Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 15, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
229551 10 危険 VMware - VMware Player および Workstation における脆弱性 CWE-noinfo
情報不足 		CVE-2007-5617 2012-12-20 18:33 2007-10-21 Show GitHub Exploit DB Packet Storm
229552 9.3 危険 SonicWALL - SonicWall SSL-VPN NetExtender NELaunchCtrl ActiveX コントロールにおけるスタックベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2007-5603 2012-12-20 18:33 2007-11-5 Show GitHub Exploit DB Packet Storm
229553 10 危険 swiftview - SwiftView Viewer におけるスタックベースのバッファーオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2007-5602 2012-12-20 18:33 2007-10-2 Show GitHub Exploit DB Packet Storm
229554 4.3 警告 The phpMyAdmin Project - phpMyAdmin におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2007-5589 2012-12-20 18:33 2007-10-17 Show GitHub Exploit DB Packet Storm
229555 5 警告 XScreenSaver project - xscreensaver におけるロックされたセッションへのアクセス権を取得される脆弱性 CWE-399
リソース管理の問題 		CVE-2007-5585 2012-12-20 18:33 2007-10-19 Show GitHub Exploit DB Packet Storm
229556 7.5 危険 Pligg - Pligg CMS の login.php におけるユーザのパスワードを再設定される脆弱性 CWE-255
証明書・パスワード管理 		CVE-2007-5579 2012-12-20 18:33 2007-10-18 Show GitHub Exploit DB Packet Storm
229557 7.5 危険 Secure Ideas - BASE における認証を回避される脆弱性 CWE-287
不適切な認証 		CVE-2007-5578 2012-12-20 18:33 2007-10-18 Show GitHub Exploit DB Packet Storm
229558 4.3 警告 treble designs - 1024 CMS におけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反 		CVE-2007-5575 2012-12-20 18:33 2007-10-18 Show GitHub Exploit DB Packet Storm
229559 6.8 警告 phpdj - PHPDJ の djpage.php における PHP リモートファイルインクルージョンの脆弱性 CWE-94
コード・インジェクション 		CVE-2007-5574 2012-12-20 18:33 2007-10-18 Show GitHub Exploit DB Packet Storm
229560 4.3 警告 sphpblog - Simple PHP Blog におけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反 		CVE-2007-5572 2012-12-20 18:33 2007-10-18 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 15, 2026, 4:28 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
222701 7.8 HIGH
Local 		shibboleth service_provider Shibboleth Service Provider (SP) 3.x before 3.1.0 shipped a spec file that calls chown on files in a directory controlled by the service user (the shibd account) after installation. This allows the u… CWE-59
Link Following 		CVE-2019-19191 2024-11-21 13:34 2019-11-22 Show GitHub Exploit DB Packet Storm
222702 9.8 CRITICAL
Network 		jalios jcms Jalios JCMS 10 allows attackers to access any part of the website and the WebDAV server with administrative privileges via a backdoor account, by using any username and the hardcoded dev password. CWE-798
 Use of Hard-coded Credentials 		CVE-2019-19033 2024-11-21 13:34 2019-11-22 Show GitHub Exploit DB Packet Storm
222703 5.5 MEDIUM
Local 		linux linux_kernel ext4_empty_dir in fs/ext4/namei.c in the Linux kernel through 5.3.12 allows a NULL pointer dereference because ext4_read_dirblock(inode,0,DIRENT_HTREE) can be zero. CWE-476
 NULL Pointer Dereference 		CVE-2019-19037 2024-11-21 13:34 2019-11-21 Show GitHub Exploit DB Packet Storm
222704 5.5 MEDIUM
Local 		linux
debian
canonical 		linux_kernel
debian_linux
ubuntu_linux 		__btrfs_free_extent in fs/btrfs/extent-tree.c in the Linux kernel through 5.3.12 calls btrfs_print_leaf in a certain ENOENT case, which allows local users to obtain potentially sensitive information … CWE-532
 Inclusion of Sensitive Information in Log Files 		CVE-2019-19039 2024-11-21 13:34 2019-11-21 Show GitHub Exploit DB Packet Storm
222705 5.5 MEDIUM
Local 		linux linux_kernel btrfs_root_node in fs/btrfs/ctree.c in the Linux kernel through 5.3.12 allows a NULL pointer dereference because rcu_dereference(root->node) can be zero. CWE-476
 NULL Pointer Dereference 		CVE-2019-19036 2024-11-21 13:34 2019-11-21 Show GitHub Exploit DB Packet Storm
222706 3.3 LOW
Local 		gnu
canonical
fedoraproject
debian 		glibc
ubuntu_linux
fedora
debian_linux 		On the x86-64 architecture, the GNU C Library (aka glibc) before 2.31 fails to ignore the LD_PREFER_MAP_32BIT_EXEC environment variable during program execution after a security transition, allowing … CWE-665
 Improper Initialization 		CVE-2019-19126 2024-11-21 13:34 2019-11-20 Show GitHub Exploit DB Packet Storm
222707 8.8 HIGH
Network 		phicomm k2\(psg1218\)_firmware /usr/lib/lua/luci/controller/admin/autoupgrade.lua on PHICOMM K2(PSG1218) V22.5.9.163 devices allows remote authenticated users to execute any command via shell metacharacters in the cgi-bin/luci aut… CWE-78
OS Command  		CVE-2019-19117 2024-11-21 13:34 2019-11-19 Show GitHub Exploit DB Packet Storm
222708 9.8 CRITICAL
Network 		newbee-mall_project newbee-mall main/resources/mapper/NewBeeMallGoodsMapper.xml in newbee-mall (aka New Bee) before 2019-10-23 allows search?goodsCategoryId=&keyword= SQL Injection. CWE-89
SQL Injection 		CVE-2019-19113 2024-11-21 13:34 2019-11-19 Show GitHub Exploit DB Packet Storm
222709 5.4 MEDIUM
Network 		octopus server A persistent cross-site scripting (XSS) vulnerability in Octopus Server 3.4.0 through 2019.10.5 allows remote authenticated attackers to inject arbitrary web script or HTML. CWE-79
Cross-site Scripting 		CVE-2019-19085 2024-11-21 13:34 2019-11-19 Show GitHub Exploit DB Packet Storm
222710 4.3 MEDIUM
Network 		octopus octopus_deploy In Octopus Deploy 3.3.0 through 2019.10.4, an authenticated user with PackagePush permission to upload packages could upload a maliciously crafted package, triggering an exception that exposes underl… CWE-434
 Unrestricted Upload of File with Dangerous Type  		CVE-2019-19084 2024-11-21 13:34 2019-11-19 Show GitHub Exploit DB Packet Storm