Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":April 30, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
229341 5.1 警告 phpmyteam - phpMyTeam の images/smileys/smileys_packs.php における PHP リモートファイルインクルージョンの脆弱性 - CVE-2006-5207 2012-12-20 18:02 2006-10-10 Show GitHub Exploit DB Packet Storm
229342 10 危険 トレンドマイクロ - Trend Micro ServerProtect の不特定のプロシージャにおけるヒープベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2006-5269 2012-12-20 18:02 2008-11-17 Show GitHub Exploit DB Packet Storm
229343 10 危険 トレンドマイクロ - Trend Micro ServerProtect における任意のコードを実行される脆弱性 CWE-287
不適切な認証 		CVE-2006-5268 2012-12-20 18:02 2008-11-17 Show GitHub Exploit DB Packet Storm
229344 7.5 危険 phplibre - registroTL の main.php における PHP リモートファイルインクルージョンの脆弱性 - CVE-2006-5315 2012-12-20 18:02 2006-10-17 Show GitHub Exploit DB Packet Storm
229345 7.5 危険 phplibre - TribunaLibre の ftag.php における PHP リモートファイルインクルージョンの脆弱性 - CVE-2006-5314 2012-12-20 18:02 2006-10-17 Show GitHub Exploit DB Packet Storm
229346 7.5 危険 phpBB - phpBB 用の Ajax Shoutbox モジュールにおける PHP リモートファイルインクルージョンの脆弱性 - CVE-2006-5312 2012-12-20 18:02 2006-10-17 Show GitHub Exploit DB Packet Storm
229347 7.5 危険 phpBB - phpBB 用の Prillian French モジュールにおける PHP リモートファイルインクルージョンの脆弱性 - CVE-2006-5309 2012-12-20 18:02 2006-10-17 Show GitHub Exploit DB Packet Storm
229348 4 警告 winzip - WinZip 用の WZFILEVIEW.FileViewCtrl.61 ActiveX コントロールにおける任意のコードを実行される脆弱性 - CVE-2006-5198 2012-12-20 18:02 2006-11-14 Show GitHub Exploit DB Packet Storm
229349 6.8 警告 wheatblog - Wheatblog におけるクロスサイトスクリプティングの脆弱性 - CVE-2006-5195 2012-12-20 18:02 2006-10-10 Show GitHub Exploit DB Packet Storm
229350 7.5 危険 wikyblog - Josh Schmidt WikyBlog の index.php における PHP リモートファイルインクルージョンの脆弱性 - CVE-2006-5193 2012-12-20 18:02 2006-10-10 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:April 30, 2026, 4:58 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
211621 5.4 MEDIUM
Network 		personal_video_collection_script_project personal_video_collection_script PHP Scripts Mall Personal Video Collection Script 4.0.4 has Stored XSS via the "Update profile" feature. CWE-79
Cross-site Scripting 		CVE-2019-9606 2024-11-21 13:51 2019-03-7 Show GitHub Exploit DB Packet Storm
211622 6.5 MEDIUM
Network 		1234n minicms MiniCMS 1.10 allows mc-admin/post.php?state=publish&delete= CSRF to delete articles, a different vulnerability than CVE-2018-18891. CWE-352
 Origin Validation Error 		CVE-2019-9603 2024-11-21 13:51 2019-03-7 Show GitHub Exploit DB Packet Storm
211623 7.5 HIGH
Network 		apowersoft apowermanager The ApowerManager application through 3.1.7 for Android allows remote attackers to cause a denial of service via many simultaneous /?Key=PhoneRequestAuthorization requests. NVD-CWE-noinfo
CVE-2019-9601 2024-11-21 13:51 2019-03-7 Show GitHub Exploit DB Packet Storm
211624 7.5 HIGH
Network 		theolivetree ftp_server The Olive Tree FTP Server (aka com.theolivetree.ftpserver) application through 1.32 for Android allows remote attackers to cause a denial of service via a client that makes many connection attempts a… NVD-CWE-noinfo
CVE-2019-9600 2024-11-21 13:51 2019-03-7 Show GitHub Exploit DB Packet Storm
211625 7.5 HIGH
Network 		airdroid airdroid The AirDroid application through 4.2.1.6 for Android allows remote attackers to cause a denial of service (service crash) via many simultaneous sdctl/comm/lite_auth/ requests. NVD-CWE-noinfo
CVE-2019-9599 2024-11-21 13:51 2019-03-7 Show GitHub Exploit DB Packet Storm
211626 6.1 MEDIUM
Network 		appcms appcms AppCMS 2.0.101 allows XSS via the upload/callback.php params parameter. CWE-79
Cross-site Scripting 		CVE-2019-9595 2024-11-21 13:51 2019-03-7 Show GitHub Exploit DB Packet Storm
211627 9.8 CRITICAL
Network 		bluecms_project bluecms BlueCMS 1.6 allows SQL Injection via the user_id parameter in an uploads/admin/user.php?act=edit request. CWE-89
SQL Injection 		CVE-2019-9594 2024-11-21 13:51 2019-03-7 Show GitHub Exploit DB Packet Storm
211628 6.1 MEDIUM
Network 		mitel connect_onsite A reflected Cross-site scripting (XSS) vulnerability in ShoreTel Connect ONSITE 18.82.2000.0 allows remote attackers to inject arbitrary web script or HTML via the page parameter. CWE-79
Cross-site Scripting 		CVE-2019-9593 2024-11-21 13:51 2019-03-7 Show GitHub Exploit DB Packet Storm
211629 6.1 MEDIUM
Network 		mitel connect_onsite A reflected Cross-site scripting (XSS) vulnerability in ShoreTel Connect ONSITE 19.45.1602.0 allows remote attackers to inject arbitrary web script or HTML via the url parameter. CWE-79
Cross-site Scripting 		CVE-2019-9592 2024-11-21 13:51 2019-03-7 Show GitHub Exploit DB Packet Storm
211630 6.1 MEDIUM
Network 		mitel connect_onsite A reflected Cross-site scripting (XSS) vulnerability in ShoreTel Connect ONSITE before 19.49.1500.0 allows remote attackers to inject arbitrary web script or HTML via the brandUrl parameter. CWE-79
Cross-site Scripting 		CVE-2019-9591 2024-11-21 13:51 2019-03-7 Show GitHub Exploit DB Packet Storm