Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":April 29, 2026, 2 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
227711 7.5 危険 pl-php - pL-PHP の login.php における SQL インジェクションの脆弱性 - CVE-2007-2006 2012-12-20 18:19 2007-04-12 Show GitHub Exploit DB Packet Storm
227712 7.5 危険 raphael limbach - Crea-Book の admin/admin.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2007-2000 2012-12-20 18:19 2007-04-12 Show GitHub Exploit DB Packet Storm
227713 4.3 警告 Youngzsoft - CmailServer WebMail の mail/signup.asp におけるクロスサイトスクリプティングの脆弱性 - CVE-2007-1991 2012-12-20 18:19 2007-04-12 Show GitHub Exploit DB Packet Storm
227714 7.5 危険 sam crew - Sam Crew MyBlog の games.php における PHP リモートファイルインクルージョンの脆弱性 - CVE-2007-1990 2012-12-20 18:19 2007-04-12 Show GitHub Exploit DB Packet Storm
227715 4.3 警告 phpecho cms - PHPEcho CMS の kernel/filters.inc.php におけるクロスサイトスクリプティングの脆弱性 - CVE-2007-1988 2012-12-20 18:19 2007-04-11 Show GitHub Exploit DB Packet Storm
227716 7.5 危険 phpexplorator - phpexplorator の phpexplorator.php における PHP リモートファイルインクルージョンの脆弱性 - CVE-2007-1985 2012-12-20 18:19 2007-04-11 Show GitHub Exploit DB Packet Storm
227717 7.5 危険 really simple php and ajax - RSPA における PHP リモートファイルインクルージョンの脆弱性 - CVE-2007-1982 2012-12-20 18:19 2007-04-11 Show GitHub Exploit DB Packet Storm
227718 7.5 危険 有限会社ブルームーン - XOOPS 用の PopnupBlog モジュールにおける SQL インジェクションの脆弱性 - CVE-2007-1979 2012-12-20 18:19 2007-04-11 Show GitHub Exploit DB Packet Storm
227719 7.5 危険 slaed - SLAED CMS における PHP リモートファイルインクルージョンの脆弱性 - CVE-2007-1975 2012-12-20 18:19 2007-04-11 Show GitHub Exploit DB Packet Storm
227720 7.5 危険 wf-sections
XOOPS		 - Xoops モジュールで使用される WF-Section における SQL インジェクションの脆弱性 - CVE-2007-1974 2012-12-20 18:19 2007-04-9 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:April 29, 2026, 4:51 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
211471 7.5 HIGH
Network 		wireshark
debian 		wireshark
debian_linux 		In Wireshark 2.4.0 to 2.4.12 and 2.6.0 to 2.6.6, the TCAP dissector could crash. This was addressed in epan/dissectors/asn1/tcap/tcap.cnf by avoiding NULL pointer dereferences. CWE-476
 NULL Pointer Dereference 		CVE-2019-9208 2024-11-21 13:51 2019-02-28 Show GitHub Exploit DB Packet Storm
211472 6.5 MEDIUM
Network 		gnu
fedoraproject
suse 		pspp
fedora
backports 		There is a reachable assertion abort in the function write_long_string_missing_values() in data/sys-file-writer.c in libdata.a in GNU PSPP 1.2.0 that will lead to denial of service. CWE-617
 Reachable Assertion 		CVE-2019-9211 2024-11-21 13:51 2019-02-28 Show GitHub Exploit DB Packet Storm
211473 9.8 CRITICAL
Network 		antfin sofa-hessian SOFA-Hessian through 4.0.2 allows remote attackers to execute arbitrary commands via a crafted serialized Hessian object because blacklisting of com.caucho.naming.QName and com.sun.org.apache.xpath.i… CWE-184
CWE-502
 Incomplete Blacklist
 Deserialization of Untrusted Data 		CVE-2019-9212 2024-11-21 13:51 2019-02-28 Show GitHub Exploit DB Packet Storm
211474 7.8 HIGH
Local 		advancemame
debian
canonical
fedoraproject 		advancecomp
debian_linux
ubuntu_linux
fedora 		In AdvanceCOMP 2.1, png_compress in pngex.cc in advpng has an integer overflow upon encountering an invalid PNG size, which results in an attempted memcpy to write into a buffer that is too small. (T… CWE-125
CWE-190
Out-of-bounds Read
 Integer Overflow or Wraparound 		CVE-2019-9210 2024-11-21 13:51 2019-02-27 Show GitHub Exploit DB Packet Storm
211475 9.8 CRITICAL
Network 		phoenixcontact ilc_131_eth_firmware
ilc_131_eth\/xc_firmware
ilc_151_eth_firmware
ilc_151_eth\/xc_firmware
ilc_171_eth_2tx_firmware
ilc_191_eth_2tx_firmware
ilc_191_me\/an_firmware
axc_1050_fir… 		Multiple Phoenix Contact devices allow remote attackers to establish TCP sessions to port 1962 and obtain sensitive information or make changes, as demonstrated by using the Create Backup feature to … CWE-306
Missing Authentication for Critical Function 		CVE-2019-9201 2024-11-21 13:51 2019-02-27 Show GitHub Exploit DB Packet Storm
211476 8.8 HIGH
Network 		freedesktop
debian
canonical 		poppler
debian_linux
ubuntu_linux 		A heap-based buffer underwrite exists in ImageStream::getLine() located at Stream.cc in Poppler 0.74.0 that can (for example) be triggered by sending a crafted PDF file to the pdfimages binary. It al… CWE-787
 Out-of-bounds Write 		CVE-2019-9200 2024-11-21 13:51 2019-02-27 Show GitHub Exploit DB Packet Storm
211477 8.8 HIGH
Network 		podofo_project
fedoraproject 		podofo
fedora 		PoDoFo::Impose::PdfTranslator::setSource() in pdftranslator.cpp in PoDoFo 0.9.6 has a NULL pointer dereference that can (for example) be triggered by sending a crafted PDF file to the podofoimpose bi… CWE-476
 NULL Pointer Dereference 		CVE-2019-9199 2024-11-21 13:51 2019-02-27 Show GitHub Exploit DB Packet Storm
211478 9.8 CRITICAL
Network 		grin grin util/src/zip.rs in Grin before 1.0.2 mishandles suspicious files. An attacker can execute arbitrary code via directory traversal in a ZIP archive. CWE-22
Path Traversal 		CVE-2019-9195 2024-11-21 13:51 2019-02-27 Show GitHub Exploit DB Packet Storm
211479 9.8 CRITICAL
Network 		std42 elfinder elFinder before 2.1.48 has a command injection vulnerability in the PHP connector. CWE-78
OS Command  		CVE-2019-9194 2024-11-21 13:51 2019-02-27 Show GitHub Exploit DB Packet Storm
211480 7.5 HIGH
Network 		gnu glibc In the GNU C Library (aka glibc or libc6) through 2.29, check_dst_limits_calc_pos_1 in posix/regexec.c has Uncontrolled Recursion, as demonstrated by '(|)(\\1\\1)*' in grep, a different issue than CV… CWE-674
 Uncontrolled Recursion 		CVE-2019-9192 2024-11-21 13:51 2019-02-27 Show GitHub Exploit DB Packet Storm