Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 7, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
228931 7.5 危険 shop-script - Shop-Script の cart.php における PHP リモートファイルインクルージョンの脆弱性 - CVE-2007-2331 2012-12-20 18:19 2007-04-26 Show GitHub Exploit DB Packet Storm
228932 7.5 危険 searchactivity - Searchactivity の searchbot.php における PHP リモートファイルインクルージョンの脆弱性 - CVE-2007-2329 2012-12-20 18:19 2007-04-26 Show GitHub Exploit DB Packet Storm
228933 7.5 危険 phpmytgp - phpMYTGP の addvip.php における PHP リモートファイルインクルージョンの脆弱性 - CVE-2007-2328 2012-12-20 18:19 2007-04-26 Show GitHub Exploit DB Packet Storm
228934 10 危険 SilverStripe - SilverStripe の検索機能における脆弱性 - CVE-2007-2321 2012-12-20 18:19 2007-04-17 Show GitHub Exploit DB Packet Storm
228935 7.5 危険 VWar - PHP-Nuke 用の VWar モジュールにおける SQL インジェクションの脆弱性 - CVE-2007-2312 2012-12-20 18:19 2007-04-26 Show GitHub Exploit DB Packet Storm
228936 7.5 危険 webkalk2 - WebKalk2 の engine/engine.inc.php における PHP リモートファイルインクルージョンの脆弱性 - CVE-2007-2307 2012-12-20 18:19 2007-04-26 Show GitHub Exploit DB Packet Storm
228937 4.3 警告 VWar - PHP-Nuke 用の VWar モジュールにおけるクロスサイトスクリプティングの脆弱性 - CVE-2007-2306 2012-12-20 18:19 2007-04-26 Show GitHub Exploit DB Packet Storm
228938 7.5 危険 qdblog - QDBlog の authenticate.php における SQL インジェクションの脆弱性 - CVE-2007-2305 2012-12-20 18:19 2007-04-26 Show GitHub Exploit DB Packet Storm
228939 7.5 危険 qdblog - QDBlog におけるディレクトリトラバーサルの脆弱性 - CVE-2007-2304 2012-12-20 18:19 2007-04-26 Show GitHub Exploit DB Packet Storm
228940 4.3 警告 surat kabar - Endy Kristanto Surat kabar / News Management Online におけるクロスサイトスクリプティングの脆弱性 - CVE-2007-2300 2012-12-20 18:19 2007-04-26 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 7, 2026, 4:22 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
222751 6.5 MEDIUM
Network 		gopro gpmf-parser GoPro GPMF-parser 1.2.2 has an out-of-bounds read and SEGV in GPMF_Next in GPMF_parser.c. CWE-125
Out-of-bounds Read 		CVE-2019-15147 2024-11-21 13:28 2019-08-19 Show GitHub Exploit DB Packet Storm
222752 6.5 MEDIUM
Network 		gopro gpmf-parser GoPro GPMF-parser 1.2.2 has a heap-based buffer over-read (4 bytes) in GPMF_Next in GPMF_parser.c. CWE-125
Out-of-bounds Read 		CVE-2019-15146 2024-11-21 13:28 2019-08-19 Show GitHub Exploit DB Packet Storm
222753 5.5 MEDIUM
Local 		djvulibre_project
debian
fedoraproject
canonical
opensuse 		djvulibre
debian_linux
fedora
ubuntu_linux
leap 		DjVuLibre 3.5.27 allows attackers to cause a denial-of-service attack (application crash via an out-of-bounds read) by crafting a corrupted JB2 image file that is mishandled in JB2Dict::JB2Codec::get… CWE-125
Out-of-bounds Read 		CVE-2019-15145 2024-11-21 13:28 2019-08-19 Show GitHub Exploit DB Packet Storm
222754 9.8 CRITICAL
Network 		networkgenomics mitogen core.py in Mitogen before 0.2.8 has a typo that drops the unidirectional-routing protection mechanism in the case of a child that is initiated by another child. The Ansible extension is unaffected. N… CWE-254
 7PK - Security Features 		CVE-2019-15149 2024-11-21 13:28 2019-08-19 Show GitHub Exploit DB Packet Storm
222755 5.5 MEDIUM
Local 		djvulibre_project
debian
fedoraproject
canonical
opensuse 		djvulibre
debian_linux
fedora
ubuntu_linux
leap 		In DjVuLibre 3.5.27, the sorting functionality (aka GArrayTemplate<TYPE>::sort) allows attackers to cause a denial-of-service (application crash due to an Uncontrolled Recursion) by crafting a PBM im… CWE-674
 Uncontrolled Recursion 		CVE-2019-15144 2024-11-21 13:28 2019-08-19 Show GitHub Exploit DB Packet Storm
222756 5.5 MEDIUM
Local 		djvulibre_project
debian
fedoraproject
canonical
opensuse 		djvulibre
debian_linux
fedora
ubuntu_linux
leap 		In DjVuLibre 3.5.27, the bitmap reader component allows attackers to cause a denial-of-service error (resource exhaustion caused by a GBitmap::read_rle_raw infinite loop) by crafting a corrupted imag… CWE-835
 Loop with Unreachable Exit Condition ('Infinite Loop') 		CVE-2019-15143 2024-11-21 13:28 2019-08-19 Show GitHub Exploit DB Packet Storm
222757 5.5 MEDIUM
Local 		djvulibre_project
debian
fedoraproject
canonical
opensuse 		djvulibre
debian_linux
fedora
ubuntu_linux
leap 		In DjVuLibre 3.5.27, DjVmDir.cpp in the DJVU reader component allows attackers to cause a denial-of-service (application crash in GStringRep::strdup in libdjvu/GString.cpp caused by a heap-based buff… CWE-125
Out-of-bounds Read 		CVE-2019-15142 2024-11-21 13:28 2019-08-19 Show GitHub Exploit DB Packet Storm
222758 6.5 MEDIUM
Network 		imagemagick
opensuse 		imagemagick
leap 		WriteTIFFImage in coders/tiff.c in ImageMagick 7.0.8-43 Q16 allows attackers to cause a denial-of-service (application crash resulting from a heap-based buffer over-read) via a crafted TIFF image fil… CWE-125
Out-of-bounds Read 		CVE-2019-15141 2024-11-21 13:28 2019-08-19 Show GitHub Exploit DB Packet Storm
222759 8.8 HIGH
Network 		imagemagick imagemagick coders/mat.c in ImageMagick 7.0.8-43 Q16 allows remote attackers to cause a denial of service (use-after-free and application crash) or possibly have unspecified other impact by crafting a Matlab ima… CWE-416
 Use After Free 		CVE-2019-15140 2024-11-21 13:28 2019-08-19 Show GitHub Exploit DB Packet Storm
222760 6.5 MEDIUM
Network 		imagemagick imagemagick The XWD image (X Window System window dumping file) parsing component in ImageMagick 7.0.8-41 Q16 allows attackers to cause a denial-of-service (application crash resulting from an out-of-bounds Read… CWE-125
Out-of-bounds Read 		CVE-2019-15139 2024-11-21 13:28 2019-08-19 Show GitHub Exploit DB Packet Storm