Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 1, 2026, 6 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
228081 5 警告 securecomputing - Secure Computing SecurityReporter の file.cgi における認証を回避される脆弱性 CWE-287
不適切な認証
CVE-2007-4043 2012-12-20 18:33 2007-07-27 Show GitHub Exploit DB Packet Storm
228082 9.3 危険 Yahoo! - Yahoo! Widgets の YDPCTL.dll におけるスタックベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー
CVE-2007-4034 2012-12-20 18:33 2007-07-27 Show GitHub Exploit DB Packet Storm
228083 7.5 危険 webSPELL - Webspell の index.php における絶対パストラバーサルの脆弱性 - CVE-2007-4028 2012-12-20 18:33 2007-07-26 Show GitHub Exploit DB Packet Storm
228084 6.8 警告 Telaxus LLC - epesi framework における任意の PHP コードを実行される脆弱性 - CVE-2007-4026 2012-12-20 18:33 2007-07-26 Show GitHub Exploit DB Packet Storm
228085 4.3 警告 サン・マイクロシステムズ - Windows 用の SJS Application Server における JSP ソースコードを取得される脆弱性 - CVE-2007-4025 2012-12-20 18:33 2007-07-24 Show GitHub Exploit DB Packet Storm
228086 4.3 警告 w1l3d4 - W1L3D4 Philboard の W1L3D4_aramasonuc.asp におけるクロスサイトスクリプティングの脆弱性 - CVE-2007-4024 2012-12-20 18:33 2007-07-26 Show GitHub Exploit DB Packet Storm
228087 4.3 警告 WordPress.org - WordPress 用の Blix テーマなどに関する特定の index.php インストールスクリプトにおけるクロスサイトスクリプティングの脆弱性 - CVE-2007-4014 2012-12-20 18:33 2007-07-25 Show GitHub Exploit DB Packet Storm
228088 6.8 警告 virtual hosting control system - VHCS におけるセッションをハイジャックされる脆弱性 CWE-287
不適切な認証
CVE-2007-3988 2012-12-20 18:33 2007-07-25 Show GitHub Exploit DB Packet Storm
228089 5 警告 securecomputing - Secure Computing SecurityReporter の file.cgi における認証を回避される脆弱性 - CVE-2007-3986 2012-12-20 18:33 2007-07-25 Show GitHub Exploit DB Packet Storm
228090 5 警告 securecomputing - SecurityReporter の file.cgi におけるディレクトリトラバーサルの脆弱性 - CVE-2007-3985 2012-12-20 18:33 2007-07-25 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 2, 2026, 4:08 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
213601 8.8 HIGH
Network
schneider-electric meg6501-0001_firmware
meg6501-0002_firmware
meg6260-0410_firmware
meg6260-0415_firmware
A CWE-434: Unrestricted Upload of File with Dangerous Type vulnerability exists in U.motion Server (MEG6501-0001 - U.motion KNX server, MEG6501-0002 - U.motion KNX Server Plus, MEG6260-0410 - U.motio… CWE-434
 Unrestricted Upload of File with Dangerous Type 
CVE-2019-6839 2024-11-21 13:47 2019-09-18 Show GitHub Exploit DB Packet Storm
213602 6.5 MEDIUM
Network
schneider-electric meg6501-0001_firmware
meg6501-0002_firmware
meg6260-0410_firmware
meg6260-0415_firmware
A CWE-863: Incorrect Authorization vulnerability exists in U.motion Server (MEG6501-0001 - U.motion KNX server, MEG6501-0002 - U.motion KNX Server Plus, MEG6260-0410 - U.motion KNX Server Plus, Touch… NVD-CWE-Other
CVE-2019-6838 2024-11-21 13:47 2019-09-18 Show GitHub Exploit DB Packet Storm
213603 9.1 CRITICAL
Network
schneider-electric meg6501-0001_firmware
meg6501-0002_firmware
meg6260-0410_firmware
meg6260-0415_firmware
A Server-Side Request Forgery (SSRF): CWE-918 vulnerability exists in U.motion Server (MEG6501-0001 - U.motion KNX server, MEG6501-0002 - U.motion KNX Server Plus, MEG6260-0410 - U.motion KNX Server … CWE-918
