Vulnerability Search Top
Show Search Menu
|
You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database). |
JVN Vulnerability Information
Update Date":May 15, 2026, 6 p.m.
| No | CVSS | Level Attach Vector |
Vendor Name | Project Name | Title | CWE | CVE | Update Date | Publication Date | Impact Show |
Exploit PoC Search |
|---|---|---|---|---|---|---|---|---|---|---|---|
| 244971 | 7.5 | 危険 | envolution | - | Envolution の News モジュールにおける SQL インジェクションの脆弱性 | - | CVE-2007-4253 | 2012-06-26 15:54 | 2007-08-8 | Show | GitHub Exploit DB Packet Storm |
| 244972 | 4.3 | 警告 | chilkat software | - | CkString.dll および CHILKAT ASP String の特定の ActiveX コントロールにおける絶対パストラバーサルの脆弱性 | - | CVE-2007-4252 | 2012-06-26 15:54 | 2007-08-8 | Show | GitHub Exploit DB Packet Storm |
| 244973 | 5 | 警告 | advanced searchbar | - | Advanced Searchbar の isChecked 関数におけるサービス運用妨害 (DoS) の脆弱性 |
CWE-noinfo
情報不足 |
CVE-2007-4250 | 2012-06-26 15:54 | 2007-08-8 | Show | GitHub Exploit DB Packet Storm |
| 244974 | 4.3 | 警告 | exportnation | - | Internet Explorer の ExportNation toolbar におけるサービス運用妨害 (DoS) の脆弱性 | - | CVE-2007-4249 | 2012-06-26 15:54 | 2007-08-8 | Show | GitHub Exploit DB Packet Storm |
| 244975 | 4.3 | 警告 | dimema | - | CDM の Search.php におけるクロスサイトスクリプティングの脆弱性 |
CWE-79
クロスサイト・スクリプティング（XSS） |
CVE-2007-4245 | 2012-06-26 15:54 | 2007-08-8 | Show | GitHub Exploit DB Packet Storm |
| 244976 | 7.8 | 危険 | Astaro | - | ASG の pfilter-reporter.pl におけるサービス運用妨害 (DoS) の脆弱性 | - | CVE-2007-4243 | 2012-06-26 15:54 | 2007-08-8 | Show | GitHub Exploit DB Packet Storm |
| 244977 | 5 | 警告 | Astaro | - | ASG の pop3 Proxy における本スキャンを回避される脆弱性 | - | CVE-2007-4242 | 2012-06-26 15:54 | 2007-08-8 | Show | GitHub Exploit DB Packet Storm |
| 244978 | 4.3 | 警告 | c-sam | - | C-SAM oneWallet の user/forgotPassStep2.jsp におけるクロスサイトスクリプティングの脆弱性 | - | CVE-2007-4239 | 2012-06-26 15:54 | 2007-08-8 | Show | GitHub Exploit DB Packet Storm |
| 244979 | 5 | 警告 | camera life | - | Camera Life における非公開の写真をダウンロードされる脆弱性 | - | CVE-2007-4234 | 2012-06-26 15:54 | 2007-08-8 | Show | GitHub Exploit DB Packet Storm |
| 244980 | 4.3 | 警告 | camera life | - | Camera Life におけるサービス運用妨害の脆弱性 | - | CVE-2007-4233 | 2012-06-26 15:54 | 2007-08-8 | Show | GitHub Exploit DB Packet Storm |
NVD Vulnerability Information
Update Date:May 15, 2026, 4:28 a.m.
