Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":April 30, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
229331	7.5	危険	phpmynews	-	PHPMyNews における PHP リモートファイルインクルージョンの脆弱性	-	CVE-2006-5261	2012-12-20 18:02	2006-10-12	Show	GitHub Exploit DB Packet Storm

229332	5.1	警告	webmedia explorer	-	Webmedia Explorer の includes/core.lib.php における PHP リモートファイルインクルージョンの脆弱性	-	CVE-2006-5252	2012-12-20 18:02	2006-10-12	Show	GitHub Exploit DB Packet Storm

229333	7.5	危険	tagit	-	tagit2b の tagmin/delTagUser.php における PHP リモートファイルインクルージョンの脆弱性	-	CVE-2006-5249	2012-12-20 18:02	2006-10-11	Show	GitHub Exploit DB Packet Storm

229334	7.8	危険	Polycom	-	Polycom SoundPoint IP 301 VoIP Desktop Phone におけるサービス運用妨害 (DoS) の脆弱性	-	CVE-2006-5233	2012-12-20 18:02	2006-10-10	Show	GitHub Exploit DB Packet Storm

229335	7.5	危険	rob hensley	-	Rob Hensley ackerTodo の Google Gadget login.php における SQL インジェクションの脆弱性	-	CVE-2006-5228	2012-12-20 18:02	2006-10-10	Show	GitHub Exploit DB Packet Storm

229336	6.8	警告	TorrentFlux	-	TorrentFlux の admin.php におけるクロスサイトスクリプティングの脆弱性	-	CVE-2006-5227	2012-12-20 18:02	2006-10-10	Show	GitHub Exploit DB Packet Storm

229337	7.5	危険	sergey lyubka	-	Sergey Lyubka Simple HTTPD におけるスタックベースのバッファオーバーフローの脆弱性	-	CVE-2006-5216	2012-12-20 18:02	2006-10-10	Show	GitHub Exploit DB Packet Storm

229338	5	警告	トレンドマイクロ	-	SMB および OSCE 用の CSM Suite におけるファイルを削除される脆弱性	-	CVE-2006-5212	2012-12-20 18:02	2006-04-21	Show	GitHub Exploit DB Packet Storm

229339	6.4	警告	トレンドマイクロ	-	SMB および OSCE 用の CSM Suite における OfficeScan クライアントを除去される脆弱性	-	CVE-2006-5211	2012-12-20 18:02	2006-04-21	Show	GitHub Exploit DB Packet Storm

229340	7.5	危険	phpBB	-	phpBB に使用されている Admin Topic Action Logging Mod における PHP リモートファイルインクルージョンの脆弱性	-	CVE-2006-5209	2012-12-20 18:02	2006-10-10	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 1, 2026, 4:54 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
212741	9.8	CRITICAL Network	uvnc siemens	ultravnc sinumerik_pcu_base_win7_software\/ipc sinumerik_pcu_base_win10_software\/ipc sinumerik_access_mymachine\/p2p	UltraVNC revision 1203 has multiple heap buffer overflow vulnerabilities in VNC client code inside Ultra decoder, which results in code execution. This attack appears to be exploitable via network co…	CWE-787 Out-of-bounds Write	CVE-2019-8262	2024-11-21 13:49	2019-03-6	Show	GitHub Exploit DB Packet Storm

212742	9.8	CRITICAL Network	uvnc	ultravnc	UltraVNC revision 1199 has a out-of-bounds read vulnerability in VNC code inside client CoRRE decoder, caused by multiplication overflow. This attack appears to be exploitable via network connectivit…	CWE-125 Out-of-bounds Read	CVE-2019-8261	2024-11-21 13:49	2019-03-6	Show	GitHub Exploit DB Packet Storm

212743	9.8	CRITICAL Network	uvnc	ultravnc	UltraVNC revision 1199 has a out-of-bounds read vulnerability in VNC client RRE decoder code, caused by multiplication overflow. This attack appears to be exploitable via network connectivity. This v…	CWE-125 Out-of-bounds Read	CVE-2019-8260	2024-11-21 13:49	2019-03-6	Show	GitHub Exploit DB Packet Storm

212744	7.5	HIGH Network	uvnc siemens	ultravnc sinumerik_pcu_base_win7_software\/ipc sinumerik_pcu_base_win10_software\/ipc sinumerik_access_mymachine\/p2p	UltraVNC revision 1198 contains multiple memory leaks (CWE-655) in VNC client code, which allow an attacker to read stack memory and can be abused for information disclosure. Combined with another vu…	CWE-401 Missing Release of Memory after Effective Lifetime	CVE-2019-8259	2024-11-21 13:49	2019-03-6	Show	GitHub Exploit DB Packet Storm

212745	9.8	CRITICAL Network	uvnc siemens	ultravnc sinumerik_pcu_base_win7_software\/ipc sinumerik_pcu_base_win10_software\/ipc sinumerik_access_mymachine\/p2p	UltraVNC revision 1198 has a heap buffer overflow vulnerability in VNC client code which results code execution. This attack appears to be exploitable via network connectivity. This vulnerability has…	CWE-787 Out-of-bounds Write	CVE-2019-8258	2024-11-21 13:49	2019-03-6	Show	GitHub Exploit DB Packet Storm

212746	5.4	MEDIUM Network	vanillaforums	vanilla_forums	Multiple stored XSS in Vanilla Forums before 2.5 allow remote attackers to inject arbitrary JavaScript code into any message on forum.	CWE-79 Cross-site Scripting	CVE-2019-8279	2024-11-21 13:49	2019-03-2	Show	GitHub Exploit DB Packet Storm

212747	6.1	MEDIUM Network	invisioncommunity	invision_power_board	Stored XSS in Invision Power Board versions 3.3.1 - 3.4.8 leads to Remote Code Execution.	CWE-79 Cross-site Scripting	CVE-2019-8278	2024-11-21 13:49	2019-03-2	Show	GitHub Exploit DB Packet Storm

212748	6.1	MEDIUM Network	maccms	maccms	Maccms 8.0 allows XSS via the inc/config/cache.php t_key parameter because template/paody/html/vod_type.html mishandles the keywords parameter, and a/tpl/module/db.php only filters the t_name paramet…	CWE-79 Cross-site Scripting	CVE-2019-8410	2024-11-21 13:49	2019-02-28	Show	GitHub Exploit DB Packet Storm

212749	9.8	CRITICAL Network	webkitgtk opensuse canonical	webkitgtk webkitgtk\+ leap ubuntu_linux	The UIProcess subsystem in WebKit, as used in WebKitGTK through 2.23.90 and WebKitGTK+ through 2.22.6 and other products, does not prevent the script dialog size from exceeding the web view size, whi…	CWE-119 Incorrect Access of Indexable Resource ('Range Error')	CVE-2019-8375	2024-11-21 13:49	2019-02-24	Show	GitHub Exploit DB Packet Storm

212750	6.1	MEDIUM Network	getbootstrap f5 redhat tenable	bootstrap big-ip_local_traffic_manager big-ip_application_security_manager big-ip_access_policy_manager big-ip_advanced_firewall_manager big-ip_analytics big-ip_application_accelera…	In Bootstrap before 3.4.1 and 4.3.x before 4.3.1, XSS is possible in the tooltip or popover data-template attribute.	CWE-79 Cross-site Scripting	CVE-2019-8331	2024-11-21 13:49	2019-02-21	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed