Vulnerability Search Top
Show Search Menu
|
You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database). |
JVN Vulnerability Information
Update Date":April 29, 2026, 2 p.m.
| No | CVSS | Level Attach Vector |
Vendor Name | Project Name | Title | CWE | CVE | Update Date | Publication Date | Impact Show |
Exploit PoC Search |
|---|---|---|---|---|---|---|---|---|---|---|---|
| 228241 | 7.5 | 危険 | phpwind | - | PHPWind の admin.php における SQL インジェクションの脆弱性 | - | CVE-2006-7101 | 2012-12-20 18:18 | 2007-03-3 | Show | GitHub Exploit DB Packet Storm |
| 228242 | 6.8 | 警告 | phpBB | - | phpBB Insert User の includes/functions_mod_user.php における PHP リモートファイルインクルージョンの脆弱性 |
CWE-94
コード・インジェクション |
CVE-2006-7100 | 2012-12-20 18:18 | 2007-03-3 | Show | GitHub Exploit DB Packet Storm |
| 228243 | 5 | 警告 | solarpay | - | SolarPay の index.php におけるディレクトリトラバーサルの脆弱性 | - | CVE-2006-7099 | 2012-12-20 18:18 | 2007-03-3 | Show | GitHub Exploit DB Packet Storm |
| 228244 | 10 | 危険 | taskfreak | - | TaskFreak! における脆弱性 | - | CVE-2006-7097 | 2012-12-20 18:18 | 2007-03-2 | Show | GitHub Exploit DB Packet Storm |
| 228245 | 6.8 | 警告 | phpbb security | - | phpBB Security の phpbb_security.php における PHP リモートファイルインクルージョンの脆弱性 |
CWE-94
コード・インジェクション |
CVE-2006-7090 | 2012-12-20 18:18 | 2007-03-2 | Show | GitHub Exploit DB Packet Storm |
| 228246 | 7.5 | 危険 | simple php forum | - | Simple PHP Forum における SQL インジェクションの脆弱性 | - | CVE-2006-7088 | 2012-12-20 18:18 | 2007-03-2 | Show | GitHub Exploit DB Packet Storm |
| 228247 | 4.3 | 警告 | rigter portal system | - | RPS における XSS 攻撃を実行される脆弱性 | - | CVE-2006-7085 | 2012-12-20 18:18 | 2007-03-2 | Show | GitHub Exploit DB Packet Storm |
| 228248 | 4.3 | 警告 | rigter portal system | - | RPS の index.php におけるディレクトリトラバーサルの脆弱性 | - | CVE-2006-7083 | 2012-12-20 18:18 | 2007-03-2 | Show | GitHub Exploit DB Packet Storm |
| 228249 | 7.5 | 危険 | rigter portal system | - | RPS における認証を回避される脆弱性 | - | CVE-2006-7082 | 2012-12-20 18:18 | 2007-03-2 | Show | GitHub Exploit DB Packet Storm |
| 228250 | 7.5 | 危険 | phpnews | - | PhpNews における PHP リモートファイルインクルージョンの脆弱性 | - | CVE-2006-7081 | 2012-12-20 18:18 | 2007-03-2 | Show | GitHub Exploit DB Packet Storm |
NVD Vulnerability Information
Update Date:April 29, 2026, 4:51 a.m.
