Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 13, 2026, 6 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
229071 6.8 警告 phppm - PHP Project Management におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル
CVE-2007-5642 2012-12-20 18:33 2007-10-23 Show GitHub Exploit DB Packet Storm
229072 6.8 警告 phppm - PHP Project Management における PHP リモートファイルインクルージョンの脆弱性 CWE-94
コード・インジェクション
CVE-2007-5641 2012-12-20 18:33 2007-10-23 Show GitHub Exploit DB Packet Storm
229073 10 危険 The Support Incident Tracker Project - Salford Software SiT! における脆弱性 CWE-noinfo
情報不足
CVE-2007-5635 2012-12-20 18:33 2007-10-23 Show GitHub Exploit DB Packet Storm
229074 6.8 警告 towels - TOWels の src/scripture.php における PHP リモートファイルインクルージョンの脆弱性 CWE-94
コード・インジェクション
CVE-2007-5628 2012-12-20 18:33 2007-10-23 Show GitHub Exploit DB Packet Storm
229075 6.8 警告 Creative Digital Resources - SocketMail の content/fnc-readmail3.php における PHP リモートファイルインクルージョンの脆弱性 CWE-94
コード・インジェクション
CVE-2007-5627 2012-12-20 18:33 2007-10-23 Show GitHub Exploit DB Packet Storm
229076 4.3 警告 simongibson - ASP Site Search SearchSimon Lite の filename.asp におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2007-5625 2012-12-20 18:33 2007-10-23 Show GitHub Exploit DB Packet Storm
229077 7.5 危険 zehnet - ZZ:FlashChat の admin/inc/help.php におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル
CVE-2007-5620 2012-12-20 18:33 2007-10-22 Show GitHub Exploit DB Packet Storm
229078 7.2 危険 VMware - VMware Server における権限を取得される脆弱性 CWE-noinfo
情報不足
CVE-2007-5619 2012-12-20 18:33 2007-10-21 Show GitHub Exploit DB Packet Storm
229079 7.2 危険 VMware - VMware Playerなどの製品における Authorization などのサービスにおける権限を取得される脆弱性 CWE-noinfo
情報不足
CVE-2007-5618 2012-12-20 18:33 2007-10-21 Show GitHub Exploit DB Packet Storm
229080 10 危険 VMware - VMware Player および Workstation における脆弱性 CWE-noinfo
情報不足
CVE-2007-5617 2012-12-20 18:33 2007-10-21 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 13, 2026, 5:05 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
224281 5.5 MEDIUM
Local
lavamobiles flair_z1_firmware The Lava Flair Z1 Android device with a build fingerprint of LAVA/Z1/Z1:8.1.0/O11019/1536680131:user/release-keys contains a pre-installed app with a package name of com.mediatek.wfo.impl app (versio… NVD-CWE-noinfo
CVE-2019-15356 2024-11-21 13:28 2019-11-15 Show GitHub Exploit DB Packet Storm
224282 5.5 MEDIUM
Local
tecno-mobile camon_iclick_firmware The Tecno Camon iClick Android device with a build fingerprint of TECNO/H633/TECNO-IN6:8.1.0/O11019/A-180409V96:user/release-keys contains a pre-installed app with a package name of com.mediatek.wfo.… NVD-CWE-noinfo
CVE-2019-15355 2024-11-21 13:28 2019-11-15 Show GitHub Exploit DB Packet Storm
224283 5.5 MEDIUM
Local
ulefone armor_5_firmware The Ulefone Armor 5 Android device with a build fingerprint of Ulefone/Ulefone_Armor_5/Ulefone_Armor_5:8.1.0/O11019/1528806701:user/release-keys contains a pre-installed app with a package name of co… NVD-CWE-noinfo
CVE-2019-15354 2024-11-21 13:28 2019-11-15 Show GitHub Exploit DB Packet Storm
224284 5.5 MEDIUM
Local
coolpad n3c_firmware The Coolpad N3C Android device with a build fingerprint of Coolpad/N3C/N3C:8.1.0/O11019/1538236809:user/release-keys contains a pre-installed app with a package name of com.mediatek.wfo.impl app (ver… NVD-CWE-noinfo
CVE-2019-15353 2024-11-21 13:28 2019-11-15 Show GitHub Exploit DB Packet Storm
224285 5.5 MEDIUM
Local
coolpad mega_5_firmware The Coolpad 1851 Android device with a build fingerprint of Coolpad/android/android:8.1.0/O11019/1534834761:userdebug/release-keys contains a pre-installed app with a package name of com.mediatek.wfo… NVD-CWE-noinfo
CVE-2019-15352 2024-11-21 13:28 2019-11-15 Show GitHub Exploit DB Packet Storm
224286 7.8 HIGH
Local
tecno-mobile tecno\/h622\/tecno-id5b\ The Tecno Camon Android device with a build fingerprint of TECNO/H622/TECNO-ID5b:8.1.0/O11019/G-180829V31:user/release-keys contains a pre-installed platform app with a package name of com.lovelyfont… CWE-78
OS Command 
CVE-2019-15351 2024-11-21 13:28 2019-11-15 Show GitHub Exploit DB Packet Storm
224287 7.8 HIGH
Local
tecno-mobile tecno\/h622\/tecno-id5b\ The Tecno Camon Android device with a build fingerprint of TECNO/H622/TECNO-ID5b:8.1.0/O11019/G-180829V31:user/release-keys contains a pre-installed platform app with a package name of com.lovelyfont… CWE-668
 Exposure of Resource to Wrong Sphere
CVE-2019-15350 2024-11-21 13:28 2019-11-15 Show GitHub Exploit DB Packet Storm
224288 7.8 HIGH
Local
tecno-mobile tecno\/h612\/tecno-id5a\ The Tecno Camon Android device with a build fingerprint of TECNO/H612/TECNO-ID5a:8.1.0/O11019/F-180828V106:user/release-keys contains a pre-installed platform app with a package name of com.lovelyfon… CWE-668
 Exposure of Resource to Wrong Sphere
CVE-2019-15349 2024-11-21 13:28 2019-11-15 Show GitHub Exploit DB Packet Storm
224289 3.3 LOW
Local
mi redmi_6_firmware The Xiaomi Redmi 6 Pro Android device with a build fingerprint of xiaomi/sakura_india/sakura_india:8.1.0/OPM1.171019.019/V9.6.4.0.ODMMIFD:user/release-keys contains a pre-installed app with a package… CWE-732
 Incorrect Permission Assignment for Critical Resource
CVE-2019-15340 2024-11-21 13:28 2019-11-15 Show GitHub Exploit DB Packet Storm
224290 3.3 LOW
Local
lavamobiles z60s_firmware The Lava Z60s Android device with a build fingerprint of LAVA/Z60s/Z60s:8.1.0/O11019/1530331229:user/release-keys contains a pre-installed app with a package name of com.android.lava.powersave app (v… CWE-732
 Incorrect Permission Assignment for Critical Resource
CVE-2019-15339 2024-11-21 13:28 2019-11-15 Show GitHub Exploit DB Packet Storm