Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 14, 2026, 6:01 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
229241 7.5 危険 ssl-explorer - SSL-Explorer の selectLanguage.do における HTTP トランザクション内にデータを挿入される脆弱性 CWE-20
不適切な入力確認 		CVE-2007-5832 2012-12-20 18:33 2007-08-3 Show GitHub Exploit DB Packet Storm
229242 5 警告 ssl-explorer - SSL-Explorer の fileSystem.do におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2007-5831 2012-12-20 18:33 2007-11-5 Show GitHub Exploit DB Packet Storm
229243 6 警告 シマンテック - Macintosh 用の Symantec AntiVirus などの製品の Disk Mount スキャナにおける root 権限を取得される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2007-5829 2012-12-20 18:33 2007-11-1 Show GitHub Exploit DB Packet Storm
229244 7.5 危険 scribe - Ben Ng Scribe の forum.php におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2007-5823 2012-12-20 18:33 2007-11-5 Show GitHub Exploit DB Packet Storm
229245 7.5 危険 scribe - Ben Ng Scribe の forum.php における regged/ 配下の特定のファイルへ任意の PHP コードを挿入される脆弱性 CWE-94
コード・インジェクション 		CVE-2007-5822 2012-12-20 18:33 2007-11-5 Show GitHub Exploit DB Packet Storm
229246 7.6 危険 sblog - sBlog の blocks_edit_do.php におけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反 		CVE-2007-5818 2012-12-20 18:33 2007-11-5 Show GitHub Exploit DB Packet Storm
229247 10 危険 SonicWALL - SonicWall SSL-VPN 200 および SSL-VPN 2000/4000 の WebCacheCleaner ActiveX コントロールにおける絶対パストラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2007-5815 2012-12-20 18:33 2007-11-5 Show GitHub Exploit DB Packet Storm
229248 9.3 危険 SonicWALL - SonicWall SSL-VPN NetExtender NELaunchCtrl ActiveX コントロールにおけるバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2007-5814 2012-12-20 18:33 2007-11-5 Show GitHub Exploit DB Packet Storm
229249 6.8 警告 ssreader - SSReader の Ultra Star Reader ActiveX コントロールにおけるバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2007-5807 2012-12-20 18:33 2007-11-5 Show GitHub Exploit DB Packet Storm
229250 7.5 危険 work system e-commerce - WORK system e-commerce における脆弱性 CWE-noinfo
情報不足 		CVE-2007-5801 2012-12-20 18:33 2007-11-2 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 15, 2026, 4:28 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
224111 5.9 MEDIUM
Network 		jenkins google_compute_engine Jenkins Google Compute Engine Plugin 4.1.1 and earlier does not verify SSH host keys when connecting agents created by the plugin, enabling man-in-the-middle attacks. CWE-639
 Authorization Bypass Through User-Controlled Key 		CVE-2019-16546 2024-11-21 13:30 2019-11-22 Show GitHub Exploit DB Packet Storm
224112 6.5 MEDIUM
Network 		qmetry jenkins_qmetry_for_jira Jenkins QMetry for JIRA - Test Management Plugin transmits credentials in its configuration in plain text as part of job configuration forms, potentially resulting in their exposure. CWE-319
Cleartext Transmission of Sensitive Information 		CVE-2019-16545 2024-11-21 13:30 2019-11-22 Show GitHub Exploit DB Packet Storm
224113 8.8 HIGH
Network 		qmetry jenkins_qmetry_for_jira Jenkins QMetry for JIRA - Test Management Plugin 1.12 and earlier stores credentials unencrypted in job config.xml files on the Jenkins master where they can be viewed by users with Extended Read per… CWE-522
 Insufficiently Protected Credentials 		CVE-2019-16544 2024-11-21 13:30 2019-11-22 Show GitHub Exploit DB Packet Storm
224114 5.5 MEDIUM
Local 		jenkins spira_importer Jenkins Spira Importer Plugin 3.2.2 and earlier stores credentials unencrypted in its global configuration file on the Jenkins master where they can be viewed by users with access to the master file … CWE-522
 Insufficiently Protected Credentials 		CVE-2019-16543 2024-11-21 13:30 2019-11-22 Show GitHub Exploit DB Packet Storm
224115 6.5 MEDIUM
Network 		jenkins anchore_container_image_scanner Jenkins Anchore Container Image Scanner Plugin 1.0.19 and earlier stores credentials unencrypted in job config.xml files on the Jenkins master where they can be viewed by users with Extended Read per… CWE-522
 Insufficiently Protected Credentials 		CVE-2019-16542 2024-11-21 13:30 2019-11-22 Show GitHub Exploit DB Packet Storm
224116 9.9 CRITICAL
Network 		jenkins jira Jenkins JIRA Plugin 3.0.10 and earlier does not declare the correct (folder) scope for per-folder Jira site definitions, allowing users to select and use credentials with System scope. CWE-668
 Exposure of Resource to Wrong Sphere 		CVE-2019-16541 2024-11-21 13:30 2019-11-22 Show GitHub Exploit DB Packet Storm
224117 6.5 MEDIUM
Network 		jenkins support_core A path traversal vulnerability in Jenkins Support Core Plugin 2.63 and earlier allows attackers with Overall/Read permission to delete arbitrary files on the Jenkins master. CWE-22
Path Traversal 		CVE-2019-16540 2024-11-21 13:30 2019-11-22 Show GitHub Exploit DB Packet Storm
224118 6.5 MEDIUM
Network 		jenkins support_core A missing permission check in Jenkins Support Core Plugin 2.63 and earlier allows attackers with Overall/Read permission to delete support bundles. CWE-281
 Improper Preservation of Permissions 		CVE-2019-16539 2024-11-21 13:30 2019-11-22 Show GitHub Exploit DB Packet Storm
224119 8.8 HIGH
Network 		jenkins script_security A sandbox bypass vulnerability in Jenkins Script Security Plugin 1.67 and earlier related to the handling of default parameter expressions in closures allowed attackers to execute arbitrary code in s… CWE-863
 Incorrect Authorization 		CVE-2019-16538 2024-11-21 13:30 2019-11-22 Show GitHub Exploit DB Packet Storm
224120 9.8 CRITICAL
Network 		linksys velop_whw0303_firmware
velop_whw0302_firmware
velop_whw0301_firmware 		Belkin Linksys Velop 1.1.8.192419 devices allows remote attackers to discover the recovery key via a direct request for the /sysinfo_json.cgi URI. CWE-425
 Direct Request ('Forced Browsing') 		CVE-2019-16340 2024-11-21 13:30 2019-11-22 Show GitHub Exploit DB Packet Storm