Vulnerability Search Top

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

Vulnerability Information Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":April 30, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
229421	7.5	危険	siteatschool	-	S@S における PHP リモートファイルインクルージョンの脆弱性	-	CVE-2006-4920	2012-12-20 18:02	2006-09-20	Show	GitHub Exploit DB Packet Storm

229422	2.6	注意	siteatschool	-	S@S の starnet/editors/htmlarea/popups/images.php におけるディレクトリトラバーサルの脆弱性	-	CVE-2006-4919	2012-12-20 18:02	2006-09-20	Show	GitHub Exploit DB Packet Storm

229423	7.5	危険	simple discussion board	-	Simple Discussion Board における PHP リモートファイルインクルージョンの脆弱性	-	CVE-2006-4918	2012-12-20 18:02	2006-09-20	Show	GitHub Exploit DB Packet Storm

229424	4.3	警告	pt news	-	PT News の search.php におけるクロスサイトスクリプティングの脆弱性	-	CVE-2006-4917	2012-12-20 18:02	2006-09-20	Show	GitHub Exploit DB Packet Storm

229425	7.5	危険	Qualiteam Software Limited	-	Qualiteam X-Cart の cmpi.php における任意のプログラム変数を上書きされる脆弱性	-	CVE-2006-4904	2012-12-20 18:02	2006-09-20	Show	GitHub Exploit DB Packet Storm

229426	10	危険	シマンテック	-	Symantec Veritas NetBackup の NetBackup bpcd デーモンにおける任意のコマンドを実行される脆弱性	-	CVE-2006-4902	2012-12-20 18:02	2006-12-13	Show	GitHub Exploit DB Packet Storm

229427	7.5	危険	phpbb xs	-	phpBB XS の bb_usage_stats/includes/bb_usage_stats.php における PHP リモートファイルインクルージョンの脆弱性	-	CVE-2006-4893	2012-12-20 18:02	2006-09-19	Show	GitHub Exploit DB Packet Storm

229428	7.5	危険	techno dreams	-	Techno Dreams FAQ Manager Package の faqview.asp における SQL インジェクションの脆弱性	-	CVE-2006-4892	2012-12-20 18:02	2006-09-19	Show	GitHub Exploit DB Packet Storm

229429	7.5	危険	techno dreams	-	Techno Dreams Articles & Papers Package の ArticlesTableview.asp における SQL インジェクションの脆弱性	-	CVE-2006-4891	2012-12-20 18:02	2006-09-19	Show	GitHub Exploit DB Packet Storm

229430	7.5	危険	unak	-	UNAK-CMS における PHP リモートファイルインクルージョンの脆弱性	-	CVE-2006-4890	2012-12-20 18:02	2006-09-19	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:April 30, 2026, 4:58 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
212591	9.8	CRITICAL Network	zoneminder	zoneminder	daemonControl in includes/functions.php in ZoneMinder before 1.32.3 allows command injection via shell metacharacters.	CWE-78 OS Command	CVE-2019-8427	2024-11-21 13:49	2019-02-18	Show	GitHub Exploit DB Packet Storm

212592	6.1	MEDIUM Network	zoneminder	zoneminder	skins/classic/views/controlcap.php in ZoneMinder before 1.32.3 has XSS via the newControl array, as demonstrated by the newControl[MinTiltRange] parameter.	CWE-79 Cross-site Scripting	CVE-2019-8426	2024-11-21 13:49	2019-02-18	Show	GitHub Exploit DB Packet Storm

212593	6.1	MEDIUM Network	zoneminder	zoneminder	includes/database.php in ZoneMinder before 1.32.3 has XSS in the construction of SQL-ERR messages.	CWE-79 Cross-site Scripting	CVE-2019-8425	2024-11-21 13:49	2019-02-18	Show	GitHub Exploit DB Packet Storm

212594	9.8	CRITICAL Network	zoneminder	zoneminder	ZoneMinder before 1.32.3 has SQL Injection via the ajax/status.php sort parameter.	CWE-89 SQL Injection	CVE-2019-8424	2024-11-21 13:49	2019-02-18	Show	GitHub Exploit DB Packet Storm

212595	9.8	CRITICAL Network	zoneminder	zoneminder	ZoneMinder through 1.32.3 has SQL Injection via the skins/classic/views/events.php filter[Query][terms][0][cnj] parameter.	CWE-89 SQL Injection	CVE-2019-8423	2024-11-21 13:49	2019-02-18	Show	GitHub Exploit DB Packet Storm

212596	7.2	HIGH Network	pbootcms	pbootcms	A SQL Injection vulnerability exists in PbootCMS v1.3.2 via the description parameter in apps\admin\controller\content\ContentController.php.	CWE-89 SQL Injection	CVE-2019-8422	2024-11-21 13:49	2019-02-18	Show	GitHub Exploit DB Packet Storm

212597	7.2	HIGH Network	bagesoft	bagecms	upload/protected/modules/admini/views/post/index.php in BageCMS through 3.1.4 allows SQL Injection via the title or titleAlias parameter.	CWE-89 SQL Injection	CVE-2019-8421	2024-11-21 13:49	2019-02-18	Show	GitHub Exploit DB Packet Storm

212598	6.1	MEDIUM Network	vnote_project	vnote	VNote 2.2 has XSS via a new text note.	CWE-79 Cross-site Scripting	CVE-2019-8419	2024-11-21 13:49	2019-02-18	Show	GitHub Exploit DB Packet Storm

212599	8.8	HIGH Network	seacms	seacms	SeaCMS 7.2 mishandles member.php?mod=repsw4 requests.	NVD-CWE-noinfo	CVE-2019-8418	2024-11-21 13:49	2019-02-18	Show	GitHub Exploit DB Packet Storm

212600	5.5	MEDIUM Local	mi	mi_mix_2_firmware	On Xiaomi MIX 2 devices with the 4.4.78 kernel, a NULL pointer dereference in the ioctl interface of the device file /dev/elliptic1 or /dev/elliptic0 causes a system crash via IOCTL 0x4008c575 (aka d…	CWE-476 NULL Pointer Dereference	CVE-2019-8413	2024-11-21 13:49	2019-02-18	Show	GitHub Exploit DB Packet Storm