Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 5, 2026, 6 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
202711 9.8 緊急
Network
Katie Seaborn - Wordpress 用 Zotpress プラグインの zp_get_account() における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2016-1000217 2016-10-12 11:46 2016-09-9 Show GitHub Exploit DB Packet Storm
202712 9.1 緊急
Network
contus-video-comments project - WordPress 用 contus-video-comments プラグインにおける未認証のリモートの .jpg ファイルをアップロードされる脆弱性 CWE-22
パス・トラバーサル
CVE-2016-1000112 2016-10-12 11:46 2016-06-15 Show GitHub Exploit DB Packet Storm
202713 8.8 重要
Network
Ipswitch, Inc. - Ipswitch WhatsUp Gold の WrFreeFormText.asp の sUniqueID Parameter におけるブラインド SQLインジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2016-1000000 2016-10-12 11:46 2016-05-17 Show GitHub Exploit DB Packet Storm
202714 7.8 重要
Local
csv2wpec-coupon project - WordPress 用 csv2wpec-coupon プラグインにおけるリモートファイルをアップロードされる脆弱性 CWE-Other
その他
CVE-2015-1000013 2016-10-12 11:46 2015-09-11 Show GitHub Exploit DB Packet Storm
202715 7.5 重要
Network
mypixs project - WordPress 用 mypixs プラグインにおけるローカルファイルインクルードの脆弱性 CWE-200
情報漏えい
CVE-2015-1000012 2016-10-12 11:46 2015-09-15 Show GitHub Exploit DB Packet Storm
202716 9.8 緊急
Physics
DukaPress - WordPress 用 DukaPress プラグインにおけるブラインド SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2015-1000011 2016-10-12 11:46 2015-08-4 Show GitHub Exploit DB Packet Storm
202717 7.5 重要
Network
simple-image-manipulator project - WordPress 用 simple-image-manipulator プラグインにおけるファイルをダウンロードされる脆弱性 CWE-Other
その他
CVE-2015-1000010 2016-10-12 11:46 2015-07-16 Show GitHub Exploit DB Packet Storm
202718 7.5 重要
Network
wptf-image-gallery project - WordPress 用 wptf-image-gallery プラグインにおけるファイルをダウンロードされる脆弱性 CWE-200
CWE-Other
CVE-2015-1000007 2016-10-12 11:46 2015-07-17 Show GitHub Exploit DB Packet Storm
202719 7.5 重要
Network
andycheeseman - WordPress 用 Recent Backups プラグインにおけるファイルをダウンロードされる脆弱性 CWE-22
パス・トラバーサル
CVE-2015-1000006 2016-10-12 11:46 2015-07-13 Show GitHub Exploit DB Packet Storm
202720 7.5 重要
Network
FlaxlandsConsulting - WordPress 用 Candidate Application Form プラグインにおけるファイルをダウンロードされる脆弱性 CWE-22
パス・トラバーサル
CVE-2015-1000005 2016-10-12 11:46 2015-07-12 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 5, 2026, 4:11 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
345961 - filezilla filezilla Buffer overflow in FileZilla before 2.2.23 allows remote attackers to execute arbitrary commands via unknown attack vectors. NVD-CWE-Other
CVE-2006-2403 2017-07-20 10:31 2006-05-16 Show GitHub Exploit DB Packet Storm
345962 - filezilla filezilla Failed exploit attempts will likely crash the application. This vulnerability is addressed in the following product release: FileZilla, FileZilla, 2.2.23 NVD-CWE-Other
CVE-2006-2403 2017-07-20 10:31 2006-05-16 Show GitHub Exploit DB Packet Storm
345963 - flexchat flexchat Multiple cross-site scripting (XSS) vulnerabilities in FlexChat 2.0 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) username and (2) CFTOKEN parameter in (a) ind… NVD-CWE-Other
CVE-2006-2415 2017-07-20 10:31 2006-05-16 Show GitHub Exploit DB Packet Storm
345964 - phpmyadmin phpmyadmin Cross-site scripting (XSS) vulnerability in phpMyAdmin 2.8.0.x before 2.8.0.4 allows remote attackers to inject arbitrary web script or HTML via the theme parameter in unknown scripts. NOTE: the lan… CWE-79
Cross-site Scripting
CVE-2006-2417 2017-07-20 10:31 2006-05-16 Show GitHub Exploit DB Packet Storm
345965 - phpmyadmin phpmyadmin Update to version 2.8.0.4. http://www.phpmyadmin.net/home_page/downloads.php CWE-79
Cross-site Scripting
CVE-2006-2417 2017-07-20 10:31 2006-05-16 Show GitHub Exploit DB Packet Storm
345966 - phpmyadmin phpmyadmin Cross-site scripting (XSS) vulnerabilities in certain versions of phpMyAdmin before 2.8.0.4 allow remote attackers to inject arbitrary web script or HTML via the db parameter in unknown scripts. NVD-CWE-Other
CVE-2006-2418 2017-07-20 10:31 2006-05-16 Show GitHub Exploit DB Packet Storm
345967 - phpmyadmin phpmyadmin Some releases of phpMyAdmin before 2.8.0.4 are affected (2.6.2 tested vulnerable). This vulnerability is addressed in the following product release: phpMyAdmin, phpMyAdmin, 2.8.0.4 NVD-CWE-Other
CVE-2006-2418 2017-07-20 10:31 2006-05-16 Show GitHub Exploit DB Packet Storm
345968 - mozilla bugzilla Bugzilla 2.20rc1 through 2.20 and 2.21.1, when using RSS 1.0, allows remote attackers to conduct cross-site scripting (XSS) attacks via a title element with HTML encoded sequences such as ">", whi… CWE-79
Cross-site Scripting
CVE-2006-2420 2017-07-20 10:31 2006-05-16 Show GitHub Exploit DB Packet Storm
345969 - mozilla bugzilla Update to version 2.18.5 or 2.20.1. CWE-79
Cross-site Scripting
CVE-2006-2420 2017-07-20 10:31 2006-05-16 Show GitHub Exploit DB Packet Storm
345970 - pragma_systems fortressssh Stack-based buffer overflow in Pragma FortressSSH 4.0.7.20 allows remote attackers to execute arbitrary code via long SSH_MSG_KEXINIT messages, which may cause an overflow when being logged. NOTE: t… NVD-CWE-Other
CVE-2006-2421 2017-07-20 10:31 2006-05-17 Show GitHub Exploit DB Packet Storm