Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 10, 2026, 4 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
229281 10 危険 Progress Software Corporation - Progress Webspeed Messenger における任意のファイルを実行される脆弱性 CWE-DesignError
CVE-2007-2266 2012-12-20 18:19 2007-04-25 Show GitHub Exploit DB Packet Storm
229282 6.8 警告 phpee - YA Book におけるクロスサイトスクリプティングの脆弱性 - CVE-2007-2265 2012-12-20 18:19 2007-04-25 Show GitHub Exploit DB Packet Storm
229283 7.5 危険 sinato - Sinato jmuffin の html/php/detail.php における PHP リモートファイルインクルージョンの脆弱性 CWE-94
コード・インジェクション 		CVE-2007-2262 2012-12-20 18:19 2007-04-25 Show GitHub Exploit DB Packet Storm
229284 7.5 危険 realink - C-Arbre の espaces/communiques/annotations.php における PHP リモートファイルインクルージョンの脆弱性 - CVE-2007-2261 2012-12-20 18:19 2007-04-25 Show GitHub Exploit DB Packet Storm
229285 7.5 危険 phpmybibli - PHPMyBibli の includes/init.inc.php における PHP リモートファイルインクルージョンの脆弱性 - CVE-2007-2258 2012-12-20 18:19 2007-04-25 Show GitHub Exploit DB Packet Storm
229286 4.3 警告 tjschat - TJSChat の you.php におけるクロスサイトスクリプティングの脆弱性 - CVE-2007-2256 2012-12-20 18:19 2007-04-25 Show GitHub Exploit DB Packet Storm
229287 7.5 危険 Xaraya - Xaraya の Roles モジュールにおける権限を取得される脆弱性 - CVE-2007-2251 2012-12-20 18:19 2007-04-22 Show GitHub Exploit DB Packet Storm
229288 7.5 危険 phpmyspace - phpMySpace の modules/news/article.php における SQL インジェクションの脆弱性 - CVE-2007-2247 2012-12-20 18:19 2007-04-25 Show GitHub Exploit DB Packet Storm
229289 6.8 警告 The phpMyAdmin Project - phpMyAdmin におけるクロスサイトスクリプティングの脆弱性 - CVE-2007-2245 2012-12-20 18:19 2007-04-25 Show GitHub Exploit DB Packet Storm
229290 6.8 警告 PunBB - PunBB の footer.php における include/user/ 配下のローカルファイルをインクルードされる脆弱性 - CVE-2007-2236 2012-12-20 18:19 2007-04-25 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 10, 2026, 4:58 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
223521 5.5 MEDIUM
Local 		jc21 nginx_proxy_manager jc21 Nginx Proxy Manager before 2.0.13 allows %2e%2e%2f directory traversal. CWE-22
Path Traversal 		CVE-2019-15517 2024-11-21 13:28 2019-08-24 Show GitHub Exploit DB Packet Storm
223522 7.5 HIGH
Network 		cuberite cuberite Cuberite before 2019-06-11 allows webadmin directory traversal via ....// because the protection mechanism simply removes one ../ substring. CWE-22
Path Traversal 		CVE-2019-15516 2024-11-21 13:28 2019-08-24 Show GitHub Exploit DB Packet Storm
223523 5.3 MEDIUM
Network 		telegram telegram The Privacy > Phone Number feature in the Telegram app 5.10 for Android and iOS provides an incorrect indication that the access level is Nobody, because attackers can find these numbers via the Grou… NVD-CWE-noinfo
CVE-2019-15514 2024-11-21 13:28 2019-08-23 Show GitHub Exploit DB Packet Storm
223524 9.8 CRITICAL
Network 		it-novum openitcockpit openITCOCKPIT before 3.7.1 allows SSRF, aka RVID 5-445b21. CWE-918
Server-Side Request Forgery (SSRF)  		CVE-2019-15494 2024-11-21 13:28 2019-08-23 Show GitHub Exploit DB Packet Storm
223525 7.5 HIGH
Network 		it-novum openitcockpit openITCOCKPIT before 3.7.1 allows deletion of files, aka RVID 4-445b21. NVD-CWE-noinfo
CVE-2019-15493 2024-11-21 13:28 2019-08-23 Show GitHub Exploit DB Packet Storm
223526 6.1 MEDIUM
Network 		it-novum openitcockpit openITCOCKPIT before 3.7.1 has reflected XSS, aka RVID 3-445b21. CWE-79
Cross-site Scripting 		CVE-2019-15492 2024-11-21 13:28 2019-08-23 Show GitHub Exploit DB Packet Storm
223527 8.8 HIGH
Network 		it-novum openitcockpit openITCOCKPIT before 3.7.1 has CSRF, aka RVID 2-445b21. CWE-352
 Origin Validation Error 		CVE-2019-15491 2024-11-21 13:28 2019-08-23 Show GitHub Exploit DB Packet Storm
223528 9.8 CRITICAL
Network 		it-novum openitcockpit openITCOCKPIT before 3.7.1 allows code injection, aka RVID 1-445b21. CWE-78
OS Command  		CVE-2019-15490 2024-11-21 13:28 2019-08-23 Show GitHub Exploit DB Packet Storm
223529 6.1 MEDIUM
Network 		igniterealtime openfire Ignite Realtime Openfire before 4.4.1 has reflected XSS via an LDAP setup test. CWE-79
Cross-site Scripting 		CVE-2019-15488 2024-11-21 13:28 2019-08-23 Show GitHub Exploit DB Packet Storm
223530 6.1 MEDIUM
Network 		schoolexperience department_for_education_school_experience DfE School Experience before v16333-GA has XSS via a teacher training URL. CWE-79
Cross-site Scripting 		CVE-2019-15487 2024-11-21 13:28 2019-08-23 Show GitHub Exploit DB Packet Storm