Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 8, 2026, 4 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
228431 7.5 危険 scribe - Ben Ng Scribe の forum.php におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2007-5823 2012-12-20 18:33 2007-11-5 Show GitHub Exploit DB Packet Storm
228432 7.5 危険 scribe - Ben Ng Scribe の forum.php における regged/ 配下の特定のファイルへ任意の PHP コードを挿入される脆弱性 CWE-94
コード・インジェクション 		CVE-2007-5822 2012-12-20 18:33 2007-11-5 Show GitHub Exploit DB Packet Storm
228433 7.6 危険 sblog - sBlog の blocks_edit_do.php におけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反 		CVE-2007-5818 2012-12-20 18:33 2007-11-5 Show GitHub Exploit DB Packet Storm
228434 10 危険 SonicWALL - SonicWall SSL-VPN 200 および SSL-VPN 2000/4000 の WebCacheCleaner ActiveX コントロールにおける絶対パストラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2007-5815 2012-12-20 18:33 2007-11-5 Show GitHub Exploit DB Packet Storm
228435 9.3 危険 SonicWALL - SonicWall SSL-VPN NetExtender NELaunchCtrl ActiveX コントロールにおけるバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2007-5814 2012-12-20 18:33 2007-11-5 Show GitHub Exploit DB Packet Storm
228436 6.8 警告 ssreader - SSReader の Ultra Star Reader ActiveX コントロールにおけるバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2007-5807 2012-12-20 18:33 2007-11-5 Show GitHub Exploit DB Packet Storm
228437 7.5 危険 work system e-commerce - WORK system e-commerce における脆弱性 CWE-noinfo
情報不足 		CVE-2007-5801 2012-12-20 18:33 2007-11-2 Show GitHub Exploit DB Packet Storm
228438 6.8 警告 tom willmot - WordPress 用の BackUpWordPress プラグインにおける PHP リモートファイルインクルージョンの脆弱性 CWE-94
コード・インジェクション 		CVE-2007-5800 2012-12-20 18:33 2007-11-2 Show GitHub Exploit DB Packet Storm
228439 7.1 危険 stonesoft - Stonesoft StoneGate IPS におけるシステムへ侵入される脆弱性 CWE-DesignError
CVE-2007-5793 2012-12-20 18:33 2007-11-1 Show GitHub Exploit DB Packet Storm
228440 7.1 危険 Vonage - Vonage Motorola Phone Adapter VT 2142-VD における盗聴される脆弱性 CWE-310
暗号の問題 		CVE-2007-5792 2012-12-20 18:33 2007-11-1 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 8, 2026, 4:54 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
222201 5.4 MEDIUM
Network 		wordpress
debian 		wordpress
debian_linux 		WordPress before 5.2.3 allows XSS in post previews by authenticated users. CWE-79
Cross-site Scripting 		CVE-2019-16223 2024-11-21 13:30 2019-09-11 Show GitHub Exploit DB Packet Storm
222202 6.1 MEDIUM
Network 		wordpress
debian 		wordpress
debian_linux 		WordPress before 5.2.3 has an issue with URL sanitization in wp_kses_bad_protocol_once in wp-includes/kses.php that can lead to cross-site scripting (XSS) attacks. CWE-79
Cross-site Scripting 		CVE-2019-16222 2024-11-21 13:30 2019-09-11 Show GitHub Exploit DB Packet Storm
222203 6.1 MEDIUM
Network 		wordpress
debian 		wordpress
debian_linux 		WordPress before 5.2.3 allows reflected XSS in the dashboard. CWE-79
Cross-site Scripting 		CVE-2019-16221 2024-11-21 13:30 2019-09-11 Show GitHub Exploit DB Packet Storm
222204 6.1 MEDIUM
Network 		wordpress
debian 		wordpress
debian_linux 		In WordPress before 5.2.3, validation and sanitization of a URL in wp_validate_redirect in wp-includes/pluggable.php could lead to an open redirect if a provided URL path does not start with a forwar… CWE-601
Open Redirect 		CVE-2019-16220 2024-11-21 13:30 2019-09-11 Show GitHub Exploit DB Packet Storm
222205 6.1 MEDIUM
Network 		wordpress
debian 		wordpress
debian_linux 		WordPress before 5.2.3 allows XSS in shortcode previews. CWE-79
Cross-site Scripting 		CVE-2019-16219 2024-11-21 13:30 2019-09-11 Show GitHub Exploit DB Packet Storm
222206 6.1 MEDIUM
Network 		wordpress
debian 		wordpress
debian_linux 		WordPress before 5.2.3 allows XSS in stored comments. CWE-79
Cross-site Scripting 		CVE-2019-16218 2024-11-21 13:30 2019-09-11 Show GitHub Exploit DB Packet Storm
222207 6.1 MEDIUM
Network 		wordpress
debian 		wordpress
debian_linux 		WordPress before 5.2.3 allows XSS in media uploads because wp_ajax_upload_attachment is mishandled. CWE-79
Cross-site Scripting 		CVE-2019-16217 2024-11-21 13:30 2019-09-11 Show GitHub Exploit DB Packet Storm
222208 5.4 MEDIUM
Network 		esri arcgis_enterprise In ArcGIS Enterprise 10.6.1, a crafted IFRAME element can be used to trigger a Cross Frame Scripting (XFS) attack through the EDIT MY PROFILE feature. CWE-79
Cross-site Scripting 		CVE-2019-16193 2024-11-21 13:30 2019-09-11 Show GitHub Exploit DB Packet Storm
222209 5.7 MEDIUM
Network 		libra libra_core Libra Core before 2019-09-03 has an erroneous regular expression for inline comments, which makes it easier for attackers to interfere with code auditing by using a nonstandard line-break character f… NVD-CWE-noinfo
CVE-2019-16214 2024-11-21 13:30 2019-09-11 Show GitHub Exploit DB Packet Storm
222210 7.5 HIGH
Network 		humanica humatrix The Recruitment module in Humanica Humatrix 7 1.0.0.203 and 1.0.0.681 allows an unauthenticated attacker to change the password of any user via the recruitment_online/personalData/act_acounttab.cfm t… CWE-276
Incorrect Default Permissions  		CVE-2019-16106 2024-11-21 13:30 2019-09-11 Show GitHub Exploit DB Packet Storm