Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 18, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
246001 4.3 警告 アップル - Apple Safari におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2007-2391 2012-06-26 15:46 2007-06-14 Show GitHub Exploit DB Packet Storm
246002 10 危険 アップル - Apple Mac OS X の iChat におけるバッファオーバーフローの脆弱性 - CVE-2007-2390 2012-06-26 15:46 2007-05-24 Show GitHub Exploit DB Packet Storm
246003 7.1 危険 アップル - Apple QuickTime for Java における Web ブラウザからメモリを読み取られる脆弱性 - CVE-2007-2389 2012-06-26 15:46 2007-05-29 Show GitHub Exploit DB Packet Storm
246004 9.3 危険 アップル - Apple QuickTime for Java における任意のコードを実行される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2007-2388 2012-06-26 15:46 2007-05-29 Show GitHub Exploit DB Packet Storm
246005 10 危険 アップル - Intel ハードウェア上の Apple Xserve Lights-Out Management における管理アクセス権を取得される脆弱性 - CVE-2007-2387 2012-06-26 15:46 2007-05-31 Show GitHub Exploit DB Packet Storm
246006 9.4 危険 アップル - Apple Mac OS X の mDNSResponder におけるバッファオーバーフローの脆弱性 - CVE-2007-2386 2012-06-26 15:46 2007-05-24 Show GitHub Exploit DB Packet Storm
246007 5 警告 Google - GWT フレームワークにおけるデータを取得される脆弱性 - CVE-2007-2378 2012-06-26 15:46 2007-04-30 Show GitHub Exploit DB Packet Storm
246008 5 警告 Direct Web Remoting - Getahead DWR フレームワークにおけるデータを取得される脆弱性 - CVE-2007-2377 2012-06-26 15:46 2007-04-30 Show GitHub Exploit DB Packet Storm
246009 5 警告 The Dojo Foundation - Dojo のフレームワークにおけるデータを取得される脆弱性 - CVE-2007-2376 2012-06-26 15:46 2007-04-30 Show GitHub Exploit DB Packet Storm
246010 9.3 危険 マイクロソフト - 複数の Microsoft Windows 製品における任意のコードを実行される脆弱性 - CVE-2007-2374 2012-06-26 15:46 2007-04-30 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 18, 2026, 4:12 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
219471 7.8 HIGH
Local 		opensuse
gnu 		leap
gnump3d 		UNIX Symbolic Link (Symlink) Following vulnerability in the packaging of gnump3d in openSUSE Leap 15.1 allows local attackers to escalate from user gnump3d to root. This issue affects: openSUSE Leap … - CVE-2019-3697 2024-11-21 13:42 2020-01-24 Show GitHub Exploit DB Packet Storm
219472 7.8 HIGH
Local 		opensuse
suse 		munin A Symbolic Link (Symlink) Following vulnerability in the packaging of munin in openSUSE Factory, Leap 15.1 allows local attackers to escalate from user munin to root. This issue affects: openSUSE Fac… - CVE-2019-3694 2024-11-21 13:42 2020-01-24 Show GitHub Exploit DB Packet Storm
219473 7.8 HIGH
Local 		suse
opensuse 		mailman
backports_sle 		A symlink following vulnerability in the packaging of mailman in SUSE Linux Enterprise Server 11, SUSE Linux Enterprise Server 12; openSUSE Leap 15.1 allowed local attackers to escalate their privile… - CVE-2019-3693 2024-11-21 13:42 2020-01-24 Show GitHub Exploit DB Packet Storm
219474 7.8 HIGH
Local 		suse
opensuse 		inn
leap
backports_sle 		The packaging of inn on SUSE Linux Enterprise Server 11; openSUSE Factory, Leap 15.1 allows local attackers to escalate from user inn to root via symlink attacks. This issue affects: SUSE Linux Enter… - CVE-2019-3692 2024-11-21 13:42 2020-01-24 Show GitHub Exploit DB Packet Storm
219475 3.3 LOW
Local 		suse linux_enterprise_server The permission package in SUSE Linux Enterprise Server allowed all local users to run dumpcap in the "easy" permission profile and sniff network traffic. This issue affects: SUSE Linux Enterprise Ser… CWE-276
Incorrect Default Permissions  		CVE-2019-3687 2024-11-21 13:42 2020-01-24 Show GitHub Exploit DB Packet Storm
219476 7.8 HIGH
Local 		opensuse munge A Symbolic Link (Symlink) Following vulnerability in the packaging of munge in SUSE Linux Enterprise Server 15; openSUSE Factory allowed local attackers to escalate privileges from user munge to root… - CVE-2019-3691 2024-11-21 13:42 2020-01-24 Show GitHub Exploit DB Packet Storm
219477 8.8 HIGH
Network 		redhat quay A vulnerability was discovered in all quay-2 versions before quay-3.0.0, in the Quay web GUI where POST requests include a specific parameter which is used as a CSRF token. The token is not refreshed… CWE-352
 Origin Validation Error 		CVE-2019-3864 2024-11-21 13:42 2020-01-22 Show GitHub Exploit DB Packet Storm
219478 6.1 MEDIUM
Network 		suse openqa openQA before commit c172e8883d8f32fced5e02f9b6faaacc913df27b was vulnerable to XSS in the distri and version parameter. This was reported through the bug bounty program of Offensive Security CWE-79
Cross-site Scripting 		CVE-2019-3686 2024-11-21 13:42 2020-01-17 Show GitHub Exploit DB Packet Storm
219479 8.8 HIGH
Network 		suse
hp 		openstack_cloud
keystone-json-assignment
helion_openstack 		The keystone-json-assignment package in SUSE Openstack Cloud 8 before commit d7888c75505465490250c00cc0ef4bb1af662f9f every user listed in the /etc/keystone/user-project-map.json was assigned full "m… CWE-732
 Incorrect Permission Assignment for Critical Resource 		CVE-2019-3683 2024-11-21 13:42 2020-01-17 Show GitHub Exploit DB Packet Storm
219480 7.8 HIGH
Local 		suse caas_platform The docker-kubic package in SUSE CaaS Platform 3.0 before 17.09.1_ce-7.6.1 provided access to an insecure API locally on the Kubernetes master node. CWE-668
 Exposure of Resource to Wrong Sphere 		CVE-2019-3682 2024-11-21 13:42 2020-01-17 Show GitHub Exploit DB Packet Storm