Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 20, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
245621 7.8 危険 Grandstream Networks - Grandstream SIP Phone GXV 3000 におけるサービス運用妨害 (DoS) の脆弱性 - CVE-2007-4498 2012-06-26 15:54 2007-08-23 Show GitHub Exploit DB Packet Storm
245622 5 警告 eZ - eZ publish の tipafriend 関数におけるスパム攻撃される脆弱性 - CVE-2007-4494 2012-06-26 15:54 2007-08-22 Show GitHub Exploit DB Packet Storm
245623 10 危険 eZ - eZ publish における詳細不明な脆弱性 - CVE-2007-4493 2012-06-26 15:54 2007-08-22 Show GitHub Exploit DB Packet Storm
245624 6.8 警告 ecentrex - eCentrex VOIP Client モジュールの IUAComFormX ActiveX コントロールにおけるバッファオーバーフローの脆弱性 - CVE-2007-4489 2012-06-26 15:54 2007-08-22 Show GitHub Exploit DB Packet Storm
245625 4.3 警告 dscripting.com - IPB の D22-Shoutbox におけるクロスサイトスクリプティングの脆弱性 - CVE-2007-4487 2012-06-26 15:54 2007-08-22 Show GitHub Exploit DB Packet Storm
245626 6.8 警告 butterfly - Butterfly オンライン訪問者カウンタの visitor.php における PHP リモートファイルインクルージョンの脆弱性 - CVE-2007-4485 2012-06-26 15:54 2007-08-22 Show GitHub Exploit DB Packet Storm
245627 4.3 警告 aleadsoft.com - Search Engine Builder の search.html におけるクロスサイトスクリプティングの脆弱性 - CVE-2007-4479 2012-06-26 15:54 2007-08-22 Show GitHub Exploit DB Packet Storm
245628 10 危険 gesytec easylon - Gesytec Easylon OPC Server におけるサービス運用妨害 (DoS) の脆弱性 CWE-119
バッファエラー 		CVE-2007-4473 2012-06-26 15:54 2007-12-17 Show GitHub Exploit DB Packet Storm
245629 9.3 危険 broderbund - Broderbund Expressit 3DGreetings Player ActiveX コントロールにおけるバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2007-4472 2012-06-26 15:54 2007-09-6 Show GitHub Exploit DB Packet Storm
245630 9.3 危険 er mapper - ER Mapper ECW JPEG 2000 の NCSView.dll におけるスタックベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2007-4470 2012-06-26 15:54 2007-09-10 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 20, 2026, 4:14 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
218891 7.8 HIGH
Local 		wago pfc200_firmware An exploitable command injection vulnerability exists in the iocheckd service ‘I/O-Check’ function of the WAGO PFC 200 version 03.02.02(14). At 0x1e3f0 the extracted dns value from the xml file is us… CWE-78
OS Command  		CVE-2019-5167 2024-11-21 13:44 2020-03-12 Show GitHub Exploit DB Packet Storm
218892 9.1 CRITICAL
Network 		wago pfc200_firmware An exploitable improper host validation vulnerability exists in the Cloud Connectivity functionality of WAGO PFC200 Firmware versions 03.02.02(14), 03.01.07(13), and 03.00.39(12). A specially crafted… NVD-CWE-noinfo
CVE-2019-5160 2024-11-21 13:44 2020-03-12 Show GitHub Exploit DB Packet Storm
218893 7.8 HIGH
Local 		wago e\!cockpit An exploitable improper input validation vulnerability exists in the firmware update functionality of WAGO e!COCKPIT automation software v1.6.0.7. A specially crafted firmware update file can allow a… CWE-668
 Exposure of Resource to Wrong Sphere 		CVE-2019-5159 2024-11-21 13:44 2020-03-12 Show GitHub Exploit DB Packet Storm
218894 7.2 HIGH
Network 		wago pfc200_firmware An exploitable command injection vulnerability exists in the cloud connectivity functionality of WAGO PFC200 versions 03.02.02(14), 03.01.07(13), and 03.00.39(12). An attacker can inject operating sy… CWE-78
OS Command  		CVE-2019-5156 2024-11-21 13:44 2020-03-12 Show GitHub Exploit DB Packet Storm
218895 7.2 HIGH
Network 		wago pfc200_firmware An exploitable command injection vulnerability exists in the cloud connectivity feature of WAGO PFC200. An attacker can inject operating system commands into any of the parameter values contained in … CWE-78
OS Command  		CVE-2019-5155 2024-11-21 13:44 2020-03-12 Show GitHub Exploit DB Packet Storm
218896 5.3 MEDIUM
Network 		wago pfc200_firmware
pfc100_firmware 		An exploitable timing discrepancy vulnerability exists in the authentication functionality of the Web-Based Management (WBM) web application on WAGO PFC100/200 controllers. The WBM application makes … CWE-327
 Use of a Broken or Risky Cryptographic Algorithm 		CVE-2019-5135 2024-11-21 13:44 2020-03-12 Show GitHub Exploit DB Packet Storm
218897 7.5 HIGH
Network 		wago pfc200_firmware
pfc100_firmware 		An exploitable regular expression without anchors vulnerability exists in the Web-Based Management (WBM) authentication functionality of WAGO PFC200 versions 03.00.39(12) and 03.01.07(13), and WAGO P… NVD-CWE-noinfo
CVE-2019-5134 2024-11-21 13:44 2020-03-12 Show GitHub Exploit DB Packet Storm
218898 7.5 HIGH
Network 		wago e\!cockpit A cleartext transmission vulnerability exists in the network communication functionality of WAGO e!Cockpit version 1.5.1.1. An attacker with access to network traffic can easily intercept, interpret,… CWE-319
Cleartext Transmission of Sensitive Information 		CVE-2019-5107 2024-11-21 13:44 2020-03-12 Show GitHub Exploit DB Packet Storm
218899 7.5 HIGH
Network 		wago pfc200_firmware
pfc100_firmware 		The WBM web application on firmwares prior to 03.02.02 and 03.01.07 on the WAGO PFC100 and PFC2000, respectively, runs on a lighttpd web server and makes use of the FastCGI module, which is intended … CWE-400
 Uncontrolled Resource Consumption 		CVE-2019-5149 2024-11-21 13:44 2020-03-12 Show GitHub Exploit DB Packet Storm
218900 5.5 MEDIUM
Local 		wago e\!cockpit A hard-coded encryption key vulnerability exists in the authentication functionality of WAGO e!Cockpit version 1.5.1.1. An attacker with access to communications between e!Cockpit and CoDeSyS Gateway… CWE-798
 Use of Hard-coded Credentials 		CVE-2019-5106 2024-11-21 13:44 2020-03-12 Show GitHub Exploit DB Packet Storm