Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 1, 2026, 10 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
229111 6.8 警告 Widget Factory Limited - Joomla! 用の Ryan Demmer JCE におけるクロスサイトスクリプティングの脆弱性 - CVE-2006-6166 2012-12-20 18:02 2006-11-28 Show GitHub Exploit DB Packet Storm
229112 4.3 警告 Tiki Software Community Association - TikiWiki の tiki-setup_base.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2006-6163 2012-12-20 18:02 2006-11-6 Show GitHub Exploit DB Packet Storm
229113 4.3 警告 Tiki Software Community Association - Tikiwiki の featured_link.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2006-6162 2012-12-20 18:02 2006-11-28 Show GitHub Exploit DB Packet Storm
229114 4.3 警告 vspin.net - vSpin.net Classified System におけるクロスサイトスクリプティングの脆弱性 - CVE-2006-6153 2012-12-20 18:02 2006-11-28 Show GitHub Exploit DB Packet Storm
229115 7.5 危険 vspin.net - vSpin.net Classified System における SQL インジェクションの脆弱性 - CVE-2006-6152 2012-12-20 18:02 2006-11-28 Show GitHub Exploit DB Packet Storm
229116 2.6 注意 takeshi kanno - Takeshi Kanno libharu2 の hpdf_page_operator.c におけるバッファオーバーフローの脆弱性 - CVE-2006-6146 2012-12-20 18:02 2006-11-16 Show GitHub Exploit DB Packet Storm
229117 7.5 危険 sisfo kampus - Semarang 3 における PHP リモートファイルインクルージョンの脆弱性 - CVE-2006-6140 2012-12-20 18:02 2006-11-27 Show GitHub Exploit DB Packet Storm
229118 5 警告 sisfo kampus - Semarang 3 の downloadexcel.php におけるディレクトリトラバーサルの脆弱性 - CVE-2006-6139 2012-12-20 18:02 2006-11-27 Show GitHub Exploit DB Packet Storm
229119 5 警告 sisfo kampus - Sisfo Kampus の download.php におけるディレクトリトラバーサルの脆弱性 - CVE-2006-6138 2012-12-20 18:02 2006-11-27 Show GitHub Exploit DB Packet Storm
229120 7.5 危険 sisfo kampus - Sisfo Kampus における PHP リモートファイルインクルージョンの脆弱性 - CVE-2006-6137 2012-12-20 18:02 2006-11-27 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 1, 2026, 4:54 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
211441 5.5 MEDIUM
Local
google android In various functions of RecentLocationApps.java, DevicePolicyManagerService.java, and RecognitionService.java, there is an incorrect warning indicating an app accessed the user's location. This could… CWE-732
 Incorrect Permission Assignment for Critical Resource
CVE-2019-9464 2024-11-21 13:51 2019-12-7 Show GitHub Exploit DB Packet Storm
211442 6.8 MEDIUM
Physics
apple iphone_3gs Apple iPhone 3GS bootrom malloc implementation returns a non-NULL pointer when unable to allocate memory, aka 'alloc8'. An attacker with physical access to the device can install arbitrary firmware. CWE-755
 Improper Handling of Exceptional Conditions
CVE-2019-9536 2024-11-21 13:51 2019-11-23 Show GitHub Exploit DB Packet Storm
211443 6.7 MEDIUM
Local
google android In the Bootloader, there is a possible kernel command injection due to missing command sanitization. This could lead to a local elevation of privilege with System execution privileges needed. User in… CWE-20
CWE-77
 Improper Input Validation 
Command Injection
CVE-2019-9467 2024-11-21 13:51 2019-11-14 Show GitHub Exploit DB Packet Storm
211444 6.5 MEDIUM
Network
darktrace enterprise_immune_system Darktrace Enterprise Immune System before 3.1 allows CSRF via the /config endpoint. CWE-352
 Origin Validation Error
CVE-2019-9597 2024-11-21 13:51 2019-10-24 Show GitHub Exploit DB Packet Storm
211445 6.5 MEDIUM
Network
darktrace enterprise_immune_system Darktrace Enterprise Immune System before 3.1 allows CSRF via the /whitelisteddomains endpoint. CWE-352
 Origin Validation Error
CVE-2019-9596 2024-11-21 13:51 2019-10-24 Show GitHub Exploit DB Packet Storm
211446 7.8 HIGH
Local
trendmicro anti-threat_toolkit Trend Micro Anti-Threat Toolkit (ATTK) versions 1.62.0.1218 and below have a vulnerability that may allow an attacker to place malicious files in the same directory, potentially leading to arbitrary … CWE-427
 Uncontrolled Search Path Element
CVE-2019-9491 2024-11-21 13:51 2019-10-22 Show GitHub Exploit DB Packet Storm
211447 7.8 HIGH
Local
cobham explorer_710_firmware The Cobham EXPLORER 710, firmware version 1.07, does not validate its firmware image. Development scripts left in the firmware can be used to upload a custom firmware image that the device runs. This… CWE-494
 Download of Code Without Integrity Check
CVE-2019-9534 2024-11-21 13:51 2019-10-11 Show GitHub Exploit DB Packet Storm
211448 9.8 CRITICAL
Network
cobham explorer_710_firmware The root password of the Cobham EXPLORER 710 is the same for all versions of firmware up to and including v1.08. This could allow an attacker to reverse-engineer the password from available versions … CWE-798
 Use of Hard-coded Credentials
CVE-2019-9533 2024-11-21 13:51 2019-10-11 Show GitHub Exploit DB Packet Storm
211449 7.8 HIGH
Local
cobham explorer_710_firmware The web application portal of the Cobham EXPLORER 710, firmware version 1.07, sends the login password in cleartext. This could allow an unauthenticated, local attacker to intercept the password and … CWE-319
Cleartext Transmission of Sensitive Information
CVE-2019-9532 2024-11-21 13:51 2019-10-11 Show GitHub Exploit DB Packet Storm
211450 9.8 CRITICAL
Network
cobham explorer_710_firmware The web application portal of the Cobham EXPLORER 710, firmware version 1.07, allows unauthenticated access to port 5454. This could allow an unauthenticated, remote attacker to connect to this port … CWE-287
Improper Authentication
CVE-2019-9531 2024-11-21 13:51 2019-10-11 Show GitHub Exploit DB Packet Storm