Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":April 29, 2026, 6 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
228961 7.5 危険 webinsta - WEBInsta CMS の index.php における PHP リモートファイルインクルージョンの脆弱性 - CVE-2006-4196 2012-12-20 18:02 2006-08-17 Show GitHub Exploit DB Packet Storm
228962 5.1 警告 xmb software - XMB の memcp.php におけるディレクトリトラバーサルの脆弱性 - CVE-2006-4191 2012-12-20 18:02 2006-08-16 Show GitHub Exploit DB Packet Storm
228963 2.1 注意 PHPNUKE - PHP-Nuke 用の AutoHTML モジュールの autohtml.php におけるディレクトリトラバーサルの脆弱性 - CVE-2006-4190 2012-12-20 18:02 2006-08-16 Show GitHub Exploit DB Packet Storm
228964 4.9 警告 smartline - SmartLine DeviceLock における NTFS コントロールを回避される脆弱性 - CVE-2006-4184 2012-12-20 18:02 2006-08-16 Show GitHub Exploit DB Packet Storm
228965 7.5 危険 TinyWebGallery - TinyWebGallery における PHP リモートファイルインクルージョンの脆弱性 - CVE-2006-4166 2012-12-20 18:02 2006-08-16 Show GitHub Exploit DB Packet Storm
228966 7.5 危険 phpprintanalyzer - phpPrintAnalyzer の inc/header.inc.php における PHP リモートファイルインクルージョンの脆弱性 - CVE-2006-4164 2012-12-20 18:02 2006-08-16 Show GitHub Exploit DB Packet Storm
228967 5 警告 xennobb - XennoBB の profile.php におけるディレクトリトラバーサルの脆弱性 - CVE-2006-4161 2012-12-20 18:02 2006-08-16 Show GitHub Exploit DB Packet Storm
228968 7.8 危険 サン・マイクロシステムズ - Sun Java System Directory Server および ONE Directory Server の LDAP server におけるサービス運用妨害 (DoS) の脆弱性 - CVE-2006-4175 2012-12-20 18:02 2007-03-23 Show GitHub Exploit DB Packet Storm
228969 5.5 警告 SquirrelMail Project - Squirrelmail 用の GPG Plugin におけるディレクトリトラバーサルの脆弱性 - CVE-2006-4169 2012-12-20 18:02 2007-07-15 Show GitHub Exploit DB Packet Storm
228970 7.5 危険 tutti nova - Tutti Nova における PHP リモートファイルインクルージョンの脆弱性 - CVE-2006-4277 2012-12-20 18:02 2006-08-21 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:April 29, 2026, 4:51 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
212931 7.8 HIGH
Local
foxitsoftware phantompdf
reader
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PhantomPDF 9.5.0.20723. User interaction is required to exploit this vulnerability in that the … CWE-416
 Use After Free
CVE-2019-6776 2024-11-21 13:47 2019-10-5 Show GitHub Exploit DB Packet Storm
212932 7.8 HIGH
Local
foxitsoftware reader
phantompdf
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit Reader 9.5.0.20723. User interaction is required to exploit this vulnerability in that the targ… CWE-416
 Use After Free
CVE-2019-6775 2024-11-21 13:47 2019-10-5 Show GitHub Exploit DB Packet Storm
212933 7.8 HIGH
Local
foxitsoftware reader
phantompdf
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit Reader 9.4.1.16828. User interaction is required to exploit this vulnerability in that the targ… CWE-416
 Use After Free
CVE-2019-6774 2024-11-21 13:47 2019-10-5 Show GitHub Exploit DB Packet Storm
212934 9.8 CRITICAL
Network
schneider-electric meg6501-0001_firmware
meg6501-0002_firmware
meg6260-0410_firmware
meg6260-0415_firmware
A Format String: CWE-134 vulnerability exists in U.motion Server (MEG6501-0001 - U.motion KNX server, MEG6501-0002 - U.motion KNX Server Plus, MEG6260-0410 - U.motion KNX Server Plus, Touch 10, MEG62… CWE-134
Use of Externally-Controlled Format String
CVE-2019-6840 2024-11-21 13:47 2019-09-18 Show GitHub Exploit DB Packet Storm
212935 8.8 HIGH
Network
schneider-electric meg6501-0001_firmware
meg6501-0002_firmware
meg6260-0410_firmware
meg6260-0415_firmware
A CWE-434: Unrestricted Upload of File with Dangerous Type vulnerability exists in U.motion Server (MEG6501-0001 - U.motion KNX server, MEG6501-0002 - U.motion KNX Server Plus, MEG6260-0410 - U.motio… CWE-434
 Unrestricted Upload of File with Dangerous Type 
CVE-2019-6839 2024-11-21 13:47 2019-09-18 Show GitHub Exploit DB Packet Storm
212936 6.5 MEDIUM
Network
schneider-electric meg6501-0001_firmware
meg6501-0002_firmware
meg6260-0410_firmware
meg6260-0415_firmware
A CWE-863: Incorrect Authorization vulnerability exists in U.motion Server (MEG6501-0001 - U.motion KNX server, MEG6501-0002 - U.motion KNX Server Plus, MEG6260-0410 - U.motion KNX Server Plus, Touch… NVD-CWE-Other
CVE-2019-6838 2024-11-21 13:47 2019-09-18 Show GitHub Exploit DB Packet Storm
212937 9.1 CRITICAL
Network
schneider-electric meg6501-0001_firmware
meg6501-0002_firmware
meg6260-0410_firmware
meg6260-0415_firmware
A Server-Side Request Forgery (SSRF): CWE-918 vulnerability exists in U.motion Server (MEG6501-0001 - U.motion KNX server, MEG6501-0002 - U.motion KNX Server Plus, MEG6260-0410 - U.motion KNX Server … CWE-918
Server-Side Request Forgery (SSRF) 
CVE-2019-6837 2024-11-21 13:47 2019-09-18 Show GitHub Exploit DB Packet Storm
212938 7.5 HIGH
Network
schneider-electric meg6501-0001_firmware
meg6501-0002_firmware
meg6260-0410_firmware
meg6260-0415_firmware
A CWE-863: Incorrect Authorization vulnerability exists in U.motion Server (MEG6501-0001 - U.motion KNX server, MEG6501-0002 - U.motion KNX Server Plus, MEG6260-0410 - U.motion KNX Server Plus, Touch… NVD-CWE-Other
CVE-2019-6836 2024-11-21 13:47 2019-09-18 Show GitHub Exploit DB Packet Storm
212939 5.4 MEDIUM
Network
schneider-electric meg6501-0001_firmware
meg6501-0002_firmware
meg6260-0410_firmware
meg6260-0415_firmware
A Cross-Site Scripting (XSS) CWE-79 vulnerability exists in U.motion Server (MEG6501-0001 - U.motion KNX server, MEG6501-0002 - U.motion KNX Server Plus, MEG6260-0410 - U.motion KNX Server Plus, Touc… CWE-79
Cross-site Scripting
CVE-2019-6835 2024-11-21 13:47 2019-09-18 Show GitHub Exploit DB Packet Storm
212940 8.3 HIGH
Network
schneider-electric wiser_for_knx_firmware
spacelynk_firmware
A CWE-287: Authentication vulnerability exists in spaceLYnk (all versions before 2.4.0) and Wiser for KNX (all versions before 2.4.0 - formerly known as homeLYnk), which could cause loss of control w… CWE-287
Improper Authentication
CVE-2019-6832 2024-11-21 13:47 2019-09-18 Show GitHub Exploit DB Packet Storm