Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 27, 2026, 2 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
250291 7.5 危険 edocstore - eDocStore の essentials/minutes/doc.php における SQL インジェクションの脆弱性 - CVE-2007-3452 2012-06-26 15:46 2007-06-26 Show GitHub Exploit DB Packet Storm
250292 6.5 警告 gorani network - 6ALBlog の admin/index.php における PHP リモートファイルインクルージョンの脆弱性 - CVE-2007-3451 2012-06-26 15:46 2007-06-26 Show GitHub Exploit DB Packet Storm
250293 6.8 警告 gorani network - 6ALBlog の member.php における SQL インジェクションの脆弱性 - CVE-2007-3450 2012-06-26 15:46 2007-06-26 Show GitHub Exploit DB Packet Storm
250294 6.8 警告 gorani network - 6ALBlog の member.php における SQL インジェクションの脆弱性 - CVE-2007-3449 2012-06-26 15:46 2007-06-26 Show GitHub Exploit DB Packet Storm
250295 4.3 警告 bugmall - BugMall Shopping Cart の index.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2007-3448 2012-06-26 15:46 2007-06-26 Show GitHub Exploit DB Packet Storm
250296 6.8 警告 bugmall - BugMall Shopping Cart における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2007-3447 2012-06-26 15:46 2007-06-26 Show GitHub Exploit DB Packet Storm
250297 7.5 危険 bugmall - BugMall Shopping Cart におけるログインアクセス権を取得される脆弱性 - CVE-2007-3446 2012-06-26 15:46 2007-06-26 Show GitHub Exploit DB Packet Storm
250298 5 警告 aastra telecom - Aastra 9112i SIP Phone におけるサービス運用妨害 (DoS) の脆弱性 - CVE-2007-3441 2012-06-26 15:46 2007-06-26 Show GitHub Exploit DB Packet Storm
250299 7.8 危険 マイクロソフト
AOL		 - AIM におけるサービス運用妨害 (DoS) の脆弱性 - CVE-2007-3437 2012-06-26 15:46 2007-06-26 Show GitHub Exploit DB Packet Storm
250300 6.8 警告 e107.org - e107 の signup.php における PHP リモートファイルインクルージョンの脆弱性 - CVE-2007-3429 2012-06-26 15:46 2007-06-26 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 27, 2026, 4:35 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
247251 6.1 MEDIUM
Network 		mycolorway simditor Simditor through 2.3.21 allows DOM XSS via an onload attribute within a malformed SVG element. CWE-79
Cross-site Scripting 		CVE-2018-19048 2024-11-21 12:57 2019-05-13 Show GitHub Exploit DB Packet Storm
247252 7.5 HIGH
Network 		virginmedia hub_3.0_firmware On Virgin Media wireless router 3.0 hub devices, the web interface is vulnerable to denial of service. When POST requests are sent and keep the connection open, the router lags and becomes unusable t… CWE-400
 Uncontrolled Resource Consumption 		CVE-2018-19037 2024-11-21 12:57 2019-05-13 Show GitHub Exploit DB Packet Storm
247253 7.5 HIGH
Network 		wplaunchpad
opensuse 		wpbackupplus
leap 		The WP Backup+ (aka WPbackupplus) plugin through 2018-11-22 for WordPress allows remote attackers to obtain sensitive information from server folders and files, as demonstrated by download.sql. CWE-200
Information Exposure 		CVE-2018-19456 2024-11-21 12:57 2019-05-8 Show GitHub Exploit DB Packet Storm
247254 7.0 HIGH
Local 		zohocorp manageengine_admanager_plus Zoho ManageEngine ADManager Plus 6.6 Build 6657 allows local users to gain privileges (after a reboot) by placing a Trojan horse file into the permissive bin directory. CWE-732
 Incorrect Permission Assignment for Critical Resource 		CVE-2018-19374 2024-11-21 12:57 2019-05-1 Show GitHub Exploit DB Packet Storm
247255 8.8 HIGH
Network 		gitlab gitlab GitLab Community and Enterprise Edition 8.9 and later and before 11.5.0-rc12, 11.4.6, and 11.3.10 has Incorrect Access Control. NVD-CWE-noinfo
CVE-2018-19359 2024-11-21 12:57 2019-04-26 Show GitHub Exploit DB Packet Storm
247256 9.8 CRITICAL
Network 		neatorobotics botvac_connected_firmware A Buffer Overflow in Network::AuthenticationClient::VerifySignature in /bin/astro in Neato Botvac Connected 2.2.0 allows a remote attacker to execute arbitrary code with root privileges via a crafted… CWE-119
Incorrect Access of Indexable Resource ('Range Error')  		CVE-2018-19442 2024-11-21 12:57 2019-04-26 Show GitHub Exploit DB Packet Storm
247257 6.1 MEDIUM
Network 		mybb mybb A reflected XSS vulnerability in index.php in MyBB 1.8.x through 1.8.19 allows remote attackers to inject JavaScript via the 'upsetting[bburl]' parameter. CWE-79
Cross-site Scripting 		CVE-2018-19202 2024-11-21 12:57 2019-04-12 Show GitHub Exploit DB Packet Storm
247258 9.8 CRITICAL
Network 		d-link
dlink 		dap-1530_firmware
dap-1610_firmware
dwr-111_firmware
dwr-116_firmware
dwr-512_firmware
dwr-711_firmware
dwr-712_firmware
dwr-921_firmware 		On D-Link DAP-1530 (A1) before firmware version 1.06b01, DAP-1610 (A1) before firmware version 1.06b01, DWR-111 (A1) before firmware version 1.02v02, DWR-116 (A1) before firmware version 1.06b03, DWR… CWE-20
 Improper Input Validation  		CVE-2018-19300 2024-11-21 12:57 2019-04-12 Show GitHub Exploit DB Packet Storm
247259 8.8 HIGH
Network 		kentico kentico_cms Kentico CMS before 11.0.45 allows unrestricted upload of a file with a dangerous type. CWE-434
 Unrestricted Upload of File with Dangerous Type  		CVE-2018-19453 2024-11-21 12:57 2019-04-11 Show GitHub Exploit DB Packet Storm
247260 4.8 MEDIUM
Network 		osisoft pi_vision OSIsoft PI Vision, versions PI Vision 2017, and PI Vision 2017 R2, The application contains a cross-site scripting vulnerability where displays that reference AF elements and attributes containing Ja… CWE-79
Cross-site Scripting 		CVE-2018-19006 2024-11-21 12:57 2019-04-9 Show GitHub Exploit DB Packet Storm