Vulnerability Search Top
Show Search Menu
|
You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database). |
JVN Vulnerability Information
Update Date":May 11, 2026, 6:01 p.m.
| No | CVSS | Level Attach Vector |
Vendor Name | Project Name | Title | CWE | CVE | Update Date | Publication Date | Impact Show |
Exploit PoC Search |
|---|---|---|---|---|---|---|---|---|---|---|---|
| 229211 | 6.5 | 警告 | レッドハット | - | Red Hat Network Satellite Server における任意のコードを実行される脆弱性 |
CWE-noinfo
情報不足 |
CVE-2007-4132 | 2012-12-20 18:33 | 2007-08-29 | Show | GitHub Exploit DB Packet Storm |
| 229212 | 7.5 | 危険 | suskunduygular | - | SuskunDuygular Uyelik Sistemi の unuttum.asp における SQL インジェクションの脆弱性 | - | CVE-2007-4114 | 2012-12-20 18:33 | 2007-07-31 | Show | GitHub Exploit DB Packet Storm |
| 229213 | 7.5 | 危険 | phpmyforum | - | phpMyForum の editpost.php における SQL インジェクションの脆弱性 | - | CVE-2007-4107 | 2012-12-20 18:33 | 2007-06-7 | Show | GitHub Exploit DB Packet Storm |
| 229214 | 4.3 | 警告 | sblog | - | sBlog の search.php におけるクロスサイトスクリプティングの脆弱性 | - | CVE-2007-4102 | 2012-12-20 18:33 | 2007-07-31 | Show | GitHub Exploit DB Packet Storm |
| 229215 | 5.8 | 警告 | The Tor Project | - | Tor における重要な情報を取得される脆弱性 | - | CVE-2007-4099 | 2012-12-20 18:33 | 2007-07-30 | Show | GitHub Exploit DB Packet Storm |
| 229216 | 5.8 | 警告 | The Tor Project | - | Tor における任意のストリームへセルを挿入される脆弱性 | - | CVE-2007-4098 | 2012-12-20 18:33 | 2007-07-30 | Show | GitHub Exploit DB Packet Storm |
| 229217 | 6.4 | 警告 | The Tor Project | - | Tor における仕様に反して重要な情報を取得される脆弱性 | - | CVE-2007-4097 | 2012-12-20 18:33 | 2007-07-30 | Show | GitHub Exploit DB Packet Storm |
| 229218 | 5.8 | 警告 | The Tor Project | - | Tor におけるバッファオーバーフローの脆弱性 | - | CVE-2007-4096 | 2012-12-20 18:33 | 2007-07-30 | Show | GitHub Exploit DB Packet Storm |
| 229219 | 6.8 | 警告 | rsync.samba.org | - | rsync の sender.c における任意のコードを実行される脆弱性 | - | CVE-2007-4091 | 2012-12-20 18:33 | 2007-08-15 | Show | GitHub Exploit DB Packet Storm |
| 229220 | 4.3 | 警告 | vikingboard | - | Vikingboard におけるクロスサイトスクリプティングの脆弱性 | - | CVE-2007-4090 | 2012-12-20 18:33 | 2007-07-30 | Show | GitHub Exploit DB Packet Storm |
NVD Vulnerability Information
Update Date:May 12, 2026, 5:06 a.m.
| No | CVSS | Level Attach Vector |
Vendor Name | Project Name | Title | CWE | CVE | Update Date | Publication Date | Show Affected | Exploit PoC Search |
|---|---|---|---|---|---|---|---|---|---|---|---|
| 223841 | 5.3 |
MEDIUM
Network |
telegram | telegram | The Privacy > Phone Number feature in the Telegram app 5.10 for Android and iOS provides an incorrect indication that the access level is Nobody, because attackers can find these numbers via the Grou… |
NVD-CWE-noinfo
|
CVE-2019-15514 | 2024-11-21 13:28 | 2019-08-23 | Show | GitHub Exploit DB Packet Storm |
| 223842 | 9.8 |
CRITICAL
Network |
it-novum | openitcockpit | openITCOCKPIT before 3.7.1 allows SSRF, aka RVID 5-445b21. |
CWE-918
Server-Side Request Forgery (SSRF) |
CVE-2019-15494 | 2024-11-21 13:28 | 2019-08-23 | Show | GitHub Exploit DB Packet Storm |
| 223843 | 7.5 |
HIGH
Network |
it-novum | openitcockpit | openITCOCKPIT before 3.7.1 allows deletion of files, aka RVID 4-445b21. |
NVD-CWE-noinfo
|
CVE-2019-15493 | 2024-11-21 13:28 | 2019-08-23 | Show | GitHub Exploit DB Packet Storm |
| 223844 | 6.1 |
MEDIUM
Network |
it-novum | openitcockpit | openITCOCKPIT before 3.7.1 has reflected XSS, aka RVID 3-445b21. |
CWE-79
Cross-site Scripting |
CVE-2019-15492 | 2024-11-21 13:28 | 2019-08-23 | Show | GitHub Exploit DB Packet Storm |
| 223845 | 8.8 |
HIGH
Network |
it-novum | openitcockpit | openITCOCKPIT before 3.7.1 has CSRF, aka RVID 2-445b21. |
CWE-352
Origin Validation Error |
CVE-2019-15491 | 2024-11-21 13:28 | 2019-08-23 | Show | GitHub Exploit DB Packet Storm |
| 223846 | 9.8 |
CRITICAL
Network |
it-novum | openitcockpit | openITCOCKPIT before 3.7.1 allows code injection, aka RVID 1-445b21. |
CWE-78
OS Command |
CVE-2019-15490 | 2024-11-21 13:28 | 2019-08-23 | Show | GitHub Exploit DB Packet Storm |
| 223847 | 6.1 |
MEDIUM
Network |
igniterealtime | openfire | Ignite Realtime Openfire before 4.4.1 has reflected XSS via an LDAP setup test. |
CWE-79
Cross-site Scripting |
CVE-2019-15488 | 2024-11-21 13:28 | 2019-08-23 | Show | GitHub Exploit DB Packet Storm |
| 223848 | 6.1 |
MEDIUM
Network |
schoolexperience | department_for_education_school_experience | DfE School Experience before v16333-GA has XSS via a teacher training URL. |
CWE-79
Cross-site Scripting |
CVE-2019-15487 | 2024-11-21 13:28 | 2019-08-23 | Show | GitHub Exploit DB Packet Storm |
| 223849 | 6.1 |
MEDIUM
Network |
django_js_reverse_project | django_js_reserve | django-js-reverse (aka Django JS Reverse) before 0.9.1 has XSS via js_reverse_inline. |
CWE-79
Cross-site Scripting |
CVE-2019-15486 | 2024-11-21 13:28 | 2019-08-23 | Show | GitHub Exploit DB Packet Storm |
| 223850 | 6.1 |
MEDIUM
Network |
boltcms | bolt | Bolt before 3.6.10 has XSS via createFolder or createFile in Controller/Async/FilesystemManager.php. |
CWE-79
Cross-site Scripting |
CVE-2019-15485 | 2024-11-21 13:28 | 2019-08-23 | Show | GitHub Exploit DB Packet Storm |