|
You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database). |
Update Date":May 6, 2026, 6 p.m.
| No | CVSS | Level Attach Vector |
Vendor Name | Project Name | Title | CWE | CVE | Update Date | Publication Date | Impact Show |
Exploit PoC Search |
|---|---|---|---|---|---|---|---|---|---|---|---|
| 228961 | 7.5 | 危険 | xero portal | - | Xero Portal における PHP リモートファイルインクルージョンの脆弱性 | - | CVE-2007-0561 | 2012-12-20 18:19 | 2007-01-30 | Show | GitHub Exploit DB Packet Storm |
| 228962 | 7.5 | 危険 | rp world | - | RPW の config.php における PHP リモートファイルインクルージョンの脆弱性 | - | CVE-2007-0559 | 2012-12-20 18:19 | 2007-01-30 | Show | GitHub Exploit DB Packet Storm |
| 228963 | 7.2 | 危険 | rmake | - | rMake における権限を取得される脆弱性 | - | CVE-2007-0557 | 2012-12-20 18:19 | 2007-01-29 | Show | GitHub Exploit DB Packet Storm |
| 228964 | 6.8 | 警告 | phproxy | - | PHProxy の index.inc.php におけるクロスサイトスクリプティングの脆弱性 | - | CVE-2007-0553 | 2012-12-20 18:19 | 2007-01-29 | Show | GitHub Exploit DB Packet Storm |
| 228965 | 7.8 | 危険 | toxiclab | - | Toxiclab Shoutbox におけるパスワードを含むデータベースをダウンロードされる脆弱性 | - | CVE-2007-0546 | 2012-12-20 18:19 | 2007-01-29 | Show | GitHub Exploit DB Packet Storm |
| 228966 | 9.4 | 危険 | zixforum | - | ZixForum におけるデータベースをダウンロードされる脆弱性 | - | CVE-2007-0543 | 2012-12-20 18:19 | 2007-01-29 | Show | GitHub Exploit DB Packet Storm |
| 228967 | 5 | 警告 | WordPress.org | - | WordPress における任意のファイルの存在を特定される脆弱性 |
CWE-264
認可・権限・アクセス制御 |
CVE-2007-0541 | 2012-12-20 18:19 | 2007-01-29 | Show | GitHub Exploit DB Packet Storm |
| 228968 | 5 | 警告 | WordPress.org | - | WordPress におけるサービス運用妨害 (DoS) の脆弱性 | - | CVE-2007-0540 | 2012-12-20 18:19 | 2007-01-29 | Show | GitHub Exploit DB Packet Storm |
| 228969 | 7.8 | 危険 | WordPress.org | - | WordPress の wp_remote_fopen 関数におけるサービス運用妨害 (DoS) の脆弱性 | - | CVE-2007-0539 | 2012-12-20 18:19 | 2007-01-29 | Show | GitHub Exploit DB Packet Storm |
| 228970 | 5 | 警告 | Telligent | - | Telligent Community Server におけるサービス運用妨害 (DoS) の脆弱性 | - | CVE-2007-0538 | 2012-12-20 18:19 | 2007-01-29 | Show | GitHub Exploit DB Packet Storm |
Update Date:May 6, 2026, 4:08 a.m.
