Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 18, 2026, 12:09 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
245931 6.5 警告 activecampaign - FCKeditor モジュールの filemanager/browser/default/connectors/php/config.php における .php4 および .php5 をアップロードされる脆弱性 - CVE-2007-2630 2012-06-26 15:46 2007-05-2 Show GitHub Exploit DB Packet Storm
245932 7.8 危険 Bradford Networks - Bradford CampusManager Network Control Application Server における重要な情報を取得される脆弱性 - CVE-2007-2629 2012-06-26 15:46 2007-05-11 Show GitHub Exploit DB Packet Storm
245933 6.8 警告 aiocp - AIOCP の shared/code/cp_authorization.php におけるクロスサイトスクリプティングの脆弱性 - CVE-2007-2625 2012-06-26 15:46 2007-05-11 Show GitHub Exploit DB Packet Storm
245934 6.8 警告 aiocp - AIOCP の shared/config/cp_config.php におけるクロスサイトスクリプティング攻撃を誘発する脆弱性 - CVE-2007-2624 2012-06-26 15:46 2007-05-11 Show GitHub Exploit DB Packet Storm
245935 7.8 危険 fruit2004 - Remote Display Dev キットの RControl.dll におけるバッファオーバーフローの脆弱性 - CVE-2007-2623 2012-06-26 15:46 2007-05-11 Show GitHub Exploit DB Packet Storm
245936 7.5 危険 extrovert software - Thyme Calendar の event_view.php における SQL インジェクションの脆弱性 - CVE-2007-2621 2012-06-26 15:46 2007-05-11 Show GitHub Exploit DB Packet Storm
245937 5.1 警告 drake team - Drake CMS の index.php における CRLF インジェクションの脆弱性 - CVE-2007-2618 2012-06-26 15:46 2007-05-11 Show GitHub Exploit DB Packet Storm
245938 7.5 危険 crie sue - Crie seu PHPLojaFacil における PHP リモートファイルインクルージョンの脆弱性 - CVE-2007-2615 2012-06-26 15:46 2007-05-11 Show GitHub Exploit DB Packet Storm
245939 6.8 警告 cgx - CGX における PHP リモートファイルインクルージョンの脆弱性 - CVE-2007-2611 2012-06-26 15:46 2007-05-11 Show GitHub Exploit DB Packet Storm
245940 7.5 危険 gnuedu - gnuedu における PHP リモートファイルインクルージョンの脆弱性 CWE-94
コード・インジェクション 		CVE-2007-2609 2012-06-26 15:46 2007-05-11 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 18, 2026, 4:12 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
219271 6.2 MEDIUM
Local 		ibm intelligent_operations_center
intelligent_operations_center_for_emergency_management
water_operations_for_waternamics 		IBM Intelligent Operations Center V5.1.0 through V5.2.0 could disclose detailed error messages, revealing sensitive information that could aid in further attacks against the system. IBM X-Force ID: 1… CWE-209
Information Exposure Through an Error Message 		CVE-2019-4420 2024-11-21 13:43 2019-08-21 Show GitHub Exploit DB Packet Storm
219272 8.2 HIGH
Network 		ibm intelligent_operations_center
intelligent_operations_center_for_emergency_management
water_operations_for_waternamics 		IBM Intelligent Operations Center V5.1.0 through V5.2.0 is vulnerable to an XML External Entity Injection (XXE) attack when processing XML data. A remote attacker could exploit this vulnerability to … CWE-611
XXE 		CVE-2019-4419 2024-11-21 13:43 2019-08-21 Show GitHub Exploit DB Packet Storm
219273 7.5 HIGH
Network 		ibm api_connect IBM API Connect 2018.1 through 2018.4.1.6 developer portal could allow an unauthorized user to cause a denial of service via an unprotected API. IBM X-Force ID: 162263. NVD-CWE-noinfo
CVE-2019-4402 2024-11-21 13:43 2019-08-21 Show GitHub Exploit DB Packet Storm
219274 7.5 HIGH
Network 		ibm security_guardium_big_data_intelligence IBM Security Guardium Big Data Intelligence 4.0 (SonarG) uses an inadequate account lockout setting that could allow a remote attacker to brute force account credentials. IBM X-Force ID: 161036. CWE-307
mproper Restriction of Excessive Authentication Attempts 		CVE-2019-4310 2024-11-21 13:43 2019-08-21 Show GitHub Exploit DB Packet Storm
219275 4.3 MEDIUM
Network 		ibm emptoris_sourcing
emptoris_spend_analysis
emptoris_contract_management 		IBM Emptoris Sourcing 10.1.0 through 10.1.3, IBM Contract Management 10.1.0 through 10.1.3, and IBM Emptoris Spend Analysis 10.1.0 through 10.1.3 could allow an authenticated user to obtain sensitive… CWE-209
Information Exposure Through an Error Message 		CVE-2019-4308 2024-11-21 13:43 2019-08-21 Show GitHub Exploit DB Packet Storm
219276 7.8 HIGH
Local 		ibm mq_appliance
datapower_gateway 		IBM DataPower Gateway 2018.4.1.0 through 2018.4.1.6, 7.6.0.0 through 7.6.0.15 and IBM MQ Appliance 8.0.0.0 through 8.0.0.12, 9.1.0.0 through 9.1.0.2, and 9.1.1 through 9.1.2 could allow a local attac… CWE-78
OS Command  		CVE-2019-4294 2024-11-21 13:43 2019-08-21 Show GitHub Exploit DB Packet Storm
219277 7.8 HIGH
Local 		ibm informix_dynamic_server IBM Informix Dynamic Server Enterprise Edition 12.1 could allow a local privileged Informix user to load a malicious shared library and gain root access privileges. IBM X-Force ID: 159941. NVD-CWE-noinfo
CVE-2019-4253 2024-11-21 13:43 2019-08-21 Show GitHub Exploit DB Packet Storm
219278 8.8 HIGH
Network 		ibm cloud_private IBM Cloud Private 3.1.1 and 3.1.2 is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions transmitted from a user that the website trus… CWE-352
 Origin Validation Error 		CVE-2019-4117 2024-11-21 13:43 2019-08-21 Show GitHub Exploit DB Packet Storm
219279 5.5 MEDIUM
Local 		ibm mq IBM MQ 9.1.0.0, 9.1.0.1, 9.1.1, and 9.1.0.2 is vulnerable to a denial of service due to a local user being able to fill up the disk space of the underlying filesystem using the error logging service.… CWE-400
 Uncontrolled Resource Consumption 		CVE-2019-4049 2024-11-21 13:43 2019-08-21 Show GitHub Exploit DB Packet Storm
219280 7.8 HIGH
Local 		ibm java Multiple binaries in IBM SDK, Java Technology Edition 7, 7R, and 8 on the AIX platform use insecure absolute RPATHs, which may facilitate code injection and privilege elevation by local users. IBM X-… CWE-427
 Uncontrolled Search Path Element 		CVE-2019-4473 2024-11-21 13:43 2019-08-5 Show GitHub Exploit DB Packet Storm