Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 6, 2026, 4 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
228461	7.8	危険	picozip	-	PicoZip におけるサービス運用妨害 (DoS) の脆弱性	-	CVE-2007-2536	2012-12-20 18:19	2007-05-8	Show	GitHub Exploit DB Packet Storm

228462	7.8	危険	e-merge GmbH	-	WinAce におけるサービス運用妨害 (DoS) の脆弱性	-	CVE-2007-2535	2012-12-20 18:19	2007-05-8	Show	GitHub Exploit DB Packet Storm

228463	10	危険	トレンドマイクロ	-	Trend Micro ServerProtect におけるバッファオーバーフローの脆弱性	-	CVE-2007-2533	2012-12-20 18:19	2007-04-3	Show	GitHub Exploit DB Packet Storm

228464	7.5	危険	tropicalm	-	Tropicalm Crowell Resource における PHP リモートファイルインクルージョンの脆弱性	-	CVE-2007-2530	2012-12-20 18:19	2007-05-8	Show	GitHub Exploit DB Packet Storm

228465	10	危険	トレンドマイクロ	-	Windows 用の Trend Micro ServerProtect におけるバッファオーバーフローの脆弱性	-	CVE-2007-2528	2012-12-20 18:19	2007-04-13	Show	GitHub Exploit DB Packet Storm

228466	9.3	危険	smartcode	-	SmartCode VNC Manager の VNC Viewer ActiveX コントロールにおけるヒープベースのバッファオーバーフローの脆弱性	-	CVE-2007-2526	2012-12-20 18:19	2007-05-8	Show	GitHub Exploit DB Packet Storm

228467	10	危険	トレンドマイクロ	-	Trend Micro ServerProtect におけるスタックベースのバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2007-2508	2012-12-20 18:19	2007-04-3	Show	GitHub Exploit DB Packet Storm

228468	7.8	危険	treble designs	-	Treble Designs 1024 CMS の includes/download.php におけるディレクトリトラバーサルの脆弱性	-	CVE-2007-2507	2012-12-20 18:19	2007-05-3	Show	GitHub Exploit DB Packet Storm

228469	7.8	危険	Progress Software Corporation	-	Progress Software Progress の OpenEdge におけるサービス運用妨害 (DoS) の脆弱性	-	CVE-2007-2506	2012-12-20 18:19	2007-05-3	Show	GitHub Exploit DB Packet Storm

228470	7.8	危険	リアルネットワークス	-	RealNetworks RealPlayer におけるサービス運用妨害 (DoS) の脆弱性	-	CVE-2007-2497	2012-12-20 18:19	2007-05-3	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 6, 2026, 4:08 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
222421	5.5	MEDIUM Local	linux canonical debian opensuse netapp	linux_kernel ubuntu_linux debian_linux leap data_availability_services solidfire hci_management_node active_iq_unified_manager solidfire_baseboard_management_controller_firmwa…	check_input_term in sound/usb/mixer.c in the Linux kernel through 5.2.9 mishandles recursion, leading to kernel stack exhaustion.	CWE-674 Uncontrolled Recursion	CVE-2019-15118	2024-11-21 13:28	2019-08-16	Show	GitHub Exploit DB Packet Storm

222422	7.8	HIGH Local	linux	linux_kernel	parse_audio_mixer_unit in sound/usb/mixer.c in the Linux kernel through 5.2.9 mishandles a short descriptor, leading to out-of-bounds memory access.	CWE-119 Incorrect Access of Indexable Resource ('Range Error')	CVE-2019-15117	2024-11-21 13:28	2019-08-16	Show	GitHub Exploit DB Packet Storm

222423	9.8	CRITICAL Network	artica	integria_ims	filemgr.php in Artica Integria IMS 5.0.86 allows index.php?sec=wiki&sec2=operation/wiki/wiki&action=upload arbitrary file upload.	CWE-434 Unrestricted Upload of File with Dangerous Type	CVE-2019-15091	2024-11-21 13:28	2019-08-16	Show	GitHub Exploit DB Packet Storm

222424	4.8	MEDIUM Network	wso2	api_manager	An issue was discovered in WSO2 API Manager 2.6.0 before WSO2-CARBON-PATCH-4.4.0-4457. There is XSS via a crafted filename to the file-upload feature of the event simulator component.	CWE-79 Cross-site Scripting	CVE-2019-15108	2024-11-21 13:28	2019-08-16	Show	GitHub Exploit DB Packet Storm

222425	9.8	CRITICAL Network	webmin	webmin	An issue was discovered in Webmin <=1.920. The parameter old in password_change.cgi contains a command injection vulnerability.	CWE-78 OS Command	CVE-2019-15107	2024-11-21 13:28	2019-08-16	Show	GitHub Exploit DB Packet Storm

222426	9.8	CRITICAL Network	zohocorp	manageengine_opmanager	An issue was discovered in Zoho ManageEngine OpManager in builds before 14310. One can bypass the user password requirement and execute commands on the server. The "username+'@opm' string is used for…	CWE-306 Missing Authentication for Critical Function	CVE-2019-15106	2024-11-21 13:28	2019-08-16	Show	GitHub Exploit DB Packet Storm

222427	8.8	HIGH Network	zohocorp	manageengine_applications_manager	An issue was discovered in Zoho ManageEngine Application Manager through 14.2. There is a SQL Injection vulnerability in jsp/NewThresholdConfiguration.jsp via the resourceid parameter. Therefore, a l…	CWE-89 SQL Injection	CVE-2019-15105	2024-11-21 13:28	2019-08-16	Show	GitHub Exploit DB Packet Storm

222428	8.8	HIGH Network	zohocorp	manageengine_applications_manager	An issue was discovered in Zoho ManageEngine OpManager through 12.4x. There is a SQL Injection vulnerability in jsp/NewThresholdConfiguration.jsp via the resourceid parameter. Therefore, a low-author…	CWE-89 SQL Injection	CVE-2019-15104	2024-11-21 13:28	2019-08-16	Show	GitHub Exploit DB Packet Storm

222429	7.5	HIGH Network	linux canonical	linux_kernel ubuntu_linux	drivers/net/wireless/ath/ath10k/usb.c in the Linux kernel through 5.2.8 has a NULL pointer dereference via an incomplete address in an endpoint descriptor.	CWE-476 NULL Pointer Dereference	CVE-2019-15099	2024-11-21 13:28	2019-08-16	Show	GitHub Exploit DB Packet Storm

222430	4.6	MEDIUM Physics	linux canonical opensuse netapp debian	linux_kernel ubuntu_linux leap element_software active_iq_performance_analytics_services active_iq_unified_manager data_availability_services debian_linux	drivers/net/wireless/ath/ath6kl/usb.c in the Linux kernel through 5.2.9 has a NULL pointer dereference via an incomplete address in an endpoint descriptor.	CWE-476 NULL Pointer Dereference	CVE-2019-15098	2024-11-21 13:28	2019-08-16	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed