Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 7, 2026, 10 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
246531 7.5 危険 aurora - aurora framework における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2007-6345 2012-06-26 15:54 2007-12-13 Show GitHub Exploit DB Packet Storm
246532 7.5 危険 david castro - Apache HTTP Server の David Castro AuthCAS.pm における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2007-6342 2012-06-26 15:54 2007-12-13 Show GitHub Exploit DB Packet Storm
246533 7.5 危険 avs media - Online Media Technologies AVSMJPEGFILE.DLL の特定の ActiveX コントロールにおけるバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2007-6327 2012-06-26 15:54 2007-12-13 Show GitHub Exploit DB Packet Storm
246534 6.8 警告 fastpublish - Fastpublish CMS の adminbereich/designconfig.php における PHP リモートファイルインクルージョンの脆弱性 CWE-20
CWE-94
CVE-2007-6325 2012-06-26 15:54 2007-12-13 Show GitHub Exploit DB Packet Storm
246535 6.8 警告 city writer - CityWriter の head.php における PHP リモートファイルインクルージョンの脆弱性 CWE-94
コード・インジェクション 		CVE-2007-6324 2012-06-26 15:54 2007-12-13 Show GitHub Exploit DB Packet Storm
246536 4.3 警告 Drupal - Drupal の Feature モジュールにおけるクロスサイトリクエストフォージェリ攻撃を誘発する脆弱性 CWE-352
同一生成元ポリシー違反 		CVE-2007-6320 2012-06-26 15:54 2007-12-5 Show GitHub Exploit DB Packet Storm
246537 7.5 危険 falt4 cms - Falt4Extreme RC4 の index.php および admin/index.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2007-6311 2012-06-26 15:54 2007-12-11 Show GitHub Exploit DB Packet Storm
246538 4.3 警告 falt4 cms - Falt4Extreme RC4 におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2007-6310 2012-06-26 15:54 2007-12-11 Show GitHub Exploit DB Packet Storm
246539 5 警告 fusion news - Fusion News におけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反 		CVE-2007-6300 2012-06-26 15:54 2007-12-3 Show GitHub Exploit DB Packet Storm
246540 7.5 危険 Drupal - Drupal および vbDrupal における SQL インジェクションの脆弱性 CWE-20
CWE-89
CVE-2007-6299 2012-06-26 15:54 2007-12-5 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 7, 2026, 4:13 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
220391 7.2 HIGH
Network 		postgresql postgresql In PostgreSQL 9.3 through 11.2, the "COPY TO/FROM PROGRAM" function allows superusers and users in the 'pg_execute_server_program' group to execute arbitrary code in the context of the database's ope… CWE-78
OS Command  		CVE-2019-9193 2024-11-21 13:51 2019-04-2 Show GitHub Exploit DB Packet Storm
220392 8.8 HIGH
Network 		kakaocorp kakaotalk Remote code execution vulnerability exists in KaKaoTalk PC messenger when user clicks specially crafted link in the message window. This affects KaKaoTalk windows version 2.7.5.2024 or lower. NVD-CWE-noinfo
CVE-2019-9132 2024-11-21 13:51 2019-04-2 Show GitHub Exploit DB Packet Storm
220393 5.4 MEDIUM
Network 		online_lottery_php_readymade_script_project online_lottery_php_readymade_script PHP Scripts Mall Online Lottery PHP Readymade Script 1.7.0 has Reflected Cross-site Scripting (XSS) via the err value in a .ico picture upload. CWE-79
Cross-site Scripting 		CVE-2019-9605 2024-11-21 13:51 2019-03-29 Show GitHub Exploit DB Packet Storm
220394 8.8 HIGH
Network 		online_lottery_php_readymade_script_project online_lottery_php_readymade_script PHP Scripts Mall Online Lottery PHP Readymade Script 1.7.0 has Cross-Site Request Forgery (CSRF) for Edit Profile actions. CWE-352
 Origin Validation Error 		CVE-2019-9604 2024-11-21 13:51 2019-03-29 Show GitHub Exploit DB Packet Storm
220395 6.1 MEDIUM
Network 		nagios nagios_xi Cross-site scripting (XSS) vulnerability in Nagios XI before 5.5.11 allows attackers to inject arbitrary web script or HTML via the xiwindow parameter. CWE-79
Cross-site Scripting 		CVE-2019-9167 2024-11-21 13:51 2019-03-29 Show GitHub Exploit DB Packet Storm
220396 7.8 HIGH
Local 		nagios nagios_xi Privilege escalation in Nagios XI before 5.5.11 allows local attackers to elevate privileges to root via write access to config.inc.php and import_xiconfig.php. CWE-732
 Incorrect Permission Assignment for Critical Resource 		CVE-2019-9166 2024-11-21 13:51 2019-03-29 Show GitHub Exploit DB Packet Storm
220397 9.8 CRITICAL
Network 		nagios incident_manager SQL injection vulnerability in Nagios IM (component of Nagios XI) before 2.2.7 allows attackers to execute arbitrary SQL commands. CWE-89
SQL Injection 		CVE-2019-9204 2024-11-21 13:51 2019-03-29 Show GitHub Exploit DB Packet Storm
220398 9.8 CRITICAL
Network 		nagios incident_manager Authorization bypass in Nagios IM (component of Nagios XI) before 2.2.7 allows closing incidents in IM via the API. NVD-CWE-noinfo
CVE-2019-9203 2024-11-21 13:51 2019-03-29 Show GitHub Exploit DB Packet Storm
220399 8.8 HIGH
Network 		nagios incident_manager Nagios IM (component of Nagios XI) before 2.2.7 allows authenticated users to execute arbitrary code via API key issues. NVD-CWE-noinfo
CVE-2019-9202 2024-11-21 13:51 2019-03-29 Show GitHub Exploit DB Packet Storm
220400 9.8 CRITICAL
Network 		nagios nagios_xi SQL injection vulnerability in Nagios XI before 5.5.11 allows attackers to execute arbitrary SQL commands via the API when using fusekeys and malicious user id. CWE-89
SQL Injection 		CVE-2019-9165 2024-11-21 13:51 2019-03-29 Show GitHub Exploit DB Packet Storm