Vulnerability Search Top

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

Vulnerability Information Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 8, 2026, 2:21 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
229981	6.8	警告	verliadmin	-	VerliAdmin におけるクロスサイトスクリプティングの脆弱性	-	CVE-2006-6668	2012-12-20 18:02	2006-12-20	Show	GitHub Exploit DB Packet Storm

229982	7.5	危険	verliadmin	-	VerliAdmin における SQL インジェクションの脆弱性	-	CVE-2006-6667	2012-12-20 18:02	2006-12-20	Show	GitHub Exploit DB Packet Storm

229983	7.5	危険	verliadmin	-	VerliAdmin の index.php における PHP リモートファイルインクルージョンの脆弱性	-	CVE-2006-6666	2012-12-20 18:02	2006-12-20	Show	GitHub Exploit DB Packet Storm

229984	4.1	警告	SUSE	-	SUSE Linux 上で稼動する Linux novell-lum におけるパスワードなしでコンソールへログインされる脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2006-6662	2012-12-20 18:02	2006-12-19	Show	GitHub Exploit DB Packet Storm

229985	7.5	危険	php-update	-	PHP-Update の blog.php における任意の PHP コードを実行される脆弱性	-	CVE-2006-6661	2012-12-20 18:02	2006-12-20	Show	GitHub Exploit DB Packet Storm

229986	7.5	危険	planetluc.com	-	planetluc.com RateMe の main.inc.php における PHP リモートファイルインクルージョンの脆弱性	-	CVE-2006-6648	2012-12-20 18:02	2006-12-19	Show	GitHub Exploit DB Packet Storm

229987	7.5	危険	yapbb	-	YapBB の include/yapbb_session.php における PHP リモートファイルインクルージョンの脆弱性	-	CVE-2006-6633	2012-12-20 18:02	2006-12-18	Show	GitHub Exploit DB Packet Storm

229988	7.5	危険	webwork	-	WeBWorK PG Language の lib/WeBWorK/PG/Translator.pm における dangerousMacros.pl などの文字列を含む名前を伴う任意のマクロを起動される脆弱性	-	CVE-2006-6629	2012-12-20 18:02	2006-12-18	Show	GitHub Exploit DB Packet Storm

229989	10	危険	softwin	-	BitDefender 製品に同梱された PE ファイルの解析の実装における整数オーバーフローの脆弱性	-	CVE-2006-6627	2012-12-20 18:02	2006-12-18	Show	GitHub Exploit DB Packet Storm

229990	5	警告	リアルネットワークス	-	RealNetworks RealPlayer の rpau3260.dll におけるサービス運用妨害 (DoS) の脆弱性	-	CVE-2006-6759	2012-12-20 18:02	2005-11-10	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 8, 2026, 4:54 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
213281	6.5	MEDIUM Network	gnu fedoraproject suse	pspp fedora backports	There is a reachable assertion abort in the function write_long_string_missing_values() in data/sys-file-writer.c in libdata.a in GNU PSPP 1.2.0 that will lead to denial of service.	CWE-617 Reachable Assertion	CVE-2019-9211	2024-11-21 13:51	2019-02-28	Show	GitHub Exploit DB Packet Storm

213282	9.8	CRITICAL Network	antfin	sofa-hessian	SOFA-Hessian through 4.0.2 allows remote attackers to execute arbitrary commands via a crafted serialized Hessian object because blacklisting of com.caucho.naming.QName and com.sun.org.apache.xpath.i…	CWE-184 CWE-502 Incomplete Blacklist Deserialization of Untrusted Data	CVE-2019-9212	2024-11-21 13:51	2019-02-28	Show	GitHub Exploit DB Packet Storm

213283	7.8	HIGH Local	advancemame debian canonical fedoraproject	advancecomp debian_linux ubuntu_linux fedora	In AdvanceCOMP 2.1, png_compress in pngex.cc in advpng has an integer overflow upon encountering an invalid PNG size, which results in an attempted memcpy to write into a buffer that is too small. (T…	CWE-125 CWE-190 Out-of-bounds Read Integer Overflow or Wraparound	CVE-2019-9210	2024-11-21 13:51	2019-02-27	Show	GitHub Exploit DB Packet Storm

213284	9.8	CRITICAL Network	phoenixcontact	ilc_131_eth_firmware ilc_131_eth\/xc_firmware ilc_151_eth_firmware ilc_151_eth\/xc_firmware ilc_171_eth_2tx_firmware ilc_191_eth_2tx_firmware ilc_191_me\/an_firmware axc_1050_fir…	Multiple Phoenix Contact devices allow remote attackers to establish TCP sessions to port 1962 and obtain sensitive information or make changes, as demonstrated by using the Create Backup feature to …	CWE-306 Missing Authentication for Critical Function	CVE-2019-9201	2024-11-21 13:51	2019-02-27	Show	GitHub Exploit DB Packet Storm

213285	8.8	HIGH Network	freedesktop debian canonical	poppler debian_linux ubuntu_linux	A heap-based buffer underwrite exists in ImageStream::getLine() located at Stream.cc in Poppler 0.74.0 that can (for example) be triggered by sending a crafted PDF file to the pdfimages binary. It al…	CWE-787 Out-of-bounds Write	CVE-2019-9200	2024-11-21 13:51	2019-02-27	Show	GitHub Exploit DB Packet Storm

213286	8.8	HIGH Network	podofo_project fedoraproject	podofo fedora	PoDoFo::Impose::PdfTranslator::setSource() in pdftranslator.cpp in PoDoFo 0.9.6 has a NULL pointer dereference that can (for example) be triggered by sending a crafted PDF file to the podofoimpose bi…	CWE-476 NULL Pointer Dereference	CVE-2019-9199	2024-11-21 13:51	2019-02-27	Show	GitHub Exploit DB Packet Storm

213287	9.8	CRITICAL Network	grin	grin	util/src/zip.rs in Grin before 1.0.2 mishandles suspicious files. An attacker can execute arbitrary code via directory traversal in a ZIP archive.	CWE-22 Path Traversal	CVE-2019-9195	2024-11-21 13:51	2019-02-27	Show	GitHub Exploit DB Packet Storm

213288	9.8	CRITICAL Network	std42	elfinder	elFinder before 2.1.48 has a command injection vulnerability in the PHP connector.	CWE-78 OS Command	CVE-2019-9194	2024-11-21 13:51	2019-02-27	Show	GitHub Exploit DB Packet Storm

213289	7.5	HIGH Network	gnu	glibc	In the GNU C Library (aka glibc or libc6) through 2.29, check_dst_limits_calc_pos_1 in posix/regexec.c has Uncontrolled Recursion, as demonstrated by '(\|)(\\1\\1)*' in grep, a different issue than CV…	CWE-674 Uncontrolled Recursion	CVE-2019-9192	2024-11-21 13:51	2019-02-27	Show	GitHub Exploit DB Packet Storm

213290	5.9	MEDIUM Network	etsi	enterprise_transport_security	The ETSI Enterprise Transport Security (ETS, formerly known as eTLS) protocol does not provide per-session forward secrecy.	CWE-310 Cryptographic Issues	CVE-2019-9191	2024-11-21 13:51	2019-02-27	Show	GitHub Exploit DB Packet Storm