Vulnerability Search Top
Show Search Menu
|
You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database). |
JVN Vulnerability Information
Update Date":May 21, 2026, 6:01 p.m.
| No | CVSS | Level Attach Vector |
Vendor Name | Project Name | Title | CWE | CVE | Update Date | Publication Date | Impact Show |
Exploit PoC Search |
|---|---|---|---|---|---|---|---|---|---|---|---|
| 245591 | 6.8 | 警告 | cplinks | - | cpDynaLinks の category.php における SQL インジェクションの脆弱性 |
CWE-89
SQLインジェクション |
CVE-2007-5408 | 2012-06-26 15:54 | 2007-10-12 | Show | GitHub Exploit DB Packet Storm |
| 245592 | 10 | 危険 | AbiWord link grammar |
- | AbiWord Link Grammar で使用される Link Grammar の separate_word 関数におけるスタックベースのバッファオーバーフローの脆弱性 |
CWE-119
バッファエラー |
CVE-2007-5395 | 2012-06-26 15:54 | 2007-11-7 | Show | GitHub Exploit DB Packet Storm |
| 245593 | 4.3 | 警告 | 日本アルカテル・ルーセント bt |
- | BT Home Hub などで使用される Thomson/Alcatel SpeedTouch 7G ルータにおけるクロスサイトスクリプティングの脆弱性 |
CWE-79
クロスサイト・スクリプティング（XSS） |
CVE-2007-5385 | 2012-06-26 15:54 | 2007-10-11 | Show | GitHub Exploit DB Packet Storm |
| 245594 | 4.3 | 警告 | 日本アルカテル・ルーセント bt |
- | BT Home Hub で使用される Thomson/Alcatel SpeedTouch 7G ルータにおけるクロスサイトリクエストフォージェリの脆弱性 |
CWE-352
同一生成元ポリシー違反 |
CVE-2007-5384 | 2012-06-26 15:54 | 2007-10-11 | Show | GitHub Exploit DB Packet Storm |
| 245595 | 10 | 危険 | 日本アルカテル・ルーセント bt |
- | BT Home Hub で使用される Thomson/Alcatel SpeedTouch 7G ルータにおける管理者アクセス権を取得される脆弱性 |
CWE-287
不適切な認証 |
CVE-2007-5383 | 2012-06-26 15:54 | 2007-10-11 | Show | GitHub Exploit DB Packet Storm |
| 245596 | 10 | 危険 | シスコシステムズ | - | CiscoWorks WLSE を変換する変換ユーティリティにおける権限を取得される脆弱性 |
CWE-264
認可・権限・アクセス制御 |
CVE-2007-5382 | 2012-06-26 15:54 | 2007-10-10 | Show | GitHub Exploit DB Packet Storm |
| 245597 | 6.9 | 警告 | GNU Project | - | Emacs の Tramp 拡張における任意のファイルを上書きされる脆弱性 |
CWE-59
リンク解釈の問題 |
CVE-2007-5377 | 2012-06-26 15:54 | 2007-10-4 | Show | GitHub Exploit DB Packet Storm |
| 245598 | 10 | 危険 | LedgerSMB dws systems inc. |
- | LedgerSMB における SQL インジェクションの脆弱性 |
CWE-89
SQLインジェクション |
CVE-2007-5372 | 2012-06-26 15:54 | 2007-09-28 | Show | GitHub Exploit DB Packet Storm |
| 245599 | 5 | 警告 | 富士通 | - | 複数の Fujitsu Interstage 製品における重要な情報を取得される脆弱性 |
CWE-22
パス・トラバーサル |
CVE-2007-5366 | 2012-06-26 15:54 | 2007-10-11 | Show | GitHub Exploit DB Packet Storm |
| 245600 | 6.8 | 警告 | ag-solutions Mambo Foundation Joomla! |
- | Mambo および Joomla! 用の Avant-Garde Solutions MOSMedia Lite コンポーネントにおける PHP リモートファイルインクルージョンの脆弱性 |
CWE-94
コード・インジェクション |
CVE-2007-5362 | 2012-06-26 15:54 | 2007-10-10 | Show | GitHub Exploit DB Packet Storm |
NVD Vulnerability Information
Update Date:May 21, 2026, 4:10 a.m.
