Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 12, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
229171 5 警告 サン・マイクロシステムズ - Sun Application Server の Sun Admin Console におけるポリシーを回避される脆弱性 - CVE-2007-4511 2012-12-20 18:33 2007-08-23 Show GitHub Exploit DB Packet Storm
229172 6.8 警告 rival interactive
rebellion		 - Rogue Trooper または Prism のサーバで使用されている Rebellion Asura エンジンにおけるスタックベースのバッファオーバーフローの脆弱性 - CVE-2007-4508 2012-12-20 18:33 2007-08-23 Show GitHub Exploit DB Packet Storm
229173 6.9 警告 sshkeychain - SSHKeychain の PassphraseRequester における重要な情報を取得される脆弱性 - CVE-2007-4501 2012-12-20 18:33 2007-08-23 Show GitHub Exploit DB Packet Storm
229174 6.9 警告 sshkeychain - SSHKeychain の TunnelRunner における権限を取得される脆弱性 - CVE-2007-4500 2012-12-20 18:33 2007-08-23 Show GitHub Exploit DB Packet Storm
229175 5.5 警告 VMware - EMC VMware Workstation などにおけるサービス運用妨害 (DoS) の脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2007-4497 2012-12-20 18:33 2007-09-21 Show GitHub Exploit DB Packet Storm
229176 6.5 警告 VMware - EMC VMware Workstation などにおけるメモリを破損する脆弱性 CWE-399
リソース管理の問題 		CVE-2007-4496 2012-12-20 18:33 2007-09-21 Show GitHub Exploit DB Packet Storm
229177 10 危険 トレンドマイクロ - Windows 用の Trend Micro ServerProtect におけるバッファオーバーフローの脆弱性 - CVE-2007-4490 2012-12-20 18:33 2007-07-27 Show GitHub Exploit DB Packet Storm
229178 4.3 警告 シーメンス - Siemens Gigaset SE361 WLAN ルータにおけるクロスサイトスクリプティングの脆弱性 - CVE-2007-4488 2012-12-20 18:33 2007-08-22 Show GitHub Exploit DB Packet Storm
229179 4.3 警告 WordPress.org - WordPress の WordPress Classic テーマの index.php におけるクロスサイトスクリプティングの脆弱性 - CVE-2007-4483 2012-12-20 18:33 2007-08-22 Show GitHub Exploit DB Packet Storm
229180 4.3 警告 WordPress.org - WordPress 用の Pool テーマの index.php におけるクロスサイトスクリプティングの脆弱性 - CVE-2007-4482 2012-12-20 18:33 2007-08-22 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 12, 2026, 5:06 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
223951 9.8 CRITICAL
Network 		zohocorp manageengine_opmanager An issue was discovered in Zoho ManageEngine OpManager in builds before 14310. One can bypass the user password requirement and execute commands on the server. The "username+'@opm' string is used for… CWE-306
Missing Authentication for Critical Function 		CVE-2019-15106 2024-11-21 13:28 2019-08-16 Show GitHub Exploit DB Packet Storm
223952 8.8 HIGH
Network 		zohocorp manageengine_applications_manager An issue was discovered in Zoho ManageEngine Application Manager through 14.2. There is a SQL Injection vulnerability in jsp/NewThresholdConfiguration.jsp via the resourceid parameter. Therefore, a l… CWE-89
SQL Injection 		CVE-2019-15105 2024-11-21 13:28 2019-08-16 Show GitHub Exploit DB Packet Storm
223953 8.8 HIGH
Network 		zohocorp manageengine_applications_manager An issue was discovered in Zoho ManageEngine OpManager through 12.4x. There is a SQL Injection vulnerability in jsp/NewThresholdConfiguration.jsp via the resourceid parameter. Therefore, a low-author… CWE-89
SQL Injection 		CVE-2019-15104 2024-11-21 13:28 2019-08-16 Show GitHub Exploit DB Packet Storm
223954 7.5 HIGH
Network 		linux
canonical 		linux_kernel
ubuntu_linux 		drivers/net/wireless/ath/ath10k/usb.c in the Linux kernel through 5.2.8 has a NULL pointer dereference via an incomplete address in an endpoint descriptor. CWE-476
 NULL Pointer Dereference 		CVE-2019-15099 2024-11-21 13:28 2019-08-16 Show GitHub Exploit DB Packet Storm
223955 4.6 MEDIUM
Physics 		linux
canonical
opensuse
netapp
debian 		linux_kernel
ubuntu_linux
leap
element_software
active_iq_performance_analytics_services
active_iq_unified_manager
data_availability_services
debian_linux 		drivers/net/wireless/ath/ath6kl/usb.c in the Linux kernel through 5.2.9 has a NULL pointer dereference via an incomplete address in an endpoint descriptor. CWE-476
 NULL Pointer Dereference 		CVE-2019-15098 2024-11-21 13:28 2019-08-16 Show GitHub Exploit DB Packet Storm
223956 6.1 MEDIUM
Network 		diaowen dwsurvey DWSurvey through 2019-07-22 has reflected XSS via the design/qu-multi-fillblank!answers.action surveyId parameter. CWE-79
Cross-site Scripting 		CVE-2019-15095 2024-11-21 13:28 2019-08-16 Show GitHub Exploit DB Packet Storm
223957 6.7 MEDIUM
Local 		linux
canonical
opensuse 		linux_kernel
ubuntu_linux
leap 		An issue was discovered in drivers/scsi/qedi/qedi_dbg.c in the Linux kernel before 5.1.12. In the qedi_dbg_* family of functions, there is an out-of-bounds read. CWE-125
Out-of-bounds Read 		CVE-2019-15090 2024-11-21 13:28 2019-08-16 Show GitHub Exploit DB Packet Storm
223958 7.8 HIGH
Local 		maxx waves_maxx_audio Realtek Waves MaxxAudio driver 1.6.2.0, as used on Dell laptops, installs with incorrect file permissions. As a result, a local attacker can escalate to SYSTEM. CWE-732
 Incorrect Permission Assignment for Critical Resource 		CVE-2019-15084 2024-11-21 13:28 2019-08-16 Show GitHub Exploit DB Packet Storm
223959 4.8 MEDIUM
Network 		opencart opencart OpenCart 3.x, when the attacker has login access to the admin panel, allows stored XSS within the Source/HTML editing feature of the Categories, Product, and Information pages. CWE-79
Cross-site Scripting 		CVE-2019-15081 2024-11-21 13:28 2019-08-16 Show GitHub Exploit DB Packet Storm
223960 6.5 MEDIUM
Network 		gitlab gitlab An issue was discovered in GitLab Community and Enterprise Edition before 11.11.8, 12 before 12.0.6, and 12.1 before 12.1.6. Gitaly allows injection of command-line flags. This sometimes leads to pri… CWE-77
Command Injection 		CVE-2019-14944 2024-11-21 13:27 2023-04-16 Show GitHub Exploit DB Packet Storm