Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 15, 2026, 10 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
229331 7.5 危険 scottmanktelow - Stride における管理者権限を取得される脆脆弱性 CWE-200
情報漏えい 		CVE-2007-5432 2012-12-20 18:33 2007-10-12 Show GitHub Exploit DB Packet Storm
229332 7.5 危険 scottmanktelow - Stride における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2007-5430 2012-12-20 18:33 2007-10-12 Show GitHub Exploit DB Packet Storm
229333 4.3 警告 Umisoft - UMI CMS におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2007-5428 2012-12-20 18:33 2007-10-12 Show GitHub Exploit DB Packet Storm
229334 7.5 危険 Tiki Software Community Association - TikiWiki の tiki-graph_formula.php における任意のコードを実行される脆弱性 CWE-94
コード・インジェクション 		CVE-2007-5423 2012-12-20 18:33 2007-10-12 Show GitHub Exploit DB Packet Storm
229335 6.8 警告 quoc-huy - Joomla! 用の Quoc-Huy mp3_allopass コンポーネントにおける PHP リモートファイルインクルージョンの脆弱性 CWE-94
コード・インジェクション 		CVE-2007-5412 2012-12-20 18:33 2007-10-12 Show GitHub Exploit DB Packet Storm
229336 6.8 警告 picoflat cms - PicoFlat CMS の index.php における PHP リモートファイルインクルージョンの脆弱性 CWE-94
コード・インジェクション 		CVE-2007-5390 2012-12-20 18:33 2007-10-12 Show GitHub Exploit DB Packet Storm
229337 6.8 警告 webdesktop - WebDesktop における PHP リモートファイルインクルージョンの脆弱性 CWE-94
コード・インジェクション 		CVE-2007-5388 2012-12-20 18:33 2007-10-12 Show GitHub Exploit DB Packet Storm
229338 6.8 警告 pindorama - Pindorama の active/components/xmlrpc/client.php における PHP リモートファイルインクルージョンの脆弱性 CWE-94
コード・インジェクション 		CVE-2007-5387 2012-12-20 18:33 2007-10-12 Show GitHub Exploit DB Packet Storm
229339 4.3 警告 The phpMyAdmin Project - phpMyAdmin におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2007-5386 2012-12-20 18:33 2007-10-12 Show GitHub Exploit DB Packet Storm
229340 2.6 注意 サン・マイクロシステムズ - Sun JVM におけるマルチピン DNS リバインド攻撃を実行される脆弱性 CWE-16
CWE-20
CVE-2007-5375 2012-12-20 18:33 2007-10-11 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 15, 2026, 4:28 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
224081 6.5 MEDIUM
Network 		jenkins build_failure_analyzer A user-supplied regular expression in Jenkins Build Failure Analyzer Plugin 1.24.1 and earlier was processed in a way that wasn't interruptible, allowing attackers to have Jenkins evaluate a regular … CWE-400
 Uncontrolled Resource Consumption 		CVE-2019-16555 2024-11-21 13:30 2019-12-18 Show GitHub Exploit DB Packet Storm
224082 4.3 MEDIUM
Network 		jenkins build_failure_analyzer A missing permission check in Jenkins Build Failure Analyzer Plugin 1.24.1 and earlier allows attackers with Overall/Read permission to have Jenkins evaluate a computationally expensive regular expre… CWE-276
Incorrect Default Permissions  		CVE-2019-16554 2024-11-21 13:30 2019-12-18 Show GitHub Exploit DB Packet Storm
224083 8.8 HIGH
Network 		jenkins build_failure_analyzer A cross-site request forgery vulnerability in Jenkins Build Failure Analyzer Plugin 1.24.1 and earlier allows attackers to have Jenkins evaluate a computationally expensive regular expression. CWE-352
 Origin Validation Error 		CVE-2019-16553 2024-11-21 13:30 2019-12-18 Show GitHub Exploit DB Packet Storm
224084 5.4 MEDIUM
Network 		jenkins gerrit_trigger A missing permission check in Jenkins Gerrit Trigger Plugin 2.30.1 and earlier allows attackers with Overall/Read permission to connect to an attacker-specified HTTP URL or SSH server using attacker-… CWE-276
Incorrect Default Permissions  		CVE-2019-16552 2024-11-21 13:30 2019-12-18 Show GitHub Exploit DB Packet Storm
224085 8.8 HIGH
Network 		jenkins gerrit_trigger A cross-site request forgery vulnerability in Jenkins Gerrit Trigger Plugin 2.30.1 and earlier allows attackers to connect to an attacker-specified HTTP URL or SSH server using attacker-specified cre… CWE-352
 Origin Validation Error 		CVE-2019-16551 2024-11-21 13:30 2019-12-18 Show GitHub Exploit DB Packet Storm
224086 8.8 HIGH
Network 		jenkins maven A cross-site request forgery vulnerability in a connection test form method in Jenkins Maven Release Plugin 0.16.1 and earlier allows attackers to have Jenkins connect to an attacker specified web se… CWE-352
 Origin Validation Error 		CVE-2019-16550 2024-11-21 13:30 2019-12-18 Show GitHub Exploit DB Packet Storm
224087 8.1 HIGH
Network 		jenkins maven Jenkins Maven Release Plugin 0.16.1 and earlier does not configure the XML parser to prevent XML external entity (XXE) attacks, allowing man-in-the-middle attackers to have Jenkins parse crafted XML … CWE-611
XXE 		CVE-2019-16549 2024-11-21 13:30 2019-12-18 Show GitHub Exploit DB Packet Storm
224088 9.8 CRITICAL
Network 		intesync solismed Intesync Solismed 3.3sp1 allows Local File Inclusion (LFI), a different vulnerability than CVE-2019-15931. This leads to unauthenticated code execution. CWE-22
Path Traversal 		CVE-2019-16246 2024-11-21 13:30 2019-12-12 Show GitHub Exploit DB Packet Storm
224089 9.8 CRITICAL
Network 		weidmueller ie-sw-pl09m-5gc-4gt_firmware
ie-sw-pl09mt-5gc-4gt_firmware
ie-sw-pl18m-2gc-16tx_firmware
ie-sw-pl18mt-2gc-16tx_firmware
ie-sw-pl18m-2gc14tx2sc_firmware
ie-sw-pl18mt-2gc14tx2sc_firmware… 		An issue was discovered on Weidmueller IE-SW-VL05M 3.6.6 Build 16102415, IE-SW-VL08MT 3.5.2 Build 16102415, and IE-SW-PL10M 3.3.16 Build 16102416 devices. Authentication Information used in a cookie … CWE-330
 Use of Insufficiently Random Values 		CVE-2019-16674 2024-11-21 13:30 2019-12-7 Show GitHub Exploit DB Packet Storm
224090 6.5 MEDIUM
Network 		weidmueller ie-sw-pl09m-5gc-4gt_firmware
ie-sw-pl09mt-5gc-4gt_firmware
ie-sw-pl18m-2gc-16tx_firmware
ie-sw-pl18mt-2gc-16tx_firmware
ie-sw-pl18m-2gc14tx2sc_firmware
ie-sw-pl18mt-2gc14tx2sc_firmware… 		An issue was discovered on Weidmueller IE-SW-VL05M 3.6.6 Build 16102415, IE-SW-VL08MT 3.5.2 Build 16102415, and IE-SW-PL10M 3.3.16 Build 16102416 devices. Passwords are stored in cleartext and can be… CWE-522
 Insufficiently Protected Credentials 		CVE-2019-16673 2024-11-21 13:30 2019-12-7 Show GitHub Exploit DB Packet Storm