Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 4, 2026, 2 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
230031 7.5 危険 mybulletinboard - MyBB の Archive Model の inc/init.php における任意の変数を上書きされる脆弱性 - CVE-2006-3758 2012-12-20 18:02 2006-06-27 Show GitHub Exploit DB Packet Storm
230032 5 警告 Zen Cart - Zen Cart の index.php における重要な情報を取得される脆弱性 - CVE-2006-3757 2012-12-20 18:02 2006-07-21 Show GitHub Exploit DB Packet Storm
230033 7.5 危険 flushcms - FlushCMS の Include/editor/class.rich.php における PHP リモートファイルインクルージョンの脆弱性 - CVE-2006-3755 2012-12-20 18:02 2006-07-21 Show GitHub Exploit DB Packet Storm
230034 7.5 危険 flushcms - FlushCMS の Include/editor/rich_files/class.rich.php における PHP リモートファイルインクルージョンの脆弱性 - CVE-2006-3754 2012-12-20 18:02 2006-07-21 Show GitHub Exploit DB Packet Storm
230035 6.4 警告 professional home page tools - Professional Home Page Tools Guestbook の管理ログインにおけるパスワードを推測する総当り攻撃を実行される脆弱性 - CVE-2006-3753 2012-12-20 18:02 2006-07-21 Show GitHub Exploit DB Packet Storm
230036 7.5 危険 professional home page tools - Professional Home Page Tools Guestbook の class.php における SQL インジェクションの脆弱性 - CVE-2006-3752 2012-12-20 18:02 2006-07-21 Show GitHub Exploit DB Packet Storm
230037 6.8 警告 htmlarea3 - ImageManager 用の HTMLArea3 Addon Component における PHP リモートファイルインクルージョンの脆弱性 CWE-94
コード・インジェクション
CVE-2006-3751 2012-12-20 18:02 2006-07-21 Show GitHub Exploit DB Packet Storm
230038 6.8 警告 hashcash - Joomla! 用の com_hashcash の server.php における PHP リモートファイルインクルージョンの脆弱性 CWE-94
コード・インジェクション
CVE-2006-3750 2012-12-20 18:02 2006-07-21 Show GitHub Exploit DB Packet Storm
230039 6.8 警告 Mambo Foundation - Mambo 用の Sitemap コンポーネントにおける PHP リモートファイルインクルージョンの脆弱性 CWE-94
コード・インジェクション
CVE-2006-3749 2012-12-20 18:02 2006-07-10 Show GitHub Exploit DB Packet Storm
230040 6.8 警告 mamboxchange - Mambo 用の LoudMouth コンポーネントにおける PHP リモートファイルインクルージョンの脆弱性 CWE-94
コード・インジェクション
CVE-2006-3748 2012-12-20 18:02 2006-07-21 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 4, 2026, 4:06 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
212261 5.3 MEDIUM
Network
misp misp In MISP 2.4.102, an authenticated user can view sightings that they should not be eligible for. Exploiting this requires access to the event that has received the sighting. The issue affects instance… CWE-862
 Missing Authorization
CVE-2019-9482 2024-11-21 13:51 2019-03-1 Show GitHub Exploit DB Packet Storm
212262 9.8 CRITICAL
Network
baigo baigo_cms An issue was discovered in baigo CMS 2.1.1. There is a vulnerability that allows remote attackers to execute arbitrary code. A BG_SITE_NAME parameter with malicious code can be written into the opt_b… CWE-94
Code Injection
CVE-2019-9227 2024-11-21 13:51 2019-02-28 Show GitHub Exploit DB Packet Storm
212263 6.1 MEDIUM
Network
baigo baigo_cms An issue was discovered in baigo CMS 2.1.1. There is a persistent XSS vulnerability that allows remote attackers to inject arbitrary web script or HTML via the opt[base][BG_SITE_NAME] parameter to th… CWE-79
Cross-site Scripting
CVE-2019-9226 2024-11-21 13:51 2019-02-28 Show GitHub Exploit DB Packet Storm
212264 9.8 CRITICAL
Network
live555
opensuse
debian
streaming_media
leap
backports_sle
debian_linux
In Live555 before 2019.02.27, malformed headers lead to invalid memory access in the parseAuthorizationHeader function. NVD-CWE-noinfo
CVE-2019-9215 2024-11-21 13:51 2019-02-28 Show GitHub Exploit DB Packet Storm
212265 7.5 HIGH
Network
wireshark
debian
wireshark
debian_linux
In Wireshark 2.4.0 to 2.4.12 and 2.6.0 to 2.6.6, the RPCAP dissector could crash. This was addressed in epan/dissectors/packet-rpcap.c by avoiding an attempted dereference of a NULL conversation. CWE-476
 NULL Pointer Dereference
CVE-2019-9214 2024-11-21 13:51 2019-02-28 Show GitHub Exploit DB Packet Storm
212266 5.5 MEDIUM
Local
wireshark
debian
canonical
opensuse
wireshark
debian_linux
ubuntu_linux
leap
In Wireshark 2.4.0 to 2.4.12 and 2.6.0 to 2.6.6, the ASN.1 BER and related dissectors could crash. This was addressed in epan/dissectors/packet-ber.c by preventing a buffer overflow associated with e… CWE-787
CWE-193
 Out-of-bounds Write
 Off-by-one Error
CVE-2019-9209 2024-11-21 13:51 2019-02-28 Show GitHub Exploit DB Packet Storm
212267 7.5 HIGH
Network
wireshark
debian
wireshark
debian_linux
In Wireshark 2.4.0 to 2.4.12 and 2.6.0 to 2.6.6, the TCAP dissector could crash. This was addressed in epan/dissectors/asn1/tcap/tcap.cnf by avoiding NULL pointer dereferences. CWE-476
 NULL Pointer Dereference
CVE-2019-9208 2024-11-21 13:51 2019-02-28 Show GitHub Exploit DB Packet Storm
212268 6.5 MEDIUM
Network
gnu
fedoraproject
suse
pspp
fedora
backports
There is a reachable assertion abort in the function write_long_string_missing_values() in data/sys-file-writer.c in libdata.a in GNU PSPP 1.2.0 that will lead to denial of service. CWE-617
 Reachable Assertion
CVE-2019-9211 2024-11-21 13:51 2019-02-28 Show GitHub Exploit DB Packet Storm
212269 9.8 CRITICAL
Network
antfin sofa-hessian SOFA-Hessian through 4.0.2 allows remote attackers to execute arbitrary commands via a crafted serialized Hessian object because blacklisting of com.caucho.naming.QName and com.sun.org.apache.xpath.i… CWE-184
CWE-502
 Incomplete Blacklist
 Deserialization of Untrusted Data
CVE-2019-9212 2024-11-21 13:51 2019-02-28 Show GitHub Exploit DB Packet Storm
212270 7.8 HIGH
Local
advancemame
debian
canonical
fedoraproject
advancecomp
debian_linux
ubuntu_linux
fedora
In AdvanceCOMP 2.1, png_compress in pngex.cc in advpng has an integer overflow upon encountering an invalid PNG size, which results in an attempted memcpy to write into a buffer that is too small. (T… CWE-125
CWE-190
Out-of-bounds Read
 Integer Overflow or Wraparound
CVE-2019-9210 2024-11-21 13:51 2019-02-27 Show GitHub Exploit DB Packet Storm