Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 10, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
229261 7.5 危険 php-generics - PHP-Generics における PHP リモートファイルインクルージョンの脆弱性 - CVE-2007-2346 2012-12-20 18:19 2007-04-27 Show GitHub Exploit DB Packet Storm
229262 7.5 危険 phpbandmanager - phpBandManager の suite/index.php における PHP リモートファイルインクルージョンの脆弱性 - CVE-2007-2341 2012-12-20 18:19 2007-04-27 Show GitHub Exploit DB Packet Storm
229263 6.8 警告 phporacleview - phporacleview の inc/include_all.inc.php における PHP リモートファイルインクルージョンの脆弱性 CWE-94
コード・インジェクション 		CVE-2007-2340 2012-12-20 18:19 2007-04-27 Show GitHub Exploit DB Packet Storm
229264 7.5 危険 shop-script - Shop-Script の cart.php における PHP リモートファイルインクルージョンの脆弱性 - CVE-2007-2331 2012-12-20 18:19 2007-04-26 Show GitHub Exploit DB Packet Storm
229265 7.5 危険 searchactivity - Searchactivity の searchbot.php における PHP リモートファイルインクルージョンの脆弱性 - CVE-2007-2329 2012-12-20 18:19 2007-04-26 Show GitHub Exploit DB Packet Storm
229266 7.5 危険 phpmytgp - phpMYTGP の addvip.php における PHP リモートファイルインクルージョンの脆弱性 - CVE-2007-2328 2012-12-20 18:19 2007-04-26 Show GitHub Exploit DB Packet Storm
229267 10 危険 SilverStripe - SilverStripe の検索機能における脆弱性 - CVE-2007-2321 2012-12-20 18:19 2007-04-17 Show GitHub Exploit DB Packet Storm
229268 7.5 危険 VWar - PHP-Nuke 用の VWar モジュールにおける SQL インジェクションの脆弱性 - CVE-2007-2312 2012-12-20 18:19 2007-04-26 Show GitHub Exploit DB Packet Storm
229269 7.5 危険 webkalk2 - WebKalk2 の engine/engine.inc.php における PHP リモートファイルインクルージョンの脆弱性 - CVE-2007-2307 2012-12-20 18:19 2007-04-26 Show GitHub Exploit DB Packet Storm
229270 4.3 警告 VWar - PHP-Nuke 用の VWar モジュールにおけるクロスサイトスクリプティングの脆弱性 - CVE-2007-2306 2012-12-20 18:19 2007-04-26 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 10, 2026, 4:58 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
222761 4.3 MEDIUM
Network 		limesurvey limesurvey A clickjacking vulnerability was found in Limesurvey before 3.17.14. CWE-1021
 Improper Restriction of Rendered UI Layers or Frames 		CVE-2019-16175 2024-11-21 13:30 2019-09-10 Show GitHub Exploit DB Packet Storm
222762 8.8 HIGH
Network 		limesurvey limesurvey An XML injection vulnerability was found in Limesurvey before 3.17.14 that allows remote attackers to import specially crafted XML files and execute code or compromise data integrity. CWE-611
XXE 		CVE-2019-16174 2024-11-21 13:30 2019-09-10 Show GitHub Exploit DB Packet Storm
222763 6.1 MEDIUM
Network 		liferay liferay_portal Liferay Portal through 7.2.0 GA1 allows XSS via a journal article title to journal_article/page.jsp in journal/journal-taglib. CWE-79
Cross-site Scripting 		CVE-2019-16147 2024-11-21 13:30 2019-09-10 Show GitHub Exploit DB Packet Storm
222764 6.1 MEDIUM
Network 		padrinorb padrino-contrib The breadcrumbs contributed module through 0.2.0 for Padrino Framework allows XSS via a caption. CWE-79
Cross-site Scripting 		CVE-2019-16145 2024-11-21 13:30 2019-09-10 Show GitHub Exploit DB Packet Storm
222765 9.8 CRITICAL
Network 		dlink dir-868l_firmware
dir-885l_firmware
dir-895l_firmware 		SharePort Web Access on D-Link DIR-868L REVB through 2.03, DIR-885L REVA through 1.20, and DIR-895L REVA through 1.21 devices allows Authentication Bypass, as demonstrated by a direct request to fold… CWE-287
Improper Authentication 		CVE-2019-16190 2024-11-21 13:30 2019-09-10 Show GitHub Exploit DB Packet Storm
222766 5.4 MEDIUM
Network 		limesurvey limesurvey LimeSurvey before v3.17.14 allows reflected XSS for escalating privileges from a low-privileged account to, for example, SuperAdmin. This occurs in application/core/Survey_Common_Action.php, CWE-79
Cross-site Scripting 		CVE-2019-16173 2024-11-21 13:30 2019-09-10 Show GitHub Exploit DB Packet Storm
222767 5.4 MEDIUM
Network 		limesurvey limesurvey LimeSurvey before v3.17.14 allows stored XSS for escalating privileges from a low-privileged account to, for example, SuperAdmin. The attack uses a survey group in which the title contains JavaScript… CWE-79
Cross-site Scripting 		CVE-2019-16172 2024-11-21 13:30 2019-09-10 Show GitHub Exploit DB Packet Storm
222768 5.5 MEDIUM
Local 		sysstat_project
fedoraproject
opensuse
canonical
debian 		sysstat
fedora
leap
ubuntu_linux
debian_linux 		sysstat before 12.1.6 has memory corruption due to an Integer Overflow in remap_struct() in sa_common.c. CWE-787
CWE-190
 Out-of-bounds Write
 Integer Overflow or Wraparound 		CVE-2019-16167 2024-11-21 13:30 2019-09-10 Show GitHub Exploit DB Packet Storm
222769 6.5 MEDIUM
Network 		gnu cflow GNU cflow through 1.6 has a heap-based buffer over-read in the nexttoken function in parser.c. CWE-125
Out-of-bounds Read 		CVE-2019-16166 2024-11-21 13:30 2019-09-10 Show GitHub Exploit DB Packet Storm
222770 6.5 MEDIUM
Network 		gnu cflow GNU cflow through 1.6 has a use-after-free in the reference function in parser.c. CWE-416
 Use After Free 		CVE-2019-16165 2024-11-21 13:30 2019-09-10 Show GitHub Exploit DB Packet Storm