Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 3, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
229881 7.5 危険 turnkey web tools - Turnkey Web Tools PHP Live Helper の global.php における PHP リモートファイルインクルージョンの脆弱性 - CVE-2006-4051 2012-12-20 18:02 2006-08-9 Show GitHub Exploit DB Packet Storm
229882 2.1 注意 サン・マイクロシステムズ - Sun Ray Server Software のユーティリティ utxconfig における任意のファイルを上書きされる脆弱性 - CVE-2006-4049 2012-12-20 18:02 2006-07-7 Show GitHub Exploit DB Packet Storm
229883 7.5 危険 torbstoff - Torbstoff News の news.php における PHP リモートファイルインクルージョンの脆弱性 - CVE-2006-4045 2012-12-20 18:02 2006-08-9 Show GitHub Exploit DB Packet Storm
229884 7.5 危険 pike - Pike における SQL インジェクションの脆弱性 - CVE-2006-4041 2012-12-20 18:02 2006-08-9 Show GitHub Exploit DB Packet Storm
229885 7.5 危険 zonemetrics - ZoneMetrics ZoneX Publishers Gold Edition の includes/usercp_register.php における PHP リモートファイルインクルージョンの脆弱性 - CVE-2006-4036 2012-12-20 18:02 2006-08-9 Show GitHub Exploit DB Packet Storm
229886 10 危険 WordPress.org - WordPress における脆弱性 CWE-noinfo
情報不足 		CVE-2006-4028 2012-12-20 18:02 2006-07-29 Show GitHub Exploit DB Packet Storm
229887 7.5 危険 Red Graphic Systems - SAPID CMS における PHP リモートファイルインクルージョンの脆弱性 CWE-94
コード・インジェクション 		CVE-2006-4026 2012-12-20 18:02 2006-08-8 Show GitHub Exploit DB Packet Storm
229888 7.5 危険 xennobb - XennoBB の profile.php における SQL インジェクションの脆弱性 - CVE-2006-4025 2012-12-20 18:02 2006-08-8 Show GitHub Exploit DB Packet Storm
229889 2.6 注意 scatterchat - ScatterChat の cryptographic モジュールにおける大量のメッセージのパターンを特定される脆弱性 - CVE-2006-4021 2012-12-20 18:02 2006-08-17 Show GitHub Exploit DB Packet Storm
229890 4.3 警告 toenda software development - toendaCMS stable および unstable の /toendaCMS におけるクロスサイトスクリプティングの脆弱性 - CVE-2006-4016 2012-12-20 18:02 2006-08-7 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 3, 2026, 4:06 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
211511 4.5 MEDIUM
Adjacent 		symantec messaging_gateway Symantec Messaging Gateway (prior to 10.7.0), may be susceptible to an information disclosure issue, which is a type of vulnerability that could potentially allow unauthorized access to data. NVD-CWE-noinfo
CVE-2019-9699 2024-11-21 13:52 2019-10-25 Show GitHub Exploit DB Packet Storm
211512 7.8 HIGH
Local 		cloudcti hip_integrator_recognition_configuration_tool CloudCTI HIP Integrator Recognition Configuration Tool allows privilege escalation via its EXQUISE integration. This tool communicates with a service (Recognition Update Client Service) via an insecu… CWE-269
 Improper Privilege Management 		CVE-2019-9745 2024-11-21 13:52 2019-10-15 Show GitHub Exploit DB Packet Storm
211513 7.8 HIGH
Local 		libreoffice libreoffice LibreOffice documents can contain macros. The execution of those macros is controlled by the document security settings, typically execution of macros are blocked by default. A URL decoding flaw exis… CWE-116
 Improper Encoding or Escaping of Output 		CVE-2019-9853 2024-11-21 13:52 2019-09-28 Show GitHub Exploit DB Packet Storm
211514 6.5 MEDIUM