| No | CVSS | Level Attach Vector |
Vendor Name | Project Name | Title | CWE | CVE | Update Date | Publication Date | Show Affected | Exploit PoC Search |
|---|---|---|---|---|---|---|---|---|---|---|---|
| 219321 | 8.1 |
HIGH
Network |
ovirt redhat |
ovirt virtualization |
It was discovered that in the ovirt's REST API before version 4.3.2.1, RemoveDiskCommand is triggered as an internal command, meaning the permission validation that should be performed against the ca… |
CWE-862
Missing Authorization |
CVE-2019-3879 | 2024-11-21 13:42 | 2019-03-26 | Show | GitHub Exploit DB Packet Storm |
| 219322 | 6.5 |
MEDIUM
Adjacent |
linux debian redhat canonical netapp |
linux_kernel debian_linux enterprise_linux ubuntu_linux solidfire hci_management_node snapprotect active_iq_unified_manager_for_vmware_vsphere cn1610_firmware |
The SCTP socket buffer used by a userspace application is not accounted by the cgroups subsystem. An attacker can use this flaw to cause a denial of service attack. Kernel 3.10.x and 4.18.x branches … | - | CVE-2019-3874 | 2024-11-21 13:42 | 2019-03-26 | Show | GitHub Exploit DB Packet Storm |
| 219323 | 9.1 |
CRITICAL
Network |
libssh2 debian netapp opensuse |
libssh2 debian_linux ontap_select_deploy_administration_utility leap |
An out of bounds read flaw was discovered in libssh2 before 1.8.1 in the way SSH packets with a padding length value greater than the packet length are parsed. A remote attacker who compromises a SSH… |
CWE-125
Out-of-bounds Read |
CVE-2019-3861 | 2024-11-21 13:42 | 2019-03-26 | Show | GitHub Exploit DB Packet Storm |
| 219324 | 9.1 |
CRITICAL
Network |
libssh2 debian netapp opensuse |
libssh2 debian_linux ontap_select_deploy_administration_utility leap |
An out of bounds read flaw was discovered in libssh2 before 1.8.1 in the way SFTP packets with empty payloads are parsed. A remote attacker who compromises a SSH server may be able to cause a Denial … |
CWE-125
Out-of-bounds Read |
CVE-2019-3860 | 2024-11-21 13:42 | 2019-03-26 | Show | GitHub Exploit DB Packet Storm |
| 219325 | 8.8 |
HIGH
Network |
libssh2 debian netapp opensuse redhat fedoraproject oracle |
libssh2 debian_linux ontap_select_deploy_administration_utility leap enterprise_linux_desktop enterprise_linux_workstation enterprise_linux_server enterprise_linux_server_tus … |
An integer overflow flaw which could lead to an out of bounds write was discovered in libssh2 before 1.8.1 in the way SSH_MSG_CHANNEL_REQUEST packets with an exit signal are parsed. A remote attacker… |
CWE-787 CWE-190 Out-of-bounds Write Integer Overflow or Wraparound |
CVE-2019-3857 | 2024-11-21 13:42 | 2019-03-26 | Show | GitHub Exploit DB Packet Storm |
| 219326 | 8.8 |
HIGH
Network |
libssh2 debian netapp opensuse redhat fedoraproject oracle |
libssh2 debian_linux ontap_select_deploy_administration_utility leap enterprise_linux_desktop enterprise_linux_workstation enterprise_linux_server enterprise_linux_server_tus … |
An integer overflow flaw, which could lead to an out of bounds write, was discovered in libssh2 before 1.8.1 in the way keyboard prompt requests are parsed. A remote attacker who compromises a SSH se… |
CWE-787 CWE-190 Out-of-bounds Write Integer Overflow or Wraparound |
CVE-2019-3856 | 2024-11-21 13:42 | 2019-03-26 | Show | GitHub Exploit DB Packet Storm |
| 219327 | 9.8 |
CRITICAL
Network |
atlassian |
confluence confluence_server |
The WebDAV endpoint in Atlassian Confluence Server and Data Center before version 6.6.7 (the fixed version for 6.6.x), from version 6.7.0 before 6.8.5 (the fixed version for 6.8.x), and from version … |
CWE-918
Server-Side Request Forgery (SSRF) |
CVE-2019-3395 | 2024-11-21 13:42 | 2019-03-26 | Show | GitHub Exploit DB Packet Storm |
| 219328 | 5.5 |
MEDIUM
Local |
artifex redhat fedoraproject opensuse debian |
ghostscript enterprise_linux_desktop enterprise_linux_workstation enterprise_linux enterprise_linux_server enterprise_linux_server_tus enterprise_linux_server_eus enterprise_linu… |
It was found that the forceput operator could be extracted from the DefineResource method in ghostscript before 9.27. A specially crafted PostScript file could use this flaw in order to, for example,… |
NVD-CWE-Other
|
CVE-2019-3838 | 2024-11-21 13:42 | 2019-03-26 | Show | GitHub Exploit DB Packet Storm |
| 219329 | 5.5 |
MEDIUM
Local |
artifex redhat fedoraproject debian opensuse |
ghostscript enterprise_linux_desktop enterprise_linux_workstation enterprise_linux_server enterprise_linux_server_tus enterprise_linux_server_eus enterprise_linux_server_aus ansi… |
It was found that the superexec operator was available in the internal dictionary in ghostscript before 9.27. A specially crafted PostScript file could use this flaw in order to, for example, have ac… |
CWE-862
Missing Authorization |
CVE-2019-3835 | 2024-11-21 13:42 | 2019-03-26 | Show | GitHub Exploit DB Packet Storm |
| 219330 | 9.8 |
CRITICAL
Network |
atlassian |
confluence confluence_server |
The Widget Connector macro in Atlassian Confluence Server before version 6.6.12 (the fixed version for 6.6.x), from version 6.7.0 before 6.12.3 (the fixed version for 6.12.x), from version 6.13.0 bef… |
CWE-22
Path Traversal |
CVE-2019-3396 | 2024-11-21 13:42 | 2019-03-26 | Show | GitHub Exploit DB Packet Storm |