Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 17, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
229871 4 警告 phpcoupon - phpCoupon の Billing Control Panel における Premium Member ステイタスを取得される脆弱性 - CVE-2007-4143 2012-12-20 18:33 2007-08-3 Show GitHub Exploit DB Packet Storm
229872 4.3 警告 WordPress.org - WordPress の Temporary Uploads 編集機能におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2007-4139 2012-12-20 18:33 2007-08-3 Show GitHub Exploit DB Packet Storm
229873 6.5 警告 レッドハット - Red Hat Network Satellite Server における任意のコードを実行される脆弱性 CWE-noinfo
情報不足 		CVE-2007-4132 2012-12-20 18:33 2007-08-29 Show GitHub Exploit DB Packet Storm
229874 7.5 危険 suskunduygular - SuskunDuygular Uyelik Sistemi の unuttum.asp における SQL インジェクションの脆弱性 - CVE-2007-4114 2012-12-20 18:33 2007-07-31 Show GitHub Exploit DB Packet Storm
229875 7.5 危険 phpmyforum - phpMyForum の editpost.php における SQL インジェクションの脆弱性 - CVE-2007-4107 2012-12-20 18:33 2007-06-7 Show GitHub Exploit DB Packet Storm
229876 4.3 警告 sblog - sBlog の search.php におけるクロスサイトスクリプティングの脆弱性 - CVE-2007-4102 2012-12-20 18:33 2007-07-31 Show GitHub Exploit DB Packet Storm
229877 5.8 警告 The Tor Project - Tor における重要な情報を取得される脆弱性 - CVE-2007-4099 2012-12-20 18:33 2007-07-30 Show GitHub Exploit DB Packet Storm
229878 5.8 警告 The Tor Project - Tor における任意のストリームへセルを挿入される脆弱性 - CVE-2007-4098 2012-12-20 18:33 2007-07-30 Show GitHub Exploit DB Packet Storm
229879 6.4 警告 The Tor Project - Tor における仕様に反して重要な情報を取得される脆弱性 - CVE-2007-4097 2012-12-20 18:33 2007-07-30 Show GitHub Exploit DB Packet Storm
229880 5.8 警告 The Tor Project - Tor におけるバッファオーバーフローの脆弱性 - CVE-2007-4096 2012-12-20 18:33 2007-07-30 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 18, 2026, 4:12 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
223501 7.3 HIGH
Network 		chartkick chartkick.js Chartkick.js 3.1.0 through 3.1.3, as used in the Chartkick gem before 3.3.0 for Ruby, allows prototype pollution. NVD-CWE-noinfo
CVE-2019-18841 2024-11-21 13:33 2019-11-11 Show GitHub Exploit DB Packet Storm
223502 7.5 HIGH
Network 		envoyproxy
istio 		envoy
istio 		Envoy 1.12.0 allows a remote denial of service because of resource loops, as demonstrated by a single idle TCP connection being able to keep a worker thread in an infinite busy loop when continue_on_… CWE-835
 Loop with Unreachable Exit Condition ('Infinite Loop') 		CVE-2019-18836 2024-11-21 13:33 2019-11-11 Show GitHub Exploit DB Packet Storm
223503 7.1 HIGH
Local 		patriotmemory viper_rgb_firmware The MsIo64.sys and MsIo32.sys drivers in Patriot Viper RGB before 1.1 allow local users (including low integrity processes) to read and write to arbitrary memory locations, and consequently gain NT A… CWE-269
 Improper Privilege Management 		CVE-2019-18845 2024-11-21 13:33 2019-11-10 Show GitHub Exploit DB Packet Storm
223504 7.5 HIGH
Network 		wolfssl wolfssl In wolfSSL 4.1.0 through 4.2.0c, there are missing sanity checks of memory accesses in parsing ASN.1 certificate data while handshaking. Specifically, there is a one-byte heap-based buffer overflow i… CWE-787
 Out-of-bounds Write 		CVE-2019-18840 2024-11-21 13:33 2019-11-9 Show GitHub Exploit DB Packet Storm
223505 9.8 CRITICAL
Network 		energycap energycap Escalation of privileges in EnergyCAP 7 through 7.5.6 allows an attacker to access data. If an unauthenticated user clicks on a link on the public dashboard, the resource opens in EnergyCAP with acce… CWE-269
 Improper Privilege Management 		CVE-2019-18623 2024-11-21 13:33 2019-11-9 Show GitHub Exploit DB Packet Storm
223506 9.8 CRITICAL
Network 		matrix synapse Matrix Synapse before 1.5.0 mishandles signature checking on some federation APIs. Events sent over /send_join, /send_leave, and /invite may not be correctly signed, or may not come from the expected… CWE-345
 Insufficient Verification of Data Authenticity 		CVE-2019-18835 2024-11-21 13:33 2019-11-8 Show GitHub Exploit DB Packet Storm
223507 9.8 CRITICAL
Network 		strapi strapi strapi before 3.0.0-beta.17.5 mishandles password resets within packages/strapi-admin/controllers/Auth.js and packages/strapi-plugin-users-permissions/controllers/Auth.js. CWE-640
 Weak Password Recovery Mechanism for Forgotten Password 		CVE-2019-18818 2024-11-21 13:33 2019-11-8 Show GitHub Exploit DB Packet Storm
223508 5.5 MEDIUM
Local 		eximioussoft logo_designer Eximious Logo Designer 3.82 has a User Mode Write AV starting at ExiCustomPathLib!ExiCustomPathLib::CGradientColorsProfile::BuildGradientColorsTable+0x0000000000000053. CWE-787
 Out-of-bounds Write 		CVE-2019-18821 2024-11-21 13:33 2019-11-8 Show GitHub Exploit DB Packet Storm
223509 5.5 MEDIUM
Local 		eximioussoft logo_designer Eximious Logo Designer 3.82 has Heap Corruption starting at ntdll!RtlpNtMakeTemporaryKey+0x0000000000001a78. CWE-787
 Out-of-bounds Write 		CVE-2019-18820 2024-11-21 13:33 2019-11-8 Show GitHub Exploit DB Packet Storm
223510 5.5 MEDIUM
Local 		eximioussoft logo_designer Eximious Logo Designer 3.82 has a User Mode Write AV starting at ExiVectorRender!StrokeText_Blend+0x00000000000003a7. CWE-787
 Out-of-bounds Write 		CVE-2019-18819 2024-11-21 13:33 2019-11-8 Show GitHub Exploit DB Packet Storm