Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 17, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
245841 10 危険 cromosoft - Cromosoft SPP における任意のスクリプトをアップロードされる脆弱性 CWE-94
コード・インジェクション 		CVE-2007-1139 2012-06-26 15:46 2007-03-2 Show GitHub Exploit DB Packet Storm
245842 5 警告 cromosoft - Cromosoft SPP の list_main_pages.php における絶対パストラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2007-1138 2012-06-26 15:46 2007-03-2 Show GitHub Exploit DB Packet Storm
245843 6.8 警告 efiction - eFiction における PHP リモートファイルインクルージョンの脆弱性 - CVE-2007-1118 2012-06-26 15:46 2007-02-26 Show GitHub Exploit DB Packet Storm
245844 6.8 警告 activecalendar - ActiveCalendar におけるクロスサイトスクリプティングの脆弱性 - CVE-2007-1111 2012-06-26 15:46 2007-02-26 Show GitHub Exploit DB Packet Storm
245845 5 警告 activecalendar - ActiveCalendar の data/showcode.php におけるディレクトリトラバーサルの脆弱性 - CVE-2007-1110 2012-06-26 15:46 2007-02-26 Show GitHub Exploit DB Packet Storm
245846 6.8 警告 cs-gallery - Christian Schneider CS-Gallery の index.php における PHP リモートファイルインクルージョンの脆弱性 - CVE-2007-1108 2012-06-26 15:46 2007-02-26 Show GitHub Exploit DB Packet Storm
245847 7.5 危険 Coppermine Photo Gallery - CPG の thumbnails.php における SQL インジェクションの脆弱性 - CVE-2007-1107 2012-06-26 15:46 2007-02-26 Show GitHub Exploit DB Packet Storm
245848 5 警告 extreme phpbb - Extreme phpBB の functions.php における PHP リモートファイルインクルージョンの脆弱性 - CVE-2007-1105 2012-06-26 15:46 2007-02-26 Show GitHub Exploit DB Packet Storm
245849 7.6 危険 Google - Google Desktop におけるクロスサイトスクリプティングの脆弱性 - CVE-2007-1085 2012-06-26 15:46 2007-02-22 Show GitHub Exploit DB Packet Storm
245850 7.1 危険 ftpx - FTP Explorer におけるサービス運用妨害 (DoS) の脆弱性 CWE-399
リソース管理の問題 		CVE-2007-1082 2012-06-26 15:46 2007-02-22 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 17, 2026, 4:15 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
219681 8.0 HIGH
Adjacent 		redhat satellite A lack of access control was found in the message queues maintained by Satellite's QPID broker and used by katello-agent in versions before Satellite 6.2, Satellite 6.1 optional and Satellite Capsule… NVD-CWE-Other
CVE-2019-3845 2024-11-21 13:42 2019-04-12 Show GitHub Exploit DB Packet Storm
219682 6.1 MEDIUM
Local 		linux
redhat 		linux_kernel
enterprise_linux 		It was found that the net_dma code in tcp_recvmsg() in the 2.6.32 kernel as shipped in RHEL6 is thread-unsafe. So an unprivileged multi-threaded userspace application calling recvmsg() for the same n… CWE-362
CWE-401
Race Condition
 Missing Release of Memory after Effective Lifetime 		CVE-2019-3837 2024-11-21 13:42 2019-04-12 Show GitHub Exploit DB Packet Storm
219683 7.2 HIGH
Network 		verizon fios_quantum_gateway_g1100_firmware Remote command injection vulnerability in Verizon Fios Quantum Gateway (G1100) firmware version 02.01.00.05 allows a remote, authenticated attacker to execute arbitrary commands on the target device … CWE-78
OS Command  		CVE-2019-3914 2024-11-21 13:42 2019-04-11 Show GitHub Exploit DB Packet Storm
219684 8.1 HIGH
Network 		mikrotik routeros MikroTik RouterOS versions Stable 6.43.12 and below, Long-term 6.42.12 and below, and Testing 6.44beta75 and below are vulnerable to an authenticated, remote directory traversal via the HTTP or Winbo… CWE-22
Path Traversal 		CVE-2019-3943 2024-11-21 13:42 2019-04-11 Show GitHub Exploit DB Packet Storm
219685 7.5 HIGH
Adjacent 		verizon fios_quantum_gateway_g1100_firmware Authentication Bypass by Capture-replay vulnerability in Verizon Fios Quantum Gateway (G1100) firmware version 02.01.00.05 allows an unauthenticated attacker with adjacent network access to intercept… CWE-294
Authentication Bypass by Capture-replay  		CVE-2019-3915 2024-11-21 13:42 2019-04-11 Show GitHub Exploit DB Packet Storm
219686 4.4 MEDIUM
Local 		mcafee data_exchange_layer
threat_intelligence_exchange 		Information Disclosure vulnerability in McAfee DXL Platform and TIE Server in DXL prior to 5.0.1 HF2 and TIE prior to 2.3.1 HF1 allows Authenticated users to view sensitive information in plain text … CWE-312
 Cleartext Storage of Sensitive Information 		CVE-2019-3612 2024-11-21 13:42 2019-04-11 Show GitHub Exploit DB Packet Storm
219687 7.0 HIGH
Local 		systemd_project
redhat
fedoraproject
debian 		systemd
enterprise_linux
fedora
debian_linux 		In systemd before v242-rc4, it was discovered that pam_systemd does not properly sanitize the environment before using the XDG_SEAT variable. It is possible for an attacker, in some particular config… CWE-863
 Incorrect Authorization 		CVE-2019-3842 2024-11-21 13:42 2019-04-10 Show GitHub Exploit DB Packet Storm
219688 7.5 HIGH
Network 		advantech webaccess Advantech WebAccess 8.3.4 allows unauthenticated, remote attackers to delete arbitrary files via IOCTL 10005 RPC. CWE-306
Missing Authentication for Critical Function 		CVE-2019-3941 2024-11-21 13:42 2019-04-10 Show GitHub Exploit DB Packet Storm
219689 9.8 CRITICAL
Network 		advantech webaccess Advantech WebAccess 8.3.4 is vulnerable to file upload attacks via unauthenticated RPC call. An unauthenticated, remote attacker can use this vulnerability to execute arbitrary code. CWE-434
 Unrestricted Upload of File with Dangerous Type  		CVE-2019-3940 2024-11-21 13:42 2019-04-10 Show GitHub Exploit DB Packet Storm
219690 4.9 MEDIUM
Network 		theforeman
redhat 		foreman
satellite 		In Foreman it was discovered that the delete compute resource operation, when executed from the Foreman API, leads to the disclosure of the plaintext password or token for the affected compute resour… CWE-732
 Incorrect Permission Assignment for Critical Resource 		CVE-2019-3893 2024-11-21 13:42 2019-04-10 Show GitHub Exploit DB Packet Storm