Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 7, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
228851	7.5	危険	phphtmllib	-	phpHtmlLib の examples/widget8.php における PHP リモートファイルインクルージョンの脆弱性	-	CVE-2007-2614	2012-12-20 18:19	2007-05-11	Show	GitHub Exploit DB Packet Storm

228852	8.3	危険	Wikka Development Team	-	WikkaWiki における任意の設定ファイルをアップロードされる脆弱性	-	CVE-2007-2613	2012-12-20 18:19	2007-05-11	Show	GitHub Exploit DB Packet Storm

228853	7.5	危険	Wikka Development Team	-	WikkaWiki の libs/Wakka.class.php における SQL インジェクションの脆弱性	-	CVE-2007-2612	2012-12-20 18:19	2007-05-11	Show	GitHub Exploit DB Packet Storm

228854	6.8	警告	wavelink media	-	TutorialCMS におけるクロスサイトスクリプティングの脆弱性	-	CVE-2007-2600	2012-12-20 18:19	2007-05-11	Show	GitHub Exploit DB Packet Storm

228855	7.5	危険	wavelink media	-	TutorialCMS における SQL インジェクションの脆弱性	-	CVE-2007-2599	2012-12-20 18:19	2007-05-11	Show	GitHub Exploit DB Packet Storm

228856	10	危険	Simplenews Project	-	SimpleNews の print.php における SQL インジェクションの脆弱性	-	CVE-2007-2598	2012-12-20 18:19	2007-05-11	Show	GitHub Exploit DB Packet Storm

228857	7.5	危険	telltargetcms	-	telltarget CMS における PHP リモートファイルインクルージョンの脆弱性	-	CVE-2007-2597	2012-12-20 18:19	2007-05-11	Show	GitHub Exploit DB Packet Storm

228858	6.5	警告	rscript	-	RSAuction におけるユーザ自身のアカウントステータスを Suspended から Active に変更される脆弱性	-	CVE-2007-2595	2012-12-20 18:19	2007-05-11	Show	GitHub Exploit DB Packet Storm

228859	7.5	危険	phpmyportal	-	phpMyPortal の inc/articles.inc.php における PHP リモートファイルインクルージョンの脆弱性	-	CVE-2007-2594	2012-12-20 18:19	2007-05-11	Show	GitHub Exploit DB Packet Storm

228860	7.5	危険	vm watermark	-	Gallery 用の vm watermark における PHP リモートファイルインクルージョンの脆弱性	CWE-94 コード・インジェクション	CVE-2007-2575	2012-12-20 18:19	2007-05-9	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 7, 2026, 4:22 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
222601	5.3	MEDIUM Network	tcpdump	libpcap	rpcapd/daemon.c in libpcap before 1.9.1 allows SSRF because a URL may be provided as a capture source.	CWE-918 Server-Side Request Forgery (SSRF)	CVE-2019-15164	2024-11-21 13:28	2019-10-4	Show	GitHub Exploit DB Packet Storm

222602	7.5	HIGH Network	tcpdump	libpcap	rpcapd/daemon.c in libpcap before 1.9.1 allows attackers to cause a denial of service (NULL pointer dereference and daemon crash) if a crypt() call fails.	CWE-476 NULL Pointer Dereference	CVE-2019-15163	2024-11-21 13:28	2019-10-4	Show	GitHub Exploit DB Packet Storm

222603	5.3	MEDIUM Network	tcpdump	libpcap	rpcapd/daemon.c in libpcap before 1.9.1 on non-Windows platforms provides details about why authentication failed, which might make it easier for attackers to enumerate valid usernames.	CWE-345 Insufficient Verification of Data Authenticity	CVE-2019-15162	2024-11-21 13:28	2019-10-4	Show	GitHub Exploit DB Packet Storm

222604	5.3	MEDIUM Network	tcpdump	libpcap	rpcapd/daemon.c in libpcap before 1.9.1 mishandles certain length values because of reuse of a variable. This may open up an attack vector involving extra data at the end of a request.	CWE-131 Incorrect Calculation of Buffer Size	CVE-2019-15161	2024-11-21 13:28	2019-10-4	Show	GitHub Exploit DB Packet Storm

222605	7.5	HIGH Network	tcpdump apple debian fedoraproject opensuse redhat netapp canonical	tcpdump mac_os_x debian_linux fedora leap enterprise_linux cloud_backup solidfire hci_management_node ubuntu_linux	lmp_print_data_link_subobjs() in print-lmp.c in tcpdump before 4.9.3 lacks certain bounds checks.	CWE-120 Classic Buffer Overflow	CVE-2019-15166	2024-11-21 13:28	2019-10-4	Show	GitHub Exploit DB Packet Storm

222606	6.5	MEDIUM Network	cisco	unified_communications_manager	A vulnerability in the web-based interface of Cisco Unified Communications Manager and Cisco Unified Communications Manager Session Management Edition (SME) could allow an unauthenticated, remote att…	CWE-444 HTTP Request Smuggling	CVE-2019-15272	2024-11-21 13:28	2019-10-3	Show	GitHub Exploit DB Packet Storm

222607	6.1	MEDIUM Network	cisco	unified_contact_center_express	A vulnerability in Cisco Unified Contact Center Express (UCCX) Software could allow an unauthenticated, remote attacker to conduct an HTTP response splitting attack. The vulnerability is due to insuf…	CWE-74 Injection	CVE-2019-15259	2024-11-21 13:28	2019-10-3	Show	GitHub Exploit DB Packet Storm

222608	8.6	HIGH Network	cisco	adaptive_security_appliance_software firepower_threat_defense asa_5505_firmware asa_5510_firmware asa_5512-x_firmware asa_5515-x_firmware asa_5520_firmware asa_5525-x_firmware	A vulnerability in the Internet Key Exchange version 1 (IKEv1) feature of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an unauthentic…	CWE-400 Uncontrolled Resource Consumption	CVE-2019-15256	2024-11-21 13:28	2019-10-3	Show	GitHub Exploit DB Packet Storm

222609	7.5	HIGH Network	html-pdf_project	html-pdf	The html-pdf package 2.2.0 for Node.js has an arbitrary file read vulnerability via an HTML file that uses XMLHttpRequest to access a file:/// URL.	CWE-668 Exposure of Resource to Wrong Sphere	CVE-2019-15138	2024-11-21 13:28	2019-09-21	Show	GitHub Exploit DB Packet Storm

222610	8.8	HIGH Network	prise	adas	An issue was discovered in PRiSE adAS 1.7.0. Forms have no CSRF protection, letting an attacker execute actions as the administrator.	CWE-352 Origin Validation Error	CVE-2019-15089	2024-11-21 13:28	2019-09-20	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed