Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":July 1, 2026, 2:01 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
213941 7.5 危険 Aegir project - Drupal 用 Hostmaster モジュールにおける任意の PHP コードを実行される脆弱性 CWE-Other
その他
CVE-2015-5501 2015-08-25 18:16 2015-05-20 Show GitHub Exploit DB Packet Storm
213942 3.5 注意 chris shattuck - Drupal 用 Navigate モジュールにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2015-5500 2015-08-25 18:16 2015-05-20 Show GitHub Exploit DB Packet Storm
213943 4 警告 chris shattuck - Drupal 用 Navigate モジュールにおけるカスタムウィジェットを変更される脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2015-5499 2015-08-25 18:16 2015-05-20 Show GitHub Exploit DB Packet Storm
213944 5 警告 Shipwire API project - Drupal 用 Shipwire API モジュールにおける重要な情報を取得される脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2015-5498 2015-08-25 18:16 2015-05-12 Show GitHub Exploit DB Packet Storm
213945 3.5 注意 Web Links project - Drupal 用 Web Links モジュールにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2015-5497 2015-08-25 18:15 2015-05-12 Show GitHub Exploit DB Packet Storm
213946 5 警告 pass2pdf project - Drupal 用 pass2pdf モジュールにおけるユーザパスワードを取得される脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2015-5496 2015-08-25 18:15 2015-05-20 Show GitHub Exploit DB Packet Storm
213947 2.1 注意 Mobile sliding menu project - Drupal 用 Mobile sliding menu モジュールにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2015-5495 2015-08-25 18:15 2015-05-6 Show GitHub Exploit DB Packet Storm
213948 3.5 注意 Webform Matrix Component project - Drupal 用 Webform Matrix Component モジュールにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2015-5494 2015-08-25 18:15 2015-02-27 Show GitHub Exploit DB Packet Storm
213949 5 警告 Entityform Block project - Drupal 用 Entityform Block モジュールにおける特定のエンティティフォームのアクセス権を取得される脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2015-5493 2015-08-25 18:15 2015-05-6 Show GitHub Exploit DB Packet Storm
213950 4.3 警告 Video Consultation project - Drupal 用 Video Consultation モジュールにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2015-5492 2015-08-25 18:15 2015-05-6 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:July 1, 2026, 4:27 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
346131 - jetbox jetbox_cms Multiple cross-site scripting (XSS) vulnerabilities in Jetbox CMS allow remote attackers to inject arbitrary web script or HTML, as demonstrated via the OriginalImageData parameter to phpthumb.php. NVD-CWE-Other
CVE-2006-4739 2018-10-18 06:39 2006-09-14 Show GitHub Exploit DB Packet Storm
346132 - jetbox jetbox_cms Jetbox CMS allows remote attackers to obtain sensitive information via a direct request for certain files, which reveal the path in an error message. NVD-CWE-Other
CVE-2006-4740 2018-10-18 06:39 2006-09-14 Show GitHub Exploit DB Packet Storm
346133 - idevspot phplinkexchange PHP remote file inclusion vulnerability in bits_listings.php in IDevSpot PhpLinkExchange 1.0 allows remote attackers to execute arbitrary code via the svr_rootPhpStart parameter. NVD-CWE-Other
CVE-2006-4741 2018-10-18 06:39 2006-09-14 Show GitHub Exploit DB Packet Storm
346134 - idevspot phplinkexchange Cross-site scripting (XSS) vulnerability in user_add.php in IDevSpot PhpLinkExchange 1.0 allows remote attackers to inject arbitrary web script or HTML via the msg parameter. NVD-CWE-Other
CVE-2006-4742 2018-10-18 06:39 2006-09-14 Show GitHub Exploit DB Packet Storm
346135 - wordpress wordpress WordPress 2.0.2 through 2.0.5 allows remote attackers to obtain sensitive information via a direct request for (1) 404.php, (2) akismet.php, (3) archive.php, (4) archives.php, (5) attachment.php, (6)… NVD-CWE-Other
CVE-2006-4743 2018-10-18 06:39 2006-09-14 Show GitHub Exploit DB Packet Storm
346136 - abidia abidia_wireless
o-anywhere
Abidia (1) O-Anywhere and (2) Abidia Wireless transmit authentication credentials in cleartext, which allows remote attackers to obtain sensitive information by sniffing. NVD-CWE-Other
CVE-2006-4744 2018-10-18 06:39 2006-09-14 Show GitHub Exploit DB Packet Storm
346137 - scarybear pocketexpense_pro ScaryBear PocketExpense Pro 3.9.1 uses an internally recorded key to protect a data file whose contents are stored in plaintext, which allows local users to disable authentication and access the file… NVD-CWE-Other
CVE-2006-4745 2018-10-18 06:39 2006-09-14 Show GitHub Exploit DB Packet Storm
346138 - comscripts web_server_creator PHP remote file inclusion vulnerability in news/include/customize.php in Web Server Creator 0.1 allows remote attackers to execute arbitrary PHP code via a URL in the l parameter. NVD-CWE-Other
CVE-2006-4746 2018-10-18 06:39 2006-09-14 Show GitHub Exploit DB Packet Storm
346139 - idevspot textads Multiple cross-site scripting (XSS) vulnerabilities in IdevSpot TextAds allow remote attackers to inject arbitrary web script or HTML via (1) the id parameter in delete.php and (2) the error paramete… NVD-CWE-Other
CVE-2006-4747 2018-10-18 06:39 2006-09-14 Show GitHub Exploit DB Packet Storm
346140 - f-art_agency blog_cms Multiple SQL injection vulnerabilities in F-ART BLOG:CMS 4.1 allow remote attackers to execute arbitrary SQL commands via the (1) xagent, (2) xpath, (3) xreferer, and (4) xdns parameters in (a) admin… NVD-CWE-Other
CVE-2006-4748 2018-10-18 06:39 2006-09-14 Show GitHub Exploit DB Packet Storm