Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":July 1, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
191871	9.8	緊急 Network	Python Software Foundation	-	CPython におけるバッファエラーの脆弱性	CWE-119 バッファエラー	CVE-2017-1000158	2017-12-11 09:49	2017-06-13	Show	GitHub Exploit DB Packet Storm

191872	5.4	警告 Network	MODX	-	MODX Revolution CMS におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2017-1000223	2017-12-8 18:27	2017-11-17	Show	GitHub Exploit DB Packet Storm

191873	5.4	警告 Network	EllisLab, Inc.	-	EllisLab ExpressionEngine におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2017-1000160	2017-12-8 18:27	2017-11-17	Show	GitHub Exploit DB Packet Storm

191874	6.1	警告 Network	Mikko Saari	-	Relevanssi におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2017-1000225	2017-12-8 18:24	2017-02-28	Show	GitHub Exploit DB Packet Storm

191875	7.8	重要 Local	OptiPNG	-	OptiPNG における整数オーバーフローの脆弱性	CWE-190 整数オーバーフローまたはラップアラウンド	CVE-2017-1000229	2017-12-8 18:12	2017-11-19	Show	GitHub Exploit DB Packet Storm

191876	5.4	警告 Network	Vonage	-	Vonage VDV-23 デバイスにおけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2017-16843	2017-12-8 18:04	2017-11-16	Show	GitHub Exploit DB Packet Storm

191877	8.8	重要 Network	NetApp	-	NetApp SnapCenter Server におけるクロスサイトリクエストフォージェリの脆弱性	CWE-352 同一生成元ポリシー違反	CVE-2017-15516	2017-12-8 17:59	2017-11-14	Show	GitHub Exploit DB Packet Storm

191878	6.6	警告 Network	UpdraftPlus.Com	-	WordPress 用 UpdraftPlus プラグインにおけるコードインジェクションの脆弱性	CWE-94 コード・インジェクション	CVE-2017-16871	2017-12-8 17:58	2017-11-29	Show	GitHub Exploit DB Packet Storm

191879	6.6	警告 Network	UpdraftPlus.Com	-	WordPress 用 UpdraftPlus プラグインにおけるサーバサイドのリクエストフォージェリの脆弱性	CWE-918 サーバサイドリクエストフォージェリ	CVE-2017-16870	2017-12-8 17:58	2017-11-29	Show	GitHub Exploit DB Packet Storm

191880	8.8	重要 Network	libbpg	-	libbpg などの製品におけるバッファエラーの脆弱性	CWE-119 バッファエラー	CVE-2017-14034	2017-12-8 17:56	2017-11-16	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:July 1, 2026, 4:27 a.m.

No	CVSS	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
346521	-	mambo	mambatstaff	PHP remote file inclusion vulnerability in components/com_mambatstaff/mambatstaff.php in the Mambatstaff 3.1b and earlier component for Mambo allows remote attackers to execute arbitrary PHP code via…	CWE-94 Code Injection	CVE-2006-3947	2018-10-18 06:32	2006-08-2	Show	GitHub Exploit DB Packet Storm

346522	-	mambo	mambatstaff	Successful exploitation requires that "register_globals" is enabled.	CWE-94 Code Injection	CVE-2006-3947	2018-10-18 06:32	2006-08-2	Show	GitHub Exploit DB Packet Storm

346523	-	php-nuke	inp	Cross-site scripting (XSS) vulnerability in modules.php in PHP-Nuke INP allows remote attackers to inject arbitrary web script or HTML via the query parameter.	NVD-CWE-Other	CVE-2006-3948	2018-10-18 06:32	2006-08-2	Show	GitHub Exploit DB Packet Storm

346524	-	mambo	artlinks_component	PHP remote file inclusion vulnerability in artlinks.dispnew.php in the Artlinks component (com_artlinks) for Mambo allows remote attackers to execute arbitrary PHP code via a URL in the mosConfig_abs…	CWE-94 Code Injection	CVE-2006-3949	2018-10-18 06:32	2006-08-2	Show	GitHub Exploit DB Packet Storm

346525	-	mybulletinboard	mybulletinboard	Cross-site scripting (XSS) vulnerability in usercp.php in MyBB (aka MyBulletinBoard) 1.x allows remote attackers to inject arbitrary web script or HTML via the gallery parameter.	NVD-CWE-Other	CVE-2006-3953	2018-10-18 06:32	2006-08-2	Show	GitHub Exploit DB Packet Storm

346526	-	mybulletinboard	mybulletinboard	Directory traversal vulnerability in usercp.php in MyBB (aka MyBulletinBoard) 1.x allows remote attackers to read arbitrary files via a .. (dot dot) in the gallery parameter in a (1) avatar or (2) do…	NVD-CWE-Other	CVE-2006-3954	2018-10-18 06:32	2006-08-2	Show	GitHub Exploit DB Packet Storm

346527	-	minibb	minibb	Multiple PHP remote file inclusion vulnerabilities in MiniBB Forum 1.5a allow remote attackers to execute arbitrary PHP code via a URL in the absolute_path parameter to (1) news.php, (2) search.php, …	NVD-CWE-Other	CVE-2006-3955	2018-10-18 06:32	2006-08-2	Show	GitHub Exploit DB Packet Storm

346528	-	total_online_solutions	advanced_webhost_billing_system	Multiple cross-site scripting (XSS) vulnerabilities in contact.php in Advanced Webhost Billing System (AWBS) 2.2.2 allow remote attackers to inject arbitrary web script or HTML via the (1) Name, (2) …	NVD-CWE-Other	CVE-2006-3956	2018-10-18 06:32	2006-08-2	Show	GitHub Exploit DB Packet Storm

346529	-	mcafee	antispyware internet_security_suite personal_firewall_plus privacy_service quickclean security_center spamkiller virusscan wireless_home_network_security	Buffer overflow in McSubMgr ActiveX control (mcsubmgr.dll) in McAfee Security Center 6.0.23 for Internet Security Suite 2006, Wireless Home Network Security, Personal Firewall Plus, VirusScan, Privac…	CWE-119 Incorrect Access of Indexable Resource ('Range Error')	CVE-2006-3961	2018-10-18 06:32	2006-08-2	Show	GitHub Exploit DB Packet Storm

346530	-	carlos_sanchez_valle php_layers_menu	mynewsgroups php_layers_menu	PHP remote file inclusion vulnerability in /lib/tree/layersmenu.inc.php in the PHP Layers Menu 2.3.5 package for MyNewsGroups :) 0.6b and earlier allows remote attackers to execute arbitrary PHP code…	CWE-94 Code Injection	CVE-2006-3966	2018-10-18 06:32	2006-08-2	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed