Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 4, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
229511 5 警告 webasyst llc - Shop-Script の premium/index.php における CRLF インジェクションの脆弱性 - CVE-2006-5566 2012-12-20 18:02 2006-10-27 Show GitHub Exploit DB Packet Storm
229512 5 警告 Yahoo! - Yahoo! Messenger におけるサービス運用妨害 (DoS) の脆弱性 - CVE-2006-5563 2012-12-20 18:02 2006-10-27 Show GitHub Exploit DB Packet Storm
229513 7.5 危険 revilloc solutions - RevilloC MailServer におけるヒープベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2006-5552 2012-12-20 18:02 2006-10-26 Show GitHub Exploit DB Packet Storm
229514 7.5 危険 qksoft - QK SMTP におけるスタックベースのバッファオーバーフローの脆弱性 - CVE-2006-5551 2012-12-20 18:02 2006-10-26 Show GitHub Exploit DB Packet Storm
229515 5 警告 シマンテック - Domino Server 用の Symantec Mail Security におけるスパム送信用の踏み台として製品を使用される脆弱性 - CVE-2006-5545 2012-12-20 18:02 2006-10-19 Show GitHub Exploit DB Packet Storm
229516 7.5 危険 ueberproject management system - UeberProject Management System の login/secure.php における PHP リモートファイルインクルージョンの脆弱性 - CVE-2006-5539 2012-12-20 18:02 2006-10-26 Show GitHub Exploit DB Packet Storm
229517 4.3 警告 zwahlen informatik - Zwahlen Online Shop Freeware の index.htm におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2006-5534 2012-12-20 18:02 2006-10-26 Show GitHub Exploit DB Packet Storm
229518 6.8 警告 XOOPS - RMSOFT Gallery System の rmgs/images.php におけるクロスサイトスクリプティングの脆弱性 - CVE-2006-5532 2012-12-20 18:02 2006-10-26 Show GitHub Exploit DB Packet Storm
229519 5.1 警告 schoolalumni portal - SchoolAlumni Portal の smumdadotcom_ascyb_alumni/mod.php におけるクロスサイトスクリプティングの脆弱性 - CVE-2006-5529 2012-12-20 18:02 2006-10-26 Show GitHub Exploit DB Packet Storm
229520 5 警告 schoolalumni portal - SchoolAlumni Portal の mod.php におけるディレクトリトラバーサルの脆弱性 - CVE-2006-5528 2012-12-20 18:02 2006-10-26 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 5, 2026, 4:51 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
213341 7.0 HIGH
Local 		lg lha.sys The LHA.sys driver before 1.1.1811.2101 in LG Device Manager exposes functionality that allows low-privileged users to read and write arbitrary physical memory via specially crafted IOCTL requests an… CWE-59
Link Following 		CVE-2019-8372 2024-11-21 13:49 2019-02-19 Show GitHub Exploit DB Packet Storm
213342 5.4 MEDIUM
Network 		txjia imcat imcat 4.5 has Stored XSS via the root/run/adm.php fm[instop][note] parameter. CWE-79
Cross-site Scripting 		CVE-2019-8436 2024-11-21 13:49 2019-02-18 Show GitHub Exploit DB Packet Storm
213343 4.8 MEDIUM
Network 		phpmywind phpmywind admin/default.php in PHPMyWind v5.5 has XSS via an HTTP Host header. CWE-79
Cross-site Scripting 		CVE-2019-8435 2024-11-21 13:49 2019-02-18 Show GitHub Exploit DB Packet Storm
213344 6.1 MEDIUM
Network 		cmseasy cmseasy In CmsEasy 7.0, there is XSS via the ckplayer.php autoplay parameter. CWE-79
Cross-site Scripting 		CVE-2019-8434 2024-11-21 13:49 2019-02-18 Show GitHub Exploit DB Packet Storm
213345 7.5 HIGH
Network 		jtbc jtbc_php JTBC(PHP) 3.0.1.8 allows Arbitrary File Upload via the console/#/console/file/manage.php?type=list URI, as demonstrated by a .php file. CWE-434
 Unrestricted Upload of File with Dangerous Type  		CVE-2019-8433 2024-11-21 13:49 2019-02-18 Show GitHub Exploit DB Packet Storm
213346 6.1 MEDIUM
Network 		cmseasy cmseasy In CmsEasy 7.0, there is XSS via the ckplayer.php url parameter. CWE-79
Cross-site Scripting 		CVE-2019-8432 2024-11-21 13:49 2019-02-18 Show GitHub Exploit DB Packet Storm
213347 9.8 CRITICAL
Network 		zoneminder zoneminder ZoneMinder before 1.32.3 has SQL Injection via the ajax/status.php filter[Query][terms][0][cnj] parameter. CWE-89
SQL Injection 		CVE-2019-8429 2024-11-21 13:49 2019-02-18 Show GitHub Exploit DB Packet Storm
213348 9.8 CRITICAL
Network 		zoneminder zoneminder ZoneMinder before 1.32.3 has SQL Injection via the skins/classic/views/control.php groupSql parameter, as demonstrated by a newGroup[MonitorIds][] value. CWE-89
SQL Injection 		CVE-2019-8428 2024-11-21 13:49 2019-02-18 Show GitHub Exploit DB Packet Storm
213349 9.8 CRITICAL
Network 		zoneminder zoneminder daemonControl in includes/functions.php in ZoneMinder before 1.32.3 allows command injection via shell metacharacters. CWE-78
OS Command  		CVE-2019-8427 2024-11-21 13:49 2019-02-18 Show GitHub Exploit DB Packet Storm
213350 6.1 MEDIUM
Network 		zoneminder zoneminder skins/classic/views/controlcap.php in ZoneMinder before 1.32.3 has XSS via the newControl array, as demonstrated by the newControl[MinTiltRange] parameter. CWE-79
Cross-site Scripting 		CVE-2019-8426 2024-11-21 13:49 2019-02-18 Show GitHub Exploit DB Packet Storm