Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 21, 2026, 12:08 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
245821 4.3 警告 ASP indir - Text File Search ASP (Classic) エディション の textfilesearch.asp におけるクロスサイトスクリプティングの脆弱性 - CVE-2007-4434 2012-06-26 15:54 2007-08-20 Show GitHub Exploit DB Packet Storm
245822 4.3 警告 ASP indir - Text File Search ASP.NET エディションの textfilesearch.aspx におけるクロスサイトスクリプティングの脆弱性 - CVE-2007-4433 2012-06-26 15:54 2007-08-20 Show GitHub Exploit DB Packet Storm
245823 6.8 警告 アップル - Apple Safari における外部ドメインへのローカルゾーンからのアクセスを伴う同一生成元ポリシを回避される脆弱性 - CVE-2007-4431 2012-06-26 15:54 2007-08-20 Show GitHub Exploit DB Packet Storm
245824 4.3 警告 アップル - Apple Safari におけるクライアントシステムのデスクトップに任意のファイルをダウンロードされる脆弱性 - CVE-2007-4424 2012-06-26 15:54 2007-08-18 Show GitHub Exploit DB Packet Storm
245825 9.3 危険 EdrawSoft - EDraw Office Viewer コンポーネントの officeviewer.ocx における絶対パストラバーサルの脆弱性 CWE-22
パス・トラバーサル
CVE-2007-4420 2012-06-26 15:54 2007-08-18 Show GitHub Exploit DB Packet Storm
245826 6.8 警告 シスコシステムズ - Cisco VPN Client における権限を取得される脆弱性 - CVE-2007-4415 2012-06-26 15:54 2007-08-15 Show GitHub Exploit DB Packet Storm
245827 6.8 警告 シスコシステムズ - Windows 上の Cisco VPN Client における権限を取得される脆弱性 - CVE-2007-4414 2012-06-26 15:54 2007-08-15 Show GitHub Exploit DB Packet Storm
245828 7.2 危険 bluecat networks - BlueCat Networks Adonis DNS/DHCP アプライアンスの CLI における使用 OS の root 権限を取得される脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2007-4390 2012-06-26 15:54 2007-08-17 Show GitHub Exploit DB Packet Storm
245829 7.8 危険 2wire - 複数の 2wire 製品の /xslt におけるクロスサイトリクエストフォージェリの脆弱性 - CVE-2007-4389 2012-06-26 15:54 2007-08-17 Show GitHub Exploit DB Packet Storm
245830 10 危険 2wire - 2wire の 1701HG および 2071 Gateway における空パスワードの脆弱性 - CVE-2007-4388 2012-06-26 15:54 2007-08-17 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 21, 2026, 4:10 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
220121 5.3 MEDIUM
Network
pivotal_software spring_data_java_persistance_api This affects Spring Data JPA in versions up to and including 2.1.6, 2.0.14 and 1.11.20. ExampleMatcher using ExampleMatcher.StringMatcher.STARTING, ExampleMatcher.StringMatcher.ENDING or ExampleMatch… NVD-CWE-Other
CVE-2019-3802 2024-11-21 13:42 2019-06-3 Show GitHub Exploit DB Packet Storm
220122 9.1 CRITICAL
Network
atlassian bitbucket Atlassian Bitbucket Data Center licensed instances starting with version 5.13.0 before 5.13.6 (the fixed version for 5.13.x), from 5.14.0 before 5.14.4 (fixed version for 5.14.x), from 5.15.0 before … CWE-22
Path Traversal
CVE-2019-3397 2024-11-21 13:42 2019-06-3 Show GitHub Exploit DB Packet Storm
220123 5.3 MEDIUM
Network
atlassian jira
jira_server
The /rest/api/2/user/picker rest resource in Jira before version 7.13.3, from version 8.0.0 before version 8.0.4, and from version 8.1.0 before version 8.1.1 allows remote attackers to enumerate user… CWE-863
 Incorrect Authorization
CVE-2019-3403 2024-11-21 13:42 2019-05-23 Show GitHub Exploit DB Packet Storm
220124 6.1 MEDIUM
Network
atlassian jira
jira_server
The ConfigurePortalPages.jspa resource in Jira before version 7.13.3 and from version 8.0.0 before version 8.1.1 allows remote attackers to inject arbitrary HTML or JavaScript via a cross site script… CWE-79
Cross-site Scripting
CVE-2019-3402 2024-11-21 13:42 2019-05-23 Show GitHub Exploit DB Packet Storm
220125 5.3 MEDIUM
Network
atlassian jira
jira_server
The ManageFilters.jspa resource in Jira before version 7.13.3 and from version 8.0.0 before version 8.1.1 allows remote attackers to enumerate usernames via an incorrect authorisation check. CWE-863
 Incorrect Authorization
CVE-2019-3401 2024-11-21 13:42 2019-05-23 Show GitHub Exploit DB Packet Storm
220126 7.8 HIGH
Local
artifex
debian
opensuse
fedoraproject
canonical
redhat
ghostscript
debian_linux
leap
fedora
ubuntu_linux
enterprise_linux
It was found that in ghostscript some privileged operators remained accessible from various places after the CVE-2019-6116 fix. A specially crafted PostScript file could use this flaw in order to, fo… NVD-CWE-noinfo
CVE-2019-3839 2024-11-21 13:42 2019-05-17 Show GitHub Exploit DB Packet Storm
220127 6.7 MEDIUM
Local
dell emc_recoverpoint
recoverpoint_for_virtual_machines
Dell EMC RecoverPoint versions prior to 5.1.3 and RecoverPoint for VMs versions prior to 5.2.0.2 contain an OS command injection vulnerability in the installation feature of Boxmgmt CLI. A malicious … CWE-78
OS Command 
CVE-2019-3727 2024-11-21 13:42 2019-05-16 Show GitHub Exploit DB Packet Storm
220128 9.8 CRITICAL
Network
rsa security_analytics
netwitness
RSA Netwitness Platform versions prior to 11.2.1.1 and RSA Security Analytics versions prior to 10.6.6.1 are vulnerable to a Command Injection vulnerability due to missing input validation in the pro… CWE-78
OS Command 
CVE-2019-3725 2024-11-21 13:42 2019-05-16 Show GitHub Exploit DB Packet Storm
220129 8.8 HIGH
Network
rsa security_analytics
netwitness_platform
RSA Netwitness Platform versions prior to 11.2.1.1 is vulnerable to an Authorization Bypass vulnerability. A remote low privileged attacker could potentially exploit this vulnerability to gain access… NVD-CWE-noinfo
CVE-2019-3724 2024-11-21 13:42 2019-05-16 Show GitHub Exploit DB Packet Storm
220130 4.8 MEDIUM
Network
mcafee network_security_manager Cross Site Scripting (XSS) vulnerability in McAfee Network Security Manager (NSM) Prior to 9.1 Update 5 allows an authenticated administrator to embed an XSS in the administrator interface via a spec… CWE-79
Cross-site Scripting
CVE-2019-3602 2024-11-21 13:42 2019-05-16 Show GitHub Exploit DB Packet Storm