| No | CVSS | Level Attach Vector |
Vendor Name | Project Name | Title | CWE | CVE | Update Date | Publication Date | Show Affected | Exploit PoC Search |
|---|---|---|---|---|---|---|---|---|---|---|---|
| 220241 | 9.1 |
CRITICAL
Network |
libssh2 debian netapp opensuse |
libssh2 debian_linux ontap_select_deploy_administration_utility leap |
An out of bounds read flaw was discovered in libssh2 before 1.8.1 in the way SFTP packets with empty payloads are parsed. A remote attacker who compromises a SSH server may be able to cause a Denial … |
CWE-125
Out-of-bounds Read |
CVE-2019-3860 | 2024-11-21 13:42 | 2019-03-26 | Show | GitHub Exploit DB Packet Storm |
| 220242 | 8.8 |
HIGH
Network |
libssh2 debian netapp opensuse redhat fedoraproject oracle |
libssh2 debian_linux ontap_select_deploy_administration_utility leap enterprise_linux_desktop enterprise_linux_workstation enterprise_linux_server enterprise_linux_server_tus … |
An integer overflow flaw which could lead to an out of bounds write was discovered in libssh2 before 1.8.1 in the way SSH_MSG_CHANNEL_REQUEST packets with an exit signal are parsed. A remote attacker… |
CWE-787 CWE-190 Out-of-bounds Write Integer Overflow or Wraparound |
CVE-2019-3857 | 2024-11-21 13:42 | 2019-03-26 | Show | GitHub Exploit DB Packet Storm |
| 220243 | 8.8 |
HIGH
Network |
libssh2 debian netapp opensuse redhat fedoraproject oracle |
libssh2 debian_linux ontap_select_deploy_administration_utility leap enterprise_linux_desktop enterprise_linux_workstation enterprise_linux_server enterprise_linux_server_tus … |
An integer overflow flaw, which could lead to an out of bounds write, was discovered in libssh2 before 1.8.1 in the way keyboard prompt requests are parsed. A remote attacker who compromises a SSH se… |
CWE-787 CWE-190 Out-of-bounds Write Integer Overflow or Wraparound |
CVE-2019-3856 | 2024-11-21 13:42 | 2019-03-26 | Show | GitHub Exploit DB Packet Storm |
| 220244 | 9.8 |
CRITICAL
Network |
atlassian |
confluence confluence_server |
The WebDAV endpoint in Atlassian Confluence Server and Data Center before version 6.6.7 (the fixed version for 6.6.x), from version 6.7.0 before 6.8.5 (the fixed version for 6.8.x), and from version … |
CWE-918
Server-Side Request Forgery (SSRF) |
CVE-2019-3395 | 2024-11-21 13:42 | 2019-03-26 | Show | GitHub Exploit DB Packet Storm |
| 220245 | 5.5 |
MEDIUM
Local |
artifex redhat fedoraproject opensuse debian |
ghostscript enterprise_linux_desktop enterprise_linux_workstation enterprise_linux enterprise_linux_server enterprise_linux_server_tus enterprise_linux_server_eus enterprise_linu… |
It was found that the forceput operator could be extracted from the DefineResource method in ghostscript before 9.27. A specially crafted PostScript file could use this flaw in order to, for example,… |
NVD-CWE-Other
|
CVE-2019-3838 | 2024-11-21 13:42 | 2019-03-26 | Show | GitHub Exploit DB Packet Storm |
| 220246 | 5.5 |
MEDIUM
Local |
artifex redhat fedoraproject debian opensuse |
ghostscript enterprise_linux_desktop enterprise_linux_workstation enterprise_linux_server enterprise_linux_server_tus enterprise_linux_server_eus enterprise_linux_server_aus ansi… |
It was found that the superexec operator was available in the internal dictionary in ghostscript before 9.27. A specially crafted PostScript file could use this flaw in order to, for example, have ac… |
CWE-862
Missing Authorization |
CVE-2019-3835 | 2024-11-21 13:42 | 2019-03-26 | Show | GitHub Exploit DB Packet Storm |
| 220247 | 9.8 |
CRITICAL
Network |
atlassian |
confluence confluence_server |
The Widget Connector macro in Atlassian Confluence Server before version 6.6.12 (the fixed version for 6.6.x), from version 6.7.0 before 6.12.3 (the fixed version for 6.12.x), from version 6.13.0 bef… |
CWE-22
Path Traversal |
CVE-2019-3396 | 2024-11-21 13:42 | 2019-03-26 | Show | GitHub Exploit DB Packet Storm |
| 220248 | 6.8 |
MEDIUM
Network |
kubevirt | containerized_data_importer | Kubevirt/virt-cdi-importer, versions 1.4.0 to 1.5.3 inclusive, were reported to disable TLS certificate validation when importing data into PVCs from container registries. This could enable man-in-th… |
CWE-295
Improper Certificate Validation |
CVE-2019-3841 | 2024-11-21 13:42 | 2019-03-26 | Show | GitHub Exploit DB Packet Storm |
| 220249 | 6.7 |
MEDIUM
Local |
ovirt redhat |
vdsm gluster_storage |
A vulnerability was discovered in vdsm, version 4.19 through 4.30.3 and 4.30.5 through 4.30.8. The systemd_run function exposed to the vdsm system user could be abused to execute arbitrary commands a… |
NVD-CWE-Other
|
CVE-2019-3831 | 2024-11-21 13:42 | 2019-03-26 | Show | GitHub Exploit DB Packet Storm |
| 220250 | 8.8 |
HIGH
Network |
libssh2 debian netapp opensuse redhat |
libssh2 debian_linux ontap_select_deploy_administration_utility leap enterprise_linux_desktop enterprise_linux_workstation enterprise_linux_server enterprise_linux_server_tus … |
A flaw was found in libssh2 before 1.8.1. A server could send a multiple keyboard interactive response messages whose total length are greater than unsigned char max characters. This value is used as… |
CWE-787
Out-of-bounds Write |
CVE-2019-3863 | 2024-11-21 13:42 | 2019-03-26 | Show | GitHub Exploit DB Packet Storm |