Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 5, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
230081 7.5 危険 マイクロソフト - Microsoft ISA Server におけるファイル拡張子フィルタを回避される脆弱性 - CVE-2006-3652 2012-12-20 18:02 2006-07-18 Show GitHub Exploit DB Packet Storm
230082 6.5 警告 ossp - OSSP shiela における CVS サーバ上で任意のコマンドを実行される脆弱性 CWE-20
不適切な入力確認 		CVE-2006-3633 2012-12-20 18:02 2006-07-26 Show GitHub Exploit DB Packet Storm
230083 5 警告 flv - FLV Player における重要な情報を取得される脆弱性 - CVE-2006-3625 2012-12-20 18:02 2006-07-18 Show GitHub Exploit DB Packet Storm
230084 4.3 警告 flv - FLV Player におけるクロスサイトスクリプティングの脆弱性 - CVE-2006-3624 2012-12-20 18:02 2006-07-18 Show GitHub Exploit DB Packet Storm
230085 5 警告 マカフィー - McAfee ePolicy Orchestrator agent の Framework Service コンポーネントにおけるディレクトリトラバーサルの脆弱性 - CVE-2006-3623 2012-12-20 18:02 2006-07-18 Show GitHub Exploit DB Packet Storm
230086 5 警告 dream4 - Koobi Pro CMS の showtopic モジュールにおける重要な情報を取得される脆弱性 - CVE-2006-3622 2012-12-20 18:02 2006-07-18 Show GitHub Exploit DB Packet Storm
230087 7.5 危険 dream4 - Koobi Pro CMS の showtopic モジュール内における SQL インジェクションの脆弱性 - CVE-2006-3621 2012-12-20 18:02 2006-07-18 Show GitHub Exploit DB Packet Storm
230088 2.6 注意 dream4 - Koobi Pro CMS の showtopic モジュール内におけるクロスサイトスクリプティングの脆弱性 - CVE-2006-3620 2012-12-20 18:02 2006-07-18 Show GitHub Exploit DB Packet Storm
230089 7.5 危険 pixelated by lev - PBL Guestbook の pblguestbook.php における SQL インジェクションの脆弱性 - CVE-2006-3618 2012-12-20 18:02 2006-07-18 Show GitHub Exploit DB Packet Storm
230090 2.6 注意 Laurent Destailleur - AWStats の awstats.pl におけるクロスサイトスクリプティングの脆弱性 - CVE-2006-3681 2012-12-20 18:02 2006-07-21 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 6, 2026, 4:08 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
212561 8.8 HIGH
Network 		ofcms_project ofcms An issue was discovered in OFCMS before 1.1.3. Remote attackers can execute arbitrary code because blocking of .jsp and .jspx files does not consider (for example) file.jsp::$DATA to the admin/uedito… CWE-434
 Unrestricted Upload of File with Dangerous Type  		CVE-2019-9608 2024-11-21 13:51 2019-03-7 Show GitHub Exploit DB Packet Storm
212562 5.3 MEDIUM
Network 		medical_store_script_project medical_store_script PHP Scripts Mall Medical Store Script 3.0.3 allows Path Traversal by navigating to the parent directory of a jpg or png file. CWE-22
Path Traversal 		CVE-2019-9607 2024-11-21 13:51 2019-03-7 Show GitHub Exploit DB Packet Storm
212563 5.4 MEDIUM
Network 		personal_video_collection_script_project personal_video_collection_script PHP Scripts Mall Personal Video Collection Script 4.0.4 has Stored XSS via the "Update profile" feature. CWE-79
Cross-site Scripting 		CVE-2019-9606 2024-11-21 13:51 2019-03-7 Show GitHub Exploit DB Packet Storm
212564 6.5 MEDIUM
Network 		1234n minicms MiniCMS 1.10 allows mc-admin/post.php?state=publish&delete= CSRF to delete articles, a different vulnerability than CVE-2018-18891. CWE-352
 Origin Validation Error 		CVE-2019-9603 2024-11-21 13:51 2019-03-7 Show GitHub Exploit DB Packet Storm
212565 7.5 HIGH
Network 		apowersoft apowermanager The ApowerManager application through 3.1.7 for Android allows remote attackers to cause a denial of service via many simultaneous /?Key=PhoneRequestAuthorization requests. NVD-CWE-noinfo
CVE-2019-9601 2024-11-21 13:51 2019-03-7 Show GitHub Exploit DB Packet Storm
212566 7.5 HIGH
Network 		theolivetree ftp_server The Olive Tree FTP Server (aka com.theolivetree.ftpserver) application through 1.32 for Android allows remote attackers to cause a denial of service via a client that makes many connection attempts a… NVD-CWE-noinfo
CVE-2019-9600 2024-11-21 13:51 2019-03-7 Show GitHub Exploit DB Packet Storm
212567 7.5 HIGH
Network 		airdroid airdroid The AirDroid application through 4.2.1.6 for Android allows remote attackers to cause a denial of service (service crash) via many simultaneous sdctl/comm/lite_auth/ requests. NVD-CWE-noinfo
CVE-2019-9599 2024-11-21 13:51 2019-03-7 Show GitHub Exploit DB Packet Storm
212568 6.1 MEDIUM
Network 		appcms appcms AppCMS 2.0.101 allows XSS via the upload/callback.php params parameter. CWE-79
Cross-site Scripting 		CVE-2019-9595 2024-11-21 13:51 2019-03-7 Show GitHub Exploit DB Packet Storm
212569 9.8 CRITICAL
Network 		bluecms_project bluecms BlueCMS 1.6 allows SQL Injection via the user_id parameter in an uploads/admin/user.php?act=edit request. CWE-89
SQL Injection 		CVE-2019-9594 2024-11-21 13:51 2019-03-7 Show GitHub Exploit DB Packet Storm
212570 6.1 MEDIUM
Network 		mitel connect_onsite A reflected Cross-site scripting (XSS) vulnerability in ShoreTel Connect ONSITE 18.82.2000.0 allows remote attackers to inject arbitrary web script or HTML via the page parameter. CWE-79
Cross-site Scripting 		CVE-2019-9593 2024-11-21 13:51 2019-03-7 Show GitHub Exploit DB Packet Storm