Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 13, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
229551 10 危険 BlackBerry - Research in Motion BlackBerry Enterprise Server におけるマルウェアを読み込む脆弱性 - CVE-2007-3483 2012-12-20 18:19 2007-06-28 Show GitHub Exploit DB Packet Storm
229552 7.8 危険 VideoLAN - VideoLAN VLC Media Player の input.c におけるサービス運用妨害 (DoS) の脆弱性 - CVE-2007-3468 2012-12-20 18:19 2007-06-27 Show GitHub Exploit DB Packet Storm
229553 7.8 危険 VideoLAN - VideoLAN VLC Media Player の stats.c における整数オーバーフローの脆弱性 - CVE-2007-3467 2012-12-20 18:19 2007-06-27 Show GitHub Exploit DB Packet Storm
229554 10 危険 sofaware - Check Point SofaWare Safe@Office における特定のデフォルトパスワードを含む脆弱性 - CVE-2007-3465 2012-12-20 18:19 2007-06-27 Show GitHub Exploit DB Packet Storm
229555 8.5 危険 sofaware - Check Point SofaWare Safe@Office における権限を取得される脆弱性 - CVE-2007-3464 2012-12-20 18:19 2007-06-27 Show GitHub Exploit DB Packet Storm
229556 6 警告 sofaware - Check Point SofaWare Safe@Office におけるクロスサイトリクエストフォージェリの脆弱性 - CVE-2007-3462 2012-12-20 18:19 2007-06-27 Show GitHub Exploit DB Packet Storm
229557 10 危険 トレンドマイクロ - Trend Micro OfficeScan Corporate Edition の cgiChkMasterPwd.exe におけるパスワード要件を回避される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2007-3455 2012-12-20 18:19 2007-06-26 Show GitHub Exploit DB Packet Storm
229558 10 危険 トレンドマイクロ - Trend Micro OfficeScan Corporate Edition の CGIOCommon.dll におけるスタックベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2007-3454 2012-12-20 18:19 2007-06-26 Show GitHub Exploit DB Packet Storm
229559 4.3 警告 sj labs - SJ Labs SJphone におけるバッファオーバーフローの脆弱性 - CVE-2007-3445 2012-12-20 18:19 2007-06-26 Show GitHub Exploit DB Packet Storm
229560 4.3 警告 BlackBerry - Research in Motion BlackBerry 7270 におけるサービス運用妨害 (DoS) の脆弱性 - CVE-2007-3444 2012-12-20 18:19 2007-06-26 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 13, 2026, 5:05 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
223081 6.1 MEDIUM
Network 		fusionpbx fusionpbx In FusionPBX up to v4.5.7, the file app\contacts\contact_import.php uses an unsanitized "query_string" variable coming from the URL, which is reflected in HTML, leading to XSS. CWE-79
Cross-site Scripting 		CVE-2019-16987 2024-11-21 13:31 2019-10-22 Show GitHub Exploit DB Packet Storm
223082 6.5 MEDIUM
Network 		fusionpbx fusionpbx In FusionPBX up to v4.5.7, the file resources\download.php uses an unsanitized "f" variable coming from the URL, which takes any pathname and allows a download of it. (resources\secure_download.php i… CWE-22
Path Traversal 		CVE-2019-16986 2024-11-21 13:31 2019-10-22 Show GitHub Exploit DB Packet Storm
223083 6.5 MEDIUM
Network 		fusionpbx fusionpbx In FusionPBX up to v4.5.7, the file app\xml_cdr\xml_cdr_delete.php uses an unsanitized "rec" variable coming from the URL, which is base64 decoded and allows deletion of any file of the system. CWE-22
Path Traversal 		CVE-2019-16985 2024-11-21 13:31 2019-10-22 Show GitHub Exploit DB Packet Storm
223084 6.1 MEDIUM
Network 		fusionpbx fusionpbx In FusionPBX up to v4.5.7, the file app\recordings\recording_play.php uses an unsanitized "filename" variable coming from the URL, which is base64 decoded and reflected in HTML, leading to XSS. CWE-79
Cross-site Scripting 		CVE-2019-16984 2024-11-21 13:31 2019-10-22 Show GitHub Exploit DB Packet Storm
223085 6.1 MEDIUM
Network 		fusionpbx fusionpbx In FusionPBX up to v4.5.7, the file resources\paging.php has a paging function (called by several pages of the interface), which uses an unsanitized "param" variable constructed partially from the UR… CWE-79
Cross-site Scripting 		CVE-2019-16983 2024-11-21 13:31 2019-10-22 Show GitHub Exploit DB Packet Storm
223086 6.1 MEDIUM
Network 		fusionpbx fusionpbx In FusionPBX up to v4.5.7, the file app\access_controls\access_control_nodes.php uses an unsanitized "id" variable coming from the URL, which is reflected in HTML, leading to XSS. CWE-79
Cross-site Scripting 		CVE-2019-16982 2024-11-21 13:31 2019-10-22 Show GitHub Exploit DB Packet Storm
223087 6.1 MEDIUM
Network 		fusionpbx fusionpbx In FusionPBX up to v4.5.7, the file app\conference_profiles\conference_profile_params.php uses an unsanitized "id" variable coming from the URL, which is reflected on 2 occasions in HTML, leading to … CWE-79
Cross-site Scripting 		CVE-2019-16981 2024-11-21 13:31 2019-10-22 Show GitHub Exploit DB Packet Storm
223088 6.5 MEDIUM
Network 		fusionpbx fusionpbx In FusionPBX up to v4.5.7, the file app/music_on_hold/music_on_hold.php uses an unsanitized "file" variable coming from the URL, which takes any pathname (base64 encoded) and allows a download of it. CWE-22
Path Traversal 		CVE-2019-16990 2024-11-21 13:31 2019-10-22 Show GitHub Exploit DB Packet Storm
223089 8.8 HIGH
Network 		fusionpbx fusionpbx In FusionPBX up to v4.5.7, the file app\call_broadcast\call_broadcast_edit.php uses an unsanitized "id" variable coming from the URL in an unparameterized SQL query, leading to SQL injection. CWE-89
SQL Injection 		CVE-2019-16980 2024-11-21 13:31 2019-10-22 Show GitHub Exploit DB Packet Storm
223090 6.1 MEDIUM
Network 		fusionpbx fusionpbx In FusionPBX up to v4.5.7, the file app\contacts\contact_urls.php uses an unsanitized "id" variable coming from the URL, which is reflected in HTML, leading to XSS. CWE-79
Cross-site Scripting 		CVE-2019-16979 2024-11-21 13:31 2019-10-22 Show GitHub Exploit DB Packet Storm