Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 7, 2026, 6 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
229931 7.5 危険 university of british columbia - University of British Columbia iPeer における PHP リモートファイルインクルージョンの脆弱性 - CVE-2006-5594 2012-12-20 18:02 2006-10-27 Show GitHub Exploit DB Packet Storm
229932 5 警告 webasyst llc - Shop-Script の premium/index.php における CRLF インジェクションの脆弱性 - CVE-2006-5566 2012-12-20 18:02 2006-10-27 Show GitHub Exploit DB Packet Storm
229933 5 警告 Yahoo! - Yahoo! Messenger におけるサービス運用妨害 (DoS) の脆弱性 - CVE-2006-5563 2012-12-20 18:02 2006-10-27 Show GitHub Exploit DB Packet Storm
229934 7.5 危険 revilloc solutions - RevilloC MailServer におけるヒープベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー
CVE-2006-5552 2012-12-20 18:02 2006-10-26 Show GitHub Exploit DB Packet Storm
229935 7.5 危険 qksoft - QK SMTP におけるスタックベースのバッファオーバーフローの脆弱性 - CVE-2006-5551 2012-12-20 18:02 2006-10-26 Show GitHub Exploit DB Packet Storm
229936 5 警告 シマンテック - Domino Server 用の Symantec Mail Security におけるスパム送信用の踏み台として製品を使用される脆弱性 - CVE-2006-5545 2012-12-20 18:02 2006-10-19 Show GitHub Exploit DB Packet Storm
229937 7.5 危険 ueberproject management system - UeberProject Management System の login/secure.php における PHP リモートファイルインクルージョンの脆弱性 - CVE-2006-5539 2012-12-20 18:02 2006-10-26 Show GitHub Exploit DB Packet Storm
229938 4.3 警告 zwahlen informatik - Zwahlen Online Shop Freeware の index.htm におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2006-5534 2012-12-20 18:02 2006-10-26 Show GitHub Exploit DB Packet Storm
229939 6.8 警告 XOOPS - RMSOFT Gallery System の rmgs/images.php におけるクロスサイトスクリプティングの脆弱性 - CVE-2006-5532 2012-12-20 18:02 2006-10-26 Show GitHub Exploit DB Packet Storm
229940 5.1 警告 schoolalumni portal - SchoolAlumni Portal の smumdadotcom_ascyb_alumni/mod.php におけるクロスサイトスクリプティングの脆弱性 - CVE-2006-5529 2012-12-20 18:02 2006-10-26 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 8, 2026, 4:54 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
213231 8.8 HIGH
Network
ofcms_project ofcms An issue was discovered in OFCMS before 1.1.3. Remote attackers can execute arbitrary code because blocking of .jsp and .jspx files does not consider (for example) file.jsp::$DATA to the admin/comn/s… CWE-434
 Unrestricted Upload of File with Dangerous Type 
CVE-2019-9609 2024-11-21 13:51 2019-03-7 Show GitHub Exploit DB Packet Storm
213232 8.8 HIGH
Network
ofcms_project ofcms An issue was discovered in OFCMS before 1.1.3. Remote attackers can execute arbitrary code because blocking of .jsp and .jspx files does not consider (for example) file.jsp::$DATA to the admin/uedito… CWE-434
 Unrestricted Upload of File with Dangerous Type 
CVE-2019-9608 2024-11-21 13:51 2019-03-7 Show GitHub Exploit DB Packet Storm
213233 5.3 MEDIUM
Network
medical_store_script_project medical_store_script PHP Scripts Mall Medical Store Script 3.0.3 allows Path Traversal by navigating to the parent directory of a jpg or png file. CWE-22
Path Traversal
CVE-2019-9607 2024-11-21 13:51 2019-03-7 Show GitHub Exploit DB Packet Storm
213234 5.4 MEDIUM
Network
personal_video_collection_script_project personal_video_collection_script PHP Scripts Mall Personal Video Collection Script 4.0.4 has Stored XSS via the "Update profile" feature. CWE-79
Cross-site Scripting
CVE-2019-9606 2024-11-21 13:51 2019-03-7 Show GitHub Exploit DB Packet Storm
213235 6.5 MEDIUM
Network
1234n minicms MiniCMS 1.10 allows mc-admin/post.php?state=publish&delete= CSRF to delete articles, a different vulnerability than CVE-2018-18891. CWE-352
 Origin Validation Error
CVE-2019-9603 2024-11-21 13:51 2019-03-7 Show GitHub Exploit DB Packet Storm
213236 7.5 HIGH
Network
apowersoft apowermanager The ApowerManager application through 3.1.7 for Android allows remote attackers to cause a denial of service via many simultaneous /?Key=PhoneRequestAuthorization requests. NVD-CWE-noinfo
CVE-2019-9601 2024-11-21 13:51 2019-03-7 Show GitHub Exploit DB Packet Storm
213237 7.5 HIGH
Network
theolivetree ftp_server The Olive Tree FTP Server (aka com.theolivetree.ftpserver) application through 1.32 for Android allows remote attackers to cause a denial of service via a client that makes many connection attempts a… NVD-CWE-noinfo
CVE-2019-9600 2024-11-21 13:51 2019-03-7 Show GitHub Exploit DB Packet Storm
213238 7.5 HIGH
Network
airdroid airdroid The AirDroid application through 4.2.1.6 for Android allows remote attackers to cause a denial of service (service crash) via many simultaneous sdctl/comm/lite_auth/ requests. NVD-CWE-noinfo
CVE-2019-9599 2024-11-21 13:51 2019-03-7 Show GitHub Exploit DB Packet Storm
213239 6.1 MEDIUM
Network
appcms appcms AppCMS 2.0.101 allows XSS via the upload/callback.php params parameter. CWE-79
Cross-site Scripting
CVE-2019-9595 2024-11-21 13:51 2019-03-7 Show GitHub Exploit DB Packet Storm
213240 9.8 CRITICAL
Network
bluecms_project bluecms BlueCMS 1.6 allows SQL Injection via the user_id parameter in an uploads/admin/user.php?act=edit request. CWE-89
SQL Injection
CVE-2019-9594 2024-11-21 13:51 2019-03-7 Show GitHub Exploit DB Packet Storm