Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":July 1, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
206041 7.9 重要
Network 		オラクル - Oracle Hospitality Applications の Oracle Hospitality OPERA 5 Property Services における OPERA File Upload Download に関する脆弱性 CWE-noinfo
情報不足 		CVE-2016-5563 2016-10-27 11:44 2016-10-18 Show GitHub Exploit DB Packet Storm
206042 7.3 重要
Physics 		オラクル - Oracle Retail Applications の Oracle Retail Xstore Payment における Security に関する脆弱性 CWE-noinfo
情報不足 		CVE-2016-5539 2016-10-27 11:44 2016-10-18 Show GitHub Exploit DB Packet Storm
206043 3.3 低
Local 		オラクル - Oracle Database Server の RDBMS Security における脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2016-5499 2016-10-27 11:43 2016-10-18 Show GitHub Exploit DB Packet Storm
206044 4.4 警告
Network 		オラクル - Oracle MySQL の MySQL Server における Server: Performance Schema に関する脆弱性 CWE-noinfo
情報不足 		CVE-2016-8290 2016-10-27 11:25 2016-10-18 Show GitHub Exploit DB Packet Storm
206045 4.7 警告
Local 		オラクル - Oracle MySQL の MySQL Server における Server: InnoDB に関する脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2016-8289 2016-10-27 11:25 2016-10-18 Show GitHub Exploit DB Packet Storm
206046 3.1 低
Network 		オラクル - Oracle MySQL の MySQL Server における Server: InnoDB Plugin に関する脆弱性 CWE-Other
その他 		CVE-2016-8288 2016-10-27 11:25 2016-10-18 Show GitHub Exploit DB Packet Storm
206047 4.5 警告
Network 		オラクル - Oracle MySQL の MySQL Server における Server: Replication に関する脆弱性 CWE-noinfo
情報不足 		CVE-2016-8287 2016-10-27 11:25 2016-10-18 Show GitHub Exploit DB Packet Storm
206048 3.1 低
Network 		オラクル - Oracle MySQL の MySQL Server における Server: Security: Privileges に関する脆弱性 CWE-200
情報漏えい 		CVE-2016-8286 2016-10-27 11:25 2016-10-18 Show GitHub Exploit DB Packet Storm
206049 1.8 低
Local 		オラクル - Oracle MySQL の MySQL Server における Server: Replication に関する脆弱性 CWE-noinfo
情報不足 		CVE-2016-8284 2016-10-27 11:25 2016-10-18 Show GitHub Exploit DB Packet Storm
206050 4.3 警告
Network 		オラクル - Oracle MySQL の MySQL Server における Server: Types に関する脆弱性 CWE-noinfo
情報不足 		CVE-2016-8283 2016-10-27 11:25 2016-10-18 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:July 1, 2026, 4:27 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
348491 - light_weight_calendar light_weight_calendar Eval injection vulnerability in cal.php in Light Weight Calendar (LWC) 1.0 allows remote attackers to execute arbitrary PHP code via the date parameter to index.php. NVD-CWE-Other
CVE-2006-1252 2017-10-11 10:30 2006-03-19 Show GitHub Exploit DB Packet Storm
348492 - php_icalendar php_icalendar publish.ical.php in Jim Hu and Chad Little PHP iCalendar 2.21 and earlier does not require authentication for write access to the calendars directory, which allows remote attackers to upload and exec… NVD-CWE-Other
CVE-2006-1291 2017-10-11 10:30 2006-03-20 Show GitHub Exploit DB Packet Storm
348493 - php_icalendar php_icalendar Directory traversal vulnerability in Jim Hu and Chad Little PHP iCalendar 2.21 and earlier allows remote attackers to include and execute arbitrary local files via directory traversal sequences and a… NVD-CWE-Other
CVE-2006-1292 2017-10-11 10:30 2006-03-20 Show GitHub Exploit DB Packet Storm
348494 - knowledgebasepublisher knowledgebasepublisher PHP remote file include vulnerability in PageController.php in KnowledgebasePublisher 1.2 allows remote attackers to include and execute arbitrary PHP code via a URL in the dir parameter. NVD-CWE-Other
CVE-2006-1294 2017-10-11 10:30 2006-03-20 Show GitHub Exploit DB Packet Storm
348495 - greg_neustaetter gcards Directory traversal vulnerability in inc/setLang.php in Greg Neustaetter gCards 1.45 and earlier allows remote attackers to include and execute arbitrary local files via directory traversal sequences… NVD-CWE-Other
CVE-2006-1346 2017-10-11 10:30 2006-03-22 Show GitHub Exploit DB Packet Storm
348496 - greg_neustaetter gcards SQL injection vulnerability in loginfunction.php in Greg Neustaetter gCards 1.45 and earlier allows remote attackers to execute arbitrary SQL commands via the username parameter. NVD-CWE-Other
CVE-2006-1347 2017-10-11 10:30 2006-03-22 Show GitHub Exploit DB Packet Storm
348497 - greg_neustaetter gcards Vulnerability can only be exploited if the "magic_quotes_gpc" parameter is set to Off. NVD-CWE-Other
CVE-2006-1347 2017-10-11 10:30 2006-03-22 Show GitHub Exploit DB Packet Storm
348498 - greg_neustaetter gcards Cross-site scripting (XSS) vulnerability in index.php in Greg Neustaetter gCards 1.45 and earlier allows remote attackers to inject arbitrary web script or HTML via the lang[*][file] parameter, which… NVD-CWE-Other
CVE-2006-1348 2017-10-11 10:30 2006-03-22 Show GitHub Exploit DB Packet Storm
348499 - freeradius freeradius Unspecified vulnerability in FreeRADIUS 1.0.0 up to 1.1.0 allows remote attackers to bypass authentication or cause a denial of service (server crash) via "Insufficient input validation" in the EAP-M… NVD-CWE-Other
CVE-2006-1354 2017-10-11 10:30 2006-03-22 Show GitHub Exploit DB Packet Storm
348500 - justin_white freewps images.php in Justin White (aka YTZ) Free Web Publishing System (FreeWPS) 2.11 allows remote attackers to execute arbitrary PHP code by uploading a .php file into the /upload directory as specified i… NVD-CWE-Other
CVE-2006-1363 2017-10-11 10:30 2006-03-23 Show GitHub Exploit DB Packet Storm