Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 7, 2026, 2:09 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
226401 7.5 危険 phpmygallery - PHPmyGallery の _conf/_php-core/common-tpl-vars.php における PHP リモートファイルインクルージョンの脆弱性 CWE-94
コード・インジェクション
CVE-2008-6318 2012-12-20 19:10 2009-02-27 Show GitHub Exploit DB Packet Storm
226402 6.8 警告 phpmygallery - PHPmyGallery の _conf/_php-core/common-tpl-vars.php におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル
CVE-2008-6317 2012-12-20 19:10 2009-02-27 Show GitHub Exploit DB Packet Storm
226403 6.8 警告 phpmygallery - PHPmyGallery の _conf/core/common-tpl-vars.php におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル
CVE-2008-6316 2012-12-20 19:10 2009-02-27 Show GitHub Exploit DB Packet Storm
226404 7.5 危険 phpmygallery - PHPmyGallery の _conf/core/common-tpl-vars.php における PHP リモートファイルインクルージョンの脆弱性 CWE-94
コード・インジェクション
CVE-2008-6315 2012-12-20 19:10 2009-02-27 Show GitHub Exploit DB Packet Storm
226405 7.5 危険 phpBB - phpBB 用の Tag Board モジュールの tag_board.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2008-6314 2012-12-20 19:10 2009-02-27 Show GitHub Exploit DB Packet Storm
226406 7.5 危険 w3matter - W3matter RevSense の index.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2008-6310 2012-12-20 19:10 2009-02-26 Show GitHub Exploit DB Packet Storm
226407 7.5 危険 w3matter - W3matter AskPert の index.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2008-6309 2012-12-20 19:10 2009-02-26 Show GitHub Exploit DB Packet Storm
226408 5.1 警告 PunBB - PunBB 用の PMS におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル
CVE-2008-6308 2012-12-20 19:10 2009-02-26 Show GitHub Exploit DB Packet Storm
226409 4.3 警告 SoftbizScripts - Softbiz Classifieds Script の signinform.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2008-6306 2012-12-20 19:10 2009-02-26 Show GitHub Exploit DB Packet Storm
226410 7.5 危険 toursmanager - ToursManager の tourview.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2008-6303 2012-12-20 19:10 2009-02-26 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 7, 2026, 4:22 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
212391 5.4 MEDIUM
Network
harmistechnology je_messenger An issue was discovered in the Harmis JE Messenger component 1.2.2 for Joomla!. It is possible to craft messages in a way that JavaScript gets executed on the side of the receiving user when the mess… CWE-79
Cross-site Scripting
CVE-2019-9919 2024-11-21 13:52 2019-03-30 Show GitHub Exploit DB Packet Storm
212392 9.1 CRITICAL
Network
harmistechnology je_messenger An issue was discovered in the Harmis JE Messenger component 1.2.2 for Joomla!. Input does not get validated and queries are not written in a way to prevent SQL injection. Therefore arbitrary SQL-Sta… CWE-89
SQL Injection
CVE-2019-9918 2024-11-21 13:52 2019-03-30 Show GitHub Exploit DB Packet Storm
212393 6.8 MEDIUM
Physics
symantec norton_core_firmware Norton Core prior to v278 may be susceptible to an arbitrary code execution issue, which is a type of vulnerability that has the potential of allowing an individual to execute arbitrary commands or c… NVD-CWE-noinfo
CVE-2019-9695 2024-11-21 13:52 2019-03-29 Show GitHub Exploit DB Packet Storm
212394 6.5 MEDIUM
Network
amazon_affiliate_store_project amazon_affiliate_store PHP Scripts Mall Amazon Affiliate Store 2.1.6 allows Parameter Tampering of the payment amount. NVD-CWE-noinfo
CVE-2019-9864 2024-11-21 13:52 2019-03-29 Show GitHub Exploit DB Packet Storm
212395 9.8 CRITICAL
Network
abus secvest_wireless_alarm_system_fuaa50000_firmware
secvest_wireless_remote_control_fube50014_firmware
secvest_wireless_remote_control_fube50015_firmware
Due to the use of an insecure algorithm for rolling codes in the ABUS Secvest wireless alarm system FUAA50000 3.01.01 and its remote controls FUBE50014 and FUBE50015, an attacker is able to predict v… CWE-330
 Use of Insufficiently Random Values
CVE-2019-9863 2024-11-21 13:52 2019-03-27 Show GitHub Exploit DB Packet Storm
212396 6.5 MEDIUM
Adjacent
abus secvest_wireless_alarm_system_fuaa50000_firmware
secvest_wireless_remote_control_fube50014_firmware
secvest_wireless_remote_control_fube50015_firmware
An issue was discovered on ABUS Secvest wireless alarm system FUAA50000 3.01.01 in conjunction with Secvest remote control FUBE50014 or FUBE50015. Because "encrypted signal transmission" is missing, … CWE-311
Missing Encryption of Sensitive Data
CVE-2019-9862 2024-11-21 13:52 2019-03-27 Show GitHub Exploit DB Packet Storm
212397 7.5 HIGH
Network
abus secvest_wireless_alarm_system_fuaa50000_firmware
secvest_wireless_remote_control_fube50014_firmware
secvest_wireless_remote_control_fube50015_firmware
Due to unencrypted signal communication and predictability of rolling codes, an attacker can "desynchronize" an ABUS Secvest wireless remote control (FUBE50014 or FUBE50015) relative to its controlle… CWE-330
CWE-319
 Use of Insufficiently Random Values
Cleartext Transmission of Sensitive Information
CVE-2019-9860 2024-11-21 13:52 2019-03-28 Show GitHub Exploit DB Packet Storm
212398 6.5 MEDIUM
Network
znc
canonical
fedoraproject
znc
ubuntu_linux
fedora
ZNC before 1.7.3-rc1 allows an existing remote user to cause a Denial of Service (crash) via invalid encoding. CWE-20
 Improper Input Validation 
CVE-2019-9917 2024-11-21 13:52 2019-03-27 Show GitHub Exploit DB Packet Storm
212399 8.8 HIGH
Network
phoenixcontact fl_nat_smn_8tx-m-dmg_firmware
fl_nat_smn_8tx-m_firmware
fl_nat_smn_8tx_firmware
fl_nat_smcs_8tx_firmware
An issue was discovered on PHOENIX CONTACT FL NAT SMCS 8TX, FL NAT SMN 8TX, FL NAT SMN 8TX-M, and FL NAT SMN 8TX-M-DMG devices. There is unauthorized access to the WEB-UI by attackers arriving from t… CWE-384
 Session Fixation
CVE-2019-9744 2024-11-21 13:52 2019-03-27 Show GitHub Exploit DB Packet Storm
212400 8.8 HIGH
Network
phoenixcontact rad-80211-xd\/hp-bus_firmware
rad-80211-xd_firmware
An issue was discovered on PHOENIX CONTACT RAD-80211-XD and RAD-80211-XD/HP-BUS devices. Command injection can occur in the WebHMI component. CWE-77
Command Injection
CVE-2019-9743 2024-11-21 13:52 2019-03-27 Show GitHub Exploit DB Packet Storm