Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Feb. 9, 2026, 12:59 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
227521 7.5 危険 salims softhouse - ph03y3nk JAF CMS の module/shout/jafshout.php における "" で囲まれたセクション内の任意のコードを実行される脆弱性 - CVE-2006-5131 2012-12-20 18:02 2006-10-3 Show GitHub Exploit DB Packet Storm
227522 6.8 警告 salims softhouse - ph03y3nk JAF CMS におけるクロスサイトスクリプティングの脆弱性 - CVE-2006-5130 2012-12-20 18:02 2006-10-3 Show GitHub Exploit DB Packet Storm
227523 6.8 警告 salims softhouse - ph03y3nk JAF CMS におけるクロスサイトスクリプティングの脆弱性 - CVE-2006-5129 2012-12-20 18:02 2006-10-3 Show GitHub Exploit DB Packet Storm
227524 7.5 危険 powerportal - John Himmelman PowerPortal の index.php における PHP リモートファイルインクルージョンの脆弱性 - CVE-2006-5126 2012-12-20 18:02 2006-10-3 Show GitHub Exploit DB Packet Storm
227525 7.5 危険 phprojekt - Albrecht Guenther PHProjekt における PHP リモートファイルインクルージョンの脆弱性 - CVE-2006-5123 2012-12-20 18:02 2006-10-3 Show GitHub Exploit DB Packet Storm
227526 7.5 危険 postnuke software foundation - PostNuke の Admin セクションにおける SQL インジェクションの脆弱性 - CVE-2006-5121 2012-12-20 18:02 2006-10-3 Show GitHub Exploit DB Packet Storm
227527 4 警告 scott metoyer - Scott Metoyer Red Mombin におけるクロスサイトスクリプティングの脆弱性 - CVE-2006-5120 2012-12-20 18:02 2006-10-3 Show GitHub Exploit DB Packet Storm
227528 4 警告 Zen Cart - Zen Cart におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2006-5119 2012-12-20 18:02 2006-09-28 Show GitHub Exploit DB Packet Storm
227529 7.5 危険 phpselect - PHPSelect Web Development Division 用の PDD パッケージにおける PHP リモートファイルインクルージョンの脆弱性 - CVE-2006-5118 2012-12-20 18:02 2006-10-3 Show GitHub Exploit DB Packet Storm
227530 5 警告 The phpMyAdmin Project - phpMyAdmin における重要な情報を取得される脆弱性 - CVE-2006-5117 2012-12-20 18:02 2006-10-1 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:April 22, 2026, 4 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
198401 9.8 CRITICAL
Network 		sol-connect sol.connect_iset-mpp_meter_firmware SQL injection vulnerability in SOL.Connect ISET-mpp meter 1.2.4.2 and earlier allows remote attackers to execute arbitrary SQL commands via the user parameter in a login action. CWE-89
SQL Injection 		CVE-2017-11494 2024-11-21 12:07 2017-08-2 Show GitHub Exploit DB Packet Storm
198402 8.8 HIGH
Network 		joomla joomla\! The CMS installer in Joomla! before 3.7.4 does not verify a user's ownership of a webspace, which allows remote authenticated users to gain control of the target application by leveraging Certificate… CWE-295
Improper Certificate Validation  		CVE-2017-11364 2024-11-21 12:07 2017-08-2 Show GitHub Exploit DB Packet Storm
198403 9.8 CRITICAL
Network 		trendmicro deep_discovery_director A command injection vulnerability exists in Trend Micro Deep Discovery Director 1.1 that allows an attacker to restore accounts that can access the pre-configuration console. CWE-78
OS Command  		CVE-2017-11381 2024-11-21 12:07 2017-08-2 Show GitHub Exploit DB Packet Storm
198404 9.8 CRITICAL
Network 		trendmicro deep_discovery_director Backup archives were found to be encrypted with a static password across different installations, which suggest the same password may be used in all virtual appliance instances of Trend Micro Deep Di… CWE-798
 Use of Hard-coded Credentials 		CVE-2017-11380 2024-11-21 12:07 2017-08-2 Show GitHub Exploit DB Packet Storm
198405 7.5 HIGH
Network 		trendmicro deep_discovery_director Configuration and database backup archives are not signed or validated in Trend Micro Deep Discovery Director 1.1. CWE-345
 Insufficient Verification of Data Authenticity 		CVE-2017-11379 2024-11-21 12:07 2017-08-2 Show GitHub Exploit DB Packet Storm
198406 6.5 MEDIUM
Network 		stashcat heinekingmedia An issue was discovered in heinekingmedia StashCat through 1.7.5 for Android, through 0.0.80w for Web, and through 0.0.86 for Desktop. It uses RSA to exchange a secret for symmetric encryption of mes… NVD-CWE-noinfo
CVE-2017-11136 2024-11-21 12:07 2017-08-1 Show GitHub Exploit DB Packet Storm
198407 7.5 HIGH
Network 		stashcat heinekingmedia An issue was discovered in heinekingmedia StashCat through 1.7.5 for Android, through 0.0.80w for Web, and through 0.0.86 for Desktop. The logout mechanism does not check for authorization. Therefore… CWE-862
 Missing Authorization 		CVE-2017-11135 2024-11-21 12:07 2017-08-1 Show GitHub Exploit DB Packet Storm
198408 6.5 MEDIUM
Network 		stashcat heinekingmedia An issue was discovered in heinekingmedia StashCat through 1.7.5 for Android. The login credentials are written into a log file on the device. Hence, an attacker with access to the logs can read them. CWE-532
 Inclusion of Sensitive Information in Log Files 		CVE-2017-11134 2024-11-21 12:07 2017-08-1 Show GitHub Exploit DB Packet Storm
198409 7.5 HIGH
Network 		stashcat heinekingmedia An issue was discovered in heinekingmedia StashCat through 1.7.5 for Android, through 0.0.80w for Web, and through 0.0.86 for Desktop. To encrypt messages, AES in CBC mode is used with a pseudo-rando… CWE-327
 Use of a Broken or Risky Cryptographic Algorithm 		CVE-2017-11133 2024-11-21 12:07 2017-08-1 Show GitHub Exploit DB Packet Storm
198410 7.5 HIGH
Network 		heinekingmedia stashcat An issue was discovered in heinekingmedia StashCat before 1.5.18 for Android. No certificate pinning is implemented; therefore the attacker could issue a certificate for the backend and the applicati… CWE-295
Improper Certificate Validation  		CVE-2017-11132 2024-11-21 12:07 2017-08-1 Show GitHub Exploit DB Packet Storm