Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 9, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
230101 7.5 危険 uapplication - Uapplication UPhotoGallery における SQL インジェクションの脆弱性 - CVE-2006-6247 2012-12-20 18:02 2006-12-4 Show GitHub Exploit DB Packet Storm
230102 6.8 警告 s9y - Serendipity におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2006-6242 2012-12-20 18:02 2006-12-3 Show GitHub Exploit DB Packet Storm
230103 4 警告 telnet ftp server - Sorin Chitu Telnet-FTP Server におけるサービス運用妨害 (DoS) の脆弱性 CWE-20
不適切な入力確認 		CVE-2006-6241 2012-12-20 18:02 2006-12-3 Show GitHub Exploit DB Packet Storm
230104 4 警告 telnet ftp server - Sorin Chitu Telnet-FTP Server におけるディレクトリトラバーサルの脆弱性 - CVE-2006-6240 2012-12-20 18:02 2006-12-3 Show GitHub Exploit DB Packet Storm
230105 7.5 危険 woltlab - Woltlab Burning Board Lite の thread.php における SQL インジェクションの脆弱性 - CVE-2006-6237 2012-12-20 18:02 2006-12-3 Show GitHub Exploit DB Packet Storm
230106 7.5 危険 postnuke software foundation - PostNuke の Downloads モジュールにおける SQL インジェクションの脆弱性 - CVE-2006-6233 2012-12-20 18:02 2006-12-2 Show GitHub Exploit DB Packet Storm
230107 5 警告 vubb - vuBB における重要な情報を取得される脆弱性 - CVE-2006-6231 2012-12-20 18:02 2006-12-1 Show GitHub Exploit DB Packet Storm
230108 7.5 危険 vubb - vuBB における SQL インジェクションの脆弱性 - CVE-2006-6230 2012-12-20 18:02 2006-12-1 Show GitHub Exploit DB Packet Storm
230109 7.5 危険 puntal - Puntal のインストールスクリプトにおける PHP リモートファイルインクルージョンの脆弱性 - CVE-2006-6224 2012-12-20 18:02 2006-12-1 Show GitHub Exploit DB Packet Storm
230110 10 危険 シマンテック - Symantec Veritas NetBackup の NetBackup bpcd デーモンにおけるスタックベースのバッファオーバーフローの脆弱性 - CVE-2006-6222 2012-12-20 18:02 2006-12-13 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 9, 2026, 5:07 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
213141 7.5 HIGH
Network 		harmistechnology je_messenger An issue was discovered in the Harmis JE Messenger component 1.2.2 for Joomla!. Directory Traversal allows read access to arbitrary files. CWE-22
Path Traversal 		CVE-2019-9922 2024-11-21 13:52 2019-03-30 Show GitHub Exploit DB Packet Storm
213142 6.5 MEDIUM
Network 		harmistechnology je_messenger An issue was discovered in the Harmis JE Messenger component 1.2.2 for Joomla!. It is possible to read information that should only be accessible by a different user. CWE-639
 Authorization Bypass Through User-Controlled Key 		CVE-2019-9921 2024-11-21 13:52 2019-03-30 Show GitHub Exploit DB Packet Storm
213143 8.8 HIGH
Network 		harmistechnology je_messenger An issue was discovered in the Harmis JE Messenger component 1.2.2 for Joomla!. It is possible to perform an action within the context of the account of another user. NVD-CWE-noinfo
CVE-2019-9920 2024-11-21 13:52 2019-03-30 Show GitHub Exploit DB Packet Storm
213144 5.4 MEDIUM
Network 		harmistechnology je_messenger An issue was discovered in the Harmis JE Messenger component 1.2.2 for Joomla!. It is possible to craft messages in a way that JavaScript gets executed on the side of the receiving user when the mess… CWE-79
Cross-site Scripting 		CVE-2019-9919 2024-11-21 13:52 2019-03-30 Show GitHub Exploit DB Packet Storm
213145 9.1 CRITICAL
Network 		harmistechnology je_messenger An issue was discovered in the Harmis JE Messenger component 1.2.2 for Joomla!. Input does not get validated and queries are not written in a way to prevent SQL injection. Therefore arbitrary SQL-Sta… CWE-89
SQL Injection 		CVE-2019-9918 2024-11-21 13:52 2019-03-30 Show GitHub Exploit DB Packet Storm
213146 6.8 MEDIUM
Physics 		symantec norton_core_firmware Norton Core prior to v278 may be susceptible to an arbitrary code execution issue, which is a type of vulnerability that has the potential of allowing an individual to execute arbitrary commands or c… NVD-CWE-noinfo
CVE-2019-9695 2024-11-21 13:52 2019-03-29 Show GitHub Exploit DB Packet Storm
213147 6.5 MEDIUM
Network 		amazon_affiliate_store_project amazon_affiliate_store PHP Scripts Mall Amazon Affiliate Store 2.1.6 allows Parameter Tampering of the payment amount. NVD-CWE-noinfo
CVE-2019-9864 2024-11-21 13:52 2019-03-29 Show GitHub Exploit DB Packet Storm
213148 9.8 CRITICAL
Network 		abus secvest_wireless_alarm_system_fuaa50000_firmware
secvest_wireless_remote_control_fube50014_firmware
secvest_wireless_remote_control_fube50015_firmware 		Due to the use of an insecure algorithm for rolling codes in the ABUS Secvest wireless alarm system FUAA50000 3.01.01 and its remote controls FUBE50014 and FUBE50015, an attacker is able to predict v… CWE-330
 Use of Insufficiently Random Values 		CVE-2019-9863 2024-11-21 13:52 2019-03-27 Show GitHub Exploit DB Packet Storm
213149 6.5 MEDIUM
Adjacent 		abus secvest_wireless_alarm_system_fuaa50000_firmware
secvest_wireless_remote_control_fube50014_firmware
secvest_wireless_remote_control_fube50015_firmware 		An issue was discovered on ABUS Secvest wireless alarm system FUAA50000 3.01.01 in conjunction with Secvest remote control FUBE50014 or FUBE50015. Because "encrypted signal transmission" is missing, … CWE-311
Missing Encryption of Sensitive Data 		CVE-2019-9862 2024-11-21 13:52 2019-03-27 Show GitHub Exploit DB Packet Storm
213150 7.5 HIGH
Network 		abus secvest_wireless_alarm_system_fuaa50000_firmware
secvest_wireless_remote_control_fube50014_firmware
secvest_wireless_remote_control_fube50015_firmware 		Due to unencrypted signal communication and predictability of rolling codes, an attacker can "desynchronize" an ABUS Secvest wireless remote control (FUBE50014 or FUBE50015) relative to its controlle… CWE-330
CWE-319
 Use of Insufficiently Random Values
Cleartext Transmission of Sensitive Information 		CVE-2019-9860 2024-11-21 13:52 2019-03-28 Show GitHub Exploit DB Packet Storm