Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 13, 2026, 10 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
229431 4.3 警告 ZoneO-soft - phpTrafficA の index.php におけるクロスサイトスクリプティングの脆弱性 - CVE-2007-3426 2012-12-20 18:19 2007-06-26 Show GitHub Exploit DB Packet Storm
229432 5 警告 ZoneO-soft - phpTrafficA の index.php におけるディレクトリトラバーサルの脆弱性 - CVE-2007-3425 2012-12-20 18:19 2007-06-26 Show GitHub Exploit DB Packet Storm
229433 7.5 危険 web-app.org - web-app.org WebAPP の cgi-bin/cgi-lib/instantmessage.pl における脆弱性 - CVE-2007-3424 2012-12-20 18:19 2007-06-26 Show GitHub Exploit DB Packet Storm
229434 7.5 危険 web-app.org - web-app.org WebAPP の cgi-bin/cgi-lib/instantmessage.pl における脆弱性 - CVE-2007-3423 2012-12-20 18:19 2007-06-26 Show GitHub Exploit DB Packet Storm
229435 7.5 危険 web-app.org - web-app.org WebAPP の cgi-bin/cgi-lib/subs.pl における脆弱性 - CVE-2007-3422 2012-12-20 18:19 2007-06-26 Show GitHub Exploit DB Packet Storm
229436 7.5 危険 web-app.org - web-app.org WebAPP のログイン機能などにおける脆弱性 - CVE-2007-3421 2012-12-20 18:19 2007-06-26 Show GitHub Exploit DB Packet Storm
229437 7.5 危険 web-app.org - web-app.org WebAPP の cgi-bin/cgi-lib/subs.pl における脆弱性 - CVE-2007-3420 2012-12-20 18:19 2007-06-26 Show GitHub Exploit DB Packet Storm
229438 7.5 危険 web-app.org - web-app.org WebAPP の cgi-bin/cgi-lib/user.pl における脆弱性 - CVE-2007-3419 2012-12-20 18:19 2007-06-26 Show GitHub Exploit DB Packet Storm
229439 6.5 警告 web-app.org - web-app.org WebAPP の cgi-bin/cgi-lib/forum_display.pl における他のユーザになりすまされる脆弱性 - CVE-2007-3418 2012-12-20 18:19 2007-06-26 Show GitHub Exploit DB Packet Storm
229440 4.3 警告 web-app.org - web-app.org WebAPP の cgi-bin/cgi-lib/search.pl におけるクロスサイトスクリプティングの脆弱性 - CVE-2007-3417 2012-12-20 18:19 2007-06-26 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 13, 2026, 5:05 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
222861 7.5 HIGH
Network 		bouncycastle
apache
netapp
oracle 		legion-of-the-bouncy-castle-java-crytography-api
tomee
oncommand_workflow_automation
service_level_manager
oncommand_api_services
active_iq_unified_manager
flexcube_private_banking<… 		The ASN.1 parser in Bouncy Castle Crypto (aka BC Java) 1.63 can trigger a large attempted memory allocation, and resultant OutOfMemoryError error, via crafted ASN.1 data. This is fixed in 1.64. CWE-770
 Allocation of Resources Without Limits or Throttling 		CVE-2019-17359 2024-11-21 13:32 2019-10-8 Show GitHub Exploit DB Packet Storm
222862 7.5 HIGH
Network 		jfinal jfinal In JFinal cos before 2019-08-13, as used in JFinal 4.4, there is a vulnerability that can bypass the isSafeFile() function: one can upload any type of file. For example, a .jsp file may be stored and… CWE-434
 Unrestricted Upload of File with Dangerous Type  		CVE-2019-17352 2024-11-21 13:32 2019-10-8 Show GitHub Exploit DB Packet Storm
222863 4.9 MEDIUM
Network 		vbulletin vbulletin vBulletin 5.5.4 allows SQL Injection via the ajax/api/hook/getHookList or ajax/api/widget/getWidgetList where parameter. CWE-89
SQL Injection 		CVE-2019-17271 2024-11-21 13:32 2019-10-8 Show GitHub Exploit DB Packet Storm
222864 5.5 MEDIUM
Local 		xen
debian 		xen
debian_linux 		An issue was discovered in Xen through 4.12.x allowing Arm domU attackers to cause a denial of service (infinite loop) involving a LoadExcl or StoreExcl operation. CWE-835
 Loop with Unreachable Exit Condition ('Infinite Loop') 		CVE-2019-17349 2024-11-21 13:32 2019-10-8 Show GitHub Exploit DB Packet Storm
222865 6.5 MEDIUM
Local 		xen
debian 		xen
debian_linux 		An issue was discovered in Xen through 4.11.x allowing x86 PV guest OS users to cause a denial of service because of an incompatibility between Process Context Identifiers (PCID) and shadow-pagetable… CWE-20
 Improper Input Validation  		CVE-2019-17348 2024-11-21 13:32 2019-10-8 Show GitHub Exploit DB Packet Storm
222866 7.8 HIGH
Local 		xen
debian 		xen
debian_linux 		An issue was discovered in Xen through 4.11.x allowing x86 PV guest OS users to cause a denial of service or gain privileges because a guest can manipulate its virtualised %cr4 in a way that is incom… CWE-20
 Improper Input Validation  		CVE-2019-17347 2024-11-21 13:32 2019-10-8 Show GitHub Exploit DB Packet Storm
222867 8.8 HIGH
Local 		xen
debian 		xen
debian_linux 		An issue was discovered in Xen through 4.11.x allowing x86 PV guest OS users to cause a denial of service or gain privileges because of an incompatibility between Process Context Identifiers (PCID) a… CWE-20
 Improper Input Validation  		CVE-2019-17346 2024-11-21 13:32 2019-10-8 Show GitHub Exploit DB Packet Storm
222868 6.5 MEDIUM
Local 		xen
debian 		xen
debian_linux 		An issue was discovered in Xen 4.8.x through 4.11.x allowing x86 PV guest OS users to cause a denial of service because mishandling of failed IOMMU operations causes a bug check during the cleanup of… NVD-CWE-noinfo
CVE-2019-17345 2024-11-21 13:32 2019-10-8 Show GitHub Exploit DB Packet Storm
222869 6.5 MEDIUM
Local 		xen
debian 		xen
debian_linux 		An issue was discovered in Xen through 4.11.x allowing x86 PV guest OS users to cause a denial of service by leveraging a long-running operation that exists to support restartability of PTE updates. CWE-662
 Improper Synchronization 		CVE-2019-17344 2024-11-21 13:32 2019-10-8 Show GitHub Exploit DB Packet Storm
222870 6.8 MEDIUM
Physics 		xen
debian 		xen
debian_linux 		An issue was discovered in Xen through 4.11.x allowing x86 PV guest OS users to cause a denial of service or gain privileges by leveraging incorrect use of the HVM physmap concept for PV domains. CWE-667
 Improper Locking 		CVE-2019-17343 2024-11-21 13:32 2019-10-8 Show GitHub Exploit DB Packet Storm