Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":April 29, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
229281 2.1 注意 シマンテック - SODP の SODA および Virtual Desktop モジュール における重要なデータを読み取られる脆弱性 - CVE-2006-3457 2012-12-20 18:02 2006-08-1 Show GitHub Exploit DB Packet Storm
229282 4.3 警告 シマンテック - Symantec AntiVirus Corporate Edition などで使用される SAVRT.SYS デバイスドライバにおける任意のコードを実行される脆弱性 - CVE-2006-3455 2012-12-20 18:02 2006-10-23 Show GitHub Exploit DB Packet Storm
229283 7.2 危険 シマンテック - Symantec AntiVirus Corporate Edition などにおけるフォーマットストリングの脆弱性 - CVE-2006-3454 2012-12-20 18:02 2006-09-13 Show GitHub Exploit DB Packet Storm
229284 5.1 警告 アドビシステムズ - Adobe Acrobat におけるバッファオーバーフローの脆弱性 - CVE-2006-3453 2012-12-20 18:02 2006-07-11 Show GitHub Exploit DB Packet Storm
229285 5.1 警告 cimmetry systems - AutoVue SolidModel Professional Desktop Edition におけるスタックベースのバッファオーバーフローの脆弱性 - CVE-2006-3350 2012-12-20 18:02 2006-07-27 Show GitHub Exploit DB Packet Storm
229286 7.5 危険 hotwebscripts - CMS Mundo における SQL インジェクションの脆弱性 - CVE-2006-3135 2012-12-20 18:02 2006-07-13 Show GitHub Exploit DB Packet Storm
229287 7.5 危険 streamripper - Streamripper の HTTP ヘッダ解析におけるバッファオーバーフローの脆弱性 - CVE-2006-3124 2012-12-20 18:02 2006-08-26 Show GitHub Exploit DB Packet Storm
229288 7.5 危険 brian wotring - Brian Wotring Osiris におけるフォーマットストリングの脆弱性 - CVE-2006-3120 2012-12-20 18:02 2006-07-31 Show GitHub Exploit DB Packet Storm
229289 5.1 警告 fbi - fbi の fbgs framebuffer Postscript/PDF viewer におけるフィルタを回避される脆弱性 - CVE-2006-3119 2012-12-20 18:02 2006-07-25 Show GitHub Exploit DB Packet Storm
229290 5 警告 VMware - VMware ESX Server における権限を取得される脆弱性 CWE-255
証明書・パスワード管理 		CVE-2006-2481 2012-12-20 18:02 2006-07-26 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:April 30, 2026, 4:58 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
212601 8.8 HIGH
Network 		feifeicms feifeicms FeiFeiCms 4.0.181010 on Windows allows remote attackers to read or delete arbitrary files via index.php?s=Admin-Data-Down-id-..\ or index.php?s=Admin-Data-Del-id-..\ directory traversal. CWE-22
Path Traversal 		CVE-2019-8412 2024-11-21 13:49 2019-02-18 Show GitHub Exploit DB Packet Storm
212602 7.5 HIGH
Network 		zzcms zzcms admin/dl_data.php in zzcms 2018 (2018-10-19) allows remote attackers to delete arbitrary files via action=del&filename=../ directory traversal. CWE-22
Path Traversal 		CVE-2019-8411 2024-11-21 13:49 2019-02-18 Show GitHub Exploit DB Packet Storm
212603 4.9 MEDIUM
Network 		onefilecms onefilecms OneFileCMS 3.6.13 allows remote attackers to modify onefilecms.php by clicking the Copy button twice. NVD-CWE-noinfo
CVE-2019-8408 2024-11-21 13:49 2019-02-18 Show GitHub Exploit DB Packet Storm
212604 6.5 MEDIUM
Network 		hongcms_project hongcms HongCMS 3.0.0 allows arbitrary file read and write operations via a ../ in the filename parameter to the admin/index.php/language/edit URI. CWE-22
Path Traversal 		CVE-2019-8407 2024-11-21 13:49 2019-02-18 Show GitHub Exploit DB Packet Storm
212605 9.8 CRITICAL
Network 		hotels_server_project hotels_server Hotels_Server through 2018-11-05 has SQL Injection via the API because the controller/api/login.php telephone parameter is mishandled. CWE-89
SQL Injection 		CVE-2019-8393 2024-11-21 13:49 2019-02-18 Show GitHub Exploit DB Packet Storm
212606 6.1 MEDIUM
Network 		ory hydra ORY Hydra before v1.0.0-rc.3+oryOS.9 has Reflected XSS via the oauth2/fallbacks/error error_hint parameter. CWE-79
Cross-site Scripting 		CVE-2019-8400 2024-11-21 13:49 2019-02-17 Show GitHub Exploit DB Packet Storm
212607 6.5 MEDIUM
Network 		hdfgroup hdf5 An issue was discovered in the HDF HDF5 1.10.4 library. There is an out of bounds read in the function H5T_get_size in H5T.c. CWE-125
Out-of-bounds Read 		CVE-2019-8398 2024-11-21 13:49 2019-02-17 Show GitHub Exploit DB Packet Storm
212608 6.5 MEDIUM
Network 		hdfgroup hdf5 An issue was discovered in the HDF HDF5 1.10.4 library. There is an out of bounds read in the function H5T_close_real in H5T.c. CWE-125
Out-of-bounds Read 		CVE-2019-8397 2024-11-21 13:49 2019-02-17 Show GitHub Exploit DB Packet Storm
212609 6.5 MEDIUM
Network 		hdfgroup hdf5 A buffer overflow in H5O__layout_encode in H5Olayout.c in the HDF HDF5 through 1.10.4 library allows attackers to cause a denial of service via a crafted HDF5 file. This issue was triggered while rep… CWE-119
Incorrect Access of Indexable Resource ('Range Error')  		CVE-2019-8396 2024-11-21 13:49 2019-02-17 Show GitHub Exploit DB Packet Storm
212610 9.8 CRITICAL
Network 		zohocorp manageengine_servicedesk_plus An Insecure Direct Object Reference (IDOR) vulnerability exists in Zoho ManageEngine ServiceDesk Plus (SDP) before 10.0 build 10007 via an attachment to a request. CWE-22
CWE-706
Path Traversal
 Use of Incorrectly-Resolved Name or Reference 		CVE-2019-8395 2024-11-21 13:49 2019-02-17 Show GitHub Exploit DB Packet Storm