Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 12, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
229601 6.4 警告 runawaysoft - RunawaySoft Haber ポータルの devami.asp における SQL インジェクションの脆弱性 - CVE-2007-2752 2012-12-20 18:19 2007-05-17 Show GitHub Exploit DB Packet Storm
229602 7.5 危険 phpglossar - PHPGlossar における PHP リモートファイルインクルージョンの脆弱性 - CVE-2007-2751 2012-12-20 18:19 2007-05-17 Show GitHub Exploit DB Packet Storm
229603 7.5 危険 simpnews - SimpNews の print.php における SQL インジェクションの脆弱性 - CVE-2007-2750 2012-12-20 18:19 2007-05-17 Show GitHub Exploit DB Packet Storm
229604 5 警告 rdiffweb - rdiffWeb の rdw_helpers.py におけるディレクトリトラバーサルの脆弱性 - CVE-2007-2747 2012-12-20 18:19 2007-05-17 Show GitHub Exploit DB Packet Storm
229605 3.5 注意 plain black - Plain Black WebGUI の lib/WebGUI/Asset/Wobject/DataForm.pm における重要な情報を取得される脆弱性 - CVE-2007-2746 2012-12-20 18:19 2007-05-17 Show GitHub Exploit DB Packet Storm
229606 4.3 警告 vdesk - vDesk Webmail の printcal.pl におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2007-2745 2012-12-20 18:19 2007-05-17 Show GitHub Exploit DB Packet Storm
229607 7.5 危険 precisionid barcode - PrecisionID_Barcode.dll の PrecisionID Barcode ActiveX コントロールにおけるスタックベースのバッファオーバーフローの脆弱性 - CVE-2007-2744 2012-12-20 18:19 2007-05-17 Show GitHub Exploit DB Packet Storm
229608 6.8 警告 xajax-project - xajax における脆弱性 - CVE-2007-2740 2012-12-20 18:19 2007-05-17 Show GitHub Exploit DB Packet Storm
229609 4.3 警告 xajax-project - xajax におけるクロスサイトスクリプティングの脆弱性 - CVE-2007-2739 2012-12-20 18:19 2007-05-17 Show GitHub Exploit DB Packet Storm
229610 7.5 危険 XOOPS - XOOPS 用の Glossaire モジュールにおける SQL インジェクションの脆弱性 - CVE-2007-2738 2012-12-20 18:19 2007-05-17 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 13, 2026, 5:05 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
223321 6.5 MEDIUM
Network 		cybelesoft thinfinity_virtualui Cybele Thinfinity VirtualUI 2.5.17.2 allows ../ path traversal that can be used for data exfiltration. This enables files outside of the web directory to be retrieved if the exact location is known a… CWE-22
Path Traversal 		CVE-2019-16384 2024-11-21 13:30 2020-06-5 Show GitHub Exploit DB Packet Storm
223322 5.5 MEDIUM
Local 		fortinet forticlient Use of a hard-coded cryptographic key to encrypt security sensitive data in local storage and configuration in FortiClient for Windows prior to 6.4.0 may allow an attacker with access to the local st… CWE-798
 Use of Hard-coded Credentials 		CVE-2019-16150 2024-11-21 13:30 2020-06-4 Show GitHub Exploit DB Packet Storm
223323 8.8 HIGH
Network 		tylertech eagle TylerTech Eagle 2018.3.11 deserializes untrusted user input, resulting in remote code execution via a crafted Java object to the recorder/ServiceManager?service=tyler.empire.settings.SettingManager U… CWE-502
 Deserialization of Untrusted Data 		CVE-2019-16112 2024-11-21 13:30 2020-05-14 Show GitHub Exploit DB Packet Storm
223324 8.8 HIGH
Network 		geniusbytes genius_server An application plugin in Genius Bytes Genius Server (Genius CDDS) 3.2.2 allows remote authenticated users to gain admin privileges. NVD-CWE-noinfo
CVE-2019-16653 2024-11-21 13:30 2020-04-29 Show GitHub Exploit DB Packet Storm
223325 7.2 HIGH
Network 		geniusbytes genius_server The BPM component in Genius Bytes Genius Server (Genius CDDS) 3.2.2 allows remote authenticated users to execute arbitrary commands. NVD-CWE-noinfo
CVE-2019-16652 2024-11-21 13:30 2020-04-29 Show GitHub Exploit DB Packet Storm
223326 7.5 HIGH
Network 		mediawiki abusefilter An issue was discovered in the AbuseFilter extension for MediaWiki. includes/special/SpecialAbuseLog.php allows attackers to obtain sensitive information, such as deleted/suppressed usernames and sum… CWE-532
 Inclusion of Sensitive Information in Log Files 		CVE-2019-16528 2024-11-21 13:30 2020-03-21 Show GitHub Exploit DB Packet Storm
223327 6.8 MEDIUM
Physics 		hom.ee brain_cube_core The bootloader of the homee Brain Cube V2 through 2.23.0 allows attackers with physical access to gain root access by manipulating the U-Boot environment via the CLI after connecting to the internal … CWE-306
Missing Authentication for Critical Function 		CVE-2019-16258 2024-11-21 13:30 2020-03-21 Show GitHub Exploit DB Packet Storm
223328 7.5 HIGH
Network 		phpbb phpbb phpBB 3.2.7 allows adding an arbitrary Cascading Style Sheets (CSS) token sequence to a page through BBCode. CWE-94
Code Injection 		CVE-2019-16108 2024-11-21 13:30 2020-03-20 Show GitHub Exploit DB Packet Storm
223329 9.8 CRITICAL
Network 		netsas enigma_network_management_solution An OS command injection vulnerability in the discover_and_manage CGI script in NETSAS Enigma NMS 65.0.0 and prior allows an attacker to execute arbitrary code because of improper neutralization of sh… CWE-78
OS Command  		CVE-2019-16072 2024-11-21 13:30 2020-03-20 Show GitHub Exploit DB Packet Storm
223330 8.8 HIGH
Network 		netsas enigma_nms Enigma NMS 65.0.0 and prior allows administrative users to create low-privileged accounts that do not have the ability to modify any settings in the system, only view the components. However, it is p… CWE-269
 Improper Privilege Management 		CVE-2019-16071 2024-11-21 13:30 2020-03-20 Show GitHub Exploit DB Packet Storm