Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 26, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
246311 7.5 危険 adaptive business design - Infinite Responder における SQL インジェクションの脆弱性 - CVE-2007-3943 2012-06-26 15:54 2007-07-20 Show GitHub Exploit DB Packet Storm
246312 7.5 危険 a-shop - A-shop における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2007-3937 2012-06-26 15:54 2007-07-20 Show GitHub Exploit DB Packet Storm
246313 6.4 警告 a-shop - A-shop の admin/filebrowser.asp におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2007-3936 2012-06-26 15:54 2007-07-20 Show GitHub Exploit DB Packet Storm
246314 7.5 危険 bbs - BBS E-Market の postscript/postscript.php における PHP リモートファイルインクルージョンの脆弱性 - CVE-2007-3934 2012-06-26 15:54 2007-07-20 Show GitHub Exploit DB Packet Storm
246315 7.8 危険 シスコシステムズ - Cisco WAE アプライアンスで使用される Cisco WAAS の CIFS の最適化におけるサービス運用妨害 (DoS) の脆弱性 - CVE-2007-3923 2012-06-26 15:54 2007-07-18 Show GitHub Exploit DB Packet Storm
246316 3.3 注意 GForge Group - gforge における任意のファイルを短縮される脆弱性 CWE-59
リンク解釈の問題 		CVE-2007-3921 2012-06-26 15:54 2007-11-8 Show GitHub Exploit DB Packet Storm
246317 4.3 警告 GForge Group - GForge の account/verify.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2007-3918 2012-06-26 15:54 2007-10-5 Show GitHub Exploit DB Packet Storm
246318 7.5 危険 GForge Group - GForge における SQL インジェクションの脆弱性 CWE-20
CWE-89
CVE-2007-3913 2012-06-26 15:54 2007-09-6 Show GitHub Exploit DB Packet Storm
246319 7.2 危険 Debian - debian-goodies の checkrestart における権限を取得される脆弱性 CWE-20
CWE-264
CVE-2007-3912 2012-06-26 15:54 2007-09-1 Show GitHub Exploit DB Packet Storm
246320 10 危険 bakbone - BakBone NetVault Reporter の clsscheduler.exe におけるヒープベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2007-3911 2012-06-26 15:54 2007-07-30 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 27, 2026, 4:52 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
219141 7.5 HIGH
Network 		f5 big-ip_local_traffic_manager
big-ip_advanced_firewall_manager
big-ip_application_acceleration_manager
big-ip_analytics
big-ip_access_policy_manager
big-ip_application_security_manager<… 		On BIG-IP 14.0.0-14.1.0.5, 13.0.0-13.1.2, 12.1.0-12.1.4.1, 11.5.2-11.6.4, FTP traffic passing through a Virtual Server with both an active FTP profile associated and connection mirroring configured m… NVD-CWE-noinfo
CVE-2019-6645 2024-11-21 13:46 2019-09-5 Show GitHub Exploit DB Packet Storm
219142 4.9 MEDIUM
Network 		lenovo xclarity_administrator A stored CSV Injection vulnerability was reported in Lenovo XClarity Administrator (LXCA) versions prior to 2.5.0 that could allow an administrative user to store malformed data in LXCA Jobs and Even… CWE-1236
 Improper Neutralization of Formula Elements in a CSV File 		CVE-2019-6182 2024-11-21 13:46 2019-09-4 Show GitHub Exploit DB Packet Storm
219143 6.1 MEDIUM
Network 		lenovo xclarity_administrator A reflected cross-site scripting (XSS) vulnerability was reported in Lenovo XClarity Administrator (LXCA) versions prior to 2.5.0 that could allow a crafted URL, if visited, to cause JavaScript code … CWE-79
Cross-site Scripting 		CVE-2019-6181 2024-11-21 13:46 2019-09-4 Show GitHub Exploit DB Packet Storm
219144 4.8 MEDIUM
Network 		lenovo xclarity_administrator A stored cross-site scripting (XSS) vulnerability was reported in Lenovo XClarity Administrator (LXCA) versions prior to 2.5.0 that could allow an administrative user to cause JavaScript code to be s… CWE-79
Cross-site Scripting 		CVE-2019-6180 2024-11-21 13:46 2019-09-4 Show GitHub Exploit DB Packet Storm
219145 7.5 HIGH
Network 		lenovo xclarity_administrator
xclarity_integrator 		An XML External Entity (XXE) processing vulnerability was reported in Lenovo XClarity Administrator (LXCA) prior to version 2.5.0 , Lenovo XClarity Integrator (LXCI) for Microsoft System Center prior… CWE-611
XXE 		CVE-2019-6179 2024-11-21 13:46 2019-09-4 Show GitHub Exploit DB Packet Storm
219146 9.8 CRITICAL
Network 		fortinet fortimanager Lack of root file system integrity checking in Fortinet FortiManager VM application images of 6.2.0, 6.0.6 and below may allow an attacker to implant third-party programs by recreating the image thro… CWE-345
 Insufficient Verification of Data Authenticity 		CVE-2019-6695 2024-11-21 13:46 2019-08-24 Show GitHub Exploit DB Packet Storm
219147 9.8 CRITICAL
Network 		fortinet fortirecorder_firmware Use of Hard-coded Credentials vulnerability in FortiRecorder all versions below 2.7.4 may allow an unauthenticated attacker with knowledge of the aforementioned credentials and network access to Fort… CWE-798
 Use of Hard-coded Credentials 		CVE-2019-6698 2024-11-21 13:46 2019-08-24 Show GitHub Exploit DB Packet Storm
219148 9.8 CRITICAL
Network 		lenovo solution_center A vulnerability reported in Lenovo Solution Center version 03.12.003, which is no longer supported, could allow log files to be written to non-standard locations, potentially leading to privilege esc… CWE-200
Information Exposure 		CVE-2019-6177 2024-11-21 13:46 2019-08-22 Show GitHub Exploit DB Packet Storm
219149 9.1 CRITICAL
Network 		forcepoint next_generation_firewall Forcepoint Next Generation Firewall (Forcepoint NGFW) 6.4.x before 6.4.7, 6.5.x before 6.5.4, and 6.6.x before 6.6.2 has a serious authentication vulnerability that potentially allows unauthorized us… CWE-287
Improper Authentication 		CVE-2019-6143 2024-11-21 13:46 2019-08-21 Show GitHub Exploit DB Packet Storm
219150 5.3 MEDIUM
Network 		lenovo px12-350r_firmware
ix12-300r_firmware
home_media_network_hard_drive_firmware
storecenter_ix2-200_firmware
storecenter_ix4-200d_firmware
storecenter_ix4-200rl_firmware 		An information leakage vulnerability in Iomega and LenovoEMC NAS products could allow disclosure of some device details such as Share names through the device API when Personal Cloud is enabled. This… NVD-CWE-noinfo
CVE-2019-6178 2024-11-21 13:46 2019-08-20 Show GitHub Exploit DB Packet Storm