Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 7, 2026, 10 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
228921 9.3 危険 remotesoft - Remotesoft .NET Explorer におけるスタックベースのバッファオーバーフローの脆弱性 - CVE-2007-0766 2012-12-20 18:19 2007-02-5 Show GitHub Exploit DB Packet Storm
228922 7.5 危険 phpbb++ - phpBB++ の includes/functions.php における PHP リモートファイルインクルージョンの脆弱性 - CVE-2007-0762 2012-12-20 18:19 2007-02-5 Show GitHub Exploit DB Packet Storm
228923 7.5 危険 phpBB - phpBB ezconvert の config.php における PHP リモートファイルインクルージョンの脆弱性 - CVE-2007-0761 2012-12-20 18:19 2007-02-5 Show GitHub Exploit DB Packet Storm
228924 7.5 危険 umberto caldera - EasyMoblog における SQL インジェクションの脆弱性 - CVE-2007-0759 2012-12-20 18:19 2007-02-5 Show GitHub Exploit DB Packet Storm
228925 7.5 危険 phpprobid - PHPProbid の lang.php における PHP リモートファイルインクルージョンの脆弱性 - CVE-2007-0758 2012-12-20 18:19 2007-02-5 Show GitHub Exploit DB Packet Storm
228926 7.5 危険 somery - Somery の install.php における PHP リモートファイルインクルージョンの脆弱性 - CVE-2007-0704 2012-12-20 18:19 2007-02-3 Show GitHub Exploit DB Packet Storm
228927 7.5 危険 webbuilder - WebBuilder の library/StageLoader.php における PHP リモートファイルインクルージョンの脆弱性 - CVE-2007-0703 2012-12-20 18:19 2007-02-3 Show GitHub Exploit DB Packet Storm
228928 7.5 危険 phpeventman - phpEventMan における PHP リモートファイルインクルージョンの脆弱性 - CVE-2007-0702 2012-12-20 18:19 2007-02-3 Show GitHub Exploit DB Packet Storm
228929 5 警告 portail web php - Guernion Sylvain Portail Web Php の index.php におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2007-0700 2012-12-20 18:19 2007-02-3 Show GitHub Exploit DB Packet Storm
228930 7.5 危険 portail web php - Guernion Sylvain Portail Web Php の includes/includes.php における PHP リモートファイルインクルージョンの脆弱性 CWE-94
コード・インジェクション 		CVE-2007-0699 2012-12-20 18:19 2007-02-3 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 7, 2026, 4:22 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
213881 4.8 MEDIUM
Network 		phpmywind phpmywind admin/default.php in PHPMyWind v5.5 has XSS via an HTTP Host header. CWE-79
Cross-site Scripting 		CVE-2019-8435 2024-11-21 13:49 2019-02-18 Show GitHub Exploit DB Packet Storm
213882 6.1 MEDIUM
Network 		cmseasy cmseasy In CmsEasy 7.0, there is XSS via the ckplayer.php autoplay parameter. CWE-79
Cross-site Scripting 		CVE-2019-8434 2024-11-21 13:49 2019-02-18 Show GitHub Exploit DB Packet Storm
213883 7.5 HIGH
Network 		jtbc jtbc_php JTBC(PHP) 3.0.1.8 allows Arbitrary File Upload via the console/#/console/file/manage.php?type=list URI, as demonstrated by a .php file. CWE-434
 Unrestricted Upload of File with Dangerous Type  		CVE-2019-8433 2024-11-21 13:49 2019-02-18 Show GitHub Exploit DB Packet Storm
213884 6.1 MEDIUM
Network 		cmseasy cmseasy In CmsEasy 7.0, there is XSS via the ckplayer.php url parameter. CWE-79
Cross-site Scripting 		CVE-2019-8432 2024-11-21 13:49 2019-02-18 Show GitHub Exploit DB Packet Storm
213885 9.8 CRITICAL
Network 		zoneminder zoneminder ZoneMinder before 1.32.3 has SQL Injection via the ajax/status.php filter[Query][terms][0][cnj] parameter. CWE-89
SQL Injection 		CVE-2019-8429 2024-11-21 13:49 2019-02-18 Show GitHub Exploit DB Packet Storm
213886 9.8 CRITICAL
Network 		zoneminder zoneminder ZoneMinder before 1.32.3 has SQL Injection via the skins/classic/views/control.php groupSql parameter, as demonstrated by a newGroup[MonitorIds][] value. CWE-89
SQL Injection 		CVE-2019-8428 2024-11-21 13:49 2019-02-18 Show GitHub Exploit DB Packet Storm
213887 9.8 CRITICAL
Network 		zoneminder zoneminder daemonControl in includes/functions.php in ZoneMinder before 1.32.3 allows command injection via shell metacharacters. CWE-78
OS Command  		CVE-2019-8427 2024-11-21 13:49 2019-02-18 Show GitHub Exploit DB Packet Storm
213888 6.1 MEDIUM
Network 		zoneminder zoneminder skins/classic/views/controlcap.php in ZoneMinder before 1.32.3 has XSS via the newControl array, as demonstrated by the newControl[MinTiltRange] parameter. CWE-79
Cross-site Scripting 		CVE-2019-8426 2024-11-21 13:49 2019-02-18 Show GitHub Exploit DB Packet Storm
213889 6.1 MEDIUM
Network 		zoneminder zoneminder includes/database.php in ZoneMinder before 1.32.3 has XSS in the construction of SQL-ERR messages. CWE-79
Cross-site Scripting 		CVE-2019-8425 2024-11-21 13:49 2019-02-18 Show GitHub Exploit DB Packet Storm
213890 9.8 CRITICAL
Network 		zoneminder zoneminder ZoneMinder before 1.32.3 has SQL Injection via the ajax/status.php sort parameter. CWE-89
SQL Injection 		CVE-2019-8424 2024-11-21 13:49 2019-02-18 Show GitHub Exploit DB Packet Storm