Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 1, 2026, 12:10 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
227781 5 警告 yannick tanguy - ELSEIF CMS における重要な情報を取得される脆弱性 CWE-22
パス・トラバーサル 		CVE-2007-5306 2012-12-20 18:33 2007-10-9 Show GitHub Exploit DB Packet Storm
227782 7.5 危険 yannick tanguy - ELSEIF CMS における PHP リモートファイルインクルージョンの脆弱性 CWE-94
コード・インジェクション 		CVE-2007-5305 2012-12-20 18:33 2007-10-9 Show GitHub Exploit DB Packet Storm
227783 4.3 警告 yannick tanguy - ELSEIF CMS におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2007-5304 2012-12-20 18:33 2007-10-9 Show GitHub Exploit DB Packet Storm
227784 4.3 警告 snewscms - SnewsCMS Rus の news_page.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2007-5303 2012-12-20 18:33 2007-10-9 Show GitHub Exploit DB Packet Storm
227785 4.3 警告 splitside - Directory Image Gallery の photos.cfm におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2007-5292 2012-12-20 18:33 2007-10-9 Show GitHub Exploit DB Packet Storm
227786 4.3 警告 zomplog - Zomplog におけるファイルをダウンロードされる脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2007-5278 2012-12-20 18:33 2007-10-8 Show GitHub Exploit DB Packet Storm
227787 6.8 警告 trionic - Trionic Cite CMS における PHP リモートファイルインクルージョンの脆弱性 CWE-94
コード・インジェクション 		CVE-2007-5271 2012-12-20 18:33 2007-10-8 Show GitHub Exploit DB Packet Storm
227788 7.5 危険 phpfreelog - phpFreeLog の log.php における PHP リモートファイルインクルージョンの脆弱性 CWE-20
不適切な入力確認 		CVE-2007-5258 2012-12-20 18:33 2007-10-6 Show GitHub Exploit DB Packet Storm
227789 7.2 危険 VirusBlokAda Ltd. - VirusBlokAda Vba32 AntiVirus における権限を取得される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2007-5254 2012-12-20 18:33 2007-10-6 Show GitHub Exploit DB Packet Storm
227790 4.3 警告 webhost automation - Helm におけるクロスサイトスクリプティングの脆弱性 CWE-352
同一生成元ポリシー違反 		CVE-2007-5251 2012-12-20 18:33 2007-10-6 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 1, 2026, 4:54 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
213281 4.8 MEDIUM
Network 		qnap qts A stored cross-site scripting (XSS) vulnerability has been reported to affect multiple versions of QTS. If exploited, this vulnerability may allow an attacker to inject and execute scripts on the adm… CWE-79
Cross-site Scripting 		CVE-2019-7197 2024-11-21 13:47 2019-12-5 Show GitHub Exploit DB Packet Storm
213282 6.1 MEDIUM
Network 		schneider-electric andover_continuum_9680_firmware
andover_continuum_5740_firmware
andover_continuum_5720_firmware
andover_continuum_bcx4040_firmware
andover_continuum_bcx9640_firmware
andover_continuum_… 		A CWE-79: Failure to Preserve Web Page Structure vulnerability exists in Andover Continuum (models 9680, 5740 and 5720, bCX4040, bCX9640, 9900, 9940, 9924 and 9702) , which could enable a successful … CWE-79
Cross-site Scripting 		CVE-2019-6853 2024-11-21 13:47 2019-11-21 Show GitHub Exploit DB Packet Storm
213283 7.5 HIGH
Network 		schneider-electric bmx_p34x_firmware
bmx_noe_0100_firmware
bmx_noe_0110_firmware
bmx_noc_0401_firmware
tsx_p57x_firmware
tsx_ety_x103_firmware
140_cpu6x_firmware
140_noe_771x1_firmware
140_noc_7… 		A CWE-200: Information Exposure vulnerability exists in Modicon Controllers (M340 CPUs, M340 communication modules, Premium CPUs, Premium communication modules, Quantum CPUs, Quantum communication mo… CWE-200
Information Exposure 		CVE-2019-6852 2024-11-21 13:47 2019-11-21 Show GitHub Exploit DB Packet Storm
