Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 5, 2026, noon

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
230151 5.8 警告 pivot - Pivot におけるクロスサイトスクリプティングの脆弱性 - CVE-2006-3533 2012-12-20 18:02 2006-07-12 Show GitHub Exploit DB Packet Storm
230152 5.1 警告 pivot - Pivot の includes/edit_new.php における任意の PHP コードを実行される脆弱性 - CVE-2006-3532 2012-12-20 18:02 2006-07-12 Show GitHub Exploit DB Packet Storm
230153 7.5 危険 pivot - Pivot の includes/editor/insert_image.php における任意のファイルをアップロードされる脆弱性 - CVE-2006-3531 2012-12-20 18:02 2006-07-12 Show GitHub Exploit DB Packet Storm
230154 6.8 警告 Joomla! - Mambo 用の PccookBook Component の com_pccookbook/pccookbook.php における PHP リモートファイルインクルージョンの脆弱性 CWE-94
コード・インジェクション 		CVE-2006-3530 2012-12-20 18:02 2006-07-12 Show GitHub Exploit DB Packet Storm
230155 2.1 注意 シマンテック - SODP の SODA および Virtual Desktop モジュール における重要なデータを読み取られる脆弱性 - CVE-2006-3457 2012-12-20 18:02 2006-08-1 Show GitHub Exploit DB Packet Storm
230156 4.3 警告 シマンテック - Symantec AntiVirus Corporate Edition などで使用される SAVRT.SYS デバイスドライバにおける任意のコードを実行される脆弱性 - CVE-2006-3455 2012-12-20 18:02 2006-10-23 Show GitHub Exploit DB Packet Storm
230157 7.2 危険 シマンテック - Symantec AntiVirus Corporate Edition などにおけるフォーマットストリングの脆弱性 - CVE-2006-3454 2012-12-20 18:02 2006-09-13 Show GitHub Exploit DB Packet Storm
230158 5.1 警告 アドビシステムズ - Adobe Acrobat におけるバッファオーバーフローの脆弱性 - CVE-2006-3453 2012-12-20 18:02 2006-07-11 Show GitHub Exploit DB Packet Storm
230159 5.1 警告 cimmetry systems - AutoVue SolidModel Professional Desktop Edition におけるスタックベースのバッファオーバーフローの脆弱性 - CVE-2006-3350 2012-12-20 18:02 2006-07-27 Show GitHub Exploit DB Packet Storm
230160 7.5 危険 hotwebscripts - CMS Mundo における SQL インジェクションの脆弱性 - CVE-2006-3135 2012-12-20 18:02 2006-07-13 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 5, 2026, 4:51 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
212021 6.1 MEDIUM
Network 		telos automated_message_handling_system : Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in prefs.asp of Telos Automated Message Handling System allows a remote attacker to inject arbitra… CWE-79
Cross-site Scripting 		CVE-2019-9540 2024-11-21 13:51 2020-01-4 Show GitHub Exploit DB Packet Storm
212022 6.1 MEDIUM
Network 		telos automated_message_handling_system : Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in ModalWindowPopup.asp of Telos Automated Message Handling System allows a remote attacker to inj… CWE-79
Cross-site Scripting 		CVE-2019-9539 2024-11-21 13:51 2020-01-4 Show GitHub Exploit DB Packet Storm
212023 6.1 MEDIUM
Network 		telos automated_message_handling_system : Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in the LDAP cbURL parameter of Telos Automated Message Handling System allows a remote attacker to… CWE-79
Cross-site Scripting 		CVE-2019-9538 2024-11-21 13:51 2020-01-4 Show GitHub Exploit DB Packet Storm
212024 6.1 MEDIUM
Network 		telos automated_message_handling_system : Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in uploaditem.asp of Telos Automated Message Handling System allows a remote attacker to inject ar… CWE-79
Cross-site Scripting 		CVE-2019-9537 2024-11-21 13:51 2020-01-4 Show GitHub Exploit DB Packet Storm
212025 5.4 MEDIUM
Network 		fiberhomegroup an5506-04-f_firmware FiberHome an5506-04-f RP2669 devices have XSS. CWE-79
Cross-site Scripting 		CVE-2019-9556 2024-11-21 13:51 2020-01-1 Show GitHub Exploit DB Packet Storm
212026 6.1 MEDIUM
Network 		craftcms craft_cms In the 3.1.12 Pro version of Craft CMS, XSS has been discovered in the header insertion field when adding source code at an s/admin/entries/news/new URI. CWE-79
Cross-site Scripting 		CVE-2019-9554 2024-11-21 13:51 2020-01-1 Show GitHub Exploit DB Packet Storm
212027 6.1 MEDIUM
Network 		boltcms bolt Bolt 3.6.4 has XSS via the slug, teaser, or title parameter to editcontent/pages, a related issue to CVE-2017-11128 and CVE-2018-19933. CWE-79
Cross-site Scripting 		CVE-2019-9553 2024-11-21 13:51 2020-01-1 Show GitHub Exploit DB Packet Storm
212028 6.1 MEDIUM
Network 		paessler prtg_network_monitor PRTG Network Monitor v7.1.3.3378 allows XSS via the /search.htm searchtext parameter. NOTE: This product is discontinued. CWE-79
Cross-site Scripting 		CVE-2019-9207 2024-11-21 13:51 2020-01-1 Show GitHub Exploit DB Packet Storm
212029 6.1 MEDIUM
Network 		paessler prtg_network_monitor PRTG Network Monitor v7.1.3.3378 allows XSS via the /public/login.htm errormsg or loginurl parameter. NOTE: This product is discontinued. CWE-79
Cross-site Scripting 		CVE-2019-9206 2024-11-21 13:51 2020-01-1 Show GitHub Exploit DB Packet Storm
212030 8.8 HIGH
Network 		unity3d unity_editor The com.unity3d.kharma protocol handler in Unity Editor 2018.3 allows remote attackers to execute arbitrary code. CWE-78
OS Command  		CVE-2019-9197 2024-11-21 13:51 2020-01-1 Show GitHub Exploit DB Packet Storm