Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 7, 2026, 12:09 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
228871 4.3 警告 realguestbook - realGuestbook におけるクロスサイトスクリプティングの脆弱性 - CVE-2007-1623 2012-12-20 18:19 2007-03-23 Show GitHub Exploit DB Packet Storm
228872 4.3 警告 WordPress.org - WordPress の wp-admin/vars.php におけるクロスサイトスクリプティングの脆弱性 - CVE-2007-1622 2012-12-20 18:19 2007-03-22 Show GitHub Exploit DB Packet Storm
228873 7.5 危険 scriptmagix - ScriptMagix Photo Rating の viewcomments.php における SQL インジェクションの脆弱性 - CVE-2007-1619 2012-12-20 18:19 2007-03-22 Show GitHub Exploit DB Packet Storm
228874 7.5 危険 scriptmagix - ScriptMagix FAQ Builder の index.php における SQL インジェクションの脆弱性 - CVE-2007-1618 2012-12-20 18:19 2007-03-22 Show GitHub Exploit DB Packet Storm
228875 7.5 危険 scriptmagix - ScriptMagix Recipes の index.php における SQL インジェクションの脆弱性 - CVE-2007-1617 2012-12-20 18:19 2007-03-22 Show GitHub Exploit DB Packet Storm
228876 7.5 危険 scriptmagix - ScriptMagix Lyrics の index.php における SQL インジェクションの脆弱性 - CVE-2007-1616 2012-12-20 18:19 2007-03-22 Show GitHub Exploit DB Packet Storm
228877 7.5 危険 scriptmagix - ScriptMagix Jokes の index.php における SQL インジェクションの脆弱性 - CVE-2007-1615 2012-12-20 18:19 2007-03-22 Show GitHub Exploit DB Packet Storm
228878 9.3 危険 zziplib project - ZZIPlib Library の zzip/file.c におけるスタックベースのバッファオーバーフローの脆弱性 - CVE-2007-1614 2012-12-20 18:19 2007-03-17 Show GitHub Exploit DB Packet Storm
228879 5 警告 W-Agora - Web-Agora の search.php における重要な情報を取得される脆弱性 - CVE-2007-1607 2012-12-20 18:19 2007-03-22 Show GitHub Exploit DB Packet Storm
228880 4.3 警告 W-Agora - Web-Agora におけるクロスサイトスクリプティングの脆弱性 - CVE-2007-1606 2012-12-20 18:19 2007-03-22 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 7, 2026, 4:22 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
222721 4.7 MEDIUM
Local 		linux
debian
canonical 		linux_kernel
debian_linux
ubuntu_linux 		An issue was discovered in the Linux kernel before 5.0.9. There is a use-after-free in atalk_proc_exit, related to net/appletalk/atalk_proc.c, net/appletalk/ddp.c, and net/appletalk/sysctl_net_atalk.… CWE-416
 Use After Free 		CVE-2019-15292 2024-11-21 13:28 2019-08-21 Show GitHub Exploit DB Packet Storm
222722 8.8 HIGH
Network 		cformsii_project cformsii The cforms2 plugin before 15.0.2 for WordPress has CSRF related to the IP address field. CWE-352
 Origin Validation Error 		CVE-2019-15238 2024-11-21 13:28 2019-08-21 Show GitHub Exploit DB Packet Storm
222723 4.6 MEDIUM
Physics 		linux linux_kernel An issue was discovered in the Linux kernel through 5.2.9. There is a NULL pointer dereference caused by a malicious USB device in the flexcop_usb_probe function in the drivers/media/usb/b2c2/flexcop… CWE-476
 NULL Pointer Dereference 		CVE-2019-15291 2024-11-21 13:28 2019-08-20 Show GitHub Exploit DB Packet Storm
222724 6.1 MEDIUM
Network 		oldstreetsolutions live_input_macros The Live:Text Box macro in the Old Street Live Input Macros app before 2.11 for Confluence has XSS, leading to theft of the Administrator Session Cookie. CWE-79
Cross-site Scripting 		CVE-2019-15233 2024-11-21 13:28 2019-08-20 Show GitHub Exploit DB Packet Storm
222725 6.1 MEDIUM
Network 		yofla 360_product_rotation The 360-product-rotation plugin before 1.4.8 for WordPress has reflected XSS. CWE-79
Cross-site Scripting 		CVE-2019-15082 2024-11-21 13:28 2019-08-20 Show GitHub Exploit DB Packet Storm
222726 7.8 HIGH
Local 		linux
debian 		linux_kernel
debian_linux 		In the Linux kernel, a certain net/ipv4/tcp_output.c change, which was properly incorporated into 4.16.12, was incorrectly backported to the earlier longterm kernels, introducing a new vulnerability … CWE-416
 Use After Free 		CVE-2019-15239 2024-11-21 13:28 2019-08-20 Show GitHub Exploit DB Packet Storm
222727 6.1 MEDIUM
Network 		getflightpath flightpath FlightPath 4.8.3 has XSS in the Content, Edit urgent message, and Users sections of the Admin Console. This could lead to cookie stealing and other malicious actions. CWE-79
Cross-site Scripting 		CVE-2019-15227 2024-11-21 13:28 2019-08-20 Show GitHub Exploit DB Packet Storm
222728 7.4 HIGH
Network 		roundcube
fedoraproject 		webmail
fedora 		Roundcube Webmail through 1.3.9 mishandles Punycode xn-- domain names, leading to homograph attacks. NVD-CWE-noinfo
CVE-2019-15237 2024-11-21 13:28 2019-08-20 Show GitHub Exploit DB Packet Storm
222729 9.8 CRITICAL
Network 		live555 streaming_media Live555 before 2019.08.16 has a Use-After-Free because GenericMediaServer::createNewClientSessionWithId can generate the same client session ID in succession, which is mishandled by the MPEG1or2 and … CWE-416
 Use After Free 		CVE-2019-15232 2024-11-21 13:28 2019-08-20 Show GitHub Exploit DB Packet Storm
222730 8.8 HIGH
Network 		thedaylightstudio fuel_cms FUEL CMS 1.4.4 has CSRF in the blocks/create/ Create Blocks section of the Admin console. This could lead to an attacker tricking the administrator into executing arbitrary code via a specially craft… CWE-352
 Origin Validation Error 		CVE-2019-15229 2024-11-21 13:28 2019-08-20 Show GitHub Exploit DB Packet Storm