| No | CVSS | Level Attach Vector |
Vendor Name | Project Name | Title | CWE | CVE | Update Date | Publication Date | Show Affected | Exploit PoC Search |
|---|---|---|---|---|---|---|---|---|---|---|---|
| 222941 | 8.1 |
HIGH
Network |
open-xchange | open-xchange_appsuite | OX App Suite through 7.10.2 has Insecure Permissions. |
CWE-281
Improper Preservation of Permissions |
CVE-2019-14226 | 2024-11-21 13:26 | 2019-10-15 | Show | GitHub Exploit DB Packet Storm |
| 222942 | 5.4 |
MEDIUM
Network |
open-xchange | open-xchange_appsuite | OX App Suite 7.10.1 and 7.10.2 allows SSRF. |
CWE-918
Server-Side Request Forgery (SSRF) |
CVE-2019-14225 | 2024-11-21 13:26 | 2019-10-15 | Show | GitHub Exploit DB Packet Storm |
| 222943 | 7.8 |
HIGH
Local |
intel |
nuc_8_mainstream_game_kit_firmware nuc_8_mainstream_game_mini_computer_firmware nuc_board_de3815tybe_firmware nuc_kit_de3815tykhe_firmware nuc_kit_dn2820fykh_firmware |
Memory corruption in system firmware for Intel(R) NUC may allow a privileged user to potentially enable escalation of privilege, denial of service and/or information disclosure via local access. |
CWE-787
Out-of-bounds Write |
CVE-2019-14570 | 2024-11-21 13:26 | 2019-10-12 | Show | GitHub Exploit DB Packet Storm |
| 222944 | 7.8 |
HIGH
Local |
intel |
nuc_8_mainstream_game_kit_firmware nuc_8_mainstream_game_mini_computer_firmware nuc_board_de3815tybe_firmware nuc_kit_de3815tykhe_firmware nuc_kit_dn2820fykh_firmware |
Pointer corruption in system firmware for Intel(R) NUC may allow a privileged user to potentially enable escalation of privilege, denial of service and/or information disclosure via local access. |
CWE-119
Incorrect Access of Indexable Resource ('Range Error') |
CVE-2019-14569 | 2024-11-21 13:26 | 2019-10-12 | Show | GitHub Exploit DB Packet Storm |
| 222945 | 6.7 |
MEDIUM
Local |
kaseya | vsa | An issue was discovered in Kaseya VSA RMM through 9.5.0.22. When using the default configuration, the LAN Cache feature creates a local account FSAdminxxxxxxxxx (e.g., FSAdmin123456789) on the server… |
CWE-287 CWE-276 Improper Authentication Incorrect Default Permissions |
CVE-2019-14510 | 2024-11-21 13:26 | 2019-10-11 | Show | GitHub Exploit DB Packet Storm |
| 222946 | 9.8 |
CRITICAL
Network |
salesagility | suitecrm | SuiteCRM 7.11.x and 7.10.x before 7.11.8 and 7.10.20 is vulnerable to vertical privilege escalation. |
NVD-CWE-noinfo
|
CVE-2019-14454 | 2024-11-21 13:26 | 2019-10-2 | Show | GitHub Exploit DB Packet Storm |
| 222947 | 5.3 |
MEDIUM
Network |
silverstripe | silverstripe | In SilverStripe assets 4.0, there is broken access control on files. |
CWE-552
Files or Directories Accessible to External Parties |
CVE-2019-14273 | 2024-11-21 13:26 | 2019-09-26 | Show | GitHub Exploit DB Packet Storm |
| 222948 | 5.4 |
MEDIUM
Network |
silverstripe | silverstripe | In SilverStripe asset-admin 4.0, there is XSS in file titles managed through the CMS. |
CWE-79
Cross-site Scripting |
CVE-2019-14272 | 2024-11-21 13:26 | 2019-09-26 | Show | GitHub Exploit DB Packet Storm |
| 222949 | 6.5 |
MEDIUM
Local |
bluestacks | bluestacks | An issue was discovered in BlueStacks 4.110 and below on macOS and on 4.120 and below on Windows. BlueStacks employs Android running in a virtual machine (VM) to enable Android apps to run on Windows… |
CWE-269
Improper Privilege Management |
CVE-2019-14220 | 2024-11-21 13:26 | 2019-09-25 | Show | GitHub Exploit DB Packet Storm |
| 222950 | 6.6 |
MEDIUM
Physics |
nxp |
kinetis_kv1x_firmware kinetis_kv3x_firmware kinetis_k8x_firmware |
On NXP Kinetis KV1x, Kinetis KV3x, and Kinetis K8x devices, Flash Access Controls (FAC) (a software IP protection method for execute-only access) can be defeated by leveraging a load instruction insi… |
CWE-287
Improper Authentication |
CVE-2019-14239 | 2024-11-21 13:26 | 2019-09-25 | Show | GitHub Exploit DB Packet Storm |