Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 18, 2026, 10 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
229921	7.6	危険	Yahoo!	-	Yahoo! Messenger におけるバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2007-3928	2012-12-20 18:33	2007-07-20	Show	GitHub Exploit DB Packet Storm

229922	7.8	危険	wesnoth	-	Wesnoth のマルチプレーヤーエンジンにおけるサービス運用妨害 (DoS) の脆弱性	CWE-134 書式文字列の問題	CVE-2007-3917	2012-12-20 18:33	2007-10-11	Show	GitHub Exploit DB Packet Storm

229923	4.4	警告	skk openlab	-	SKK Tools の skkdic-expr.c における任意のファイルを上書きされる脆弱性	CWE-59 リンク解釈の問題	CVE-2007-3916	2012-12-20 18:33	2007-09-23	Show	GitHub Exploit DB Packet Storm

229924	7.5	危険	Zoph	-	Zoph における SQL インジェクションの脆弱性	-	CVE-2007-3905	2012-12-20 18:33	2007-07-19	Show	GitHub Exploit DB Packet Storm

229925	7.5	危険	popscript.com	-	Expert Advisor の index.php における SQL インジェクションの脆弱性	-	CVE-2007-3882	2012-12-20 18:33	2007-07-18	Show	GitHub Exploit DB Packet Storm

229926	7.5	危険	pictures rating	-	Picture Rating の index.php における SQL インジェクションの脆弱性	-	CVE-2007-3881	2012-12-20 18:33	2007-07-18	Show	GitHub Exploit DB Packet Storm

229927	7.2	危険	サン・マイクロシステムズ	-	SUNWsrspx パッケージで同梱されている SRS Net Connect の srsexec におけるフォーマットストリングの脆弱性	CWE-134 書式文字列の問題	CVE-2007-3880	2012-12-20 18:33	2007-11-2	Show	GitHub Exploit DB Packet Storm

229928	6.9	警告	トレンドマイクロ	-	Trend Micro AntiSpyware および PC-Cillin Internet Security 2007 の SSAPI Engine におけるスタックベースのバッファオーバーフローの脆弱性	-	CVE-2007-3873	2012-12-20 18:33	2007-08-22	Show	GitHub Exploit DB Packet Storm

229929	6	警告	TortoiseSVN CollabNet, Inc.	-	TortoiseSVN で使用されている Subversion におけるディレクトリトラバーサルの脆弱性	CWE-22 パス・トラバーサル	CVE-2007-3846	2012-12-20 18:33	2007-08-27	Show	GitHub Exploit DB Packet Storm

229930	9	危険	Pidgin	-	Linux 用の Pidgin における特定のコマンドを実行される脆弱性	-	CVE-2007-3841	2012-12-20 18:33	2007-07-17	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 18, 2026, 4:12 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
223261	7.5	HIGH Network	bloq	univalue	UniValue::read() in UniValue before 1.0.5 allow attackers to cause a denial of service (the class internal data reaches an inconsistent state) via input data that triggers an error.	CWE-674 Uncontrolled Recursion	CVE-2019-18936	2024-11-21 13:33	2020-03-21	Show	GitHub Exploit DB Packet Storm

223262	6.1	MEDIUM Network	squid-cache debian canonical opensuse	squid debian_linux ubuntu_linux leap	Squid before 4.9, when certain web browsers are used, mishandles HTML in the host (aka hostname) parameter to cachemgr.cgi.	CWE-74 Injection	CVE-2019-18860	2024-11-21 13:33	2020-03-21	Show	GitHub Exploit DB Packet Storm

223263	9.8	CRITICAL Network	sparkdevnetwork	rock_rms	Rock RMS before 1.8.6 mishandles vCard access control within the People/GetVCard/REST controller.	NVD-CWE-noinfo	CVE-2019-18641	2024-11-21 13:33	2020-03-21	Show	GitHub Exploit DB Packet Storm

223264	7.5	HIGH Network	suitecrm	suitecrm	SuiteCRM 7.10.x prior to 7.10.21 and 7.11.x prior to 7.11.9 mishandles API access tokens and credentials.	CWE-522 Insufficiently Protected Credentials	CVE-2019-18785	2024-11-21 13:33	2020-03-20	Show	GitHub Exploit DB Packet Storm

223265	5.3	MEDIUM Network	salesagility	suitecrm	SuiteCRM 7.10.x prior to 7.10.21 and 7.11.x prior to 7.11.9 does not correctly implement the .htaccess protection mechanism.	NVD-CWE-Other	CVE-2019-18782	2024-11-21 13:33	2020-03-20	Show	GitHub Exploit DB Packet Storm

223266	7.8	HIGH Local	claranova	adaware_antivirus	Adaware antivirus 12.6.1005.11662 and 12.7.1055.0 has a quarantine flaw that allows privilege escalation. Exploitation uses an NTFS directory junction to restore a malicious DLL from quarantine into …	NVD-CWE-noinfo	CVE-2019-18979	2024-11-21 13:33	2020-03-19	Show	GitHub Exploit DB Packet Storm

223267	7.2	HIGH Network	dell	emc_data_protection_advisor emc_integrated_data_protection_appliance_firmware	Dell EMC Data Protection Advisor versions 6.3, 6.4, 6.5, 18.2 versions prior to patch 83, and 19.1 versions prior to patch 71 contain a server-side template injection vulnerability in the REST API. A…	CWE-94 Code Injection	CVE-2019-18582	2024-11-21 13:33	2020-03-19	Show	GitHub Exploit DB Packet Storm

223268	7.2	HIGH Network	dell	emc_data_protection_advisor emc_integrated_data_protection_appliance_firmware	Dell EMC Data Protection Advisor versions 6.3, 6.4, 6.5, 18.2 versions prior to patch 83, and 19.1 versions prior to patch 71 contain a server missing authorization vulnerability in the REST API. A r…	CWE-862 Missing Authorization	CVE-2019-18581	2024-11-21 13:33	2020-03-19	Show	GitHub Exploit DB Packet Storm

223269	6.5	MEDIUM Network	hp	envy_5000_m2u85a_firmware envy_5000_m2u85b_firmware envy_5000_m2u91a_firmware envy_5000_m2u94b_firmware envy_5000_z4a54a_firmware envy_5000_z4a74a_firmware deskjet_ink_advantage_500…	A potential security vulnerability has been identified for certain HP Printers and All-in-Ones that would allow bypassing account lockout.	CWE-307 mproper Restriction of Excessive Authentication Attempts	CVE-2019-18917	2024-11-21 13:33	2020-03-17	Show	GitHub Exploit DB Packet Storm

223270	9.0	CRITICAL Network	dell	xtremio_management_server	Dell EMC XtremIO XMS versions prior to 6.3.0 contain a stored cross-site scripting vulnerability. A low-privileged malicious remote user of XtremIO may exploit this vulnerability to store malicious H…	CWE-79 Cross-site Scripting	CVE-2019-18578	2024-11-21 13:33	2020-03-14	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed