Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 1, 2026, 2 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
229631 7.5 危険 phpselect - PHPSelect Web Development Division 用の PDD パッケージにおける PHP リモートファイルインクルージョンの脆弱性 - CVE-2006-5118 2012-12-20 18:02 2006-10-3 Show GitHub Exploit DB Packet Storm
229632 5 警告 The phpMyAdmin Project - phpMyAdmin における重要な情報を取得される脆弱性 - CVE-2006-5117 2012-12-20 18:02 2006-10-1 Show GitHub Exploit DB Packet Storm
229633 5.1 警告 The phpMyAdmin Project - phpMyAdmin におけるクロスサイトリクエストフォージェリの脆弱性 - CVE-2006-5116 2012-12-20 18:02 2006-10-1 Show GitHub Exploit DB Packet Storm
229634 6.8 警告 SAP - SAP ITS の wgate におけるクロスサイトスクリプティングの脆弱性 - CVE-2006-5114 2012-12-20 18:02 2006-10-3 Show GitHub Exploit DB Packet Storm
229635 7.5 危険 yuuki yoshizawa - Yuuki Yoshizawa Exporia の common.php におけるディレクトリトラバーサルの脆弱性 - CVE-2006-5113 2012-12-20 18:02 2006-10-3 Show GitHub Exploit DB Packet Storm
229636 6.8 警告 VirtueMart - VirtueMart Joomla! eCommerce Edition CMS の index.php におけるクロスサイトスクリプティングの脆弱性 - CVE-2006-5096 2012-12-20 18:02 2006-09-29 Show GitHub Exploit DB Packet Storm
229637 5.1 警告 phpbb xs - phpBB XS の includes/functions_kb.php における PHP リモートファイルインクルージョンの脆弱性 - CVE-2006-5094 2012-12-20 18:02 2006-09-29 Show GitHub Exploit DB Packet Storm
229638 7.5 危険 php heaven - phpHeaven phpMyChat の connected_users.lib.php3 における PHP リモートファイルインクルージョンの脆弱性 - CVE-2006-5088 2012-12-20 18:02 2006-09-29 Show GitHub Exploit DB Packet Storm
229639 6.4 警告 pixel motion - Blog Pixel Motion における管理ユーザに対するユーザ名およびパスワードを変更される脆弱性 - CVE-2006-5086 2012-12-20 18:02 2006-09-28 Show GitHub Exploit DB Packet Storm
229640 7.5 危険 pixel motion - Blog Pixel Motion の config.php における任意の PHP コードを実行される脆弱性 - CVE-2006-5085 2012-12-20 18:02 2006-09-28 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 1, 2026, 4:54 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
211841 8.8 HIGH
Network
podofo_project
fedoraproject
podofo
fedora
PoDoFo::Impose::PdfTranslator::setSource() in pdftranslator.cpp in PoDoFo 0.9.6 has a NULL pointer dereference that can (for example) be triggered by sending a crafted PDF file to the podofoimpose bi… CWE-476
 NULL Pointer Dereference
CVE-2019-9199 2024-11-21 13:51 2019-02-27 Show GitHub Exploit DB Packet Storm
211842 9.8 CRITICAL
Network
grin grin util/src/zip.rs in Grin before 1.0.2 mishandles suspicious files. An attacker can execute arbitrary code via directory traversal in a ZIP archive. CWE-22
Path Traversal
CVE-2019-9195 2024-11-21 13:51 2019-02-27 Show GitHub Exploit DB Packet Storm
211843 9.8 CRITICAL
Network
std42 elfinder elFinder before 2.1.48 has a command injection vulnerability in the PHP connector. CWE-78
OS Command 
CVE-2019-9194 2024-11-21 13:51 2019-02-27 Show GitHub Exploit DB Packet Storm
211844 7.5 HIGH
Network
gnu glibc In the GNU C Library (aka glibc or libc6) through 2.29, check_dst_limits_calc_pos_1 in posix/regexec.c has Uncontrolled Recursion, as demonstrated by '(|)(\\1\\1)*' in grep, a different issue than CV… CWE-674
 Uncontrolled Recursion
CVE-2019-9192 2024-11-21 13:51 2019-02-27 Show GitHub Exploit DB Packet Storm
211845 5.9 MEDIUM
Network
etsi enterprise_transport_security The ETSI Enterprise Transport Security (ETS, formerly known as eTLS) protocol does not provide per-session forward secrecy. CWE-310
Cryptographic Issues
CVE-2019-9191 2024-11-21 13:51 2019-02-27 Show GitHub Exploit DB Packet Storm
211846 9.8 CRITICAL
Network
j2store j2store SQL injection vulnerability in the J2Store plugin 3.x before 3.3.7 for Joomla! allows remote attackers to execute arbitrary SQL commands via the product_option[] parameter. CWE-89
SQL Injection
CVE-2019-9184 2024-11-21 13:51 2019-02-27 Show GitHub Exploit DB Packet Storm
211847 8.8 HIGH
Network
zzzcms zzzphp There is a CSRF in ZZZCMS zzzphp V1.6.1 via a /admin015/save.php?act=editfile request. It allows PHP code injection by providing a filename in the file parameter, and providing file content in the fi… CWE-352
 Origin Validation Error
CVE-2019-9182 2024-11-21 13:51 2019-02-26 Show GitHub Exploit DB Packet Storm
211848 7.2 HIGH
Network
schoolcms schoolcms SchoolCMS version 2.3.1 allows file upload via the logo upload feature at admin.php?m=admin&c=site&a=save by using the .jpg extension, changing the Content-Type to image/php, and placing PHP code aft… CWE-434
 Unrestricted Upload of File with Dangerous Type 
CVE-2019-9181 2024-11-21 13:51 2019-02-26 Show GitHub Exploit DB Packet Storm
211849 9.8 CRITICAL
Network
gnu
netapp
mcafee
canonical
glibc
steelstore_cloud_integrated_storage
ontap_select_deploy_administration_utility
cloud_backup
web_gateway
ubuntu_linux
In the GNU C Library (aka glibc or libc6) through 2.29, proceed_next_node in posix/regexec.c has a heap-based buffer over-read via an attempted case-insensitive regular-expression match. CWE-125
Out-of-bounds Read
CVE-2019-9169 2024-11-21 13:51 2019-02-26 Show GitHub Exploit DB Packet Storm
211850 6.1 MEDIUM
Network
woocommerce woocommerce WooCommerce before 3.5.5 allows XSS via a Photoswipe caption. CWE-79
Cross-site Scripting
CVE-2019-9168 2024-11-21 13:51 2019-02-26 Show GitHub Exploit DB Packet Storm