Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 7, 2026, 12:09 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
228871 4.3 警告 realguestbook - realGuestbook におけるクロスサイトスクリプティングの脆弱性 - CVE-2007-1623 2012-12-20 18:19 2007-03-23 Show GitHub Exploit DB Packet Storm
228872 4.3 警告 WordPress.org - WordPress の wp-admin/vars.php におけるクロスサイトスクリプティングの脆弱性 - CVE-2007-1622 2012-12-20 18:19 2007-03-22 Show GitHub Exploit DB Packet Storm
228873 7.5 危険 scriptmagix - ScriptMagix Photo Rating の viewcomments.php における SQL インジェクションの脆弱性 - CVE-2007-1619 2012-12-20 18:19 2007-03-22 Show GitHub Exploit DB Packet Storm
228874 7.5 危険 scriptmagix - ScriptMagix FAQ Builder の index.php における SQL インジェクションの脆弱性 - CVE-2007-1618 2012-12-20 18:19 2007-03-22 Show GitHub Exploit DB Packet Storm
228875 7.5 危険 scriptmagix - ScriptMagix Recipes の index.php における SQL インジェクションの脆弱性 - CVE-2007-1617 2012-12-20 18:19 2007-03-22 Show GitHub Exploit DB Packet Storm
228876 7.5 危険 scriptmagix - ScriptMagix Lyrics の index.php における SQL インジェクションの脆弱性 - CVE-2007-1616 2012-12-20 18:19 2007-03-22 Show GitHub Exploit DB Packet Storm
228877 7.5 危険 scriptmagix - ScriptMagix Jokes の index.php における SQL インジェクションの脆弱性 - CVE-2007-1615 2012-12-20 18:19 2007-03-22 Show GitHub Exploit DB Packet Storm
228878 9.3 危険 zziplib project - ZZIPlib Library の zzip/file.c におけるスタックベースのバッファオーバーフローの脆弱性 - CVE-2007-1614 2012-12-20 18:19 2007-03-17 Show GitHub Exploit DB Packet Storm
228879 5 警告 W-Agora - Web-Agora の search.php における重要な情報を取得される脆弱性 - CVE-2007-1607 2012-12-20 18:19 2007-03-22 Show GitHub Exploit DB Packet Storm
228880 4.3 警告 W-Agora - Web-Agora におけるクロスサイトスクリプティングの脆弱性 - CVE-2007-1606 2012-12-20 18:19 2007-03-22 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 7, 2026, 4:22 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
222671 9.8 CRITICAL
Network 		it-novum openitcockpit openITCOCKPIT before 3.7.1 allows SSRF, aka RVID 5-445b21. CWE-918
Server-Side Request Forgery (SSRF)  		CVE-2019-15494 2024-11-21 13:28 2019-08-23 Show GitHub Exploit DB Packet Storm
222672 7.5 HIGH
Network 		it-novum openitcockpit openITCOCKPIT before 3.7.1 allows deletion of files, aka RVID 4-445b21. NVD-CWE-noinfo
CVE-2019-15493 2024-11-21 13:28 2019-08-23 Show GitHub Exploit DB Packet Storm
222673 6.1 MEDIUM
Network 		it-novum openitcockpit openITCOCKPIT before 3.7.1 has reflected XSS, aka RVID 3-445b21. CWE-79
Cross-site Scripting 		CVE-2019-15492 2024-11-21 13:28 2019-08-23 Show GitHub Exploit DB Packet Storm
222674 8.8 HIGH
Network 		it-novum openitcockpit openITCOCKPIT before 3.7.1 has CSRF, aka RVID 2-445b21. CWE-352
 Origin Validation Error 		CVE-2019-15491 2024-11-21 13:28 2019-08-23 Show GitHub Exploit DB Packet Storm
222675 9.8 CRITICAL
Network 		it-novum openitcockpit openITCOCKPIT before 3.7.1 allows code injection, aka RVID 1-445b21. CWE-78
OS Command  		CVE-2019-15490 2024-11-21 13:28 2019-08-23 Show GitHub Exploit DB Packet Storm
222676 6.1 MEDIUM
Network 		igniterealtime openfire Ignite Realtime Openfire before 4.4.1 has reflected XSS via an LDAP setup test. CWE-79
Cross-site Scripting 		CVE-2019-15488 2024-11-21 13:28 2019-08-23 Show GitHub Exploit DB Packet Storm
222677 6.1 MEDIUM
Network 		schoolexperience department_for_education_school_experience DfE School Experience before v16333-GA has XSS via a teacher training URL. CWE-79
Cross-site Scripting 		CVE-2019-15487 2024-11-21 13:28 2019-08-23 Show GitHub Exploit DB Packet Storm
222678 6.1 MEDIUM
Network 		django_js_reverse_project django_js_reserve django-js-reverse (aka Django JS Reverse) before 0.9.1 has XSS via js_reverse_inline. CWE-79
Cross-site Scripting 		CVE-2019-15486 2024-11-21 13:28 2019-08-23 Show GitHub Exploit DB Packet Storm
222679 6.1 MEDIUM
Network 		boltcms bolt Bolt before 3.6.10 has XSS via createFolder or createFile in Controller/Async/FilesystemManager.php. CWE-79
Cross-site Scripting 		CVE-2019-15485 2024-11-21 13:28 2019-08-23 Show GitHub Exploit DB Packet Storm
222680 6.1 MEDIUM
Network 		boltcms bolt Bolt before 3.6.10 has XSS via an image's alt or title field. CWE-79
Cross-site Scripting 		CVE-2019-15484 2024-11-21 13:28 2019-08-23 Show GitHub Exploit DB Packet Storm