Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 10, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
229921 5 警告 Snort.org - Snort におけるサービス運用妨害 (DoS) の脆弱性 - CVE-2006-6931 2012-12-20 18:18 2007-01-16 Show GitHub Exploit DB Packet Storm
229922 6.8 警告 sage-mozdev - Firefox Sage エクステンションにおけるローカルコンテキストの任意の Javascript を実行される脆弱性 - CVE-2006-6919 2012-12-20 18:18 2007-01-11 Show GitHub Exploit DB Packet Storm
229923 7.5 危険 phpMyFAQ - phpMyFAQ における任意の PHP スクリプトをアップロードされる脆弱性 - CVE-2006-6913 2012-12-20 18:18 2006-12-15 Show GitHub Exploit DB Packet Storm
229924 7.5 危険 phpMyFAQ - phpMyFAQ における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2006-6912 2012-12-20 18:02 2006-12-15 Show GitHub Exploit DB Packet Storm
229925 10 危険 東芝 - Toshiba Bluetooth スタックにおける管理者アクセス権限を取得される脆弱性 - CVE-2006-6903 2012-12-20 18:02 2006-12-31 Show GitHub Exploit DB Packet Storm
229926 5.4 警告 widcomm - Widcomm BTW におけるディレクトリトラバーサルの脆弱性 - CVE-2006-6897 2012-12-20 18:02 2006-12-31 Show GitHub Exploit DB Packet Storm
229927 5.4 警告 plantronic - Plantronic Headset の Bluetooth スタックにおける許可されていない組み合わせ操作を実行される脆弱性 - CVE-2006-6896 2012-12-20 18:02 2006-12-31 Show GitHub Exploit DB Packet Storm
229928 2.9 注意 sony ericsson - Sony Ericsson T60 の Bluetooth スタックにおける許可されていない問い合わせ応答へのアクセス権を取得される脆弱性 - CVE-2006-6895 2012-12-20 18:02 2006-12-31 Show GitHub Exploit DB Packet Storm
229929 10 危険 spine - SPINE における脆弱性 - CVE-2006-6894 2012-12-20 18:02 2006-12-31 Show GitHub Exploit DB Packet Storm
229930 5 警告 The Tor Project - Tor における非表示サービスの IP アドレスを特定される脆弱性 - CVE-2006-6893 2012-12-20 18:02 2006-12-31 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 10, 2026, 4:58 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
213681 5.3 MEDIUM
Network 		mailvelope mailvelope Mailvelope prior to 3.3.0 does not require user interaction to import public keys shown on web page. This functionality can be tricked to either hide a key import from the user or obscure which key w… CWE-320
 Key Management Errors 		CVE-2019-9150 2024-11-21 13:51 2019-07-10 Show GitHub Exploit DB Packet Storm
213682 6.5 MEDIUM
Network 		mailvelope mailvelope Mailvelope prior to 3.3.0 allows private key operations without user interaction via its client-API. By modifying an URL parameter in Mailvelope, an attacker is able to sign (and encrypt) arbitrary m… CWE-347
CWE-863
 Improper Verification of Cryptographic Signature
 Incorrect Authorization 		CVE-2019-9149 2024-11-21 13:51 2019-07-10 Show GitHub Exploit DB Packet Storm
213683 4.3 MEDIUM
Network 		mailvelope mailvelope Mailvelope prior to 3.3.0 accepts or operates with invalid PGP public keys: Mailvelope allows importing keys that contain users without a valid self-certification. Keys that are obviously invalid are… CWE-295
Improper Certificate Validation  		CVE-2019-9148 2024-11-21 13:51 2019-07-10 Show GitHub Exploit DB Packet Storm
213684 4.3 MEDIUM
Network 		mailvelope mailvelope Mailvelope prior to 3.1.0 is vulnerable to a clickjacking attack against the settings page. As the settings page is intended to be accessible from web applications, the browser's extension isolation … CWE-1021
 Improper Restriction of Rendered UI Layers or Frames 		CVE-2019-9147 2024-11-21 13:51 2019-07-10 Show GitHub Exploit DB Packet Storm
213685 9.8 CRITICAL
Network 		jetbrains intellij_idea In several JetBrains IntelliJ IDEA versions, a Spring Boot run configuration with the default setting allowed remote attackers to execute code when the configuration is running, because a JMX server … CWE-668
 Exposure of Resource to Wrong Sphere 		CVE-2019-9186 2024-11-21 13:51 2019-07-4 Show GitHub Exploit DB Packet Storm
213686 5.7 MEDIUM
Adjacent 		gemalto ezio_ds3_server Gemalto DS3 Authentication Server 2.6.1-SP01 has Broken Access Control. CWE-294
Authentication Bypass by Capture-replay  		CVE-2019-9158 2024-11-21 13:51 2019-06-6 Show GitHub Exploit DB Packet Storm
213687 5.7 MEDIUM
Adjacent 		gemalto ezio_ds3_server Gemalto DS3 Authentication Server 2.6.1-SP01 allows Local File Disclosure. CWE-22
Path Traversal 		CVE-2019-9157 2024-11-21 13:51 2019-06-6 Show GitHub Exploit DB Packet Storm
213688 8.0 HIGH
Adjacent 		gemalto ezio_ds3_server Gemalto DS3 Authentication Server 2.6.1-SP01 allows OS Command Injection. CWE-78
OS Command  		CVE-2019-9156 2024-11-21 13:51 2019-06-6 Show GitHub Exploit DB Packet Storm
213689 8.8 HIGH
Network 		primasystems flexair Prima Systems FlexAir, Versions 2.4.9api3 and prior. The application allows the upload of arbitrary Python scripts when configuring the main central controller. These scripts can be immediately execu… CWE-434
 Unrestricted Upload of File with Dangerous Type  		CVE-2019-9189 2024-11-21 13:51 2019-06-6 Show GitHub Exploit DB Packet Storm
213690 7.5 HIGH
Network 		ikiwiki ikiwiki ikiwiki before 3.20170111.1 and 3.2018x and 3.2019x before 3.20190228 allows SSRF via the aggregate plugin. The impact also includes reading local files via file: URIs. CWE-918
Server-Side Request Forgery (SSRF)  		CVE-2019-9187 2024-11-21 13:51 2019-06-6 Show GitHub Exploit DB Packet Storm