Vulnerability Search Top

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

Vulnerability Information Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 31, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
229071	7.5	危険	phpauctions	-	PHPAuctions の profile.php における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2009-0106	2012-12-20 19:10	2009-01-9	Show	GitHub Exploit DB Packet Storm

229072	4.3	警告	se-ed	-	EZpack の index.php におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2009-0105	2012-12-20 19:10	2009-01-9	Show	GitHub Exploit DB Packet Storm

229073	7.5	危険	se-ed	-	EZpack の index.php における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2009-0104	2012-12-20 19:10	2009-01-9	Show	GitHub Exploit DB Packet Storm

229074	7.5	危険	playSMS	-	playSMS における PHP リモートファイルインクルージョンの脆弱性	CWE-94 コード・インジェクション	CVE-2009-0103	2012-12-20 19:10	2009-01-9	Show	GitHub Exploit DB Packet Storm

229075	10	危険	The phpMyAdmin Project	-	phpMyAdmin の libraries/File.class.php における脆弱性	CWE-310 暗号の問題	CVE-2008-7252	2012-12-20 19:10	2010-01-15	Show	GitHub Exploit DB Packet Storm

229076	10	危険	The phpMyAdmin Project	-	phpMyAdmin の libraries/File.class.php における脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2008-7251	2012-12-20 19:10	2010-01-19	Show	GitHub Exploit DB Packet Storm

229077	9	危険	シマンテック	-	Symantec Brightmail Gateway Appliance の Control Center における権限を取得される脆弱性	CWE-noinfo 情報不足	CVE-2009-0064	2012-12-20 19:10	2009-04-23	Show	GitHub Exploit DB Packet Storm

229078	4.3	警告	シマンテック	-	Symantec Brightmail Gateway Appliance の Control Center におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2009-0063	2012-12-20 19:10	2009-04-23	Show	GitHub Exploit DB Packet Storm

229079	5	警告	zxid	-	ZXID における証明書チェーンの検証を回避される脆弱性	CWE-287 不適切な認証	CVE-2009-0051	2012-12-20 19:10	2009-01-7	Show	GitHub Exploit DB Packet Storm

229080	6.8	警告	PunBB	-	PunBB におけるクロスサイトリクエストフォージェリの脆弱性	CWE-352 同一生成元ポリシー違反	CVE-2008-7241	2012-12-20 19:10	2009-09-17	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 31, 2026, 4:16 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
220931	6.5	MEDIUM Network	gl-inet	gl-ar300m-lite_firmware	download_file in GL.iNet GL-AR300M-Lite devices with firmware 2.27 allows remote attackers to download arbitrary files.	CWE-22 Path Traversal	CVE-2019-6273	2024-11-21 13:46	2019-03-22	Show	GitHub Exploit DB Packet Storm

220932	8.8	HIGH Network	gl-inet	gl-ar300m-lite_firmware	Command injection vulnerability in login_cgi in GL.iNet GL-AR300M-Lite devices with firmware 2.27 allows remote attackers to execute arbitrary code.	CWE-77 Command Injection	CVE-2019-6272	2024-11-21 13:46	2019-03-22	Show	GitHub Exploit DB Packet Storm

220933	6.7	MEDIUM Local	lenovo	dynamic_power_reduction	An unquoted search path vulnerability was identified in Lenovo Dynamic Power Reduction Utility prior to version 2.2.2.0 that could allow a malicious user with local access to execute code with admini…	CWE-428 Unquoted Search Path or Element	CVE-2019-6149	2024-11-21 13:46	2019-03-18	Show	GitHub Exploit DB Packet Storm

220934	5.5	MEDIUM Local	f5	big-ip_application_acceleration_manager	In BIG-IP 13.0.0, 12.1.0-12.1.3.7, 11.6.1-11.6.3.2, or 11.5.1-11.5.8, the Application Acceleration Manager (AAM) wamd process used in processing of images and PDFs fails to drop group permissions whe…	CWE-269 Improper Privilege Management	CVE-2019-6601	2024-11-21 13:46	2019-03-14	Show	GitHub Exploit DB Packet Storm

220935	6.1	MEDIUM Network	f5	big-ip_local_traffic_manager big-ip_application_acceleration_manager big-ip_advanced_firewall_manager big-ip_analytics big-ip_access_policy_manager big-ip_application_security_manager<…	In BIG-IP 14.0.0-14.0.0.2, 13.0.0-13.1.1.3, 12.1.0-12.1.3.7, 11.6.1-11.6.3.2, or 11.5.1-11.5.8, when remote authentication is enabled for administrative users and all external users are granted the "…	CWE-79 Cross-site Scripting	CVE-2019-6600	2024-11-21 13:46	2019-03-14	Show	GitHub Exploit DB Packet Storm

220936	6.1	MEDIUM Network	f5	big-ip_access_policy_manager	In BIG-IP 11.6.1-11.6.3.2 or 11.5.1-11.5.8, or Enterprise Manager 3.1.1, improper escaping of values in an undisclosed page of the configuration utility may result with an improper handling on the JS…	CWE-79 Cross-site Scripting	CVE-2019-6599	2024-11-21 13:46	2019-03-14	Show	GitHub Exploit DB Packet Storm

220937	4.3	MEDIUM Network	f5	big-ip_local_traffic_manager big-ip_application_acceleration_manager big-ip_advanced_firewall_manager big-ip_analytics big-ip_access_policy_manager big-ip_application_security_manager<…	In BIG-IP 14.0.0-14.0.0.2, 13.0.0-13.1.0.7, 12.1.0-12.1.3.5, 11.6.1-11.6.3.2, or 11.5.1-11.5.8 or Enterprise Manager 3.1.1, malformed requests to the Traffic Management User Interface (TMUI), also re…	NVD-CWE-noinfo	CVE-2019-6598	2024-11-21 13:46	2019-03-14	Show	GitHub Exploit DB Packet Storm

220938	7.2	HIGH Network	f5	big-ip_local_traffic_manager big-ip_application_acceleration_manager big-ip_advanced_firewall_manager big-ip_analytics big-ip_access_policy_manager big-ip_application_security_manager<…	In BIG-IP 13.0.0-13.1.1.1, 12.1.0-12.1.3.7, 11.6.1-11.6.3.2, or 11.5.1-11.5.8 or Enterprise Manager 3.1.1, when authenticated administrative users run commands in the Traffic Management User Interfac…	NVD-CWE-noinfo	CVE-2019-6597	2024-11-21 13:46	2019-03-14	Show	GitHub Exploit DB Packet Storm

220939	7.5	HIGH Network	f5	big-ip_access_policy_manager	In BIG-IP 14.0.0-14.0.0.2, 13.0.0-13.1.1.1, 12.1.0-12.1.3.6, 11.6.1-11.6.3.2, or 11.5.1-11.5.8, when processing fragmented ClientHello messages in a DTLS session TMM may corrupt memory eventually lea…	NVD-CWE-noinfo	CVE-2019-6596	2024-11-21 13:46	2019-03-14	Show	GitHub Exploit DB Packet Storm

220940	8.8	HIGH Network	zyxel	nbg-418n_firmware	Zyxel NBG-418N v2 v1.00(AAXM.4)C0 devices allow login.cgi CSRF.	CWE-352 Origin Validation Error	CVE-2019-6710	2024-11-21 13:46	2019-03-8	Show	GitHub Exploit DB Packet Storm