Server-Side Request Forgery (SSRF) 
CVE-2019-6837 2024-11-21 13:47 2019-09-18 Show GitHub Exploit DB Packet Storm
213604 7.5 HIGH
Network
schneider-electric meg6501-0001_firmware
meg6501-0002_firmware
meg6260-0410_firmware
meg6260-0415_firmware
A CWE-863: Incorrect Authorization vulnerability exists in U.motion Server (MEG6501-0001 - U.motion KNX server, MEG6501-0002 - U.motion KNX Server Plus, MEG6260-0410 - U.motion KNX Server Plus, Touch… NVD-CWE-Other
CVE-2019-6836 2024-11-21 13:47 2019-09-18 Show GitHub Exploit DB Packet Storm
213605 5.4 MEDIUM
Network
schneider-electric meg6501-0001_firmware
meg6501-0002_firmware
meg6260-0410_firmware
meg6260-0415_firmware
A Cross-Site Scripting (XSS) CWE-79 vulnerability exists in U.motion Server (MEG6501-0001 - U.motion KNX server, MEG6501-0002 - U.motion KNX Server Plus, MEG6260-0410 - U.motion KNX Server Plus, Touc… CWE-79
Cross-site Scripting
CVE-2019-6835 2024-11-21 13:47 2019-09-18 Show GitHub Exploit DB Packet Storm
213606 8.3 HIGH
Network
schneider-electric wiser_for_knx_firmware
spacelynk_firmware
A CWE-287: Authentication vulnerability exists in spaceLYnk (all versions before 2.4.0) and Wiser for KNX (all versions before 2.4.0 - formerly known as homeLYnk), which could cause loss of control w… CWE-287
Improper Authentication
CVE-2019-6832 2024-11-21 13:47 2019-09-18 Show GitHub Exploit DB Packet Storm
213607 6.5 MEDIUM
Network
schneider-electric hmigto_firmware
hmisto_firmware
xbtgh_firmware
hmigtu_firmware
hmiscu_firmware
hmistu_firmware
xbtgt_firmware
hmigxo_firmware
hmigxu_firmware
A CWE-754 – Improper Check for Unusual or Exceptional Conditions vulnerability exists in Magelis HMI Panels (all versions of - HMIGTO, HMISTO, XBTGH, HMIGTU, HMIGTUX, HMISCU, HMISTU, XBTGT, XBTGT, HM… CWE-754
 Improper Check for Unusual or Exceptional Conditions
CVE-2019-6833 2024-11-21 13:47 2019-09-18 Show GitHub Exploit DB Packet Storm
213608 8.6 HIGH
Network
schneider-electric bmxnor0200h_firmware A CWE-754: Improper Check for Unusual or Exceptional Conditions vulnerability exists in BMXNOR0200H Ethernet / Serial RTU module (all firmware versions), which could cause disconnection of active con… CWE-754
 Improper Check for Unusual or Exceptional Conditions
CVE-2019-6831 2024-11-21 13:47 2019-09-18 Show GitHub Exploit DB Packet Storm
213609 5.9 MEDIUM
Network
schneider-electric modicon_m580_firmware A CWE-248: Uncaught Exception vulnerability exists IN Modicon M580 all versions prior to V2.80, which could cause a possible denial of service when sending an appropriately timed HTTP request to the … CWE-755
 Improper Handling of Exceptional Conditions
CVE-2019-6830 2024-11-21 13:47 2019-09-18 Show GitHub Exploit DB Packet Storm
213610 7.5 HIGH
Network
schneider-electric modicon_m580_firmware
modicon_m340_firmware
A CWE-248: Uncaught Exception vulnerability exists in Modicon M580 (firmware version prior to V2.90) and Modicon M340 (firmware version prior to V3.10), which could cause a possible denial of service… CWE-755
 Improper Handling of Exceptional Conditions
CVE-2019-6829 2024-11-21 13:47 2019-09-18 Show GitHub Exploit DB Packet Storm