Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 6, 2026, noon

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
228241	7.5	危険	powl	-	Powl の plugins/widgets/htmledit/htmledit.php における PHP リモートファイルインクルージョンの脆弱性	-	CVE-2007-3371	2012-12-20 18:19	2007-06-22	Show	GitHub Exploit DB Packet Storm

228242	7.8	危険	Polycom	-	Polycom SoundPoint IP 601 SIP phone with BootROM におけるバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2007-3369	2012-12-20 18:19	2007-06-22	Show	GitHub Exploit DB Packet Storm

228243	7.8	危険	Polycom	-	Polycom SoundPoint 上で稼動する IP 601 SIP phone with BootROM の HTTP サーバにおけるバッファオーバーフローの脆弱性	-	CVE-2007-3368	2012-12-20 18:19	2007-06-22	Show	GitHub Exploit DB Packet Storm

228244	10	危険	scriptdevelopers.net	-	NetClassifieds Premium Edition における情報を取得される脆弱性	-	CVE-2007-3357	2012-12-20 18:19	2007-06-22	Show	GitHub Exploit DB Packet Storm

228245	7.8	危険	scriptdevelopers.net	-	NetClassifieds Premium Edition における重要な情報を取得される脆弱性	-	CVE-2007-3356	2012-12-20 18:19	2007-06-22	Show	GitHub Exploit DB Packet Storm

228246	4.3	警告	scriptdevelopers.net	-	NetClassifieds Premium Edition におけるクロスサイトスクリプティングの脆弱性	-	CVE-2007-3355	2012-12-20 18:19	2007-06-22	Show	GitHub Exploit DB Packet Storm

228247	7.5	危険	scriptdevelopers.net	-	NetClassifieds Premium Edition における SQL インジェクションの脆弱性	-	CVE-2007-3354	2012-12-20 18:19	2007-06-22	Show	GitHub Exploit DB Packet Storm

228248	4.3	警告	stephen ostermiller	-	Stephen Ostermiller Contact Form のプレビューフォームにおけるクロスサイトスクリプティングの脆弱性	-	CVE-2007-3352	2012-12-20 18:19	2007-06-22	Show	GitHub Exploit DB Packet Storm

228249	7.8	危険	sj labs	-	SJPhone SIP ソフトフォンにおけるサービス運用妨害 (DoS) の脆弱性	-	CVE-2007-3351	2012-12-20 18:19	2007-06-22	Show	GitHub Exploit DB Packet Storm

228250	4.3	警告	シックス・アパート株式会社	-	MT におけるクロスサイトスクリプティングの脆弱性	-	CVE-2007-3342	2012-12-20 18:19	2007-06-21	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 6, 2026, 4:08 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
222421	5.5	MEDIUM Local	linux canonical debian opensuse netapp	linux_kernel ubuntu_linux debian_linux leap data_availability_services solidfire hci_management_node active_iq_unified_manager solidfire_baseboard_management_controller_firmwa…	check_input_term in sound/usb/mixer.c in the Linux kernel through 5.2.9 mishandles recursion, leading to kernel stack exhaustion.	CWE-674 Uncontrolled Recursion	CVE-2019-15118	2024-11-21 13:28	2019-08-16	Show	GitHub Exploit DB Packet Storm

222422	7.8	HIGH Local	linux	linux_kernel	parse_audio_mixer_unit in sound/usb/mixer.c in the Linux kernel through 5.2.9 mishandles a short descriptor, leading to out-of-bounds memory access.	CWE-119 Incorrect Access of Indexable Resource ('Range Error')	CVE-2019-15117	2024-11-21 13:28	2019-08-16	Show	GitHub Exploit DB Packet Storm

222423	9.8	CRITICAL Network	artica	integria_ims	filemgr.php in Artica Integria IMS 5.0.86 allows index.php?sec=wiki&sec2=operation/wiki/wiki&action=upload arbitrary file upload.	CWE-434 Unrestricted Upload of File with Dangerous Type	CVE-2019-15091	2024-11-21 13:28	2019-08-16	Show	GitHub Exploit DB Packet Storm

222424	4.8	MEDIUM Network	wso2	api_manager	An issue was discovered in WSO2 API Manager 2.6.0 before WSO2-CARBON-PATCH-4.4.0-4457. There is XSS via a crafted filename to the file-upload feature of the event simulator component.	CWE-79 Cross-site Scripting	CVE-2019-15108	2024-11-21 13:28	2019-08-16	Show	GitHub Exploit DB Packet Storm

222425	9.8	CRITICAL Network	webmin	webmin	An issue was discovered in Webmin <=1.920. The parameter old in password_change.cgi contains a command injection vulnerability.	CWE-78 OS Command	CVE-2019-15107	2024-11-21 13:28	2019-08-16	Show	GitHub Exploit DB Packet Storm

222426	9.8	CRITICAL Network	zohocorp	manageengine_opmanager	An issue was discovered in Zoho ManageEngine OpManager in builds before 14310. One can bypass the user password requirement and execute commands on the server. The "username+'@opm' string is used for…	CWE-306 Missing Authentication for Critical Function	CVE-2019-15106	2024-11-21 13:28	2019-08-16	Show	GitHub Exploit DB Packet Storm

222427	8.8	HIGH Network	zohocorp	manageengine_applications_manager	An issue was discovered in Zoho ManageEngine Application Manager through 14.2. There is a SQL Injection vulnerability in jsp/NewThresholdConfiguration.jsp via the resourceid parameter. Therefore, a l…	CWE-89 SQL Injection	CVE-2019-15105	2024-11-21 13:28	2019-08-16	Show	GitHub Exploit DB Packet Storm

222428	8.8	HIGH Network	zohocorp	manageengine_applications_manager	An issue was discovered in Zoho ManageEngine OpManager through 12.4x. There is a SQL Injection vulnerability in jsp/NewThresholdConfiguration.jsp via the resourceid parameter. Therefore, a low-author…	CWE-89 SQL Injection	CVE-2019-15104	2024-11-21 13:28	2019-08-16	Show	GitHub Exploit DB Packet Storm

222429	7.5	HIGH Network	linux canonical	linux_kernel ubuntu_linux	drivers/net/wireless/ath/ath10k/usb.c in the Linux kernel through 5.2.8 has a NULL pointer dereference via an incomplete address in an endpoint descriptor.	CWE-476 NULL Pointer Dereference	CVE-2019-15099	2024-11-21 13:28	2019-08-16	Show	GitHub Exploit DB Packet Storm

222430	4.6	MEDIUM Physics	linux canonical opensuse netapp debian	linux_kernel ubuntu_linux leap element_software active_iq_performance_analytics_services active_iq_unified_manager data_availability_services debian_linux	drivers/net/wireless/ath/ath6kl/usb.c in the Linux kernel through 5.2.9 has a NULL pointer dereference via an incomplete address in an endpoint descriptor.	CWE-476 NULL Pointer Dereference	CVE-2019-15098	2024-11-21 13:28	2019-08-16	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed