Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 6, 2026, noon

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
228431	8.3	危険	Wikka Development Team	-	WikkaWiki における任意の設定ファイルをアップロードされる脆弱性	-	CVE-2007-2613	2012-12-20 18:19	2007-05-11	Show	GitHub Exploit DB Packet Storm

228432	7.5	危険	Wikka Development Team	-	WikkaWiki の libs/Wakka.class.php における SQL インジェクションの脆弱性	-	CVE-2007-2612	2012-12-20 18:19	2007-05-11	Show	GitHub Exploit DB Packet Storm

228433	6.8	警告	wavelink media	-	TutorialCMS におけるクロスサイトスクリプティングの脆弱性	-	CVE-2007-2600	2012-12-20 18:19	2007-05-11	Show	GitHub Exploit DB Packet Storm

228434	7.5	危険	wavelink media	-	TutorialCMS における SQL インジェクションの脆弱性	-	CVE-2007-2599	2012-12-20 18:19	2007-05-11	Show	GitHub Exploit DB Packet Storm

228435	10	危険	Simplenews Project	-	SimpleNews の print.php における SQL インジェクションの脆弱性	-	CVE-2007-2598	2012-12-20 18:19	2007-05-11	Show	GitHub Exploit DB Packet Storm

228436	7.5	危険	telltargetcms	-	telltarget CMS における PHP リモートファイルインクルージョンの脆弱性	-	CVE-2007-2597	2012-12-20 18:19	2007-05-11	Show	GitHub Exploit DB Packet Storm

228437	6.5	警告	rscript	-	RSAuction におけるユーザ自身のアカウントステータスを Suspended から Active に変更される脆弱性	-	CVE-2007-2595	2012-12-20 18:19	2007-05-11	Show	GitHub Exploit DB Packet Storm

228438	7.5	危険	phpmyportal	-	phpMyPortal の inc/articles.inc.php における PHP リモートファイルインクルージョンの脆弱性	-	CVE-2007-2594	2012-12-20 18:19	2007-05-11	Show	GitHub Exploit DB Packet Storm

228439	7.5	危険	vm watermark	-	Gallery 用の vm watermark における PHP リモートファイルインクルージョンの脆弱性	CWE-94 コード・インジェクション	CVE-2007-2575	2012-12-20 18:19	2007-05-9	Show	GitHub Exploit DB Packet Storm

228440	7.5	危険	phptree	-	PHPtree の plugin/HP_DEV/cms2.php における PHP リモートファイルインクルージョンの脆弱性	-	CVE-2007-2573	2012-12-20 18:19	2007-05-9	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 6, 2026, 4:08 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
222421	5.5	MEDIUM Local	linux canonical debian opensuse netapp	linux_kernel ubuntu_linux debian_linux leap data_availability_services solidfire hci_management_node active_iq_unified_manager solidfire_baseboard_management_controller_firmwa…	check_input_term in sound/usb/mixer.c in the Linux kernel through 5.2.9 mishandles recursion, leading to kernel stack exhaustion.	CWE-674 Uncontrolled Recursion	CVE-2019-15118	2024-11-21 13:28	2019-08-16	Show	GitHub Exploit DB Packet Storm

222422	7.8	HIGH Local	linux	linux_kernel	parse_audio_mixer_unit in sound/usb/mixer.c in the Linux kernel through 5.2.9 mishandles a short descriptor, leading to out-of-bounds memory access.	CWE-119 Incorrect Access of Indexable Resource ('Range Error')	CVE-2019-15117	2024-11-21 13:28	2019-08-16	Show	GitHub Exploit DB Packet Storm

222423	9.8	CRITICAL Network	artica	integria_ims	filemgr.php in Artica Integria IMS 5.0.86 allows index.php?sec=wiki&sec2=operation/wiki/wiki&action=upload arbitrary file upload.	CWE-434 Unrestricted Upload of File with Dangerous Type	CVE-2019-15091	2024-11-21 13:28	2019-08-16	Show	GitHub Exploit DB Packet Storm

222424	4.8	MEDIUM Network	wso2	api_manager	An issue was discovered in WSO2 API Manager 2.6.0 before WSO2-CARBON-PATCH-4.4.0-4457. There is XSS via a crafted filename to the file-upload feature of the event simulator component.	CWE-79 Cross-site Scripting	CVE-2019-15108	2024-11-21 13:28	2019-08-16	Show	GitHub Exploit DB Packet Storm

222425	9.8	CRITICAL Network	webmin	webmin	An issue was discovered in Webmin <=1.920. The parameter old in password_change.cgi contains a command injection vulnerability.	CWE-78 OS Command	CVE-2019-15107	2024-11-21 13:28	2019-08-16	Show	GitHub Exploit DB Packet Storm

222426	9.8	CRITICAL Network	zohocorp	manageengine_opmanager	An issue was discovered in Zoho ManageEngine OpManager in builds before 14310. One can bypass the user password requirement and execute commands on the server. The "username+'@opm' string is used for…	CWE-306 Missing Authentication for Critical Function	CVE-2019-15106	2024-11-21 13:28	2019-08-16	Show	GitHub Exploit DB Packet Storm

222427	8.8	HIGH Network	zohocorp	manageengine_applications_manager	An issue was discovered in Zoho ManageEngine Application Manager through 14.2. There is a SQL Injection vulnerability in jsp/NewThresholdConfiguration.jsp via the resourceid parameter. Therefore, a l…	CWE-89 SQL Injection	CVE-2019-15105	2024-11-21 13:28	2019-08-16	Show	GitHub Exploit DB Packet Storm

222428	8.8	HIGH Network	zohocorp	manageengine_applications_manager	An issue was discovered in Zoho ManageEngine OpManager through 12.4x. There is a SQL Injection vulnerability in jsp/NewThresholdConfiguration.jsp via the resourceid parameter. Therefore, a low-author…	CWE-89 SQL Injection	CVE-2019-15104	2024-11-21 13:28	2019-08-16	Show	GitHub Exploit DB Packet Storm

222429	7.5	HIGH Network	linux canonical	linux_kernel ubuntu_linux	drivers/net/wireless/ath/ath10k/usb.c in the Linux kernel through 5.2.8 has a NULL pointer dereference via an incomplete address in an endpoint descriptor.	CWE-476 NULL Pointer Dereference	CVE-2019-15099	2024-11-21 13:28	2019-08-16	Show	GitHub Exploit DB Packet Storm

222430	4.6	MEDIUM Physics	linux canonical opensuse netapp debian	linux_kernel ubuntu_linux leap element_software active_iq_performance_analytics_services active_iq_unified_manager data_availability_services debian_linux	drivers/net/wireless/ath/ath6kl/usb.c in the Linux kernel through 5.2.9 has a NULL pointer dereference via an incomplete address in an endpoint descriptor.	CWE-476 NULL Pointer Dereference	CVE-2019-15098	2024-11-21 13:28	2019-08-16	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed