Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 21, 2026, 12:08 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
245701	7.5	危険	focus-sis	-	Focus/SIS の modules/Discipline/StudentFieldBreakdown.php における PHP リモートファイルインクルージョンの脆弱性	CWE-94 コード・インジェクション	CVE-2007-4942	2012-06-26 15:54	2007-09-18	Show	GitHub Exploit DB Packet Storm

245702	5	警告	comscripts	-	CS Guestbook における admin 名および MD5 パスワードハッシュを取得される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2007-4937	2012-06-26 15:54	2007-09-18	Show	GitHub Exploit DB Packet Storm

245703	4.3	警告	アクシスコミュニケーションズ	-	AXIS カメラにおけるクロスサイトリクエストフォージェリの脆弱性	CWE-352 同一生成元ポリシー違反	CVE-2007-4930	2012-06-26 15:54	2007-09-18	Show	GitHub Exploit DB Packet Storm

245704	4.3	警告	アクシスコミュニケーションズ	-	AXIS カメラにおけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2007-4929	2012-06-26 15:54	2007-09-18	Show	GitHub Exploit DB Packet Storm

245705	4.9	警告	アクシスコミュニケーションズ	-	AXIS カメラにおける重要な情報を取得される脆弱性	CWE-310 暗号の問題	CVE-2007-4928	2012-06-26 15:54	2007-09-18	Show	GitHub Exploit DB Packet Storm

245706	3.5	注意	アクシスコミュニケーションズ	-	AXIS カメラの axis-cgi/buffer/command.cgi におけるサービス運用妨害 (DoS) の脆弱性	CWE-20 不適切な入力確認	CVE-2007-4927	2012-06-26 15:54	2007-09-18	Show	GitHub Exploit DB Packet Storm

245707	9.3	危険	アクシスコミュニケーションズ	-	AXIS カメラにおける重要な情報を取得される脆弱性	CWE-310 暗号の問題	CVE-2007-4926	2012-06-26 15:54	2007-09-18	Show	GitHub Exploit DB Packet Storm

245708	7.5	危険	ewire	-	ePC の ewirepcfunctions.php の ewirePC_Decrypt 関数における任意のコマンドを実行される脆弱性	CWE-20 不適切な入力確認	CVE-2007-4925	2012-06-26 15:54	2007-09-18	Show	GitHub Exploit DB Packet Storm

245709	7.5	危険	ajax	-	Ajax File Browser の in _includes/settings.inc.php における PHP リモートファイルインクルージョンの脆弱性	CWE-94 コード・インジェクション	CVE-2007-4921	2012-06-26 15:54	2007-09-17	Show	GitHub Exploit DB Packet Storm

245710	7.5	危険	gelatocms	-	Gelato の classes/gelato.class.php における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2007-4918	2012-06-26 15:54	2007-09-17	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 21, 2026, 4:10 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
220151	9.1	CRITICAL Network	crestron	am-100_firmware am-101_firmware	Crestron AM-100 with firmware 1.6.0.2 and AM-101 with firmware 2.7.0.2 allows anyone to act as a moderator to a slide show via crafted HTTP POST requests to conference.cgi. A remote, unauthenticated …	NVD-CWE-Other	CVE-2019-3935	2024-11-21 13:42	2019-05-1	Show	GitHub Exploit DB Packet Storm

220152	5.3	MEDIUM Network	crestron	am-100_firmware am-101_firmware	Crestron AM-100 with firmware 1.6.0.2 and AM-101 with firmware 2.7.0.2 allows anyone to bypass the presentation code sending a crafted HTTP POST request to login.cgi. A remote, unauthenticated attack…	CWE-425 Direct Request ('Forced Browsing')	CVE-2019-3934	2024-11-21 13:42	2019-05-1	Show	GitHub Exploit DB Packet Storm

