Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 12, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
229501	5	警告	tec-it	-	TEC-IT TBarCode OCX ActiveX コントロールにおける任意のファイルを上書きされる脆弱性	-	CVE-2007-3233	2012-12-20 18:19	2007-06-14	Show	GitHub Exploit DB Packet Storm

229502	6.8	警告	simian systems inc	-	Idan Sofer PHP::HTML の phphtml.php における PHP リモートファイルインクルージョンの脆弱性	-	CVE-2007-3230	2012-12-20 18:19	2007-06-14	Show	GitHub Exploit DB Packet Storm

229503	6.8	警告	singapore	-	Singapore Gallery の index.php における重要な情報を取得される脆弱性	-	CVE-2007-3229	2012-12-20 18:19	2007-06-14	Show	GitHub Exploit DB Packet Storm

229504	6.8	警告	simian systems inc	-	Sitellite CMS における PHP リモートファイルインクルージョンの脆弱性	-	CVE-2007-3228	2012-12-20 18:19	2007-06-14	Show	GitHub Exploit DB Packet Storm

229505	4.3	警告	Ruby on Rails project	-	Ruby on Rails の to_json 関数におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2007-3227	2012-12-20 18:19	2007-06-14	Show	GitHub Exploit DB Packet Storm

229506	6.4	警告	サン・マイクロシステムズ	-	slapd における特定のデータを変更される脆弱性	-	CVE-2007-3225	2012-12-20 18:19	2007-06-13	Show	GitHub Exploit DB Packet Storm

229507	5	警告	サン・マイクロシステムズ	-	slapd におけるエントリの属性の存在を特定される脆弱性	-	CVE-2007-3224	2012-12-20 18:19	2007-06-13	Show	GitHub Exploit DB Packet Storm

229508	7.5	危険	XOOPS	-	XOOPS 用の XFsection モジュールにおける PHP リモートファイルインクルージョンの脆弱性	-	CVE-2007-3222	2012-12-20 18:19	2007-06-14	Show	GitHub Exploit DB Packet Storm

229509	6.8	警告	XOOPS	-	XOOPS 用の XT-Conteudo モジュールにおける PHP リモートファイルインクルージョンの脆弱性	-	CVE-2007-3221	2012-12-20 18:19	2007-06-14	Show	GitHub Exploit DB Packet Storm

229510	6.8	警告	XOOPS	-	XOOPS 用の Cjay Content モジュールにおける PHP リモートファイルインクルージョンの脆弱性	-	CVE-2007-3220	2012-12-20 18:19	2007-06-14	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 13, 2026, 5:05 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
223531	8.6	HIGH Network	embedthis	goahead	An issue was discovered in Embedthis GoAhead 2.5.0. Certain pages (such as goform/login and config/log_off_page.htm) create links containing a hostname obtained from an arbitrary HTTP Host header sen…	CWE-94 Code Injection	CVE-2019-16645	2024-11-21 13:30	2019-09-21	Show	GitHub Exploit DB Packet Storm

223532	10.0	CRITICAL Network	supermicro	x11dai-n_firmware x11dac_firmware x11dph-tq_firmware x11dph-i_firmware x11dph-t_firmware x11dps-re_firmware x11dsf-e_firmware x11dsn-ts_firmware x11dsn-tsq_firmware x11dsc\…	On Supermicro X10 and X11 products, a client's access privileges may be transferred to a different client that later has the same socket file descriptor number. In opportunistic circumstances, an att…	NVD-CWE-noinfo	CVE-2019-16650	2024-11-21 13:30	2019-09-21	Show	GitHub Exploit DB Packet Storm

223533	10.0	CRITICAL Network	supermicro	x11dai-n_firmware x11dac_firmware x11dph-tq_firmware x11dph-i_firmware x11dph-t_firmware x11dps-re_firmware x11dsf-e_firmware x11dsn-ts_firmware x11dsn-tsq_firmware x11dsc\…	On Supermicro H11, H12, M11, X9, X10, and X11 products, a combination of encryption and authentication problems in the virtual media service allows capture of BMC credentials and data transferred ove…	CWE-287 CWE-326 CWE-522 Improper Authentication Inadequate Encryption Strength Insufficiently Protected Credentials	CVE-2019-16649	2024-11-21 13:30	2019-09-21	Show	GitHub Exploit DB Packet Storm

223534	9.8	CRITICAL Network	tuzicms	tuzicms	App\Home\Controller\ZhuantiController.class.php in TuziCMS 2.0.6 has SQL injection via the index.php/Zhuanti/group?id= substring.	CWE-89 SQL Injection	CVE-2019-16644	2024-11-21 13:30	2019-09-21	Show	GitHub Exploit DB Packet Storm

223535	5.4	MEDIUM Network	zrlog	zrlog	An issue was discovered in ZrLog 2.1.1. There is a Stored XSS vulnerability in the article_edit area.	CWE-79 Cross-site Scripting	CVE-2019-16643	2024-11-21 13:30	2019-09-21	Show	GitHub Exploit DB Packet Storm

223536	6.1	MEDIUM Network	draytek	vigor2925_firmware	On DrayTek Vigor2925 devices with firmware 3.8.4.3, XSS exists via a crafted WAN name on the General Setup screen. NOTE: this is an end-of-life product.	CWE-79 Cross-site Scripting	CVE-2019-16534	2024-11-21 13:30	2019-09-21	Show	GitHub Exploit DB Packet Storm

223537	6.1	MEDIUM Network	draytek	vigor2925_firmware	On DrayTek Vigor2925 devices with firmware 3.8.4.3, Incorrect Access Control exists in loginset.htm, and can be used to trigger XSS. NOTE: this is an end-of-life product.	CWE-79 Cross-site Scripting	CVE-2019-16533	2024-11-21 13:30	2019-09-21	Show	GitHub Exploit DB Packet Storm

223538	9.8	CRITICAL Network	yejiao	tuzicms	App\Mobile\Controller\ZhuantiController.class.php in TuziCMS 2.0.6 has SQL injection via the index.php/Mobile/Zhuanti/group?id= substring.	CWE-89 SQL Injection	CVE-2019-16642	2024-11-21 13:30	2019-09-21	Show	GitHub Exploit DB Packet Storm

223539	8.8	HIGH Network	layerbb	layerbb	LayerBB before 1.1.4 has multiple CSRF issues, as demonstrated by changing the System Settings via admin/general.php.	CWE-352 Origin Validation Error	CVE-2019-16531	2024-11-21 13:30	2019-09-20	Show	GitHub Exploit DB Packet Storm

223540	6.1	MEDIUM Network	checklist	checklist	An XSS issue was discovered in the checklist plugin before 1.1.9 for WordPress. The fill parameter is not correctly filtered in the checklist-icon.php file, and it is possible to inject JavaScript co…	CWE-79 Cross-site Scripting	CVE-2019-16525	2024-11-21 13:30	2019-09-20	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed