Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 5, 2026, noon

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
229821 7.5 危険 xennobb - XennoBB の topic_post.php における SQL インジェクションの脆弱性 - CVE-2006-4279 2012-12-20 18:02 2006-08-21 Show GitHub Exploit DB Packet Storm
229822 7.5 危険 sportsphool - SportsPHool の includes/layout/plain.footer.php における PHP リモートファイルインクルージョンの脆弱性 - CVE-2006-4278 2012-12-20 18:02 2006-08-21 Show GitHub Exploit DB Packet Storm
229823 9 危険 symantec veritas - Symantec Veritas NetBackup PureDisk Remote Office Edition における認証を回避される脆弱性 - CVE-2006-4228 2012-12-20 18:02 2006-08-16 Show GitHub Exploit DB Packet Storm
229824 4.3 警告 VWar - VWar の calendar.php におけるクロスサイトスクリプティングの脆弱性 - CVE-2006-4224 2012-12-20 18:02 2006-08-18 Show GitHub Exploit DB Packet Storm
229825 7.5 危険 Zen Cart - Zen Cart におけるディレクトリトラバーサルの脆弱性 - CVE-2006-4218 2012-12-20 18:02 2006-08-17 Show GitHub Exploit DB Packet Storm
229826 7.5 危険 webinsta - WEBInsta CMS の modules/usersonline/users.php における PHP リモートファイルインクルージョンの脆弱性 - CVE-2006-4217 2012-12-20 18:02 2006-08-17 Show GitHub Exploit DB Packet Storm
229827 5.1 警告 Zen Cart - Zen Cart の index.php における PHP リモートファイルインクルージョンの脆弱性 CWE-94
コード・インジェクション 		CVE-2006-4215 2012-12-20 18:02 2006-08-17 Show GitHub Exploit DB Packet Storm
229828 7.5 危険 Zen Cart - Zen Cart における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2006-4214 2012-12-20 18:02 2006-08-17 Show GitHub Exploit DB Packet Storm
229829 7.5 危険 webinsta - WEBInsta Mailing List Manager の install3.php における PHP リモートファイルインクルージョンの脆弱性 - CVE-2006-4209 2012-12-20 18:02 2006-08-17 Show GitHub Exploit DB Packet Storm
229830 5 警告 skippy.net - WordPress 用の Skippy WP-DB-Backup プラグインにおけるディレクトリトラバーサルの脆弱性 - CVE-2006-4208 2012-12-20 18:02 2006-08-17 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 5, 2026, 4:51 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
212911 8.8 HIGH
Network 		indexhibit indexhibit In Indexhibit 2.1.5, remote attackers can execute arbitrary code via the v parameter (in conjunction with the id parameter) in a upd_jxcode=true action to the ndxzstudio/?a=system URI. CWE-20
 Improper Input Validation  		CVE-2019-8954 2024-11-21 13:50 2019-02-21 Show GitHub Exploit DB Packet Storm
212912 6.1 MEDIUM
Network 		netgate haproxy The HAProxy package before 0.59_16 for pfSense has XSS via the desc (aka Description) or table_actionsaclN parameter, related to haproxy_listeners.php and haproxy_listeners_edit.php. CWE-79
Cross-site Scripting 		CVE-2019-8953 2024-11-21 13:50 2019-02-21 Show GitHub Exploit DB Packet Storm
212913 9.8 CRITICAL
Network 		dasannetworks h665_firmware The backdoor account dnsekakf2$$ in /bin/login on DASAN H665 devices with firmware 1.46p1-0028 allows an attacker to login to the admin account via TELNET. CWE-798
 Use of Hard-coded Credentials 		CVE-2019-8950 2024-11-21 13:50 2019-02-20 Show GitHub Exploit DB Packet Storm
212914 9.8 CRITICAL
Network 		papercut papercut_mf
papercut_ng 		PaperCut MF before 18.3.6 and PaperCut NG before 18.3.6 allow script injection via the user interface, aka PC-15163. CWE-74
Injection 		CVE-2019-8948 2024-11-21 13:50 2019-02-20 Show GitHub Exploit DB Packet Storm
212915 6.5 MEDIUM
Network 		octopus octopus_deploy
octopus_server 		An Information Exposure issue in the Terraform deployment step in Octopus Deploy before 2019.1.8 (and before 2018.10.4 LTS) allows remote authenticated users to view sensitive Terraform output variab… CWE-532
 Inclusion of Sensitive Information in Log Files 		CVE-2019-8944 2024-11-21 13:50 2019-02-20 Show GitHub Exploit DB Packet Storm
212916 6.5 MEDIUM
Network 		wordpress wordpress WordPress through 5.0.3 allows Path Traversal in wp_crop_image(). An attacker (who has privileges to crop an image) can write the output image to an arbitrary directory via a filename containing two … CWE-22
Path Traversal 		CVE-2019-8943 2024-11-21 13:50 2019-02-20 Show GitHub Exploit DB Packet Storm
212917 8.8 HIGH
Network 		wordpress
debian 		wordpress
debian_linux 		WordPress before 4.9.9 and 5.x before 5.0.1 allows remote code execution because an _wp_attached_file Post Meta entry can be changed to an arbitrary string, such as one ending with a .jpg?file.php su… CWE-434
 Unrestricted Upload of File with Dangerous Type  		CVE-2019-8942 2024-11-21 13:50 2019-02-20 Show GitHub Exploit DB Packet Storm
212918 6.1 MEDIUM
Network 		tautulli tautulli data/interfaces/default/history.html in Tautulli 2.1.26 has XSS via a crafted Plex username that is mishandled when constructing the History page. CWE-79
Cross-site Scripting 		CVE-2019-8939 2024-11-21 13:50 2019-02-20 Show GitHub Exploit DB Packet Storm
212919 5.4 MEDIUM
Network 		o-dyn collabtive Collabtive 3.1 allows XSS via the manageuser.php?action=profile id parameter. CWE-79
Cross-site Scripting 		CVE-2019-8935 2024-11-21 13:50 2019-02-20 Show GitHub Exploit DB Packet Storm
212920 8.8 HIGH
Network 		dedecms dedecms In DedeCMS 5.7SP2, attackers can upload a .php file to the uploads/ directory (without being blocked by the Web Application Firewall), and then execute this file, via this sequence of steps: visiting… CWE-434
 Unrestricted Upload of File with Dangerous Type  		CVE-2019-8933 2024-11-21 13:50 2019-02-19 Show GitHub Exploit DB Packet Storm