220153	5.3	MEDIUM Network	crestron	am-100_firmware am-101_firmware	Crestron AM-100 with firmware 1.6.0.2 and AM-101 with firmware 2.7.0.2 allows anyone to bypass the presentation code simply by requesting /images/browserslide.jpg via HTTP. A remote, unauthenticated …	CWE-425 Direct Request ('Forced Browsing')	CVE-2019-3933	2024-11-21 13:42	2019-05-1	Show	GitHub Exploit DB Packet Storm

220154	9.8	CRITICAL Network	crestron	am-100_firmware am-101_firmware	Crestron AM-100 with firmware 1.6.0.2 and AM-101 with firmware 2.7.0.2 are vulnerable to authentication bypass due to a hard-coded password in return.tgi. A remote, unauthenticated attacker can use t…	CWE-798 Use of Hard-coded Credentials	CVE-2019-3932	2024-11-21 13:42	2019-05-1	Show	GitHub Exploit DB Packet Storm

220155	8.8	HIGH Network	crestron	am-100_firmware am-101_firmware	Crestron AM-100 with firmware 1.6.0.2 and AM-101 with firmware 2.7.0.2 are vulnerable to argumention injection to the curl binary via crafted HTTP requests to return.cgi. A remote, authenticated atta…	CWE-88 Argument Injection	CVE-2019-3931	2024-11-21 13:42	2019-05-1	Show	GitHub Exploit DB Packet Storm

220156	5.3	MEDIUM Network	crestron	am-100_firmware am-101_firmware	Crestron AM-100 with firmware 1.6.0.2 and AM-101 with firmware 2.7.0.2 allow any user to obtain the presentation passcode via the iso.3.6.1.4.1.3212.100.3.2.7.4 OIDs. A remote, unauthenticated attack…	NVD-CWE-Other	CVE-2019-3928	2024-11-21 13:42	2019-05-1	Show	GitHub Exploit DB Packet Storm

220157	9.8	CRITICAL Network	crestron	am-100_firmware am-101_firmware	Crestron AM-100 with firmware 1.6.0.2 and AM-101 with firmware 2.7.0.2 anyone can change the administrator and moderator passwords via the iso.3.6.1.4.1.3212.100.3.2.8.1 and iso.3.6.1.4.1.3212.100.3.…	CWE-287 Improper Authentication	CVE-2019-3927	2024-11-21 13:42	2019-05-1	Show	GitHub Exploit DB Packet Storm

220158	9.8	CRITICAL Network	crestron	am-100_firmware am-101_firmware	Crestron AM-100 with firmware 1.6.0.2 and AM-101 with firmware 2.7.0.2 are vulnerable to command injection via SNMP OID iso.3.6.1.4.1.3212.100.3.2.14.1. A remote, unauthenticated attacker can use thi…	CWE-78 OS Command	CVE-2019-3926	2024-11-21 13:42	2019-05-1	Show	GitHub Exploit DB Packet Storm

220159	9.8	CRITICAL Network	crestron	am-100_firmware am-101_firmware	Crestron AM-100 with firmware 1.6.0.2 and AM-101 with firmware 2.7.0.2 are vulnerable to command injection via SNMP OID iso.3.6.1.4.1.3212.100.3.2.9.3. A remote, unauthenticated attacker can use this…	CWE-78 OS Command	CVE-2019-3925	2024-11-21 13:42	2019-05-1	Show	GitHub Exploit DB Packet Storm

220160	9.8	CRITICAL Network	crestron barco extron teqavit sharp optoma blackbox infocus	am-100_firmware am-101_firmware wepresent_wipg-1000p_firmware wepresent_wipg-1600w_firmware sharelink_200_firmware sharelink_250_firmware wips710_firmware pn-l703wa_firmware w…	The Crestron AM-100 firmware 1.6.0.2, Crestron AM-101 firmware 2.7.0.1, Barco wePresent WiPG-1000P firmware 2.3.0.10, Barco wePresent WiPG-1600W before firmware 2.4.1.19, Extron ShareLink 200/250 fir…	CWE-787 Out-of-bounds Write	CVE-2019-3930	2024-11-21 13:42	2019-05-1	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed