Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":April 28, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
229061 7.5 危険 sd studio - SD Studio CMS の index.php における SQL インジェクションの脆弱性 - CVE-2006-3919 2012-12-20 18:02 2006-07-27 Show GitHub Exploit DB Packet Storm
229062 7.5 危険 r. corson - R. Corson PHP Forge の inc/gabarits.php における PHP リモートファイルインクルージョンの脆弱性 - CVE-2006-3917 2012-12-20 18:02 2006-07-27 Show GitHub Exploit DB Packet Storm
229063 4.3 警告 solucija - sNews の snews.php におけるクロスサイトスクリプティングの脆弱性 - CVE-2006-3916 2012-12-20 18:02 2006-07-27 Show GitHub Exploit DB Packet Storm
229064 5 警告 マイクロソフト - Windows 上で稼動する Microsoft Internet Explorer 6 におけるサービス運用妨害 (DoS) の脆弱性 - CVE-2006-3915 2012-12-20 18:02 2006-07-27 Show GitHub Exploit DB Packet Storm
229065 6 警告 Blackboard, Inc. - Blackboard Academic Suite におけるクロスサイトスクリプティングの脆弱性 - CVE-2006-3914 2012-12-20 18:02 2006-07-27 Show GitHub Exploit DB Packet Storm
229066 7.5 危険 freeciv - Freeciv および SVN におけるバッファオーバーフローの脆弱性 - CVE-2006-3913 2012-12-20 18:02 2006-07-27 Show GitHub Exploit DB Packet Storm
229067 2.1 注意 RARLAB - WinRAR の SFX モジュールにおけるスタックベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2006-3912 2012-12-20 18:02 2006-07-27 Show GitHub Exploit DB Packet Storm
229068 7.5 危険 php live - OSI Codes PHP Live! における PHP リモートファイルインクルージョンの脆弱性 - CVE-2006-3911 2012-12-20 18:02 2006-07-27 Show GitHub Exploit DB Packet Storm
229069 5 警告 マイクロソフト - Windows 上で稼動する Internet Explorer 6 におけるサービス運用妨害 (DoS) の脆弱性 - CVE-2006-3910 2012-12-20 18:02 2006-07-27 Show GitHub Exploit DB Packet Storm
229070 6.8 警告 wired community software - WWWthreads の calendar.php におけるクロスサイトスクリプティングの脆弱性 - CVE-2006-3909 2012-12-20 18:02 2006-07-27 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:April 28, 2026, 4:09 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
212581 7.5 HIGH
Network 		cmswing cmswing global.encryptPassword in bootstrap/global.js in CMSWing 1.3.7 relies on multiple MD5 operations for password hashing. CWE-916
 Use of Password Hash With Insufficient Computational Effort 		CVE-2019-7649 2024-11-21 13:48 2019-02-18 Show GitHub Exploit DB Packet Storm
212582 7.4 HIGH
Network 		amazon fire_os Amazon Fire OS before 5.3.6.4 allows a man-in-the-middle attack against HTTP requests for "Terms of Use" and Privacy pages. CWE-346
 Origin Validation Error 		CVE-2019-7399 2024-11-21 13:48 2019-02-17 Show GitHub Exploit DB Packet Storm
212583 5.3 MEDIUM
Network 		jforum jforum In JForum 2.1.8, an unauthenticated, remote attacker can enumerate whether a user exists by using the "create user" function. If a register/check/username?username= request corresponds to a username … CWE-209
Information Exposure Through an Error Message 		CVE-2019-7550 2024-11-21 13:48 2019-02-13 Show GitHub Exploit DB Packet Storm
212584 6.1 MEDIUM
Network 		joomla joomla\! An issue was discovered in Joomla! before 3.9.3. Inadequate filtering on URL fields in various core components could lead to an XSS vulnerability. CWE-79
Cross-site Scripting 		CVE-2019-7744 2024-11-21 13:48 2019-02-13 Show GitHub Exploit DB Packet Storm
212585 9.8 CRITICAL
Network 		joomla joomla\! An issue was discovered in Joomla! before 3.9.3. The phar:// stream wrapper can be used for objection injection attacks because there is no protection mechanism (such as the TYPO3 PHAR stream wrapper… CWE-502
CWE-917
 Deserialization of Untrusted Data
 Improper Neutralization of Special Elements used in an Expression Language Statement ('Expression Language Injection') 		CVE-2019-7743 2024-11-21 13:48 2019-02-13 Show GitHub Exploit DB Packet Storm
212586 6.1 MEDIUM
Network 		joomla joomla\! An issue was discovered in Joomla! before 3.9.3. A combination of specific web server configurations, in connection with specific file types and browser-side MIME-type sniffing, causes an XSS attack … CWE-79
Cross-site Scripting 		CVE-2019-7742 2024-11-21 13:48 2019-02-13 Show GitHub Exploit DB Packet Storm
212587 6.1 MEDIUM
Network 		joomla joomla\! An issue was discovered in Joomla! before 3.9.3. Inadequate checks at the Global Configuration helpurl settings allowed stored XSS. CWE-79
Cross-site Scripting 		CVE-2019-7741 2024-11-21 13:48 2019-02-13 Show GitHub Exploit DB Packet Storm
212588 6.1 MEDIUM
Network 		joomla joomla\! An issue was discovered in Joomla! before 3.9.3. Inadequate parameter handling in JavaScript code (core.js writeDynaList) could lead to an XSS attack vector. CWE-79
Cross-site Scripting 		CVE-2019-7740 2024-11-21 13:48 2019-02-13 Show GitHub Exploit DB Packet Storm
212589 6.1 MEDIUM
Network 		joomla joomla\! An issue was discovered in Joomla! before 3.9.3. The "No Filtering" textfilter overrides child settings in the Global Configuration. This is intended behavior. However, it might be unexpected for the… NVD-CWE-noinfo
CVE-2019-7739 2024-11-21 13:48 2019-02-13 Show GitHub Exploit DB Packet Storm
212590 6.1 MEDIUM
Network 		verydows verydows Verydows 2.0 has XSS via the index.php?m=api&c=stats&a=count referrer parameter. CWE-79
Cross-site Scripting 		CVE-2019-7753 2024-11-21 13:48 2019-02-12 Show GitHub Exploit DB Packet Storm