| No | CVSS | Level Attach Vector |
Vendor Name | Project Name | Title | CWE | CVE | Update Date | Publication Date | Show Affected | Exploit PoC Search |
|---|---|---|---|---|---|---|---|---|---|---|---|
| 213231 | 7.5 |
HIGH
Network |
z.cash | zcash | Zcash, before the Sapling network upgrade (2018-10-28), had a counterfeiting vulnerability. A key-generation process, during evaluation of polynomials related to a to-be-proven statement, produced ce… |
CWE-754
Improper Check for Unusual or Exceptional Conditions |
CVE-2019-7167 | 2024-11-21 13:47 | 2019-03-27 | Show | GitHub Exploit DB Packet Storm |
| 213232 | 6.1 |
MEDIUM
Network |
wpsupportplus | wp_support_plus_responsive_ticket_system | A stored cross-site scripting (XSS) vulnerability in the submit_ticket.php module in the WP Support Plus Responsive Ticket System plugin 9.1.1 for WordPress allows remote attackers to inject arbitrar… |
CWE-79
Cross-site Scripting |
CVE-2019-7299 | 2024-11-21 13:47 | 2019-03-22 | Show | GitHub Exploit DB Packet Storm |
| 213233 | 5.4 |
MEDIUM
Network |
invoiceplane | invoiceplane | InvoicePlane 1.5 has stored XSS via the index.php/invoices/ajax/save invoice_password parameter, aka the "PDF password" field to the "Create Invoice" option. The XSS payload is rendered at an index.p… |
CWE-79
Cross-site Scripting |
CVE-2019-7223 | 2024-11-21 13:47 | 2019-03-22 | Show | GitHub Exploit DB Packet Storm |
| 213234 | 5.5 |
MEDIUM
Local |
linux fedoraproject opensuse debian canonical netapp redhat |
linux_kernel fedora leap debian_linux ubuntu_linux element_software_management_node active_iq_performance_analytics_services enterprise_linux_desktop enterprise_linux_workstat… |
The KVM implementation in the Linux kernel through 4.20.5 has an Information Leak. |
NVD-CWE-noinfo
|
CVE-2019-7222 | 2024-11-21 13:47 | 2019-03-22 | Show | GitHub Exploit DB Packet Storm |
| 213235 | 7.8 |
HIGH
Local |
linux opensuse fedoraproject debian canonical netapp redhat |
linux_kernel leap fedora debian_linux ubuntu_linux element_software_management_node active_iq_performance_analytics_services enterprise_linux_desktop enterprise_linux_workstat… |
The KVM implementation in the Linux kernel through 4.20.5 has a Use-after-Free. |
CWE-416
Use After Free |
CVE-2019-7221 | 2024-11-21 13:47 | 2019-03-22 | Show | GitHub Exploit DB Packet Storm |
| 213236 | 7.5 |
HIGH
Network |
zohocorp | manageengine_adselfservice_plus | An issue was discovered in Zoho ManageEngine ADSelfService Plus 5.x through build 5704. It uses fixed ciphering keys to protect information, giving the capacity for an attacker to decipher any protec… |
CWE-798
Use of Hard-coded Credentials |
CVE-2019-7161 | 2024-11-21 13:47 | 2019-03-22 | Show | GitHub Exploit DB Packet Storm |
| 213237 | 7.5 |
HIGH
Network |
genivia | gsoap | Sricam IP CCTV cameras are vulnerable to denial of service via multiple incomplete HTTP requests because the web server (based on gSOAP 2.8.x) is configured for an iterative queueing approach (aka no… |
NVD-CWE-noinfo
|
CVE-2019-6973 | 2024-11-21 13:47 | 2019-03-22 | Show | GitHub Exploit DB Packet Storm |
| 213238 | 7.5 |
HIGH
Network |
moodle | moodle | Moodle 3.5.x before 3.5.4 allows SSRF. |
CWE-918
Server-Side Request Forgery (SSRF) |
CVE-2019-6970 | 2024-11-21 13:47 | 2019-03-22 | Show | GitHub Exploit DB Packet Storm |
| 213239 | 8.8 |
HIGH
Network |
airties | air_5341_firmware | AirTies Air5341 1.0.0.12 devices allow cgi-bin/login CSRF. |
CWE-352
Origin Validation Error |
CVE-2019-6967 | 2024-11-21 13:47 | 2019-03-22 | Show | GitHub Exploit DB Packet Storm |
| 213240 | 7.8 |
HIGH
Local |
qemu opensuse fedoraproject canonical |
qemu leap fedora ubuntu_linux |
In QEMU 3.0.0, tcp_emu in slirp/tcp_subr.c has a heap-based buffer overflow. |
CWE-787
Out-of-bounds Write |
CVE-2019-6778 | 2024-11-21 13:47 | 2019-03-22 | Show | GitHub Exploit DB Packet Storm |