Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Feb. 9, 2026, 12:59 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
215631 7.5 危険 hinton design - Hinton Design phpht Topsites における認証を回避される脆弱性 - CVE-2006-0654 2014-03-11 17:43 2006-02-13 Show GitHub Exploit DB Packet Storm
215632 4.3 警告 cpaint - CPAINT library におけるクロスサイトスクリプティングの脆弱性 - CVE-2006-0650 2014-03-11 17:43 2006-02-13 Show GitHub Exploit DB Packet Storm
215633 4.3 警告 dataparksearch - DataparkSearch におけるクロスサイトスクリプティングの脆弱性 - CVE-2006-0649 2014-03-11 17:43 2006-02-13 Show GitHub Exploit DB Packet Storm
215634 7.5 危険 クアルコム - QUALCOMM Eudora WorldMail におけるバッファオーバーフローの脆弱性 - CVE-2006-0637 2014-03-11 17:43 2006-02-10 Show GitHub Exploit DB Packet Storm
215635 5 警告 erik c. thauvin - Erik C. Thauvin mailback における CRLF インジェクションの脆弱性 - CVE-2006-0631 2014-03-11 17:43 2006-02-10 Show GitHub Exploit DB Packet Storm
215636 4.3 警告 clever copy - Clever Copy におけるクロスサイトスクリプティングの脆弱性 - CVE-2006-0627 2014-03-11 17:43 2006-02-9 Show GitHub Exploit DB Packet Storm
215637 4.3 警告 hinton design - Hinton Design phphd におけるクロスサイトスクリプティングの脆弱性 - CVE-2006-0609 2014-03-11 17:43 2006-02-8 Show GitHub Exploit DB Packet Storm
215638 7.5 危険 hinton design - Hinton Design phphd における認証を回避される脆弱性 - CVE-2006-0607 2014-03-11 17:43 2006-02-8 Show GitHub Exploit DB Packet Storm
215639 7.5 危険 hinton design - Hinton Design phphg Guestbook における許可されてないアクセス権を取得される脆弱性 - CVE-2006-0604 2014-03-11 17:43 2006-02-8 Show GitHub Exploit DB Packet Storm
215640 7.5 危険 stefan ritt - elog におけるバッファオーバーフローの脆弱性 - CVE-2006-0598 2014-03-11 17:43 2006-02-13 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:April 20, 2026, 4:09 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
289281 - matthias_dietrich phpburningportal_quiz-modul Multiple PHP remote file inclusion vulnerabilities in phpBurningPortal quiz-modul 1.0.1, and possibly earlier, allow remote attackers to execute arbitrary PHP code via a URL in the lang_path paramete… CWE-94
Code Injection 		CVE-2006-7102 2017-10-11 10:31 2007-03-4 Show GitHub Exploit DB Packet Storm
289282 - powerphlogger powerphlogger PHP remote file inclusion vulnerability in config.inc.php3 in Power Phlogger 2.0.9 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the rel_path parameter. CWE-94
Code Injection 		CVE-2006-7106 2017-10-11 10:31 2007-03-4 Show GitHub Exploit DB Packet Storm
289283 - coalescent_systems freepbx PHP remote file inclusion vulnerability in upgrade.php in Coalescent Systems freePBX 2.1.3 allows remote attackers to execute arbitrary PHP code via a URL in the amp_conf[AMPWEBROOT] parameter. NVD-CWE-Other
CVE-2006-7107 2017-10-11 10:31 2007-03-4 Show GitHub Exploit DB Packet Storm
289284 - andries_brouwer util-linux login in util-linux-2.12a skips pam_acct_mgmt and chauth_tok when authentication is skipped, such as when a Kerberos krlogin session has been established, which might allow users to bypass intended a… CWE-264
Permissions, Privileges, and Access Controls 		CVE-2006-7108 2017-10-11 10:31 2007-03-5 Show GitHub Exploit DB Packet Storm
289285 - maxdev mdpro Directory traversal vulnerability in error.php in MD-Pro 1.0.76 and earlier allows remote authenticated users to read and include arbitrary files via the PNSVlang cookie, as demonstrated by uploading… CWE-22
Path Traversal 		CVE-2006-7112 2017-10-11 10:31 2007-03-6 Show GitHub Exploit DB Packet Storm
289286 - kubix kubix SQL injection vulnerability in includes/functions.php in Kubix 0.7 and earlier allows remote attackers to execute arbitrary SQL commands and bypass authentication via the member_id parameter ($id var… CWE-89
SQL Injection 		CVE-2006-7116 2017-10-11 10:31 2007-03-6 Show GitHub Exploit DB Packet Storm
289287 - kubix kubix Multiple directory traversal vulnerabilities in Kubix 0.7 and earlier allow remote attackers to (1) include and execute arbitrary local files via ".." sequences in the theme cookie to index.php, whic… CWE-22
Path Traversal 		CVE-2006-7117 2017-10-11 10:31 2007-03-6 Show GitHub Exploit DB Packet Storm
289288 - phpgiggle phpgiggle PHP remote file inclusion vulnerability in kernel/system/startup.php in J. He PHPGiggle 12.08 and earlier, as distributed on comscripts.com, allows remote attackers to execute arbitrary PHP code via … NVD-CWE-Other
CVE-2006-7119 2017-10-11 10:31 2007-03-6 Show GitHub Exploit DB Packet Storm
289289 - salims_softhouse jaf_cms Multiple PHP remote file inclusion vulnerabilities in JAF CMS 4.0 and 4.0 RC2 allow remote attackers to execute arbitrary PHP code via a URL in the main_dir parameter to (1) forum/main.php and (2) fo… CWE-94
Code Injection 		CVE-2006-7127 2017-10-11 10:31 2007-03-6 Show GitHub Exploit DB Packet Storm
289290 - salims_softhouse jaf_cms PHP remote file inclusion vulnerability in forum/forum.php JAF CMS 4.0 RC1 allows remote attackers to execute arbitrary PHP code via a URL in the website parameter. NVD-CWE-Other
CVE-2006-7128 2017-10-11 10:31 2007-03-6 Show GitHub Exploit DB Packet Storm