Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 20, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
245711 10 危険 e-commerce solutions - E-Commerce Scripts Shopping Cart Script の admin.aspx における SQL インジェクションの脆弱性 - CVE-2007-4121 2012-06-26 15:54 2007-08-1 Show GitHub Exploit DB Packet Storm
245712 7.5 危険 berthanas ziyaretci - Berthanas Ziyaretci Defteri 2.0 の yonetici.asp における SQL インジェクションの脆弱性 - CVE-2007-4119 2012-06-26 15:54 2007-08-1 Show GitHub Exploit DB Packet Storm
245713 3.5 注意 awbs - AWBS における他の専用サーバの設定データを取得される脆弱性 - CVE-2007-4113 2012-06-26 15:54 2007-07-31 Show GitHub Exploit DB Packet Storm
245714 6.8 警告 awbs - AWBS における SQL インジェクションの脆弱性 - CVE-2007-4112 2012-06-26 15:54 2007-07-31 Show GitHub Exploit DB Packet Storm
245715 6.8 警告 codewidgets - Real Estate listing website アプリケーションテンプレートのログインスクリプトにおける SQL インジェクションの脆弱性 - CVE-2007-4111 2012-06-26 15:54 2007-07-31 Show GitHub Exploit DB Packet Storm
245716 7.5 危険 codewidgets - Message Board / Threaded Discussion Forum Application Template の sign_in.aspx における SQL インジェクションの脆弱性 - CVE-2007-4110 2012-06-26 15:54 2007-07-31 Show GitHub Exploit DB Packet Storm
245717 7.5 危険 codewidgets - Online Store Application Template の sign_in.aspx における SQL インジェクションの脆弱性 - CVE-2007-4109 2012-06-26 15:54 2007-07-31 Show GitHub Exploit DB Packet Storm
245718 7.5 危険 codewidgets - Online Event Registration Template の sign_in.aspx における SQL インジェクションの脆弱性 - CVE-2007-4108 2012-06-26 15:54 2007-07-31 Show GitHub Exploit DB Packet Storm
245719 6.8 警告 codewidgets - CodeWidgets Pay Roll - Time Sheet and Punch Card Application における SQL インジェクションの脆弱性 - CVE-2007-4106 2012-06-26 15:54 2007-07-31 Show GitHub Exploit DB Packet Storm
245720 9.3 危険 Baidu, Inc. - Baidu Soba Search Bar の BaiduBar.dll の特定の ActiveX コントロールにおける任意のコードを実行される脆弱性 - CVE-2007-4105 2012-06-26 15:54 2007-07-31 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 21, 2026, 4:10 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
218911 6.8 MEDIUM
Physics 		vmware fusion
workstation
esxi 		VMware ESXi (6.7 before ESXi670-201903001, 6.5 before ESXi650-201903001, 6.0 before ESXi600-201903001), Workstation (15.x before 15.0.4, 14.x before 14.1.7), Fusion (11.x before 11.0.3, 10.x before 1… CWE-125
CWE-787
Out-of-bounds Read
 Out-of-bounds Write 		CVE-2019-5518 2024-11-21 13:45 2019-04-2 Show GitHub Exploit DB Packet Storm
218912 9.8 CRITICAL
Network 		vmware vcloud_director VMware vCloud Director for Service Providers 9.5.x prior to 9.5.0.3 update resolves a Remote Session Hijack vulnerability in the Tenant and Provider Portals. Successful exploitation of this issue may… CWE-384
 Session Fixation 		CVE-2019-5523 2024-11-21 13:45 2019-04-2 Show GitHub Exploit DB Packet Storm
218913 9.8 CRITICAL
Network 		overit geocall An issue was discovered in OverIT Geocall 6.3 before build 2:346977. An unauthenticated servlet allows an attacker to obtain a cookie of an authenticated user, and login to the web application. NVD-CWE-noinfo
CVE-2019-5891 2024-11-21 13:45 2019-04-2 Show GitHub Exploit DB Packet Storm
218914 8.8 HIGH
Network 		overit geocall An issue was discovered in OverIT Geocall 6.3 before build 2:346977. Weak authentication and session management allows an authenticated user to obtain access to the Administrative control panel and e… CWE-287
Improper Authentication 		CVE-2019-5890 2024-11-21 13:45 2019-04-2 Show GitHub Exploit DB Packet Storm
218915 7.5 HIGH
Network 		overit geocall An log-management directory traversal issue was discovered in OverIT Geocall 6.3 before build 2:346977. CWE-22
Path Traversal 		CVE-2019-5889 2024-11-21 13:45 2019-04-2 Show GitHub Exploit DB Packet Storm
218916 6.1 MEDIUM
Network 		overit geocall Multiple XSS vulnerabilities were discovered in OverIT Geocall 6.3 before build 2:346977. CWE-79
Cross-site Scripting 		CVE-2019-5888 2024-11-21 13:45 2019-04-2 Show GitHub Exploit DB Packet Storm
218917 7.5 HIGH
Network 		nodejs
opensuse 		node.js
leap 		Keep-alive HTTP and HTTPS connections can remain open and inactive for up to 2 minutes in Node.js 6.16.0 and earlier. Node.js 8.0.0 introduced a dedicated server.keepAliveTimeout which defaults to 5 … CWE-770
 Allocation of Resources Without Limits or Throttling 		CVE-2019-5739 2024-11-21 13:45 2019-03-29 Show GitHub Exploit DB Packet Storm
218918 7.5 HIGH
Network 		nodejs
opensuse 		node.js
leap 		In Node.js including 6.x before 6.17.0, 8.x before 8.15.1, 10.x before 10.15.2, and 11.x before 11.10.1, an attacker can cause a Denial of Service (DoS) by establishing an HTTP or HTTPS connection in… CWE-770
 Allocation of Resources Without Limits or Throttling 		CVE-2019-5737 2024-11-21 13:45 2019-03-29 Show GitHub Exploit DB Packet Storm
218919 7.0 HIGH
Local 		nvidia geforce_experience NVIDIA GeForce Experience before 3.18 contains a vulnerability when ShadowPlay or GameStream is enabled. When an attacker has access to the system and creates a hard link, the software does not check… CWE-59
Link Following 		CVE-2019-5674 2024-11-21 13:45 2019-03-29 Show GitHub Exploit DB Packet Storm
218920 7.5 HIGH
Network 		weban an Directory traversal vulnerability in 'an' App for iOS Version 3.2.0 and earlier allows remote attackers to read arbitrary files via unspecified vectors. CWE-22
Path Traversal 		CVE-2019-5927 2024-11-21 13:45 2019-03-27 Show GitHub Exploit DB Packet Storm