Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 12, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
229481 7.5 危険 yourfreescreamer - YourFreeScreamer の templates/2blue/bodyTemplate.php における PHP リモートファイルインクルージョンの脆弱性 - CVE-2007-3271 2012-12-20 18:19 2007-06-19 Show GitHub Exploit DB Packet Storm
229482 4.3 警告 sporum forum - Sporum Forum の comments.cgi におけるクロスサイトスクリプティングの脆弱性 - CVE-2007-3213 2012-12-20 18:19 2007-06-14 Show GitHub Exploit DB Packet Storm
229483 10 危険 yabb - YaBB における CRLF インジェクションの脆弱性 - CVE-2007-3208 2012-12-20 18:19 2007-06-14 Show GitHub Exploit DB Packet Storm
229484 7.5 危険 software602 - 602Pro LAN SUITE 2003 の SMTP サービスにおけるスタックベースのバッファオーバーフローの脆弱性 - CVE-2007-3203 2012-12-20 18:19 2007-06-12 Show GitHub Exploit DB Packet Storm
229485 7.1 危険 winpt - WinPT における間違ったユーザ ID 鍵をインストールされる脆弱性 - CVE-2007-3201 2012-12-20 18:19 2007-06-12 Show GitHub Exploit DB Packet Storm
229486 10 危険 phpmyinventory - phpMyInventory の Includes/global.inc.php における PHP リモートファイルインクルージョンの脆弱性 - CVE-2007-3270 2012-12-20 18:19 2007-06-19 Show GitHub Exploit DB Packet Storm
229487 5 警告 vincent hor - Calendarix における重要な情報を取得される脆弱性 - CVE-2007-3259 2012-12-20 18:19 2007-06-26 Show GitHub Exploit DB Packet Storm
229488 5 警告 vincent hor - Calendarix の calendar.php における重要な情報を取得される脆弱性 - CVE-2007-3258 2012-12-20 18:19 2007-06-27 Show GitHub Exploit DB Packet Storm
229489 4 警告 xythos - XEDM などにおけるマルウェアを配布するドキュメントと任意の Content-Type HTTP ヘッダを関連づけられる脆弱性 - CVE-2007-3256 2012-12-20 18:19 2007-06-27 Show GitHub Exploit DB Packet Storm
229490 6.5 警告 xythos - XEDM におけるクロスサイトリクエストフォージェリの脆弱性 - CVE-2007-3255 2012-12-20 18:19 2007-06-27 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 13, 2026, 5:05 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
223041 8.8 HIGH
Network 		oxid-esales eshop An issue was discovered in OXID eShop 6.x before 6.0.6 and 6.1.x before 6.1.5, OXID eShop Enterprise Edition Version 5.2.x-5.3.x, OXID eShop Professional Edition Version 4.9.x-4.10.x and OXID eShop C… CWE-384
 Session Fixation 		CVE-2019-17062 2024-11-21 13:31 2019-11-6 Show GitHub Exploit DB Packet Storm
223042 9.8 CRITICAL
Network 		mbed mbed An integer overflow was discovered in the CoAP library in Arm Mbed OS 5.14.0. The function sn_coap_builder_calc_needed_packet_data_size_2() is used to calculate the required memory for the CoAP messa… CWE-190
 Integer Overflow or Wraparound 		CVE-2019-17211 2024-11-21 13:31 2019-11-6 Show GitHub Exploit DB Packet Storm
223043 9.8 CRITICAL
Network 		mbed mbed Buffer overflows were discovered in the CoAP library in Arm Mbed OS 5.14.0. The CoAP parser is responsible for parsing received CoAP packets. The function sn_coap_parser_options_parse() parses CoAP i… CWE-787
CWE-129
 Out-of-bounds Write
 Improper Validation of Array Index 		CVE-2019-17212 2024-11-21 13:31 2019-11-6 Show GitHub Exploit DB Packet Storm
223044 7.5 HIGH
Network 		phantomjs phantomjs PhantomJS through 2.1.1 has an arbitrary file read vulnerability, as demonstrated by an XMLHttpRequest for a file:// URI. The vulnerability exists in the page.open() function of the webpage module, w… CWE-552
 Files or Directories Accessible to External Parties 		CVE-2019-17221 2024-11-21 13:31 2019-11-5 Show GitHub Exploit DB Packet Storm
223045 7.5 HIGH
Network 		arm mbed-mqtt
mbed-os 		A denial-of-service issue was discovered in the MQTT library in Arm Mbed OS 2017-11-02. The function readMQTTLenString() is called by the function MQTTDeserialize_publish() to get the length and cont… CWE-20
 Improper Input Validation  		CVE-2019-17210 2024-11-21 13:31 2019-11-5 Show GitHub Exploit DB Packet Storm
223046 4.3 MEDIUM
Network 		infosysta in-app_\&_desktop_notifications An issue was discovered in the Infosysta "In-App & Desktop Notifications" app before 1.6.14_J8 for Jira. It is possible to obtain a list of all Jira projects (with authentication as a Jira user, but … CWE-862
 Missing Authorization 		CVE-2019-16909 2024-11-21 13:31 2019-11-1 Show GitHub Exploit DB Packet Storm
223047 5.3 MEDIUM
Network 		infosysta in-app_\&_desktop_notifications An issue was discovered in the Infosysta "In-App & Desktop Notifications" app before 1.6.14_J8 for Jira. It is possible to obtain a list of all Jira projects without authentication/authorization via … CWE-200
Information Exposure 		CVE-2019-16908 2024-11-21 13:31 2019-11-1 Show GitHub Exploit DB Packet Storm
223048 5.3 MEDIUM
Network 		infosysta in-app_\&_desktop_notifications An issue was discovered in the Infosysta "In-App & Desktop Notifications" app 1.6.13_J8 for Jira. It is possible to obtain a list of all valid Jira usernames without authentication/authorization via … CWE-306
CWE-862
Missing Authentication for Critical Function
 Missing Authorization 		CVE-2019-16907 2024-11-21 13:31 2019-11-1 Show GitHub Exploit DB Packet Storm
223049 7.5 HIGH
Network 		infosysta in-app_\&_desktop_notifications An issue was discovered in the Infosysta "In-App & Desktop Notifications" app 1.6.13_J8 for Jira. By using plugins/servlet/nfj/PushNotification?username= with a modified username, a different user's … CWE-306
CWE-862
Missing Authentication for Critical Function
 Missing Authorization 		CVE-2019-16906 2024-11-21 13:31 2019-11-1 Show GitHub Exploit DB Packet Storm
223050 9.8 CRITICAL
Network 		intrasrv_project intrasrv A remote SEH buffer overflow has been discovered in IntraSrv 1.0 (2007-06-03). An attacker may send a crafted HTTP GET or HEAD request that can result in a compromise of the hosting system. CWE-120
Classic Buffer Overflow 		CVE-2019-17181 2024-11-21 13:31 2019-10-29 Show GitHub Exploit DB Packet Storm