Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":April 29, 2026, 10 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
228981 5.1 警告 spaminator - Spaminator の Login.php における PHP リモートファイルインクルージョンの脆弱性 - CVE-2006-4158 2012-12-20 18:02 2006-08-16 Show GitHub Exploit DB Packet Storm
228982 6.8 警告 yabb - YaBB の index.php におけるクロスサイトスクリプティングの脆弱性 - CVE-2006-4157 2012-12-20 18:02 2006-08-16 Show GitHub Exploit DB Packet Storm
228983 7.5 危険 VWar - VWar の extra/online.php における SQL インジェクションの脆弱性 - CVE-2006-4142 2012-12-20 18:02 2006-08-14 Show GitHub Exploit DB Packet Storm
228984 7.5 危険 VWar - VWar の news.php における SQL インジェクションの脆弱性 - CVE-2006-4141 2012-12-20 18:02 2006-08-14 Show GitHub Exploit DB Packet Storm
228985 5 警告 SAP - SAP IGS におけるサービス運用妨害 (DoS) の脆弱性 - CVE-2006-4134 2012-12-20 18:02 2006-08-14 Show GitHub Exploit DB Packet Storm
228986 7.5 危険 SAP - SAP IGS におけるヒープベースのバッファオーバーフローの脆弱性 - CVE-2006-4133 2012-12-20 18:02 2006-08-14 Show GitHub Exploit DB Packet Storm
228987 6.5 警告 symantec veritas - Symantec VERITAS Backup Exec におけるヒープベースのバッファオーバーフローの脆弱性 - CVE-2006-4128 2012-12-20 18:02 2006-08-11 Show GitHub Exploit DB Packet Storm
228988 7.5 危険 simple one-file guestbook - Simple one-file guestbook における認証を回避される脆弱性 - CVE-2006-4122 2012-12-20 18:02 2006-08-14 Show GitHub Exploit DB Packet Storm
228989 5.1 警告 see-commerce - See-Commerce の owimg.php3 における PHP リモートファイルインクルージョンの脆弱性 - CVE-2006-4121 2012-12-20 18:02 2006-08-14 Show GitHub Exploit DB Packet Storm
228990 5.4 警告 サン・マイクロシステムズ - Sun Solaris の squeue_drain 関数におけるサービス運用妨害 (DoS) の脆弱性 - CVE-2006-4117 2012-12-20 18:02 2006-08-14 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:April 29, 2026, 4:51 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
212711 10.0 CRITICAL
Network 		elastic
redhat 		kibana
openshift_container_platform 		Kibana versions before 5.6.15 and 6.6.1 contain an arbitrary code execution flaw in the Timelion visualizer. An attacker with access to the Timelion application could send a request that will attempt… CWE-94
Code Injection 		CVE-2019-7609 2024-11-21 13:48 2019-03-26 Show GitHub Exploit DB Packet Storm
212712 6.1 MEDIUM
Network 		elastic kibana Kibana versions before 5.6.15 and 6.6.1 had a cross-site scripting (XSS) vulnerability that could allow an attacker to obtain sensitive information from or perform destructive actions on behalf of ot… CWE-79
Cross-site Scripting 		CVE-2019-7608 2024-11-21 13:48 2019-03-26 Show GitHub Exploit DB Packet Storm
212713 8.1 HIGH
Network 		elastic elasticsearch A permission issue was found in Elasticsearch versions before 5.6.15 and 6.6.1 when Field Level Security and Document Level Security are disabled and the _aliases, _shrink, or _split endpoints are us… NVD-CWE-Other
CVE-2019-7611 2024-11-21 13:48 2019-03-26 Show GitHub Exploit DB Packet Storm
212714 8.8 HIGH
Network 		ipycache_project ipycache A code injection issue was discovered in ipycache through 2016-05-31. CWE-502
 Deserialization of Untrusted Data 		CVE-2019-7539 2024-11-21 13:48 2019-03-22 Show GitHub Exploit DB Packet Storm
212715 9.8 CRITICAL
Network 		pytroll donfig An issue was discovered in Donfig 0.3.0. There is a vulnerability in the collect_yaml method in config_obj.py. It can execute arbitrary Python commands, resulting in command execution. CWE-77
Command Injection 		CVE-2019-7537 2024-11-21 13:48 2019-03-22 Show GitHub Exploit DB Packet Storm
212716 6.5 MEDIUM
Network 		woocommerce paypal_checkout_payment_gateway cgi-bin/webscr?cmd=_cart in the WooCommerce PayPal Checkout Payment Gateway plugin 1.6.8 for WordPress allows Parameter Tampering in an amount parameter (such as amount_1), as demonstrated by purchas… NVD-CWE-noinfo
CVE-2019-7441 2024-11-21 13:48 2019-03-22 Show GitHub Exploit DB Packet Storm
212717 6.5 MEDIUM
Network 		jio jiofi_4g_m2s_firmware JioFi 4G M2S 1.0.2 devices have CSRF via the SSID name and Security Key field under Edit Wi-Fi Settings (aka a SetWiFi_Setting request to cgi-bin/qcmap_web_cgi). CWE-352
 Origin Validation Error 		CVE-2019-7440 2024-11-21 13:48 2019-03-22 Show GitHub Exploit DB Packet Storm
212718 6.5 MEDIUM
Adjacent 		jio jiofi_4g_m2s_firmware cgi-bin/qcmap_web_cgi on JioFi 4G M2S 1.0.2 devices allows a DoS (Hang) via the mask POST parameter. NVD-CWE-noinfo
CVE-2019-7439 2024-11-21 13:48 2019-03-22 Show GitHub Exploit DB Packet Storm
212719 6.1 MEDIUM
Network 		jio jiofi_4g_m2s_firmware cgi-bin/qcmap_web_cgi on JioFi 4G M2S 1.0.2 devices has XSS and HTML injection via the mask POST parameter. CWE-79
Cross-site Scripting 		CVE-2019-7438 2024-11-21 13:48 2019-03-22 Show GitHub Exploit DB Packet Storm
212720 6.1 MEDIUM
Network 		opensource_classified_ads_script_project opensource_classified_ads_script PHP Scripts Mall Opensource Classified Ads Script 3.2.2 has reflected Cross-Site Scripting (XSS) via the Search field. CWE-79
Cross-site Scripting 		CVE-2019-7437 2024-11-21 13:48 2019-03-22 Show GitHub Exploit DB Packet Storm