Vulnerability Search Top

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

Vulnerability Information Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 6, 2026, 2 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
230151	5.8	警告	pivot	-	Pivot におけるクロスサイトスクリプティングの脆弱性	-	CVE-2006-3533	2012-12-20 18:02	2006-07-12	Show	GitHub Exploit DB Packet Storm

230152	5.1	警告	pivot	-	Pivot の includes/edit_new.php における任意の PHP コードを実行される脆弱性	-	CVE-2006-3532	2012-12-20 18:02	2006-07-12	Show	GitHub Exploit DB Packet Storm

230153	7.5	危険	pivot	-	Pivot の includes/editor/insert_image.php における任意のファイルをアップロードされる脆弱性	-	CVE-2006-3531	2012-12-20 18:02	2006-07-12	Show	GitHub Exploit DB Packet Storm

230154	6.8	警告	Joomla!	-	Mambo 用の PccookBook Component の com_pccookbook/pccookbook.php における PHP リモートファイルインクルージョンの脆弱性	CWE-94 コード・インジェクション	CVE-2006-3530	2012-12-20 18:02	2006-07-12	Show	GitHub Exploit DB Packet Storm

230155	2.1	注意	シマンテック	-	SODP の SODA および Virtual Desktop モジュールにおける重要なデータを読み取られる脆弱性	-	CVE-2006-3457	2012-12-20 18:02	2006-08-1	Show	GitHub Exploit DB Packet Storm

230156	4.3	警告	シマンテック	-	Symantec AntiVirus Corporate Edition などで使用される SAVRT.SYS デバイスドライバにおける任意のコードを実行される脆弱性	-	CVE-2006-3455	2012-12-20 18:02	2006-10-23	Show	GitHub Exploit DB Packet Storm

230157	7.2	危険	シマンテック	-	Symantec AntiVirus Corporate Edition などにおけるフォーマットストリングの脆弱性	-	CVE-2006-3454	2012-12-20 18:02	2006-09-13	Show	GitHub Exploit DB Packet Storm

230158	5.1	警告	アドビシステムズ	-	Adobe Acrobat におけるバッファオーバーフローの脆弱性	-	CVE-2006-3453	2012-12-20 18:02	2006-07-11	Show	GitHub Exploit DB Packet Storm

230159	5.1	警告	cimmetry systems	-	AutoVue SolidModel Professional Desktop Edition におけるスタックベースのバッファオーバーフローの脆弱性	-	CVE-2006-3350	2012-12-20 18:02	2006-07-27	Show	GitHub Exploit DB Packet Storm

230160	7.5	危険	hotwebscripts	-	CMS Mundo における SQL インジェクションの脆弱性	-	CVE-2006-3135	2012-12-20 18:02	2006-07-13	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 6, 2026, 4:08 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
212611	9.8	CRITICAL Network	antfin	sofa-hessian	SOFA-Hessian through 4.0.2 allows remote attackers to execute arbitrary commands via a crafted serialized Hessian object because blacklisting of com.caucho.naming.QName and com.sun.org.apache.xpath.i…	CWE-184 CWE-502 Incomplete Blacklist Deserialization of Untrusted Data	CVE-2019-9212	2024-11-21 13:51	2019-02-28	Show	GitHub Exploit DB Packet Storm

212612	7.8	HIGH Local	advancemame debian canonical fedoraproject	advancecomp debian_linux ubuntu_linux fedora	In AdvanceCOMP 2.1, png_compress in pngex.cc in advpng has an integer overflow upon encountering an invalid PNG size, which results in an attempted memcpy to write into a buffer that is too small. (T…	CWE-125 CWE-190 Out-of-bounds Read Integer Overflow or Wraparound	CVE-2019-9210	2024-11-21 13:51	2019-02-27	Show	GitHub Exploit DB Packet Storm

212613	9.8	CRITICAL Network	phoenixcontact	ilc_131_eth_firmware ilc_131_eth\/xc_firmware ilc_151_eth_firmware ilc_151_eth\/xc_firmware ilc_171_eth_2tx_firmware ilc_191_eth_2tx_firmware ilc_191_me\/an_firmware axc_1050_fir…	Multiple Phoenix Contact devices allow remote attackers to establish TCP sessions to port 1962 and obtain sensitive information or make changes, as demonstrated by using the Create Backup feature to …	CWE-306 Missing Authentication for Critical Function	CVE-2019-9201	2024-11-21 13:51	2019-02-27	Show	GitHub Exploit DB Packet Storm

212614	8.8	HIGH Network	freedesktop debian canonical	poppler debian_linux ubuntu_linux	A heap-based buffer underwrite exists in ImageStream::getLine() located at Stream.cc in Poppler 0.74.0 that can (for example) be triggered by sending a crafted PDF file to the pdfimages binary. It al…	CWE-787 Out-of-bounds Write	CVE-2019-9200	2024-11-21 13:51	2019-02-27	Show	GitHub Exploit DB Packet Storm

212615	8.8	HIGH Network	podofo_project fedoraproject	podofo fedora	PoDoFo::Impose::PdfTranslator::setSource() in pdftranslator.cpp in PoDoFo 0.9.6 has a NULL pointer dereference that can (for example) be triggered by sending a crafted PDF file to the podofoimpose bi…	CWE-476 NULL Pointer Dereference	CVE-2019-9199	2024-11-21 13:51	2019-02-27	Show	GitHub Exploit DB Packet Storm

212616	9.8	CRITICAL Network	grin	grin	util/src/zip.rs in Grin before 1.0.2 mishandles suspicious files. An attacker can execute arbitrary code via directory traversal in a ZIP archive.	CWE-22 Path Traversal	CVE-2019-9195	2024-11-21 13:51	2019-02-27	Show	GitHub Exploit DB Packet Storm

212617	9.8	CRITICAL Network	std42	elfinder	elFinder before 2.1.48 has a command injection vulnerability in the PHP connector.	CWE-78 OS Command	CVE-2019-9194	2024-11-21 13:51	2019-02-27	Show	GitHub Exploit DB Packet Storm

212618	7.5	HIGH Network	gnu	glibc	In the GNU C Library (aka glibc or libc6) through 2.29, check_dst_limits_calc_pos_1 in posix/regexec.c has Uncontrolled Recursion, as demonstrated by '(\|)(\\1\\1)*' in grep, a different issue than CV…	CWE-674 Uncontrolled Recursion	CVE-2019-9192	2024-11-21 13:51	2019-02-27	Show	GitHub Exploit DB Packet Storm

212619	5.9	MEDIUM Network	etsi	enterprise_transport_security	The ETSI Enterprise Transport Security (ETS, formerly known as eTLS) protocol does not provide per-session forward secrecy.	CWE-310 Cryptographic Issues	CVE-2019-9191	2024-11-21 13:51	2019-02-27	Show	GitHub Exploit DB Packet Storm

212620	9.8	CRITICAL Network	j2store	j2store	SQL injection vulnerability in the J2Store plugin 3.x before 3.3.7 for Joomla! allows remote attackers to execute arbitrary SQL commands via the product_option[] parameter.	CWE-89 SQL Injection	CVE-2019-9184	2024-11-21 13:51	2019-02-27	Show	GitHub Exploit DB Packet Storm