Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 12, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
229571 6.8 警告 scallywag.org - Scallywag における PHP リモートファイルインクルージョンの脆弱性 CWE-94
コード・インジェクション 		CVE-2007-2900 2012-12-20 18:19 2007-05-30 Show GitHub Exploit DB Packet Storm
229572 4.3 警告 シマンテック - Windows 上で稼動する Symantec ESM マネージャなどにおけるサービス運用妨害 (DoS) の脆弱性 - CVE-2007-2896 2012-12-20 18:19 2007-05-24 Show GitHub Exploit DB Packet Storm
229573 10 危険 サン・マイクロシステムズ - Sun Java Web Proxy Server の sockd におけるスタックベースのバッファオーバーフローの脆弱性 - CVE-2007-2881 2012-12-20 18:19 2007-05-25 Show GitHub Exploit DB Packet Storm
229574 7.8 危険 windy road - Vistered Little の skins/common.css.php におけるディレクトリトラバーサルの脆弱性 - CVE-2007-2934 2012-12-20 18:19 2006-08-29 Show GitHub Exploit DB Packet Storm
229575 7.2 危険 tcl.tk - Tcl/Tk の tcl/win/tclWinReg.c におけるバッファオーバーフローの脆弱性 - CVE-2007-2877 2012-12-20 18:19 2007-05-29 Show GitHub Exploit DB Packet Storm
229576 5.8 警告 レッドハット - Fedora NetworkManager パッケージの wpa_supplicant におけるバッファオーバーフローの脆弱性 - CVE-2007-2874 2012-12-20 18:19 2007-06-4 Show GitHub Exploit DB Packet Storm
229577 7.5 危険 phpecho cms - PHPEcho CMS の modules/admin/modules/gallery.php における SQL インジェクションの脆弱性 - CVE-2007-2866 2012-12-20 18:19 2007-05-25 Show GitHub Exploit DB Packet Storm
229578 9.3 危険 phpPgAdmin - phpPgAdmin の sqledit.php におけるクロスサイトスクリプティングの脆弱性 - CVE-2007-2865 2012-12-20 18:19 2007-05-25 Show GitHub Exploit DB Packet Storm
229579 7.5 危険 saxon - SAXON における PHP リモートファイルインクルージョンの脆弱性 - CVE-2007-2861 2012-12-20 18:19 2007-05-24 Show GitHub Exploit DB Packet Storm
229580 7.5 危険 simpgb - SimpGB における PHP リモートファイルインクルージョンの脆弱性 - CVE-2007-2859 2012-12-20 18:19 2007-05-24 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 13, 2026, 5:05 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
223251 5.3 MEDIUM
Network 		arm
fedoraproject
debian 		mbed_crypto
mbed_tls
fedora
debian_linux 		Arm Mbed TLS before 2.19.0 and Arm Mbed Crypto before 2.0.0, when deterministic ECDSA is enabled, use an RNG with insufficient entropy for blinding, which might allow an attacker to recover a private… NVD-CWE-noinfo
CVE-2019-16910 2024-11-21 13:31 2019-09-26 Show GitHub Exploit DB Packet Storm
223252 5.4 MEDIUM
Network 		teampass teampass TeamPass 2.1.27.36 allows Stored XSS by setting a crafted password for an item in a common available folder or sharing the item with an admin. (The crafted password is exploitable when viewing the ch… CWE-79
Cross-site Scripting 		CVE-2019-16904 2024-11-21 13:31 2019-09-26 Show GitHub Exploit DB Packet Storm
223253 5.3 MEDIUM
Network 		plutinosoft platinum Platinum UPnP SDK 1.2.0 allows Directory Traversal in Core/PltHttpServer.cpp because it checks for /.. where it should be checking for ../ instead. CWE-22
Path Traversal 		CVE-2019-16903 2024-11-21 13:31 2019-09-26 Show GitHub Exploit DB Packet Storm
223254 5.3 MEDIUM
Network 		mediawiki
fedoraproject
debian 		mediawiki
fedora
debian_linux 		In MediaWiki through 1.33.0, Special:Redirect allows information disclosure of suppressed usernames via a User ID Lookup. CWE-862
 Missing Authorization 		CVE-2019-16738 2024-11-21 13:31 2019-09-26 Show GitHub Exploit DB Packet Storm
223255 7.5 HIGH
Network 		advantech webaccess\/hmi_designer Advantech WebAccess/HMI Designer 2.1.9.31 has Exception Handler Chain corruption starting at Unknown Symbol @ 0x0000000000000000 called from ntdll!RtlRaiseStatus+0x00000000000000b4. CWE-755
 Improper Handling of Exceptional Conditions 		CVE-2019-16901 2024-11-21 13:31 2019-09-26 Show GitHub Exploit DB Packet Storm
223256 7.5 HIGH
Network 		advantech webaccess\/hmi_designer Advantech WebAccess/HMI Designer 2.1.9.31 has a User Mode Write AV starting at MSVCR90!memcpy+0x000000000000015c. NVD-CWE-noinfo
CVE-2019-16900 2024-11-21 13:31 2019-09-26 Show GitHub Exploit DB Packet Storm
223257 7.5 HIGH
Network 		advantech webaccess\/hmi_designer In Advantech WebAccess/HMI Designer 2.1.9.31, Data from a Faulting Address controls Code Flow starting at PM_V3!CTagInfoThreadBase::GetNICInfo+0x0000000000512918. NVD-CWE-noinfo
CVE-2019-16899 2024-11-21 13:31 2019-09-26 Show GitHub Exploit DB Packet Storm
223258 5.5 MEDIUM
Local 		rubyzip_project
fedoraproject
redhat 		rubyzip
fedora
cloudforms 		In Rubyzip before 1.3.0, a crafted ZIP file can bypass application checks on ZIP entry sizes because data about the uncompressed size can be spoofed. This allows attackers to cause a denial of servic… NVD-CWE-noinfo
CVE-2019-16892 2024-11-21 13:31 2019-09-26 Show GitHub Exploit DB Packet Storm
223259 5.4 MEDIUM
Network 		halo halo Halo 1.1.0 has XSS via a crafted authorUrl in JSON data to api/content/posts/comments. CWE-79
Cross-site Scripting 		CVE-2019-16890 2024-11-21 13:31 2019-09-26 Show GitHub Exploit DB Packet Storm
223260 7.5 HIGH
Network 		ui er-x_firmware
er-x-sfp_firmware
ep-r6_firmware
erlite-3_firmware
erpoe-5_firmware
er-8_firmware
erpro-8_firmware
ep-r8_firmware
er-4_firmware
er-6p_firmware
er-12_firmwa… 		Ubiquiti EdgeMAX devices before 2.0.3 allow remote attackers to cause a denial of service (disk consumption) because *.cache files in /var/run/beaker/container_file/ are created when providing a vali… CWE-770
 Allocation of Resources Without Limits or Throttling 		CVE-2019-16889 2024-11-21 13:31 2019-09-26 Show GitHub Exploit DB Packet Storm