4 LZ4 before 1.9.2 has a heap-based buffer overflow in LZ4_write32 (related to LZ4_compress_destSize), affecting applications that call LZ4_compress_fast with a large input. (This issue can also lead t… CWE-787
 Out-of-bounds Write 		CVE-2019-17543 2024-11-21 13:32 2019-10-14 Show GitHub Exploit DB Packet Storm
222775 9.8 CRITICAL
Network 		ffmpeg
canonical
debian 		ffmpeg
ubuntu_linux
debian_linux 		FFmpeg before 4.2 has a heap-based buffer overflow in vqa_decode_chunk because of an out-of-array access in vqa_decode_init in libavcodec/vqavideo.c. CWE-787
 Out-of-bounds Write 		CVE-2019-17542 2024-11-21 13:32 2019-10-14 Show GitHub Exploit DB Packet Storm
222776 8.8 HIGH
Network 		imagemagick imagemagick ImageMagick before 7.0.8-55 has a use-after-free in DestroyStringInfo in MagickCore/string.c because the error manager is mishandled in coders/jpeg.c. CWE-416
 Use After Free 		CVE-2019-17541 2024-11-21 13:32 2019-10-14 Show GitHub Exploit DB Packet Storm
222777 8.8 HIGH
Network 		imagemagick
debian 		imagemagick
debian_linux 		ImageMagick before 7.0.8-54 has a heap-based buffer overflow in ReadPSInfo in coders/ps.c. CWE-787
 Out-of-bounds Write 		CVE-2019-17540 2024-11-21 13:32 2019-10-14 Show GitHub Exploit DB Packet Storm
222778 9.8 CRITICAL
Network 		ffmpeg
debian
canonical 		ffmpeg
debian_linux
ubuntu_linux 		In FFmpeg before 4.2, avcodec_open2 in libavcodec/utils.c allows a NULL pointer dereference and possibly unspecified other impact when there is no valid close function pointer. CWE-476
 NULL Pointer Dereference 		CVE-2019-17539 2024-11-21 13:32 2019-10-14 Show GitHub Exploit DB Packet Storm
222779 8.8 HIGH
Network 		centreon centreon Centreon 19.04 allows attackers to execute arbitrary OS commands via the Command Line field of main.php?p=60807&type=4 (aka the Configuration > Commands > Discovery screen). CVE-2019-17501 and CVE-20… CWE-78
OS Command  		CVE-2019-17501 2024-11-21 13:32 2019-10-14 Show GitHub Exploit DB Packet Storm
222780 7.5 HIGH
Network 		jnoj jiangnan_online_judge Jiangnan Online Judge (aka jnoj) 0.8.0 has Directory Traversal for file reading via the web/polygon/problem/viewfile?id=1&name=../ substring. CWE-22
Path Traversal 		CVE-2019-17538 2024-11-21 13:32 2019-10-14 Show GitHub Exploit DB Packet Storm