213284 7.5 HIGH
Network 		schneider-electric modicon_m580_firmware
modicon_m340_firmware
tsxmcpc002m_firmware
tsxmcpc512k_firmware
tsxmfpp001m_firmware
tsxmfpp002m_firmware
tsxmfpp004m_firmware
tsxmfpp512k_firmware
tsxmr… 		A CWE-538: File and Directory Information Exposure vulnerability exists in Modicon M580, Modicon M340, Modicon Premium , Modicon Quantum (all firmware versions), which could cause the disclosure of i… CWE-200
Information Exposure 		CVE-2019-6851 2024-11-21 13:47 2019-10-30 Show GitHub Exploit DB Packet Storm
213285 7.5 HIGH
Network 		schneider-electric modicon_m580_firmware
modicon_bmenoc_0311_firmware
modicon_bmenoc_0321_firmware 		A CWE-200: Information Exposure vulnerability exists in Modicon M580, Modicon BMENOC 0311, and Modicon BMENOC 0321, which could cause the disclosure of sensitive information when reading specific reg… CWE-200
Information Exposure 		CVE-2019-6850 2024-11-21 13:47 2019-10-30 Show GitHub Exploit DB Packet Storm
213286 7.5 HIGH
Network 		schneider-electric modicon_m580_firmware
modicon_bmenoc_0311_firmware
modicon_bmenoc_0321_firmware 		A CWE-200: Information Exposure vulnerability exists in Modicon M580, Modicon BMENOC 0311, and Modicon BMENOC 0321, which could cause the disclosure of sensitive information when using specific Modbu… CWE-200
Information Exposure 		CVE-2019-6849 2024-11-21 13:47 2019-10-30 Show GitHub Exploit DB Packet Storm
213287 8.6 HIGH
Network 		schneider-electric modicon_m580_firmware
modicon_bmenoc_0311_firmware
modicon_bmenoc_0321_firmware 		A CWE-755: Improper Handling of Exceptional Conditions vulnerability exists in Modicon M580 CPU (BMEx58*) and Modicon M580 communication module (BMENOC0311, BMENOC0321) (see notification for version … CWE-755
 Improper Handling of Exceptional Conditions 		CVE-2019-6848 2024-11-21 13:47 2019-10-30 Show GitHub Exploit DB Packet Storm
213288 4.9 MEDIUM
Network 		schneider-electric modicon_m580_firmware
modicon_m340_firmware
modicon_bmxcra_firmware
modicon_140cra_firmware 		A CWE-755: Improper Handling of Exceptional Conditions vulnerability exists in Modicon M580, Modicon M340, Modicon BMxCRA and 140CRA modules (all firmware versions), which could cause a Denial of Ser… CWE-755
 Improper Handling of Exceptional Conditions 		CVE-2019-6847 2024-11-21 13:47 2019-10-30 Show GitHub Exploit DB Packet Storm
213289 6.5 MEDIUM
Network 		schneider-electric modicon_m580_firmware
modicon_m340_firmware
modicon_bmxcra_firmware
modicon_140cra_firmware 		A CWE-319: Cleartext Transmission of Sensitive Information vulnerability exists in Modicon M580, Modicon M340, Modicon BMxCRA and 140CRA modules (all firmware versions), which could cause information… CWE-319
Cleartext Transmission of Sensitive Information 		CVE-2019-6846 2024-11-21 13:47 2019-10-30 Show GitHub Exploit DB Packet Storm
213290 4.9 MEDIUM
Network 		schneider-electric modicon_m580_firmware
modicon_m340_firmware
modicon_bmxcra_firmware
modicon_140cra_firmware 		A CWE-755: Improper Handling of Exceptional Conditions vulnerability exists in Modicon M580, Modicon M340, Modicon BMxCRA and 140CRA modules (all firmware versions), which could cause a Denial of Ser… CWE-755
 Improper Handling of Exceptional Conditions 		CVE-2019-6844 2024-11-21 13:47 2019-10-30 Show GitHub Exploit DB Packet Storm