Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Feb. 9, 2026, 12:59 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
214571 4.3 警告 シマンテック - Symantec Messaging Gateway の管理コンソールにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2014-1648 2014-04-25 15:24 2014-04-22 Show GitHub Exploit DB Packet Storm
214572 7.5 危険 KnowledgeTree - KnowledgeTree の webservice/clienttools/services/mdownload.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2014-2737 2014-04-25 15:15 2014-03-28 Show GitHub Exploit DB Packet Storm
214573 3.3 注意 freedesktop.org - Xpdf および Poppler の goo/gfile.cc 内の openTempFile 関数における任意のファイルを上書きされる脆弱性 CWE-59
リンク解釈の問題 		CVE-2013-4472 2014-04-25 14:59 2013-10-26 Show GitHub Exploit DB Packet Storm
214574 3.3 注意 npm, Inc. - Node Packaged Modules の lib/npm.js における任意のファイルを上書きされる脆弱性 CWE-59
リンク解釈の問題 		CVE-2013-4116 2014-04-25 14:26 2013-07-8 Show GitHub Exploit DB Packet Storm
214575 4.3 警告 Apache Software Foundation - Apache Archiva におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2013-2187 2014-04-25 14:14 2013-02-19 Show GitHub Exploit DB Packet Storm
214576 3.3 注意 Jonathan Leung - Ruby 用 Show In Browser gem における任意の Web スクリプトまたは HTML を挿入される脆弱性 CWE-59
リンク解釈の問題 		CVE-2013-2105 2014-04-25 14:06 2013-05-18 Show GitHub Exploit DB Packet Storm
214577 4.3 警告 k5n.us - Craig Knudsen WebCalendar におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2013-1421 2014-04-25 13:57 2013-02-22 Show GitHub Exploit DB Packet Storm
214578 6.8 警告 PaperCut Software International Pty - Papercut MF および NG の管理 UI におけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反 		CVE-2014-2659 2014-04-25 13:39 2014-04-10 Show GitHub Exploit DB Packet Storm
214579 4.3 警告 CJ Niemira - phpMyID の MyID.php の wrap_html 関数におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2014-2890 2014-04-25 12:26 2014-04-17 Show GitHub Exploit DB Packet Storm
214580 4.9 警告 アップル - Apple OS X のカーネルにおける ASLR 保護メカニズムを回避される脆弱性 CWE-200
情報漏えい 		CVE-2014-1322 2014-04-25 12:21 2014-04-22 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:April 26, 2026, 4:08 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
289691 - ciamos ciamos_cms PHP remote file inclusion vulnerability in modules/forum/include/config.php in Ciamos Content Management System (CMS) 0.9.6b and earlier allows remote attackers to execute arbitrary PHP code via a UR… NVD-CWE-Other
CVE-2006-5257 2017-10-19 10:29 2006-10-13 Show GitHub Exploit DB Packet Storm
289692 - compteur compteur PHP remote file inclusion vulnerability in param_editor.php in Compteur 2 allows remote attackers to execute arbitrary PHP code via a URL in the folder parameter. NVD-CWE-Other
CVE-2006-5259 2017-10-19 10:29 2006-10-13 Show GitHub Exploit DB Packet Storm
289693 - phpmyagenda phpmyagenda Directory traversal vulnerability in templates/header.php3 in phpMyAgenda 3.1 and earlier allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the language param… NVD-CWE-Other
CVE-2006-5263 2017-10-19 10:29 2006-10-13 Show GitHub Exploit DB Packet Storm
289694 - cuttlefish_multimedia_ltd. leicestershire_communityportals PHP remote file inclusion vulnerability in includes/import-archive.php in Leicestershire communityPortals 1.0 build 20051018 and earlier allows remote attackers to execute arbitrary PHP code via a UR… CWE-94
Code Injection 		CVE-2006-5280 2017-10-19 10:29 2006-10-14 Show GitHub Exploit DB Packet Storm
289695 - cuttlefish_multimedia_ltd. leicestershire_communityportals Successful exploitation requires that "register_globals" is enabled and that support for ".htaccess" files is disabled. CWE-94
Code Injection 		CVE-2006-5280 2017-10-19 10:29 2006-10-14 Show GitHub Exploit DB Packet Storm
289696 - navyism n_at_board PHP remote file inclusion vulnerability in naboard_pnr.php in n@board 3.1.9e and earlier allows remote attackers to execute arbitrary PHP code via a URL in the skin parameter. NVD-CWE-Other
CVE-2006-5281 2017-10-19 10:29 2006-10-14 Show GitHub Exploit DB Packet Storm
289697 - minichat minichat PHP remote file inclusion vulnerability in ftag.php in Minichat 6.0 allows remote attackers to execute arbitrary PHP code via a URL in the mostrar parameter. NVD-CWE-Other
CVE-2006-5283 2017-10-19 10:29 2006-10-14 Show GitHub Exploit DB Packet Storm
289698 - php_news_reader php_news_reader PHP remote file inclusion vulnerability in auth/phpbb.inc.php in Shen Cheng-Da PHP News Reader (aka pnews) 2.6.4 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the CFG… NVD-CWE-Other
CVE-2006-5284 2017-10-19 10:29 2006-10-14 Show GitHub Exploit DB Packet Storm
289699 - php_news_reader php_news_reader Successful exploitation requires that "register_globals" is enabled. NVD-CWE-Other
CVE-2006-5284 2017-10-19 10:29 2006-10-14 Show GitHub Exploit DB Packet Storm
289700 - exhibit_engine exhibit_engine PHP remote file inclusion vulnerability in photo_comment.php in Exhibit Engine 1.5 RC 4 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the toroot parameter. NVD-CWE-Other
CVE-2006-5292 2017-10-19 10:29 2006-10-17 Show GitHub Exploit DB Packet Storm