Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 11, 2026, 6:01 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
229461 6.8 警告 PHPMailer project - PHPMailer における任意のシェルコマンドを実行される脆弱性 - CVE-2007-3215 2012-12-20 18:19 2007-06-11 Show GitHub Exploit DB Packet Storm
229462 10 危険 PhpWiki - PhpWiki の lib/WikiUser/LDAP.php における認証を回避される脆弱性 - CVE-2007-3193 2012-12-20 18:19 2007-06-12 Show GitHub Exploit DB Packet Storm
229463 6.8 警告 vincent hor - Calendarix における SQL インジェクションの脆弱性 - CVE-2007-3183 2012-12-20 18:19 2007-06-26 Show GitHub Exploit DB Packet Storm
229464 4.3 警告 vincent hor - Calendarix におけるクロスサイトスクリプティングの脆弱性 - CVE-2007-3182 2012-12-20 18:19 2007-06-26 Show GitHub Exploit DB Packet Storm
229465 7.5 危険 zindizayn okul web sistemi - Zindizayn Okul Web Sistemi における SQL インジェクションの脆弱性 - CVE-2007-3178 2012-12-20 18:19 2007-06-11 Show GitHub Exploit DB Packet Storm
229466 7.5 危険 w2b - W2B Online Banking における SQL インジェクションの脆弱性 - CVE-2007-3175 2012-12-20 18:19 2007-06-11 Show GitHub Exploit DB Packet Storm
229467 4.3 警告 w2b - W2B Online Banking の auth.w2b におけるクロスサイトスクリプティングの脆弱性 - CVE-2007-3174 2012-12-20 18:19 2007-06-11 Show GitHub Exploit DB Packet Storm
229468 5 警告 uebimiau - Uebimiau Webmail の demo/pop3/error.php におけるディレクトリトラバーサルの脆弱性 - CVE-2007-3172 2012-12-20 18:19 2007-06-11 Show GitHub Exploit DB Packet Storm
229469 5 警告 uebimiau - Uebimiau Webmail における重要な情報を取得される脆弱性 - CVE-2007-3171 2012-12-20 18:19 2007-06-11 Show GitHub Exploit DB Packet Storm
229470 4.3 警告 uebimiau - Uebimiau Webmail におけるクロスサイトスクリプティングの脆弱性 - CVE-2007-3170 2012-12-20 18:19 2007-06-11 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 11, 2026, 4:09 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
223241 6.1 MEDIUM
Network 		wpdownloadmanager wordpress_download_manager The download-manager plugin before 2.9.94 for WordPress has XSS via the category shortcode feature, as demonstrated by the orderby or search[publish_date] parameter. CWE-79
Cross-site Scripting 		CVE-2019-15889 2024-11-21 13:29 2019-09-4 Show GitHub Exploit DB Packet Storm
223242 8.8 HIGH
Network 		metagauss profilegrid The profilegrid-user-profiles-groups-and-communities plugin before 2.8.6 for WordPress has remote code execution via an wp-admin/admin-ajax.php request with the action=pm_template_preview&html=<?php … CWE-94
Code Injection 		CVE-2019-15873 2024-11-21 13:29 2019-09-3 Show GitHub Exploit DB Packet Storm
223243 9.8 CRITICAL
Network 		wpbrigade loginpress The LoginPress plugin before 1.1.4 for WordPress has SQL injection via an import of settings. CWE-89
SQL Injection 		CVE-2019-15872 2024-11-21 13:29 2019-09-3 Show GitHub Exploit DB Packet Storm
223244 4.3 MEDIUM
Network 		wpbrigade loginpress The LoginPress plugin before 1.1.4 for WordPress has no capability check for updates to settings. CWE-862
 Missing Authorization 		CVE-2019-15871 2024-11-21 13:29 2019-09-3 Show GitHub Exploit DB Packet Storm
223245 5.4 MEDIUM
Network 		carspot_project carspot The CarSpot theme before 2.1.7 for WordPress has stored XSS via the Phone Number field. CWE-79
Cross-site Scripting 		CVE-2019-15870 2024-11-21 13:29 2019-09-3 Show GitHub Exploit DB Packet Storm
223246 5.4 MEDIUM
Network 		jobcareer_project jobcareer The JobCareer theme before 2.5.1 for WordPress has stored XSS. CWE-79
Cross-site Scripting 		CVE-2019-15869 2024-11-21 13:29 2019-09-3 Show GitHub Exploit DB Packet Storm
223247 8.8 HIGH
Network 		wpaffiliatemanager affiliates_manager The affiliates-manager plugin before 2.6.6 for WordPress has CSRF. CWE-352
 Origin Validation Error 		CVE-2019-15868 2024-11-21 13:29 2019-09-3 Show GitHub Exploit DB Packet Storm
223248 8.8 HIGH
Network 		omaksolutions slick-popup The slick-popup plugin before 1.7.2 for WordPress has a hardcoded OmakPass13# password for the slickpopupteam account, after a Subscriber calls a certain AJAX action. CWE-798
 Use of Hard-coded Credentials 		CVE-2019-15867 2024-11-21 13:29 2019-09-3 Show GitHub Exploit DB Packet Storm
223249 8.8 HIGH
Network 		crelly_slider_project crelly_slider The crelly-slider plugin before 1.3.5 for WordPress has arbitrary file upload via a PHP file inside a ZIP archive to wp_ajax_crellyslider_importSlider. CWE-434
 Unrestricted Upload of File with Dangerous Type  		CVE-2019-15866 2024-11-21 13:29 2019-09-3 Show GitHub Exploit DB Packet Storm
223250 8.8 HIGH
Network 		holest breadcrumbs_by_menu The breadcrumbs-by-menu plugin before 1.0.3 for WordPress has CSRF. CWE-352
 Origin Validation Error 		CVE-2019-15865 2024-11-21 13:29 2019-09-3 Show GitHub Exploit DB Packet Storm