Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 13, 2026, 2:01 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
229481	7.6	危険	quark	-	Windows 用の QuarkXPress におけるスタックベースのバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2007-3678	2012-12-20 18:33	2007-07-11	Show	GitHub Exploit DB Packet Storm

229482	6.9	警告	シマンテック	-	Symantec AntiVirus Corporate Edition などに同梱されている Symantec symtdi.sys における権限を取得される脆弱性	-	CVE-2007-3673	2012-12-20 18:33	2007-07-11	Show	GitHub Exploit DB Packet Storm

229483	7.5	危険	シマンテック	-	Symantec Norton Ghost の RemoteCommand.DLL におけるバッファオーバーフローの脆弱性	-	CVE-2007-3666	2012-12-20 18:33	2007-07-10	Show	GitHub Exploit DB Packet Storm

229484	5	警告	シマンテック	-	Symantec Norton Ghost の FileBackup.DLL におけるサービス運用妨害 (DoS) の脆弱性	-	CVE-2007-3665	2012-12-20 18:33	2007-07-10	Show	GitHub Exploit DB Packet Storm

229485	7.5	危険	Wafer	-	Webmatic における SQL インジェクションの脆弱性	-	CVE-2007-3648	2012-12-20 18:33	2007-07-10	Show	GitHub Exploit DB Packet Storm

229486	10	危険	ZoneO-soft	-	phpTrafficA の Php/login.inc.php における認証を回避される脆弱性	-	CVE-2007-3647	2012-12-20 18:33	2007-07-10	Show	GitHub Exploit DB Packet Storm

229487	4	警告	WordPress.org	-	WordPress における重要な情報を取得される脆弱性	-	CVE-2007-3639	2012-12-20 18:33	2007-07-9	Show	GitHub Exploit DB Packet Storm

229488	6	警告	Yahoo!	-	Yahoo! Messenger におけるバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2007-3638	2012-12-20 18:33	2007-07-9	Show	GitHub Exploit DB Packet Storm

229489	7.5	危険	SquirrelMail Project	-	Squirrelmail 用の GPG Plugin における任意のコマンドを実行される脆弱性	-	CVE-2007-3636	2012-12-20 18:33	2007-07-9	Show	GitHub Exploit DB Packet Storm

229490	4.3	警告	SquirrelMail Project	-	Squirrelmail 用の GPG Plugin における特定のコマンドを挿入される脆弱性	CWE-noinfo 情報不足	CVE-2007-3635	2012-12-20 18:33	2007-07-9	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 13, 2026, 5:05 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
223531	8.6	HIGH Network	embedthis	goahead	An issue was discovered in Embedthis GoAhead 2.5.0. Certain pages (such as goform/login and config/log_off_page.htm) create links containing a hostname obtained from an arbitrary HTTP Host header sen…	CWE-94 Code Injection	CVE-2019-16645	2024-11-21 13:30	2019-09-21	Show	GitHub Exploit DB Packet Storm

223532	10.0	CRITICAL Network	supermicro	x11dai-n_firmware x11dac_firmware x11dph-tq_firmware x11dph-i_firmware x11dph-t_firmware x11dps-re_firmware x11dsf-e_firmware x11dsn-ts_firmware x11dsn-tsq_firmware x11dsc\…	On Supermicro X10 and X11 products, a client's access privileges may be transferred to a different client that later has the same socket file descriptor number. In opportunistic circumstances, an att…	NVD-CWE-noinfo	CVE-2019-16650	2024-11-21 13:30	2019-09-21	Show	GitHub Exploit DB Packet Storm

223533	10.0	CRITICAL Network	supermicro	x11dai-n_firmware x11dac_firmware x11dph-tq_firmware x11dph-i_firmware x11dph-t_firmware x11dps-re_firmware x11dsf-e_firmware x11dsn-ts_firmware x11dsn-tsq_firmware x11dsc\…	On Supermicro H11, H12, M11, X9, X10, and X11 products, a combination of encryption and authentication problems in the virtual media service allows capture of BMC credentials and data transferred ove…	CWE-287 CWE-326 CWE-522 Improper Authentication Inadequate Encryption Strength Insufficiently Protected Credentials	CVE-2019-16649	2024-11-21 13:30	2019-09-21	Show	GitHub Exploit DB Packet Storm

223534	9.8	CRITICAL Network	tuzicms	tuzicms	App\Home\Controller\ZhuantiController.class.php in TuziCMS 2.0.6 has SQL injection via the index.php/Zhuanti/group?id= substring.	CWE-89 SQL Injection	CVE-2019-16644	2024-11-21 13:30	2019-09-21	Show	GitHub Exploit DB Packet Storm

223535	5.4	MEDIUM Network	zrlog	zrlog	An issue was discovered in ZrLog 2.1.1. There is a Stored XSS vulnerability in the article_edit area.	CWE-79 Cross-site Scripting	CVE-2019-16643	2024-11-21 13:30	2019-09-21	Show	GitHub Exploit DB Packet Storm

223536	6.1	MEDIUM Network	draytek	vigor2925_firmware	On DrayTek Vigor2925 devices with firmware 3.8.4.3, XSS exists via a crafted WAN name on the General Setup screen. NOTE: this is an end-of-life product.	CWE-79 Cross-site Scripting	CVE-2019-16534	2024-11-21 13:30	2019-09-21	Show	GitHub Exploit DB Packet Storm

223537	6.1	MEDIUM Network	draytek	vigor2925_firmware	On DrayTek Vigor2925 devices with firmware 3.8.4.3, Incorrect Access Control exists in loginset.htm, and can be used to trigger XSS. NOTE: this is an end-of-life product.	CWE-79 Cross-site Scripting	CVE-2019-16533	2024-11-21 13:30	2019-09-21	Show	GitHub Exploit DB Packet Storm

223538	9.8	CRITICAL Network	yejiao	tuzicms	App\Mobile\Controller\ZhuantiController.class.php in TuziCMS 2.0.6 has SQL injection via the index.php/Mobile/Zhuanti/group?id= substring.	CWE-89 SQL Injection	CVE-2019-16642	2024-11-21 13:30	2019-09-21	Show	GitHub Exploit DB Packet Storm

223539	8.8	HIGH Network	layerbb	layerbb	LayerBB before 1.1.4 has multiple CSRF issues, as demonstrated by changing the System Settings via admin/general.php.	CWE-352 Origin Validation Error	CVE-2019-16531	2024-11-21 13:30	2019-09-20	Show	GitHub Exploit DB Packet Storm

223540	6.1	MEDIUM Network	checklist	checklist	An XSS issue was discovered in the checklist plugin before 1.1.9 for WordPress. The fill parameter is not correctly filtered in the checklist-icon.php file, and it is possible to inject JavaScript co…	CWE-79 Cross-site Scripting	CVE-2019-16525	2024-11-21 13:30	2019-09-20	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed