Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 20, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
245711 10 危険 e-commerce solutions - E-Commerce Scripts Shopping Cart Script の admin.aspx における SQL インジェクションの脆弱性 - CVE-2007-4121 2012-06-26 15:54 2007-08-1 Show GitHub Exploit DB Packet Storm
245712 7.5 危険 berthanas ziyaretci - Berthanas Ziyaretci Defteri 2.0 の yonetici.asp における SQL インジェクションの脆弱性 - CVE-2007-4119 2012-06-26 15:54 2007-08-1 Show GitHub Exploit DB Packet Storm
245713 3.5 注意 awbs - AWBS における他の専用サーバの設定データを取得される脆弱性 - CVE-2007-4113 2012-06-26 15:54 2007-07-31 Show GitHub Exploit DB Packet Storm
245714 6.8 警告 awbs - AWBS における SQL インジェクションの脆弱性 - CVE-2007-4112 2012-06-26 15:54 2007-07-31 Show GitHub Exploit DB Packet Storm
245715 6.8 警告 codewidgets - Real Estate listing website アプリケーションテンプレートのログインスクリプトにおける SQL インジェクションの脆弱性 - CVE-2007-4111 2012-06-26 15:54 2007-07-31 Show GitHub Exploit DB Packet Storm
245716 7.5 危険 codewidgets - Message Board / Threaded Discussion Forum Application Template の sign_in.aspx における SQL インジェクションの脆弱性 - CVE-2007-4110 2012-06-26 15:54 2007-07-31 Show GitHub Exploit DB Packet Storm
245717 7.5 危険 codewidgets - Online Store Application Template の sign_in.aspx における SQL インジェクションの脆弱性 - CVE-2007-4109 2012-06-26 15:54 2007-07-31 Show GitHub Exploit DB Packet Storm
245718 7.5 危険 codewidgets - Online Event Registration Template の sign_in.aspx における SQL インジェクションの脆弱性 - CVE-2007-4108 2012-06-26 15:54 2007-07-31 Show GitHub Exploit DB Packet Storm
245719 6.8 警告 codewidgets - CodeWidgets Pay Roll - Time Sheet and Punch Card Application における SQL インジェクションの脆弱性 - CVE-2007-4106 2012-06-26 15:54 2007-07-31 Show GitHub Exploit DB Packet Storm
245720 9.3 危険 Baidu, Inc. - Baidu Soba Search Bar の BaiduBar.dll の特定の ActiveX コントロールにおける任意のコードを実行される脆弱性 - CVE-2007-4105 2012-06-26 15:54 2007-07-31 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 21, 2026, 4:10 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
220161 9.8 CRITICAL
Network 		crestron
barco
extron
teqavit
sharp
optoma
blackbox
infocus 		am-100_firmware
am-101_firmware
wepresent_wipg-1000p_firmware
wepresent_wipg-1600w_firmware
sharelink_200_firmware
sharelink_250_firmware
wips710_firmware
pn-l703wa_firmware
w… 		The Crestron AM-100 firmware 1.6.0.2, Crestron AM-101 firmware 2.7.0.1, Barco wePresent WiPG-1000P firmware 2.3.0.10, Barco wePresent WiPG-1600W before firmware 2.4.1.19, Extron ShareLink 200/250 fir… CWE-78
OS Command  		CVE-2019-3929 2024-11-21 13:42 2019-05-1 Show GitHub Exploit DB Packet Storm
220162 7.5 HIGH
Network 		atlassian jira
jira_server 		The BrowseProjects.jspa resource in Jira before version 7.13.2, and from version 8.0.0 before version 8.0.2 allows remote attackers to see information for archived projects through a missing authoris… CWE-862
 Missing Authorization 		CVE-2019-3399 2024-11-21 13:42 2019-05-1 Show GitHub Exploit DB Packet Storm
220163 9.8 CRITICAL
Network 		facebook wangle Wangle's LineBasedFrameDecoder contains logic for identifying newlines which incorrectly advances a buffer, leading to a potential underflow. This affects versions of Wangle prior to v2019.04.22.00 CWE-787
 Out-of-bounds Write 		CVE-2019-3563 2024-11-21 13:42 2019-04-30 Show GitHub Exploit DB Packet Storm
220164 6.1 MEDIUM
Network 		oculus oculus_browser A remote web page could inject arbitrary HTML code into the Oculus Browser UI, allowing an attacker to spoof UI and potentially execute code. This affects the Oculus Browser starting from version 5.2… CWE-79
Cross-site Scripting 		CVE-2019-3562 2024-11-21 13:42 2019-04-30 Show GitHub Exploit DB Packet Storm
220165 9.8 CRITICAL
Network 		facebook hhvm Insufficient boundary checks for the strrpos and strripos functions allow access to out-of-bounds memory. This affects all supported versions of HHVM (4.0.3, 3.30.4, and 3.27.7 and below). CWE-125
Out-of-bounds Read 		CVE-2019-3561 2024-11-21 13:42 2019-04-30 Show GitHub Exploit DB Packet Storm
220166 7.5 HIGH
Network 		facebook fizz An improperly performed length calculation on a buffer in PlaintextRecordLayer could lead to an infinite loop and denial-of-service based on user input. This issue affected versions of fizz prior to … CWE-131
CWE-835
Incorrect Calculation of Buffer Size
 Loop with Unreachable Exit Condition ('Infinite Loop') 		CVE-2019-3560 2024-11-21 13:42 2019-04-30 Show GitHub Exploit DB Packet Storm
220167 8.8 HIGH
Network 		microfocus network_operations_management
network_automation 		A potential security vulnerability has been identified in Micro Focus Network Automation Software 9.20, 9.21, 10.00, 10.10, 10.20, 10.30, 10.40, 10.50, 2018.05, 2018.08, 2018.11, and Micro Focus Netw… NVD-CWE-noinfo
CVE-2019-3493 2024-11-21 13:42 2019-04-30 Show GitHub Exploit DB Packet Storm
220168 7.8 HIGH
Local 		systemd_project
canonical
netapp 		systemd
ubuntu_linux
solidfire
hci_management_node
snapprotect
cn1610_firmware 		It was discovered that a systemd service that uses DynamicUser property can get new privileges through the execution of SUID binaries, which would allow to create binaries owned by the service transi… - CVE-2019-3844 2024-11-21 13:42 2019-04-27 Show GitHub Exploit DB Packet Storm
220169 7.8 HIGH
Local 		systemd_project
fedoraproject
canonical
netapp 		systemd
fedora
ubuntu_linux
solidfire
hci_management_node
snapprotect
cn1610_firmware 		It was discovered that a systemd service that uses DynamicUser property can create a SUID/SGID binary that would be allowed to run as the transient service UID/GID even after the service is terminate… CWE-269
 Improper Privilege Management 		CVE-2019-3843 2024-11-21 13:42 2019-04-27 Show GitHub Exploit DB Packet Storm
220170 9.8 CRITICAL
Network 		dell idrac9_firmware Dell EMC iDRAC9 versions prior to 3.30.30.30 contain an authentication bypass vulnerability. A remote attacker may potentially exploit this vulnerability to bypass authentication and gain access to t… NVD-CWE-noinfo
CVE-2019-3707 2024-11-21 13:42 2019-04-27 Show GitHub Exploit DB Packet Storm