Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 3, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
229251 7.5 危険 phpBB - phpBB 用の AMAZONIA MOD における PHP リモートファイルインクルージョンの脆弱性 - CVE-2006-6593 2012-12-20 18:02 2006-12-15 Show GitHub Exploit DB Packet Storm
229252 7.5 危険 vblog - vBlog における PHP リモートファイルインクルージョンの脆弱性 - CVE-2006-6586 2012-12-20 18:02 2006-12-15 Show GitHub Exploit DB Packet Storm
229253 7.5 危険 scriptmate - ScriptMate User Manager における重要な情報を取得される脆弱性 - CVE-2006-6583 2012-12-20 18:02 2006-12-15 Show GitHub Exploit DB Packet Storm
229254 6.8 警告 scriptmate - ScriptMate User Manager におけるクロスサイトスクリプティングの脆弱性 - CVE-2006-6582 2012-12-20 18:02 2006-12-15 Show GitHub Exploit DB Packet Storm
229255 7.5 危険 vernet loic - Vernet Loic PHP_Debug の tests/debug_test.php における PHP リモートファイルインクルージョンの脆弱性 - CVE-2006-6581 2012-12-20 18:02 2006-12-15 Show GitHub Exploit DB Packet Storm
229256 6.4 警告 scriptphp - ProNews の admin/change.php におけるアイテム内の情報を追加される脆弱性 - CVE-2006-6580 2012-12-20 18:02 2006-12-15 Show GitHub Exploit DB Packet Storm
229257 6.8 警告 skulls - Skulls! における脆弱性 - CVE-2006-6557 2012-12-20 18:02 2006-12-14 Show GitHub Exploit DB Packet Storm
229258 7.5 危険 tucows - Tucows CCS の libs/tucows/api/cartridges/crt_TUCOWS_domains/lib/domainutils.inc.php における PHP リモートファイルインクルージョンの脆弱性 - CVE-2006-6551 2012-12-20 18:02 2006-12-14 Show GitHub Exploit DB Packet Storm
229259 6.8 警告 vt-forum - Vt-Forum Lite におけるクロスサイトスクリプティングの脆弱性 - CVE-2006-6532 2012-12-20 18:02 2006-12-13 Show GitHub Exploit DB Packet Storm
229260 6.8 警告 wikitimescale - WikiTimeScale TwoZero におけるクロスサイトスクリプティングの脆弱性 - CVE-2006-6522 2012-12-20 18:02 2006-12-13 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 3, 2026, 4:06 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
213241 7.8 HIGH
Local 		autodesk advance_steel
autocad
autocad_architecture
autocad_electrical
autocad_lt
autocad_map_3d
autocad_mechanical
autocad_mep
autocad_plant_3d
civil_3d
autocad_p\&id 		DLL preloading vulnerability in versions 2017, 2018, 2019, and 2020 of Autodesk Advanced Steel, Civil 3D, AutoCAD, AutoCAD LT, AutoCAD Architecture, AutoCAD Electrical, AutoCAD Map 3D, AutoCAD Mechan… CWE-427
 Uncontrolled Search Path Element 		CVE-2019-7364 2024-11-21 13:48 2019-08-24 Show GitHub Exploit DB Packet Storm
213242 7.2 HIGH
Network 		elastic apm_agent When the Elastic APM agent for Python versions before 5.1.0 is run as a CGI script, there is a variable name clash flaw if a remote attacker can control the proxy header. This could result in an atta… CWE-20
 Improper Input Validation  		CVE-2019-7617 2024-11-21 13:48 2019-08-23 Show GitHub Exploit DB Packet Storm
213243 9.1 CRITICAL
Network 		johnsoncontrols metasys_system Metasys® ADS/ADX servers and NAE/NIE/NCE engines prior to 9.0 make use of a hardcoded RC2 key for certain encryption operations involving the Site Management Portal (SMP). CWE-798
 Use of Hard-coded Credentials 		CVE-2019-7594 2024-11-21 13:48 2019-08-21 Show GitHub Exploit DB Packet Storm
213244 9.1 CRITICAL
Network 		johnsoncontrols metasys_system Metasys® ADS/ADX servers and NAE/NIE/NCE engines prior to 9.0 make use of a shared RSA key pair for certain encryption operations involving the Site Management Portal (SMP). CWE-798
 Use of Hard-coded Credentials 		CVE-2019-7593 2024-11-21 13:48 2019-08-21 Show GitHub Exploit DB Packet Storm
213245 7.8 HIGH
Local 		adobe premiere_pro_cc Adobe Premiere Pro CC versions 13.1.2 and earlier have an insecure library loading (dll hijacking) vulnerability. Successful exploitation could lead to arbitrary code execution. CWE-427
 Uncontrolled Search Path Element 		CVE-2019-7931 2024-11-21 13:48 2019-08-15 Show GitHub Exploit DB Packet Storm
213246 7.8 HIGH
Local 		adobe character_animator Adobe Character Animator versions 2.1 and earlier have an insecure library loading (dll hijacking) vulnerability. Successful exploitation could lead to arbitrary code execution. CWE-427
 Uncontrolled Search Path Element 		CVE-2019-7870 2024-11-21 13:48 2019-08-15 Show GitHub Exploit DB Packet Storm
213247 7.5 HIGH
Network 		magento magento An information leakage vulnerability exists in Magento 2.1 prior to 2.1.18, Magento 2.2 prior to 2.2.9, Magento 2.3 prior to 2.3.2. A SOAP web service endpoint does not properly enforce parameters re… NVD-CWE-noinfo
CVE-2019-7951 2024-11-21 13:48 2019-08-3 Show GitHub Exploit DB Packet Storm
213248 7.5 HIGH
Network 		magento magento An access control bypass vulnerability exists in Magento 2.1 prior to 2.1.18, Magento 2.2 prior to 2.2.9, Magento 2.3 prior to 2.3.2. An unauthenticated user can bypass access controls via REST API c… CWE-639
 Authorization Bypass Through User-Controlled Key 		CVE-2019-7950 2024-11-21 13:48 2019-08-3 Show GitHub Exploit DB Packet Storm
213249 6.5 MEDIUM
Network 		magento magento A cross-site request forgery vulnerability exists in the GiftCardAccount removal feature for Magento Open Source prior to 1.9.4.2, and Magento Commerce prior to 1.14.4.2, Magento 2.1 prior to 2.1.18,… CWE-352
 Origin Validation Error 		CVE-2019-7947 2024-11-21 13:48 2019-08-3 Show GitHub Exploit DB Packet Storm
213250 5.4 MEDIUM
Network 		magento magento A stored cross-cite scripting vulnerability exists in Magento Open Source prior to 1.9.4.2, and Magento Commerce prior to 1.14.4.2, Magento 2.1 prior to 2.1.18, Magento 2.2 prior to 2.2.9, Magento 2.… CWE-79
Cross-site Scripting 		CVE-2019-7945 2024-11-21 13:48 2019-08-3 Show GitHub Exploit DB Packet Storm