Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 5, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
228591 7.5 危険 really simple php and ajax - RSPA における PHP リモートファイルインクルージョンの脆弱性 - CVE-2007-1982 2012-12-20 18:19 2007-04-11 Show GitHub Exploit DB Packet Storm
228592 7.5 危険 有限会社ブルームーン - XOOPS 用の PopnupBlog モジュールにおける SQL インジェクションの脆弱性 - CVE-2007-1979 2012-12-20 18:19 2007-04-11 Show GitHub Exploit DB Packet Storm
228593 7.5 危険 slaed - SLAED CMS における PHP リモートファイルインクルージョンの脆弱性 - CVE-2007-1975 2012-12-20 18:19 2007-04-11 Show GitHub Exploit DB Packet Storm
228594 7.5 危険 wf-sections
XOOPS		 - Xoops モジュールで使用される WF-Section における SQL インジェクションの脆弱性 - CVE-2007-1974 2012-12-20 18:19 2007-04-9 Show GitHub Exploit DB Packet Storm
228595 4.3 警告 sam crew - Sam Crew MyBlog の admin/modify.php におけるクロスサイトスクリプティングの脆弱性 - CVE-2007-1969 2012-12-20 18:19 2007-04-11 Show GitHub Exploit DB Packet Storm
228596 6.8 警告 sam crew - Sam Crew MyBlog の games.php における PHP リモートファイルインクルージョンの脆弱性 - CVE-2007-1968 2012-12-20 18:19 2007-04-11 Show GitHub Exploit DB Packet Storm
228597 7.5 危険 XOOPS - XOOPS 用の WF-Snippets モジュールにおける SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2007-1962 2012-12-20 18:19 2007-04-11 Show GitHub Exploit DB Packet Storm
228598 7.5 危険 phpBB - phpBB 用の Mutant ポータルの mutant_functions.php における PHP リモートファイルインクルージョンの脆弱性 - CVE-2007-1961 2012-12-20 18:19 2007-04-11 Show GitHub Exploit DB Packet Storm
228599 7.5 危険 XOOPS - XOOPS 用の Rha7 Downloads モジュールにおける SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2007-1960 2012-12-20 18:19 2007-04-11 Show GitHub Exploit DB Packet Storm
228600 10 危険 tinymux - TinyMUX の command.cpp における脆弱性 - CVE-2007-1959 2012-12-20 18:19 2007-04-11 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 6, 2026, 4:08 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
222621 7.5 HIGH
Network 		jetbrains pycharm JetBrains PyCharm before 2019.2 was allocating a buffer of unknown size for one of the connection processes. In a very specific situation, it could lead to a remote invocation of an OOM error message… CWE-770
 Allocation of Resources Without Limits or Throttling 		CVE-2019-14958 2024-11-21 13:27 2019-10-3 Show GitHub Exploit DB Packet Storm
222622 4.3 MEDIUM
Network 		jetbrains youtrack JetBrains YouTrack before 2019.2.53938 was using incorrect settings, allowing a user without necessary permissions to get other project names. CWE-281
 Improper Preservation of Permissions 		CVE-2019-14956 2024-11-21 13:27 2019-10-3 Show GitHub Exploit DB Packet Storm
222623 6.1 MEDIUM
Network 		jetbrains youtrack JetBrains YouTrack versions before 2019.1.52545 allowed unbounded URL whitelisting because of Inclusion of Functionality from an Untrusted Control Sphere. CWE-601
Open Redirect 		CVE-2019-15041 2024-11-21 13:27 2019-10-2 Show GitHub Exploit DB Packet Storm
222624 4.9 MEDIUM
Network 		jetbrains teamcity An issue was discovered in JetBrains TeamCity 2018.2.4. A TeamCity Project administrator could get access to potentially confidential server-level data. The issue was fixed in TeamCity 2018.2.5 and 2… NVD-CWE-noinfo
CVE-2019-15035 2024-11-21 13:27 2019-10-2 Show GitHub Exploit DB Packet Storm
222625 7.5 HIGH
Network 		jetbrains teamcity An issue was discovered in JetBrains TeamCity 2018.2.4. It had no SSL certificate validation for some external https connections. This was fixed in TeamCity 2019.1. CWE-295
Improper Certificate Validation  		CVE-2019-15042 2024-11-21 13:27 2019-10-2 Show GitHub Exploit DB Packet Storm
222626 6.1 MEDIUM
Network 		jetbrains upsource JetBrains Upsource before 2019.1.1412 was not properly escaping HTML tags in a code block comments, leading to XSS. CWE-79
Cross-site Scripting 		CVE-2019-14961 2024-11-21 13:27 2019-10-2 Show GitHub Exploit DB Packet Storm
222627 7.5 HIGH
Network 		jetbrains teamcity An issue was discovered in JetBrains TeamCity 2018.2.4. The TeamCity server was not using some security-related HTTP headers. The issue was fixed in TeamCity 2019.1. NVD-CWE-noinfo
CVE-2019-15038 2024-11-21 13:27 2019-10-2 Show GitHub Exploit DB Packet Storm
222628 7.8 HIGH
Local 		jetbrains rider JetBrains Rider before 2019.1.2 was using an unsigned JetBrains.Rider.Unity.Editor.Plugin.Repacked.dll file. CWE-426
 Untrusted Search Path 		CVE-2019-14960 2024-11-21 13:27 2019-10-2 Show GitHub Exploit DB Packet Storm
222629 5.3 MEDIUM
Network 		jetbrains vim The JetBrains Vim plugin before version 0.52 was storing individual project data in the global vim_settings.xml file. This xml file could be synchronized to a publicly accessible GitHub repository. CWE-922
 Insecure Storage of Sensitive Information 		CVE-2019-14957 2024-11-21 13:27 2019-10-2 Show GitHub Exploit DB Packet Storm
222630 5.3 MEDIUM
Network 		jetbrains hub In JetBrains Hub versions earlier than 2018.4.11436, there was no option to force a user to change the password and no password expiration policy was implemented. CWE-640
 Weak Password Recovery Mechanism for Forgotten Password 		CVE-2019-14955 2024-11-21 13:27 2019-10-2 Show GitHub Exploit DB Packet Storm