Network 		libav libav A stack-based buffer overflow in the subtitle decoder in Libav 12.3 allows attackers to corrupt the stack via a crafted video file in Matroska format, because srt_to_ass in libavcodec/srtdec.c misuse… CWE-787
 Out-of-bounds Write 		CVE-2019-9720 2024-11-21 13:52 2019-09-20 Show GitHub Exploit DB Packet Storm
211515 8.8 HIGH
Network 		libav libav A stack-based buffer overflow in the subtitle decoder in Libav 12.3 allows attackers to corrupt the stack via a crafted video file in Matroska format, because srt_to_ass in libavcodec/srtdec.c misuse… CWE-787
 Out-of-bounds Write 		CVE-2019-9719 2024-11-21 13:52 2019-09-20 Show GitHub Exploit DB Packet Storm
211516 6.5 MEDIUM
Network 		libav libav In Libav 12.3, a denial of service in the subtitle decoder allows attackers to hog the CPU via a crafted video file in Matroska format, because srt_to_ass in libavcodec/srtdec.c has a complex format … CWE-400
 Uncontrolled Resource Consumption 		CVE-2019-9717 2024-11-21 13:52 2019-09-20 Show GitHub Exploit DB Packet Storm
211517 5.3 MEDIUM
Network 		dahuasecurity ipc-hdw1x2x_firmware
ipc-hfw1x2x_firmware
ipc-hdw2x2x_firmware
ipc-hfw2x2x_firmware
ipc-hdw4x2x_firmware
ipc-hfw4x2x_firmware
ipc-hdbw4x2x_firmware
ipc-hdw5x2x_firmware
ipc-hf… 		Some Dahua products have information leakage issues. Attackers can obtain the IP address and device model information of the device by constructing malicious data packets. Affected products include: … NVD-CWE-noinfo
CVE-2019-9680 2024-11-21 13:52 2019-09-19 Show GitHub Exploit DB Packet Storm
211518 8.8 HIGH
Network 		dahuasecurity ipc-hdw1x2x_firmware
ipc-hfw1x2x_firmware
ipc-hdw2x2x_firmware
ipc-hfw2x2x_firmware
ipc-hdw4x2x_firmware
ipc-hfw4x2x_firmware
ipc-hdbw4x2x_firmware
ipc-hdw5x2x_firmware
ipc-hf… 		Some of Dahua's Debug functions do not have permission separation. Low-privileged users can use the Debug function after logging in. Affected products include: IPC-HDW1X2X,IPC-HFW1X2X,IPC-HDW2X2X,IPC… CWE-276
Incorrect Default Permissions  		CVE-2019-9679 2024-11-21 13:52 2019-09-19 Show GitHub Exploit DB Packet Storm
211519 7.5 HIGH
Network 		dahuasecurity ipc-hdw1x2x_firmware
ipc-hfw1x2x_firmware
ipc-hdw2x2x_firmware
ipc-hfw2x2x_firmware
ipc-hdw4x2x_firmware
ipc-hfw4x2x_firmware
ipc-hdbw4x2x_firmware
ipc-hdw5x2x_firmware
ipc-hf… 		Some Dahua products have the problem of denial of service during the login process. An attacker can cause a device crashed by constructing a malicious packet. Affected products include: IPC-HDW1X2X,I… NVD-CWE-noinfo
CVE-2019-9678 2024-11-21 13:52 2019-09-19 Show GitHub Exploit DB Packet Storm
211520 9.8 CRITICAL
Network 		dahuasecurity ipc-hdw1x2x_firmware
ipc-hfw1x2x_firmware
ipc-hdw2x2x_firmware
ipc-hfw2x2x_firmware
ipc-hdw4x2x_firmware
ipc-hfw4x2x_firmware
ipc-hdbw4x2x_firmware
ipc-hdw5x2x_firmware
ipc-hf… 		The specific fields of CGI interface of some Dahua products are not strictly verified, an attacker can cause a buffer overflow by constructing malicious packets. Affected products include: IPC-HDW1X2… CWE-120
Classic Buffer Overflow 		CVE-2019-9677 2024-11-21 13:52 2019-09-19 Show GitHub Exploit DB Packet Storm