Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 23, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
246171 7.5 危険 esoft - eSoft InstaGate EX2 UTM デバイスにおける権限を取得される脆弱性 - CVE-2007-3787 2012-06-26 15:54 2007-07-15 Show GitHub Exploit DB Packet Storm
246172 4 警告 eldos corporation - EldoS sbb の PGPBBox.dll の特定の ActiveX コントロールにおける絶対パストラバーサルの脆弱性 - CVE-2007-3785 2012-06-26 15:54 2007-07-15 Show GitHub Exploit DB Packet Storm
246173 4.3 警告 Belkin International - Belkin G Plus Router F5D7231-4 におけるクロスサイトスクリプティングの脆弱性 - CVE-2007-3784 2012-06-26 15:54 2007-07-15 Show GitHub Exploit DB Packet Storm
246174 7.5 危険 envivosoft - enVivo!CMS の default.asp における SQL インジェクションの脆弱性 - CVE-2007-3783 2012-06-26 15:54 2007-07-15 Show GitHub Exploit DB Packet Storm
246175 7.2 危険 grisoft - Grisoft AVG Anti-Virus の avg7core.sys における権限を取得される脆弱性 - CVE-2007-3777 2012-06-26 15:54 2007-07-15 Show GitHub Exploit DB Packet Storm
246176 5 警告 シスコシステムズ - CUCM における重要な情報を取得される脆弱性 - CVE-2007-3776 2012-06-26 15:54 2007-07-11 Show GitHub Exploit DB Packet Storm
246177 7.8 危険 シスコシステムズ - CUCM におけるサービス運用妨害 (DoS) の脆弱性 - CVE-2007-3775 2012-06-26 15:54 2007-07-11 Show GitHub Exploit DB Packet Storm
246178 7.8 危険 dvbbs - Dvbbs におけるデータベースをダウンロードされる脆弱性 - CVE-2007-3774 2012-06-26 15:54 2007-07-15 Show GitHub Exploit DB Packet Storm
246179 9.3 危険 generic youtube clone script - Generic YouTube Clone Script の Email-Template モジュールにおけるクロスサイトリクエストフォージェリの脆弱性 CWE-94
コード・インジェクション 		CVE-2007-3773 2012-06-26 15:54 2007-07-15 Show GitHub Exploit DB Packet Storm
246180 5 警告 Digium - Asterisk の STUN 実装におけるサービス運用妨害 (DoS) の脆弱性 - CVE-2007-3765 2012-06-26 15:54 2007-07-18 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 24, 2026, 4:05 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
219731 9.8 CRITICAL
Network 		gliderlabs
opensuse
f5 		docker-alpine
leap
big-ip_controller 		Versions of the Official Alpine Linux Docker images (since v3.3) contain a NULL password for the `root` user. This vulnerability appears to be the result of a regression introduced in December of 201… NVD-CWE-Other
CVE-2019-5021 2024-11-21 13:44 2019-05-9 Show GitHub Exploit DB Packet Storm
219732 6.5 MEDIUM
Adjacent 		wincofireworks fw-1007_firmware An exploitable improper access control vulnerability exists in the bluetooth low energy functionality of Winco Fireworks FireFly FW-1007 V2.0. An attacker can connect to the device to trigger this vu… CWE-306
Missing Authentication for Critical Function 		CVE-2019-5014 2024-11-21 13:44 2019-05-9 Show GitHub Exploit DB Packet Storm
219733 5.4 MEDIUM
Network 		revive-adserver revive_adserver A user having access to the UI of a Revive Adserver instance could be tricked into clicking on a specifically crafted admin account-switch.php URL that would eventually lead them to another (unsafe) … CWE-601
Open Redirect 		CVE-2019-5433 2024-11-21 13:44 2019-05-7 Show GitHub Exploit DB Packet Storm
219734 7.5 HIGH
Network 		mqtt-packet_project mqtt-packet A specifically malformed MQTT Subscribe packet crashes MQTT Brokers using the mqtt-packet module versions < 3.5.1, 4.0.0 - 4.1.3, 5.0.0 - 5.6.1, 6.0.0 - 6.1.2 for decoding. CWE-125
Out-of-bounds Read 		CVE-2019-5432 2024-11-21 13:44 2019-05-7 Show GitHub Exploit DB Packet Storm
219735 8.8 HIGH
Network 		ui unifi_video In UniFi Video 3.10.0 and prior, due to the lack of CSRF protection, it is possible to abuse the Web API to make changes on the server configuration without the user consent, requiring the attacker t… CWE-352
 Origin Validation Error 		CVE-2019-5430 2024-11-21 13:44 2019-05-7 Show GitHub Exploit DB Packet Storm
219736 9.8 CRITICAL
Network 		revive-sas revive_adserver An attacker could send a specifically crafted payload to the XML-RPC invocation script and trigger the unserialize() call on the "what" parameter in the "openads.spc" RPC method. Such vulnerability c… CWE-502
 Deserialization of Untrusted Data 		CVE-2019-5434 2024-11-21 13:44 2019-05-7 Show GitHub Exploit DB Packet Storm
219737 5.4 MEDIUM
Network 		twitter twitter_kit This vulnerability was caused by an incomplete fix to CVE-2017-0911. Twitter Kit for iOS versions 3.0 to 3.4.0 is vulnerable to a callback verification flaw in the "Login with Twitter" component allo… CWE-345
 Insufficient Verification of Data Authenticity 		CVE-2019-5431 2024-11-21 13:44 2019-05-7 Show GitHub Exploit DB Packet Storm
219738 7.8 HIGH
Local 		filezilla-project
debian
fedoraproject 		filezilla_client
debian_linux
fedora 		Untrusted search path in FileZilla before 3.41.0-rc1 allows an attacker to gain privileges via a malicious 'fzsftp' binary in the user's home directory. CWE-426
 Untrusted Search Path 		CVE-2019-5429 2024-11-21 13:44 2019-04-30 Show GitHub Exploit DB Packet Storm
219739 7.5 HIGH
Network 		mchange
fedoraproject
oracle 		c3p0
fedora
retail_xstore_point_of_service
flexcube_private_banking
webcenter_sites
communications_ip_service_activator
hyperion_infrastructure_technology
enterprise_manager_ops_… 		c3p0 version < 0.9.5.4 may be exploited by a billion laughs attack when loading XML configuration due to missing protections against recursive entity expansion when loading configuration. CWE-776
XML Entity Expansion 		CVE-2019-5427 2024-11-21 13:44 2019-04-23 Show GitHub Exploit DB Packet Storm
219740 7.5 HIGH
Network 		qemu qemu hw/sparc64/sun4u.c in QEMU 3.1.50 is vulnerable to a NULL pointer dereference, which allows the attacker to cause a denial of service via a device driver. CWE-476
 NULL Pointer Dereference 		CVE-2019-5008 2024-11-21 13:44 2019-04-20 Show GitHub Exploit DB Packet Storm