Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 3, 2026, 6 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
230011 6.5 警告 シトリックス・システムズ - Citrix MetaFrame における権限を取得される脆弱性 - CVE-2006-3779 2012-12-20 18:02 2006-07-24 Show GitHub Exploit DB Packet Storm
230012 7.5 危険 idevSpot - IDevSpot PhpLinkExchange の index.php における PHP リモートファイルインクルージョンの脆弱性 CWE-94
コード・インジェクション
CVE-2006-3777 2012-12-20 18:02 2006-07-24 Show GitHub Exploit DB Packet Storm
230013 7.5 危険 idevSpot - IDevSpot PhpHostBot および AutoHost の order/index.php における PHP リモートファイルインクルージョンの脆弱性 CWE-94
コード・インジェクション
CVE-2006-3776 2012-12-20 18:02 2006-07-24 Show GitHub Exploit DB Packet Storm
230014 7.5 危険 mybulletinboard - MyBB の class_session.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2006-3775 2012-12-20 18:02 2006-07-24 Show GitHub Exploit DB Packet Storm
230015 6.8 警告 Joomla! - Joomla! 用の com_performs における PHP リモートファイルインクルージョンの脆弱性 CWE-94
コード・インジェクション
CVE-2006-3774 2012-12-20 18:02 2006-07-24 Show GitHub Exploit DB Packet Storm
230016 6.8 警告 Mambo Foundation - Joomla! および Mambo 用の Bridge コンポーネントにおける PHP リモートファイルインクルージョンの脆弱性 CWE-94
コード・インジェクション
CVE-2006-3773 2012-12-20 18:02 2006-07-10 Show GitHub Exploit DB Packet Storm
230017 5.1 警告 php-post - PHP-Post における管理者権限を取得される脆弱性 - CVE-2006-3772 2012-12-20 18:02 2006-07-24 Show GitHub Exploit DB Packet Storm
230018 7.5 危険 imaginex-resource - iManage CMS の component.php における PHP リモートファイルインクルージョンの脆弱性 - CVE-2006-3771 2012-12-20 18:02 2006-07-24 Show GitHub Exploit DB Packet Storm
230019 7.5 危険 phpfaber - phpFaber TopSites の index.php における SQL インジェクションの脆弱性 - CVE-2006-3770 2012-12-20 18:02 2006-07-24 Show GitHub Exploit DB Packet Storm
230020 2.6 注意 top xl - Top XL におけるクロスサイトスクリプティングの脆弱性 - CVE-2006-3769 2012-12-20 18:02 2006-07-24 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 4, 2026, 4:06 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
212141 7.5 HIGH
Network
ikiwiki ikiwiki ikiwiki before 3.20170111.1 and 3.2018x and 3.2019x before 3.20190228 allows SSRF via the aggregate plugin. The impact also includes reading local files via file: URIs. CWE-918
Server-Side Request Forgery (SSRF) 
CVE-2019-9187 2024-11-21 13:51 2019-06-6 Show GitHub Exploit DB Packet Storm
212142 10.0 CRITICAL
Network
citrix application_delivery_management Citrix Application Delivery Management (ADM) 12.1.x before 12.1.50.33 has Incorrect Access Control. NVD-CWE-noinfo
CVE-2019-9548 2024-11-21 13:51 2019-06-6 Show GitHub Exploit DB Packet Storm
212143 9.8 CRITICAL
Network
gitlab gitlab An issue was discovered in GitLab Community and Enterprise Edition before 11.6.10, 11.7.x before 11.7.6, and 11.8.x before 11.8.1. It has Insecure Permissions. NVD-CWE-noinfo
CVE-2019-9485 2024-11-21 13:51 2019-05-30 Show GitHub Exploit DB Packet Storm
212144 5.5 MEDIUM
Local
gitlab gitlab An issue was discovered in GitLab Community and Enterprise Edition before 11.6.10, 11.7.x before 11.7.6, and 11.8.x before 11.8.1. It has Incorrect Access Control (issue 3 of 5). CWE-20
 Improper Input Validation 
CVE-2019-9221 2024-11-21 13:51 2019-05-30 Show GitHub Exploit DB Packet Storm
212145 9.8 CRITICAL
Network
gitlab gitlab An issue was discovered in GitLab Community and Enterprise Edition before 11.6.10, 11.7.x before 11.7.6, and 11.8.x before 11.8.1. It has Incorrect Access Control (issue 1 of 5). NVD-CWE-noinfo
CVE-2019-9218 2024-11-21 13:51 2019-05-30 Show GitHub Exploit DB Packet Storm
212146 7.5 HIGH
Network
aware knomi The Face authentication component in Aware mobile liveness 2.2.1 sdk 2.2.0 for Knomi allows a Biometrical Liveness authentication bypass via parameter tampering of the /knomi/analyze security_level f… NVD-CWE-noinfo
CVE-2019-9196 2024-11-21 13:51 2019-05-16 Show GitHub Exploit DB Packet Storm
212147 9.8 CRITICAL
Network
gracemedia_media_player_project gracemedia_media_player The GraceMedia Media Player plugin 1.0 for WordPress allows Local File Inclusion via the "cfg" parameter. CWE-22
Path Traversal
CVE-2019-9618 2024-11-21 13:51 2019-05-14 Show GitHub Exploit DB Packet Storm
212148 9.8 CRITICAL
Network
printerlogic print_management The PrinterLogic Print Management software, versions up to and including 18.3.1.96, does not sanitize special characters allowing for remote unauthorized changes to configuration files. An unauthenti… NVD-CWE-Other
CVE-2019-9505 2024-11-21 13:51 2019-05-9 Show GitHub Exploit DB Packet Storm
212149 8.8 HIGH
Network
strato
telekom
ionos
hidrive_desktop_client
magentacloud
1\&1_online_storage
STRATO HiDrive Desktop Client 5.0.1.0 for Windows suffers from a SYSTEM privilege escalation vulnerability through the HiDriveMaintenanceService service. This service establishes a NetNamedPipe endpo… CWE-367
 Time-of-check Time-of-use (TOCTOU) Race Condition
CVE-2019-9486 2024-11-21 13:51 2019-05-1 Show GitHub Exploit DB Packet Storm
212150 7.5 HIGH
Network
zimbra collaboration_server Zimbra Collaboration Suite before 8.6 patch 13, 8.7.x before 8.7.11 patch 10, and 8.8.x before 8.8.10 patch 7 or 8.8.x before 8.8.11 patch 3 allows SSRF via the ProxyServlet component. CWE-918
Server-Side Request Forgery (SSRF) 
CVE-2019-9621 2024-11-21 13:51 2019-05-1 Show GitHub Exploit DB Packet Storm