Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 11, 2026, 4:01 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
229081	5	警告	polipo	-	Polipo におけるサービス運用妨害 (DoS) の脆弱性	-	CVE-2007-4626	2012-12-20 18:33	2007-08-30	Show	GitHub Exploit DB Packet Storm

229082	4.3	警告	polipo	-	Polipo におけるサービス運用妨害 (DoS) の脆弱性	-	CVE-2007-4625	2012-12-20 18:33	2007-08-30	Show	GitHub Exploit DB Packet Storm

229083	7.5	危険	winterburns.co.uk	-	ePersonnel の protection.php における PHP リモートファイルインクルージョンの脆弱性	CWE-94 コード・インジェクション	CVE-2007-4608	2012-12-20 18:33	2007-08-30	Show	GitHub Exploit DB Packet Storm

229084	7.5	危険	phpnuke-clan	-	PHP-Nuke 用の VWar モジュールにおける PHP リモートファイルインクルージョンの脆弱性	CWE-94 コード・インジェクション	CVE-2007-4606	2012-12-20 18:33	2007-08-30	Show	GitHub Exploit DB Packet Storm

229085	7.5	危険	VWar	-	VWar の convert/mvcw.php における PHP リモートファイルインクルージョンの脆弱性	CWE-94 コード・インジェクション	CVE-2007-4605	2012-12-20 18:33	2007-08-30	Show	GitHub Exploit DB Packet Storm

229086	5	警告	Canonical	-	tcp-wrappers のリグレッションエラーにおけるアクセス制限を回避される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2007-4601	2012-12-20 18:33	2007-08-29	Show	GitHub Exploit DB Packet Storm

229087	4.6	警告	PTC Inc.	-	Mathsoft Mathcad および PTC Mathcad の "ワークシート保護" 機能における制限を回避される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2007-4600	2012-12-20 18:33	2007-10-18	Show	GitHub Exploit DB Packet Storm

229088	7.5	危険	turnkey web tools	-	TurnkeyWebTools SunShop Shopping Cart の index.php における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2007-4597	2012-12-20 18:33	2007-08-30	Show	GitHub Exploit DB Packet Storm

229089	6.9	警告	VMware	-	VMWare Workstation の vstor2-ws60.sys におけるサービス運用妨害 (DoS) の脆弱性	CWE-noinfo 情報不足	CVE-2007-4593	2012-12-20 18:33	2007-08-29	Show	GitHub Exploit DB Packet Storm

229090	6.9	警告	VMware	-	VMWare Workstation の vstor-ws60.sys におけるサービス運用妨害 (DoS) の脆弱性	CWE-DesignError	CVE-2007-4591	2012-12-20 18:33	2007-08-29	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 11, 2026, 4:09 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
223961	5.9	MEDIUM Network	jetbrains	intellij_idea	JetBrains IntelliJ IDEA before 2019.2 was resolving the markdown plantuml artifact download link via a cleartext http connection.	CWE-319 Cleartext Transmission of Sensitive Information	CVE-2019-14954	2024-11-21 13:27	2019-10-1	Show	GitHub Exploit DB Packet Storm

223962	6.1	MEDIUM Network	jetbrains	youtrack	JetBrains YouTrack versions before 2019.1.52584 had a possible XSS in the issue titles.	CWE-79 Cross-site Scripting	CVE-2019-14952	2024-11-21 13:27	2019-10-1	Show	GitHub Exploit DB Packet Storm

223963	6.1	MEDIUM Network	salesagility	suitecrm	SuiteCRM 7.10.x and 7.11.x before 7.10.20 and 7.11.8 has XSS.	CWE-79 Cross-site Scripting	CVE-2019-14752	2024-11-21 13:27	2019-09-30	Show	GitHub Exploit DB Packet Storm

223964	7.5	HIGH Network	mit fedoraproject	kerberos_5 fedora	A flaw was found in, Fedora versions of krb5 from 1.16.1 to, including 1.17.x, in the way a Kerberos client could crash the KDC by sending one of the RFC 4556 "enctypes". A remote unauthenticated use…	-	CVE-2019-14844	2024-11-21 13:27	2019-09-26	Show	GitHub Exploit DB Packet Storm

223965	8.8	HIGH Network	glpi-project	glpi	GLPI through 9.4.3 is prone to account takeover by abusing the ajax/autocompletion.php autocompletion feature. The lack of correct validation leads to recovery of the token generated via the password…	CWE-200 Information Exposure	CVE-2019-14666	2024-11-21 13:27	2019-09-26	Show	GitHub Exploit DB Packet Storm

223966	9.8	CRITICAL Network	gigastone	smart_battery_a4_firmware	An unsafe authentication interface was discovered in Smart Battery A4, a multifunctional portable charger, firmware version ?<= r1.7.9 . An attacker can bypass authentication without modifying device…	NVD-CWE-noinfo	CVE-2019-15069	2024-11-21 13:27	2019-09-26	Show	GitHub Exploit DB Packet Storm

223967	9.8	CRITICAL Network	gigastone	smart_battery_a4_firmware	A broken access control vulnerability in Smart Battery A4, a multifunctional portable charger, firmware version ?<= r1.7.9 allows an attacker to get/reset administrator’s password without any authent…	CWE-306 Missing Authentication for Critical Function	CVE-2019-15068	2024-11-21 13:27	2019-09-26	Show	GitHub Exploit DB Packet Storm

223968	9.8	CRITICAL Network	gigastone	smart_battery_a2-25de_firmware	An authentication bypass vulnerability discovered in Smart Battery A2-25DE, a multifunctional portable charger, firmware version ?<= SECFS-2013-10-16-13:42:58-629c30ee-60c68be6. An attacker can bypas…	NVD-CWE-noinfo	CVE-2019-15067	2024-11-21 13:27	2019-09-26	Show	GitHub Exploit DB Packet Storm

223969	7.5	HIGH Network	sick	fx0-gpnt00000_firmware fx0-gent00000_firmware	SICK FX0-GPNT00000 and FX0-GENT00000 devices through 3.4.0 have a Buffer Overflow	CWE-120 Classic Buffer Overflow	CVE-2019-14753	2024-11-21 13:27	2019-09-25	Show	GitHub Exploit DB Packet Storm

223970	7.8	HIGH Local	linux redhat debian fedoraproject netapp canonical opensuse	linux_kernel enterprise_linux_server_aus enterprise_linux enterprise_linux_for_real_time enterprise_linux_for_real_time_for_nfv enterprise_linux_server_tus virtualization enterpr…	There is heap-based buffer overflow in kernel, all versions up to, excluding 5.3, in the marvell wifi chip driver in Linux kernel, that allows local users to cause a denial of service(system crash) o…	-	CVE-2019-14816	2024-11-21 13:27	2019-09-21	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed