Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 5, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
228781 10 危険 webmobo - Webmobo WB News における PHP リモートファイルインクルージョンの脆弱性 - CVE-2007-1288 2012-12-20 18:19 2007-03-6 Show GitHub Exploit DB Packet Storm
228782 7.5 危険 WordPress.org - WordPress における任意の PHP コードを実行される脆弱性 CWE-20
不適切な入力確認 		CVE-2007-1277 2012-12-20 18:19 2007-03-2 Show GitHub Exploit DB Packet Storm
228783 6.6 警告 VMware - VMware ESX Server におけるバッファオーバーフローの脆弱性 - CVE-2007-1271 2012-12-20 18:19 2007-04-5 Show GitHub Exploit DB Packet Storm
228784 5 警告 VMware - VMware ESX Server におけるメモリ二重解放の脆弱性 CWE-189
数値処理の問題 		CVE-2007-1270 2012-12-20 18:19 2007-04-5 Show GitHub Exploit DB Packet Storm
228785 5 警告 Sylpheed - Sylpheed における検出されずにメッセージ内容を偽造される脆弱性 - CVE-2007-1267 2012-12-20 18:19 2007-03-6 Show GitHub Exploit DB Packet Storm
228786 7.5 危険 webmod - WebMod の server.cpp におけるスタックベースのバッファオーバーフローの脆弱性 - CVE-2007-1260 2012-12-20 18:19 2007-03-3 Show GitHub Exploit DB Packet Storm
228787 7.5 危険 web-app.org - WebAPP における脆弱性 CWE-noinfo
情報不足 		CVE-2007-1259 2012-12-20 18:19 2007-03-3 Show GitHub Exploit DB Packet Storm
228788 9.3 危険 シマンテック - SMTP 用の Symantec Mail Security におけるバッファオーバーフローの脆弱性 - CVE-2007-1252 2012-12-20 18:19 2007-03-3 Show GitHub Exploit DB Packet Storm
228789 6.8 警告 WordPress.org - WordPress の AdminPanel におけるクロスサイトリクエストフォージェリの脆弱性 - CVE-2007-1244 2012-12-20 18:19 2007-03-3 Show GitHub Exploit DB Packet Storm
228790 6.4 警告 sitex - sitex における重要な情報を取得される脆弱性 - CVE-2007-1236 2012-12-20 18:19 2007-03-3 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 6, 2026, 4:08 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
222761 6.1 MEDIUM
Network 		codepeople appointment_booking_calendar The Appointment Booking Calendar plugin 1.3.18 for WordPress allows XSS via the wp-admin/admin-post.php editionarea parameter. CWE-79
Cross-site Scripting 		CVE-2019-14791 2024-11-21 13:27 2019-08-9 Show GitHub Exploit DB Packet Storm
222762 6.1 MEDIUM
Network 		foliovision fv_flowplayer_video_player The FV Flowplayer Video Player plugin before 7.3.14.727 for WordPress allows email subscription XSS. CWE-79
Cross-site Scripting 		CVE-2019-14799 2024-11-21 13:27 2019-08-9 Show GitHub Exploit DB Packet Storm
222763 6.5 MEDIUM
Network 		metabox meta_box The Meta Box plugin before 4.16.3 for WordPress allows file deletion via ajax, with the wp-admin/admin-ajax.php?action=rwmb_delete_file attachment_id parameter. CWE-862
 Missing Authorization 		CVE-2019-14793 2024-11-21 13:27 2019-08-9 Show GitHub Exploit DB Packet Storm
222764 5.4 MEDIUM
Network 		codecabin wp_go_maps The WP Google Maps plugin before 7.11.35 for WordPress allows XSS via the wp-admin/ rectangle_name or rectangle_opacity parameter. CWE-79
Cross-site Scripting 		CVE-2019-14792 2024-11-21 13:27 2019-08-9 Show GitHub Exploit DB Packet Storm
222765 5.4 MEDIUM
Network 		tribulant newsletters The Tribulant Newsletters plugin before 4.6.19 for WordPress allows XSS via the wp-admin/admin-ajax.php?action=newsletters_load_new_editor contentarea parameter. CWE-79
Cross-site Scripting 		CVE-2019-14787 2024-11-21 13:27 2019-08-9 Show GitHub Exploit DB Packet Storm
222766 5.4 MEDIUM
Network 		codepeople cp_contact_form_with_paypal The "CP Contact Form with PayPal" plugin before 1.2.99 for WordPress has XSS in the publishing wizard via the wp-admin/admin.php?page=cp_contact_form_paypal.php&pwizard=1 cp_contactformpp_id paramete… CWE-79
Cross-site Scripting 		CVE-2019-14785 2024-11-21 13:27 2019-08-9 Show GitHub Exploit DB Packet Storm
222767 5.5 MEDIUM
Local 		google android On Samsung mobile devices with N(7.x), and O(8.x), P(9.0) software, FotaAgent allows a malicious application to create privileged files. The Samsung ID is SVE-2019-14764. NVD-CWE-noinfo
CVE-2019-14783 2024-11-21 13:27 2019-08-9 Show GitHub Exploit DB Packet Storm
222768 6.1 MEDIUM
Network 		getwooplugins woo-variation-swatches The woo-variation-swatches (aka Variation Swatches for WooCommerce) plugin 1.0.61 for WordPress allows XSS via the wp-admin/admin.php?page=woo-variation-swatches-settings tab parameter. CWE-79
Cross-site Scripting 		CVE-2019-14774 2024-11-21 13:27 2019-08-9 Show GitHub Exploit DB Packet Storm
222769 7.5 HIGH
Network 		webcraftic woody_ad_snippets admin/includes/class.actions.snippet.php in the "Woody ad snippets" plugin through 2.2.5 for WordPress allows wp-admin/admin-post.php?action=close&post= deletion. NVD-CWE-noinfo
CVE-2019-14773 2024-11-21 13:27 2019-08-9 Show GitHub Exploit DB Packet Storm
222770 5.7 MEDIUM
Network 		codection import_users_from_csv_with_meta The codection "Import users from CSV with meta" plugin before 1.14.2.2 for WordPress allows wp-admin/admin-ajax.php?action=acui_delete_attachment CSRF. CWE-352
 Origin Validation Error 		CVE-2019-14683 2024-11-21 13:27 2019-08-9 Show GitHub Exploit DB Packet Storm