Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 21, 2026, 6:01 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
245361 4.9 警告 glyph and cog - alternate pdftops filter の pdftops.pl における任意のファイルを上書きされる脆弱性 CWE-DesignError
CVE-2007-6358 2012-06-26 15:54 2007-12-3 Show GitHub Exploit DB Packet Storm
245362 5 警告 aertherwide - exiftags におけるサービス運用妨害 (DoS) の脆弱性 CWE-399
リソース管理の問題 		CVE-2007-6356 2012-06-26 15:54 2007-12-18 Show GitHub Exploit DB Packet Storm
245363 6.8 警告 アカマイテクノロジーズ - Akamai Download Manager ActiveX コントロール (DownloadManagerV2.ocx) における任意のファイルを強制実行される脆弱性 CWE-94
コード・インジェクション 		CVE-2007-6339 2012-06-26 15:54 2008-05-1 Show GitHub Exploit DB Packet Storm
245364 10 危険 aertherwide - exiftags における整数オーバーフローの脆弱性 CWE-189
数値処理の問題 		CVE-2007-6355 2012-06-26 15:54 2007-12-18 Show GitHub Exploit DB Packet Storm
245365 10 危険 aertherwide - exiftags における詳細不明な脆弱性 CWE-noinfo
情報不足 		CVE-2007-6354 2012-06-26 15:54 2007-12-18 Show GitHub Exploit DB Packet Storm
245366 7.5 危険 Exiv2 project - exiv2 library の exif.cpp における整数オーバーフローの脆弱性 CWE-189
数値処理の問題 		CVE-2007-6353 2012-06-26 15:54 2007-12-19 Show GitHub Exploit DB Packet Storm
245367 7.5 危険 aurora - aurora framework における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2007-6345 2012-06-26 15:54 2007-12-13 Show GitHub Exploit DB Packet Storm
245368 7.5 危険 david castro - Apache HTTP Server の David Castro AuthCAS.pm における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2007-6342 2012-06-26 15:54 2007-12-13 Show GitHub Exploit DB Packet Storm
245369 7.5 危険 avs media - Online Media Technologies AVSMJPEGFILE.DLL の特定の ActiveX コントロールにおけるバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2007-6327 2012-06-26 15:54 2007-12-13 Show GitHub Exploit DB Packet Storm
245370 6.8 警告 fastpublish - Fastpublish CMS の adminbereich/designconfig.php における PHP リモートファイルインクルージョンの脆弱性 CWE-20
CWE-94
CVE-2007-6325 2012-06-26 15:54 2007-12-13 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 21, 2026, 4:10 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
218711 4.3 MEDIUM
Network 		cybozu garoon Mail header injection vulnerability in Cybozu Garoon 4.0.0 to 4.10.2 may allow a remote authenticated attackers to alter mail header via the application 'E-Mail'. CWE-74
Injection 		CVE-2019-5977 2024-11-21 13:45 2019-09-13 Show GitHub Exploit DB Packet Storm
218712 4.9 MEDIUM
Network 		cybozu garoon Cybozu Garoon 4.0.0 to 4.10.2 allows an attacker with administrative rights to cause a denial of service condition via unspecified vectors. CWE-20
 Improper Input Validation  		CVE-2019-5976 2024-11-21 13:45 2019-09-13 Show GitHub Exploit DB Packet Storm
218713 5.4 MEDIUM
Network 		cybozu garoon DOM-based cross-site scripting vulnerability in Cybozu Garoon 4.6.0 to 4.10.2 allows remote authenticated attackers to inject arbitrary web script or HTML via unspecified vectors. CWE-79
Cross-site Scripting 		CVE-2019-5975 2024-11-21 13:45 2019-09-13 Show GitHub Exploit DB Packet Storm
218714 6.5 MEDIUM
Network 		wondercms wondercms Directory traversal vulnerability in WonderCMS 2.6.0 and earlier allows remote attackers to delete arbitrary files via unspecified vectors. CWE-22
Path Traversal 		CVE-2019-5956 2024-11-21 13:45 2019-09-13 Show GitHub Exploit DB Packet Storm
218715 5.3 MEDIUM
Network 		netapp oncommand_workflow_automation OnCommand Workflow Automation versions prior to 5.0 shipped without certain HTTP Security headers configured which could allow an attacker to obtain sensitive information via unspecified vectors. CWE-319
Cleartext Transmission of Sensitive Information 		CVE-2019-5503 2024-11-21 13:45 2019-09-11 Show GitHub Exploit DB Packet Storm
218716 7.2 HIGH
Network 		gitlab gitlab An authentication issue was discovered in GitLab that allowed a bypass of email verification. This was addressed in GitLab 12.1.2 and 12.0.4. CWE-287
Improper Authentication 		CVE-2019-5473 2024-11-21 13:45 2019-09-10 Show GitHub Exploit DB Packet Storm
218717 5.3 MEDIUM
Network 		senecajs seneca Seneca < 3.9.0 contains a vulnerability that could lead to exposing environment variables to unauthorized users. CWE-209
Information Exposure Through an Error Message 		CVE-2019-5483 2024-11-21 13:45 2019-09-10 Show GitHub Exploit DB Packet Storm
218718 5.3 MEDIUM
Network 		statichttpserver_project statichttpserver A path traversal vulnerability in <= v0.9.7 of statichttpserver npm module allows attackers to list files in arbitrary folders. CWE-22
Path Traversal 		CVE-2019-5480 2024-11-21 13:45 2019-09-4 Show GitHub Exploit DB Packet Storm
218719 7.5 HIGH
Network 		larvit larvitbase An unintended require vulnerability in <v0.5.5 larvitbase-api may allow an attacker to load arbitrary non-production code (JavaScript file). CWE-829
 Inclusion of Functionality from Untrusted Control Sphere 		CVE-2019-5479 2024-11-21 13:45 2019-09-4 Show GitHub Exploit DB Packet Storm
218720 5.5 MEDIUM
Local 		xilinx zynq_ultrascale\+_mpsoc_firmware
zynq_ultrascale\+_rfsoc_firmware 		A weakness was found in Encrypt Only boot mode in Zynq UltraScale+ devices. This could lead to an adversary being able to modify the control fields of the boot image leading to an incorrect secure bo… CWE-345
 Insufficient Verification of Data Authenticity 		CVE-2019-5478 2024-11-21 13:45 2019-09-4 Show GitHub Exploit DB Packet Storm