Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":June 1, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
244281	5	警告	cPanel	-	cPanel の Disk Usage モジュールにおける絶対パストラバーサルの脆弱性	CWE-22 パス・トラバーサル	CVE-2008-7142	2012-06-26 16:10	2009-09-1	Show	GitHub Exploit DB Packet Storm

244282	4.3	警告	alexphpteam	-	@lex Poll の setup.php におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2008-7141	2012-06-26 16:10	2009-09-1	Show	GitHub Exploit DB Packet Storm

244283	4.3	警告	alexguestbook	-	@lex Guestbook におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2008-7140	2012-06-26 16:10	2009-09-1	Show	GitHub Exploit DB Packet Storm

244284	6.8	警告	eye.fi	-	Eye-Fi の WS-Proxy におけるクロスサイトリクエストフォージェリの脆弱性	CWE-352 同一生成元ポリシー違反	CVE-2008-7139	2012-06-26 16:10	2009-09-1	Show	GitHub Exploit DB Packet Storm

244285	5	警告	eye.fi	-	Eye-Fi の Manager における任意のイメージをアップロードされる脆弱性	CWE-310 暗号の問題	CVE-2008-7138	2012-06-26 16:10	2009-09-1	Show	GitHub Exploit DB Packet Storm

244286	5	警告	eye.fi	-	Eye-Fi の WS-Proxy におけるサービス運用妨害 (DoS) の脆弱性	CWE-Other その他	CVE-2008-7137	2012-06-26 16:10	2009-09-1	Show	GitHub Exploit DB Packet Storm

244287	9	危険	ariadne-cms	-	Ariadne の pphoto における任意のシェルコマンドを実行される脆弱性	CWE-78 OSコマンド・インジェクション	CVE-2008-7125	2012-06-26 16:10	2009-08-31	Show	GitHub Exploit DB Packet Storm

244288	4.3	警告	ber kessels Drupal	-	Drupal のモジュールの Taxonomy による Refine におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2008-7150	2012-06-26 16:10	2008-05-5	Show	GitHub Exploit DB Packet Storm

244289	10	危険	evansprogramming	-	Evans Programming Registry Pro の (epRegPro.ocx) における重要なレジストリキーを変更される脆弱性	CWE-noinfo 情報不足	CVE-2008-7122	2012-06-26 16:10	2009-08-31	Show	GitHub Exploit DB Packet Storm

244290	10	危険	Belkin International	-	Belkin Wireless G ルータの Web インターフェースにおける管理者権限を取得される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2008-7115	2012-06-26 16:10	2009-08-28	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:June 1, 2026, 4:12 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
220131	6.1	MEDIUM Network	zohocorp	manageengine_netflow_analyzer	XSS exists in Zoho ManageEngine Netflow Analyzer Professional v7.0.0.2 in the Administration zone "/netflow/jspui/editProfile.jsp" file in the userName parameter.	CWE-79 Cross-site Scripting	CVE-2019-7423	2024-11-21 13:48	2019-03-22	Show	GitHub Exploit DB Packet Storm

220132	6.1	MEDIUM Network	zohocorp	manageengine_netflow_analyzer	XSS exists in Zoho ManageEngine Netflow Analyzer Professional v7.0.0.2 in the Administration zone "/netflow/jspui/addMailSettings.jsp" file in the gF parameter.	CWE-79 Cross-site Scripting	CVE-2019-7422	2024-11-21 13:48	2019-03-22	Show	GitHub Exploit DB Packet Storm

220133	6.1	MEDIUM Network	samsung	syncthru_web_service x7400gx_firmware	XSS exists in SAMSUNG X7400GX SyncThru Web Service V6.A6.25 V11.01.05.25_08-21-2015 in "/sws.login/gnb/loginView.sws" in multiple parameters: contextpath and basedURL.	CWE-79 Cross-site Scripting	CVE-2019-7421	2024-11-21 13:48	2019-03-22	Show	GitHub Exploit DB Packet Storm

220134	6.1	MEDIUM Network	samsung	syncthru_web_service x7400gx_firmware	XSS exists in SAMSUNG X7400GX SyncThru Web Service V6.A6.25 V11.01.05.25_08-21-2015 in "/sws.application/information/networkinformationView.sws" in the tabName parameter.	CWE-79 Cross-site Scripting	CVE-2019-7420	2024-11-21 13:48	2019-03-22	Show	GitHub Exploit DB Packet Storm

220135	6.1	MEDIUM Network	samsung	syncthru_web_service x7400gx_firmware	XSS exists in SAMSUNG X7400GX SyncThru Web Service V6.A6.25 V11.01.05.25_08-21-2015 in "/sws/leftmenu.sws" in multiple parameters: ruiFw_id, ruiFw_pid, ruiFw_title.	CWE-79 Cross-site Scripting	CVE-2019-7419	2024-11-21 13:48	2019-03-22	Show	GitHub Exploit DB Packet Storm

220136	6.1	MEDIUM Network	samsung	syncthru_web_service x7400gx_firmware	XSS exists in SAMSUNG X7400GX SyncThru Web Service V6.A6.25 V11.01.05.25_08-21-2015 in "/sws/swsAlert.sws" in multiple parameters: flag, frame, func, and Nfunc.	CWE-79 Cross-site Scripting	CVE-2019-7418	2024-11-21 13:48	2019-03-22	Show	GitHub Exploit DB Packet Storm

220137	6.1	MEDIUM Network	ericsson	active_library_explorer	XSS exists in Ericsson Active Library Explorer (ALEX) 14.3 in multiple parameters in the "/cgi-bin/alexserv" servlet, as demonstrated by the DB, FN, fn, or id parameter.	CWE-79 Cross-site Scripting	CVE-2019-7417	2024-11-21 13:48	2019-03-22	Show	GitHub Exploit DB Packet Storm

220138	6.1	MEDIUM Network	opentext	documentum_webtop	XSS and/or a Client Side URL Redirect exists in OpenText Documentum Webtop 5.3 SP2. The parameter startat in "/webtop/help/en/default.htm" is vulnerable.	CWE-79 CWE-601 Cross-site Scripting Open Redirect	CVE-2019-7416	2024-11-21 13:48	2019-03-22	Show	GitHub Exploit DB Packet Storm

220139	8.8	HIGH Network	zyxel	dsl-491hnu-b10b_firmware dsl-491hnu-b1b_v2_firmware	ZyXEL VMG3312-B10B DSL-491HNU-B1B v2 devices allow login/login-page.cgi CSRF.	CWE-352 Origin Validation Error	CVE-2019-7391	2024-11-21 13:48	2019-03-22	Show	GitHub Exploit DB Packet Storm

220140	6.5	MEDIUM Network	kaiostech nokia	kaios 8810_4g_firmware	A Denial of Service issue has been discovered in the Gecko component of KaiOS 2.5 10.05 (platform 48.0.a2) on Nokia 8810 4G devices. When a crafted web page is visited with the internal browser, the …	NVD-CWE-noinfo	CVE-2019-7386	2024-11-21 13:48	2019-03-22	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed