Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 4, 2026, 10 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
246641 7.5 危険 eb design pty ltd - EB Design ebCrypt の EbCrypt.eb_c_PRNGenerator.1 ActiveX コントロールにおける絶対パストラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2007-5110 2012-06-26 15:54 2007-09-26 Show GitHub Exploit DB Packet Storm
246642 4.3 警告 flatnuke - FlatNuke の index.php におけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反 		CVE-2007-5109 2012-06-26 15:54 2007-09-26 Show GitHub Exploit DB Packet Storm
246643 10 危険 ask.com - IAC Search & Media ask.com toolbar における詳細不明な脆弱性 CWE-noinfo
情報不足 		CVE-2007-5108 2012-06-26 15:54 2007-09-26 Show GitHub Exploit DB Packet Storm
246644 9.3 危険 ask.com - IAC Search & Media ask.com Ask Toolbar の askBar.dll の AskJeevesToolBar.SettingsPlugin.1 ActiveX コントロールにおけるスタックベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2007-5107 2012-06-26 15:54 2007-09-26 Show GitHub Exploit DB Packet Storm
246645 7.5 危険 bcoos - bcoos の Arcade モジュールの index.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2007-5104 2012-06-26 15:54 2007-09-26 Show GitHub Exploit DB Packet Storm
246646 7.2 危険 furquim - ChironFS における権限を取得される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2007-5101 2012-06-26 15:54 2007-09-26 Show GitHub Exploit DB Packet Storm
246647 7.5 危険 david watters - David Watters Helplink の show.php における PHP リモートファイルインクルージョンの脆弱性 CWE-94
コード・インジェクション 		CVE-2007-5099 2012-06-26 15:54 2007-09-26 Show GitHub Exploit DB Packet Storm
246648 6.8 警告 dragonfrugal - DFD Cart における PHP リモートファイルインクルージョンの脆弱性 CWE-94
コード・インジェクション 		CVE-2007-5098 2012-06-26 15:54 2007-09-26 Show GitHub Exploit DB Packet Storm
246649 7.5 危険 guanxicrm - guanxiCRM Business Solution の modules/webmail2/inc/rfc822.php における PHP リモートファイルインクルージョンの脆弱性 CWE-94
コード・インジェクション 		CVE-2007-5096 2012-06-26 15:54 2007-09-26 Show GitHub Exploit DB Packet Storm
246650 4.3 警告 EGroupware - eGroupWare におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2007-5091 2012-06-26 15:54 2007-09-26 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 4, 2026, 4:17 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
219181 3.5 LOW
Network 		vertiv avocent_umg-4000_firmware The web interface of the Vertiv Avocent UMG-4000 version 4.2.1.19 is vulnerable to stored XSS. A remote attacker authenticated with an administrator account could store a maliciously named file withi… CWE-79
Cross-site Scripting 		CVE-2019-9508 2024-11-21 13:51 2020-03-31 Show GitHub Exploit DB Packet Storm
219182 7.2 HIGH
Network 		vertiv avocent_umg-4000_firmware The web interface of the Vertiv Avocent UMG-4000 version 4.2.1.19 is vulnerable to command injection because the application incorrectly neutralizes code syntax before executing. Since all commands w… CWE-77
Command Injection 		CVE-2019-9507 2024-11-21 13:51 2020-03-31 Show GitHub Exploit DB Packet Storm
219183 7.5 HIGH
Network 		google android In Bluetooth, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclosure with no additional execution privileges needed. User interaction i… CWE-125
Out-of-bounds Read 		CVE-2019-9474 2024-11-21 13:51 2020-03-16 Show GitHub Exploit DB Packet Storm
219184 7.5 HIGH
Network 		google android In Bluetooth, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclosure with no additional execution privileges needed. User interaction i… CWE-125
Out-of-bounds Read 		CVE-2019-9473 2024-11-21 13:51 2020-03-16 Show GitHub Exploit DB Packet Storm
219185 8.8 HIGH
Adjacent 		synology
broadcom 		router_manager
bcm4339_firmware 		The Broadcom wl WiFi driver is vulnerable to a heap buffer overflow. If the vendor information element data length is larger than 164 bytes, a heap buffer overflow is triggered in wlc_wpa_plumb_gtk. … CWE-787
 Out-of-bounds Write 		CVE-2019-9502 2024-11-21 13:51 2020-02-4 Show GitHub Exploit DB Packet Storm
219186 8.8 HIGH
Adjacent 		synology
broadcom 		router_manager
bcm4339_firmware 		The Broadcom wl WiFi driver is vulnerable to a heap buffer overflow. By supplying a vendor information element with a data length larger than 32 bytes, a heap buffer overflow is triggered in wlc_wpa_… CWE-787
 Out-of-bounds Write 		CVE-2019-9501 2024-11-21 13:51 2020-02-4 Show GitHub Exploit DB Packet Storm
219187 8.3 HIGH
Adjacent 		broadcom
redhat 		brcmfmac_driver
enterprise_linux 		The Broadcom brcmfmac WiFi driver prior to commit a4176ec356c73a46c07c181c6d04039fafa34a9f is vulnerable to a frame validation bypass. If the brcmfmac driver receives a firmware event frame from a re… CWE-20
 Improper Input Validation  		CVE-2019-9503 2024-11-21 13:51 2020-01-17 Show GitHub Exploit DB Packet Storm
219188 8.3 HIGH
Adjacent 		broadcom
linux 		brcmfmac_driver
linux_kernel 		The Broadcom brcmfmac WiFi driver prior to commit 1b5e2423164b3670e8bc9174e4762d297990deff is vulnerable to a heap buffer overflow. If the Wake-up on Wireless LAN functionality is configured, a malic… CWE-787
 Out-of-bounds Write 		CVE-2019-9500 2024-11-21 13:51 2020-01-17 Show GitHub Exploit DB Packet Storm
219189 7.8 HIGH
Local 		microsoft windows_10
windows_server_2019 		A vulnerability in Microsoft Windows 10 1803 and Windows Server 2019 and later systems can allow authenticated RDP-connected clients to gain access to user sessions without needing to interact with t… CWE-755
 Improper Handling of Exceptional Conditions 		CVE-2019-9510 2024-11-21 13:51 2020-01-16 Show GitHub Exploit DB Packet Storm
219190 9.8 CRITICAL
Network 		mycarcontrols mycar_controls The MyCar Controls of AutoMobility Distribution Inc., mobile application contains hard-coded admin credentials. A remote unauthenticated attacker may be able to send commands to and retrieve data fro… CWE-798
 Use of Hard-coded Credentials 		CVE-2019-9493 2024-11-21 13:51 2020-01-16 Show GitHub Exploit DB Packet Storm