Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 11, 2026, 6:01 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
230021 7.6 危険 quicksoft - Quiksoft EasyMail Objects の IMAP4 コンポーネントにおけるスタックベースのバッファオーバーフローの脆弱性 - CVE-2007-1029 2012-12-20 18:19 2007-02-21 Show GitHub Exploit DB Packet Storm
230022 7.5 危険 scriptdungeon - XLAtunes の view.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2007-1026 2012-12-20 18:19 2007-02-21 Show GitHub Exploit DB Packet Storm
230023 7.5 危険 virtualsystem - VS-Link-Partner の inc/functions_inc.php における PHP リモートファイルインクルージョンの脆弱性 - CVE-2007-1025 2012-12-20 18:19 2007-02-21 Show GitHub Exploit DB Packet Storm
230024 7.5 危険 Snitz - Snitz Forums 2000 の pop_profile.asp における SQL インジェクションの脆弱性 - CVE-2007-1023 2012-12-20 18:19 2007-02-21 Show GitHub Exploit DB Packet Storm
230025 7.5 危険 turuncu portal - Turuncu Portal の h_goster.asp における SQL インジェクションの脆弱性 - CVE-2007-1022 2012-12-20 18:19 2007-02-21 Show GitHub Exploit DB Packet Storm
230026 10 危険 xfairguy - CodeAvalanche News の inc_listnews.asp における SQL インジェクションの脆弱性 - CVE-2007-1021 2012-12-20 18:19 2007-02-21 Show GitHub Exploit DB Packet Storm
230027 6.8 警告 webSPELL - webSPELL の news.php における SQL インジェクションの脆弱性 - CVE-2007-1019 2012-12-20 18:19 2007-02-21 Show GitHub Exploit DB Packet Storm
230028 9.3 危険 virtualsystem - VirtualSystem VS-News-System の tpl/header.php における PHP リモートファイルインクルージョンの脆弱性 - CVE-2007-1018 2012-12-20 18:19 2007-02-21 Show GitHub Exploit DB Packet Storm
230029 9.3 危険 virtualsystem - VirtualSystem VS-News-System の show_news_inc.php における PHP リモートファイルインクルージョンの脆弱性 - CVE-2007-1017 2012-12-20 18:19 2007-02-21 Show GitHub Exploit DB Packet Storm
230030 10 危険 vicftps - VicFTPS におけるスタックベースのバッファオーバーフローの脆弱性 - CVE-2007-1014 2012-12-20 18:19 2007-02-21 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 12, 2026, 5:06 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
213611 9.8 CRITICAL
Network 		putty
fedoraproject
debian
opensuse
netapp 		putty
fedora
debian_linux
leap
oncommand_unified_manager 		Potential recycling of random numbers used in cryptography exists within PuTTY before 0.71. CWE-330
 Use of Insufficiently Random Values 		CVE-2019-9898 2024-11-21 13:52 2019-03-22 Show GitHub Exploit DB Packet Storm
213612 7.5 HIGH
Network 		putty
fedoraproject
debian
netapp
opensuse 		putty
fedora
debian_linux
oncommand_unified_manager
leap 		Multiple denial-of-service attacks that can be triggered by writing to the terminal exist in PuTTY versions before 0.71. NVD-CWE-noinfo
CVE-2019-9897 2024-11-21 13:52 2019-03-22 Show GitHub Exploit DB Packet Storm
213613 7.8 HIGH
Local 		putty
opensuse 		putty
leap
backports_sle 		In PuTTY versions before 0.71 on Windows, local attackers could hijack the application by putting a malicious help file in the same directory as the executable. CWE-427
 Uncontrolled Search Path Element 		CVE-2019-9896 2024-11-21 13:52 2019-03-22 Show GitHub Exploit DB Packet Storm
213614 9.8 CRITICAL
Network 		putty
fedoraproject 		putty
fedora 		In PuTTY versions before 0.71 on Unix, a remotely triggerable buffer overflow exists in any kind of server-to-client forwarding. CWE-119
Incorrect Access of Indexable Resource ('Range Error')  		CVE-2019-9895 2024-11-21 13:52 2019-03-22 Show GitHub Exploit DB Packet Storm
213615 7.5 HIGH
Network 		putty
fedoraproject
debian
netapp
opensuse 		putty
fedora
debian_linux
oncommand_unified_manager
leap 		A remotely triggerable memory overwrite in RSA key exchange in PuTTY before 0.71 can occur before host key verification. CWE-320
 Key Management Errors 		CVE-2019-9894 2024-11-21 13:52 2019-03-22 Show GitHub Exploit DB Packet Storm
213616 9.8 CRITICAL
Network 		libseccomp_project libseccomp libseccomp before 2.4.0 did not correctly generate 64-bit syscall argument comparisons using the arithmetic operators (LT, GT, LE, GE), which might able to lead to bypassing seccomp filters and poten… NVD-CWE-noinfo
CVE-2019-9893 2024-11-21 13:52 2019-03-22 Show GitHub Exploit DB Packet Storm
213617 2.7 LOW
Network 		vanillaforums vanilla In Vanilla before 2.6.4, a flaw exists within the getSingleIndex function of the AddonManager class. The issue results in a require call using a crafted type value, leading to Directory Traversal wit… CWE-22
Path Traversal 		CVE-2019-9889 2024-11-21 13:52 2019-03-22 Show GitHub Exploit DB Packet Storm
213618 7.8 HIGH
Local 		pdfalto_project
xpdfreader 		pdfalto
xpdf 		There is an invalid memory access in the function GfxIndexedColorSpace::mapColorToBase() located in GfxState.cc in Xpdf 4.0.0, as used in pdfalto 0.2. It can be triggered by (for example) sending a c… CWE-125
Out-of-bounds Read 		CVE-2019-9878 2024-11-21 13:52 2019-03-22 Show GitHub Exploit DB Packet Storm
213619 7.8 HIGH
Local 		xpdfreader xpdf There is an invalid memory access vulnerability in the function TextPage::findGaps() located at TextOutputDev.c in Xpdf 4.01, which can (for example) be triggered by sending a crafted pdf file to the… CWE-125
CWE-787
Out-of-bounds Read
 Out-of-bounds Write 		CVE-2019-9877 2024-11-21 13:52 2019-03-22 Show GitHub Exploit DB Packet Storm
213620 9.8 CRITICAL
Network 		oembed_project oembed plugin.js in the w8tcha oEmbed plugin before 2019-03-14 for CKEditor mishandles SCRIPT elements. CWE-19
 Data Processing Errors 		CVE-2019-9870 2024-11-21 13:52 2019-03-22 Show GitHub Exploit DB Packet Storm