Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 9, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
229141 7.5 危険 sunlight cms - SunLight CMS における PHP リモートファイルインクルージョンの脆弱性 - CVE-2007-2774 2012-12-20 18:19 2007-05-21 Show GitHub Exploit DB Packet Storm
229142 7.5 危険 zomplog - Zomplog の plugins/mp3playlist/mp3playlist.php における SQL インジェクションの脆弱性 - CVE-2007-2773 2012-12-20 18:19 2007-05-21 Show GitHub Exploit DB Packet Storm
229143 9.3 危険 クアルコム - Eudora におけるスタックベースのバッファオーバーフローの脆弱性 - CVE-2007-2770 2012-12-20 18:19 2007-05-21 Show GitHub Exploit DB Packet Storm
229144 10 危険 sienzo - Sienzo DMM ActiveX コントロール におけるバッファオーバーフローの脆弱性 - CVE-2007-2763 2012-12-20 18:19 2007-05-18 Show GitHub Exploit DB Packet Storm
229145 9.3 危険 Gilles Vollant - WinImage におけるバッファオーバーフローの脆弱性 - CVE-2007-2758 2012-12-20 18:19 2007-05-18 Show GitHub Exploit DB Packet Storm
229146 10 危険 precisionid barcode - PrecisionID_Barcode.dll の PrecisionID Barcode ActiveX コントロールにおける任意のファイルを上書きされる脆弱性 - CVE-2007-2755 2012-12-20 18:19 2007-05-17 Show GitHub Exploit DB Packet Storm
229147 5 警告 runawaysoft - RunawaySoft Haber ポータルにおけるデータベースをダウンロードされる脆弱性 - CVE-2007-2753 2012-12-20 18:19 2007-05-17 Show GitHub Exploit DB Packet Storm
229148 6.4 警告 runawaysoft - RunawaySoft Haber ポータルの devami.asp における SQL インジェクションの脆弱性 - CVE-2007-2752 2012-12-20 18:19 2007-05-17 Show GitHub Exploit DB Packet Storm
229149 7.5 危険 phpglossar - PHPGlossar における PHP リモートファイルインクルージョンの脆弱性 - CVE-2007-2751 2012-12-20 18:19 2007-05-17 Show GitHub Exploit DB Packet Storm
229150 7.5 危険 simpnews - SimpNews の print.php における SQL インジェクションの脆弱性 - CVE-2007-2750 2012-12-20 18:19 2007-05-17 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 9, 2026, 5:07 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
222771 8.1 HIGH
Network 		cisco sd-wan_firmware A vulnerability in the web UI of Cisco SD-WAN Solution vManage software could allow an authenticated, remote attacker to conduct SQL injection attacks on an affected system. The vulnerability exists … CWE-89
SQL Injection 		CVE-2019-16012 2024-11-21 13:29 2020-03-20 Show GitHub Exploit DB Packet Storm
222772 4.8 MEDIUM
Network 		cisco sd-wan_firmware A vulnerability in the web UI of the Cisco SD-WAN vManage software could allow an authenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of the web-based managem… CWE-79
Cross-site Scripting 		CVE-2019-16010 2024-11-21 13:29 2020-03-20 Show GitHub Exploit DB Packet Storm
222773 6.7 MEDIUM
Local 		fortinet fortiap-w2
fortiap-s
fortiap-u
fortiap 		A system command injection vulnerability in the FortiAP-S/W2 6.2.1, 6.2.0, 6.0.5 and below, FortiAP 6.0.5 and below and FortiAP-U below 6.0.0 under CLI admin console may allow unauthorized administra… CWE-78
OS Command  		CVE-2019-15708 2024-11-21 13:29 2020-03-16 Show GitHub Exploit DB Packet Storm
222774 5.9 MEDIUM
Network 		yarnpkg yarn The package integrity validation in yarn < 1.19.0 contains a TOCTOU vulnerability where the hash is computed before writing a package to cache. It's not computed again when reading from the cache. Th… CWE-367
 Time-of-check Time-of-use (TOCTOU) Race Condition 		CVE-2019-15608 2024-11-21 13:29 2020-03-16 Show GitHub Exploit DB Packet Storm
222775 9.8 CRITICAL
Network 		kill-port-process_project kill-port-process The kill-port-process package version < 2.2.0 is vulnerable to a Command Injection vulnerability. CWE-78
OS Command  		CVE-2019-15609 2024-11-21 13:29 2020-02-29 Show GitHub Exploit DB Packet Storm
222776 3.3 LOW
Local 		freebsd freebsd In FreeBSD 12.1-STABLE before r354734, 12.1-RELEASE before 12.1-RELEASE-p2, 12.0-RELEASE before 12.0-RELEASE-p13, 11.3-STABLE before r354735, and 11.3-RELEASE before 11.3-RELEASE-p6, due to incorrect… CWE-665
 Improper Initialization 		CVE-2019-15875 2024-11-21 13:29 2020-02-19 Show GitHub Exploit DB Packet Storm
222777 4.3 MEDIUM
Network 		gitlab gitlab GitLab 11.8 and later contains a security vulnerability that allows a user to obtain details of restricted pipelines via the merge request endpoint. NVD-CWE-noinfo
CVE-2019-15594 2024-11-21 13:29 2020-02-15 Show GitHub Exploit DB Packet Storm
222778 4.3 MEDIUM
Network 		gitlab gitlab GitLab 12.2.2 and below contains a security vulnerability that allows a guest user in a private project to see the merge request ID associated to an issue via the activity timeline. NVD-CWE-noinfo
CVE-2019-15592 2024-11-21 13:29 2020-02-15 Show GitHub Exploit DB Packet Storm
222779 9.8 CRITICAL
Network 		nodejs
oracle
debian
redhat
opensuse 		node.js
graalvm
communications_cloud_native_core_network_function_cloud_native_environment
debian_linux
enterprise_linux
enterprise_linux_eus
leap 		Including trailing white space in HTTP header values in Nodejs 10, 12, and 13 causes bypass of authorization based on header value comparisons NVD-CWE-Other
CVE-2019-15606 2024-11-21 13:29 2020-02-8 Show GitHub Exploit DB Packet Storm
222780 9.8 CRITICAL
Network 		nodejs
debian
fedoraproject
opensuse
redhat
oracle 		node.js
debian_linux
fedora
leap
enterprise_linux_desktop
enterprise_linux_workstation
enterprise_linux_server
software_collections
enterprise_linux
enterprise_linux_server… 		HTTP request smuggling in Node.js 10, 12, and 13 causes malicious payload delivery when transfer-encoding is malformed CWE-444
HTTP Request Smuggling 		CVE-2019-15605 2024-11-21 13:29 2020-02-8 Show GitHub Exploit DB Packet Storm