Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Feb. 9, 2026, 12:59 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
216051 5 警告 シスコシステムズ - Cisco Unified Communications Manager の Enterprise License Manager コンポーネントにおける ELM ファイルを読まれる脆弱性 CWE-287
不適切な認証 		CVE-2014-0733 2014-02-21 11:42 2014-02-19 Show GitHub Exploit DB Packet Storm
216052 6.8 警告 シスコシステムズ - Cisco Unified Communications Manager の Call Detail Records Analysis and Reporting ページにおけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反 		CVE-2014-0736 2014-02-21 11:37 2014-02-19 Show GitHub Exploit DB Packet Storm
216053 4.3 警告 シスコシステムズ - Cisco Unified Communications Manager の IP Manager Assistant インターフェースにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2014-0735 2014-02-21 11:14 2014-02-19 Show GitHub Exploit DB Packet Storm
216054 7.5 危険 シスコシステムズ - Cisco Unified Communications Manager の Certificate Authority Proxy Function の実装における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2014-0734 2014-02-21 11:13 2014-02-19 Show GitHub Exploit DB Packet Storm
216055 5 警告 シスコシステムズ - Cisco Unified Communications Manager の Real Time Monitoring Tool Web アプリケーションにおけるアプリケーションファイルを読まれる脆弱性 CWE-287
不適切な認証 		CVE-2014-0732 2014-02-21 11:12 2014-02-19 Show GitHub Exploit DB Packet Storm
216056 2.1 注意 Linux - Linux Kernel の net/key/af_key.c におけるカーネルヒープメモリから重要な情報を取得される脆弱性 CWE-119
バッファエラー 		CVE-2013-2234 2014-02-20 18:22 2013-06-26 Show GitHub Exploit DB Packet Storm
216057 2.1 注意 Linux
レッドハット		 - Linux Kernel の drivers/cdrom/cdrom.c 内の mmc_ioctl_cdrom_read_data 関数における重要な情報を取得される脆弱性 CWE-200
情報漏えい 		CVE-2013-2164 2014-02-20 18:17 2013-06-6 Show GitHub Exploit DB Packet Storm
216058 4.4 警告 Linux - Linux Kernel の drivers/net/ethernet/broadcom/tg3.c におけるヒープベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2013-1929 2014-02-20 18:07 2013-03-27 Show GitHub Exploit DB Packet Storm
216059 4.7 警告 Linux
レッドハット		 - Linux Kernel の fs/compat_ioctl.c における重要な情報を取得される脆弱性 CWE-200
情報漏えい 		CVE-2013-1928 2014-02-20 18:03 2013-04-8 Show GitHub Exploit DB Packet Storm
216060 5 警告 GNU Project - GNU C Library におけるスタックベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2013-1914 2014-02-20 17:53 2013-04-3 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:April 22, 2026, 4 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
289421 - phpnews phpnews Multiple PHP remote file inclusion vulnerabilities in PhpNews 1.0 allow remote attackers to execute arbitrary PHP code via the Include parameter to (1) Include/lib.inc.php3 and (2) Include/variables.… NVD-CWE-Other
CVE-2006-7081 2017-10-11 10:31 2007-03-3 Show GitHub Exploit DB Packet Storm
289422 - phpwind phpwind SQL injection vulnerability in admin.php in PHPWind 5.0.1 and earlier allows remote attackers to execute arbitrary SQL commands via the AdminUser cookie. NVD-CWE-Other
CVE-2006-7101 2017-10-11 10:31 2007-03-4 Show GitHub Exploit DB Packet Storm
289423 - matthias_dietrich phpburningportal_quiz-modul Multiple PHP remote file inclusion vulnerabilities in phpBurningPortal quiz-modul 1.0.1, and possibly earlier, allow remote attackers to execute arbitrary PHP code via a URL in the lang_path paramete… CWE-94
Code Injection 		CVE-2006-7102 2017-10-11 10:31 2007-03-4 Show GitHub Exploit DB Packet Storm
289424 - powerphlogger powerphlogger PHP remote file inclusion vulnerability in config.inc.php3 in Power Phlogger 2.0.9 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the rel_path parameter. CWE-94
Code Injection 		CVE-2006-7106 2017-10-11 10:31 2007-03-4 Show GitHub Exploit DB Packet Storm
289425 - coalescent_systems freepbx PHP remote file inclusion vulnerability in upgrade.php in Coalescent Systems freePBX 2.1.3 allows remote attackers to execute arbitrary PHP code via a URL in the amp_conf[AMPWEBROOT] parameter. NVD-CWE-Other
CVE-2006-7107 2017-10-11 10:31 2007-03-4 Show GitHub Exploit DB Packet Storm
289426 - andries_brouwer util-linux login in util-linux-2.12a skips pam_acct_mgmt and chauth_tok when authentication is skipped, such as when a Kerberos krlogin session has been established, which might allow users to bypass intended a… CWE-264
Permissions, Privileges, and Access Controls 		CVE-2006-7108 2017-10-11 10:31 2007-03-5 Show GitHub Exploit DB Packet Storm
289427 - maxdev mdpro Directory traversal vulnerability in error.php in MD-Pro 1.0.76 and earlier allows remote authenticated users to read and include arbitrary files via the PNSVlang cookie, as demonstrated by uploading… CWE-22
Path Traversal 		CVE-2006-7112 2017-10-11 10:31 2007-03-6 Show GitHub Exploit DB Packet Storm
289428 - kubix kubix SQL injection vulnerability in includes/functions.php in Kubix 0.7 and earlier allows remote attackers to execute arbitrary SQL commands and bypass authentication via the member_id parameter ($id var… CWE-89
SQL Injection 		CVE-2006-7116 2017-10-11 10:31 2007-03-6 Show GitHub Exploit DB Packet Storm
289429 - kubix kubix Multiple directory traversal vulnerabilities in Kubix 0.7 and earlier allow remote attackers to (1) include and execute arbitrary local files via ".." sequences in the theme cookie to index.php, whic… CWE-22
Path Traversal 		CVE-2006-7117 2017-10-11 10:31 2007-03-6 Show GitHub Exploit DB Packet Storm
289430 - phpgiggle phpgiggle PHP remote file inclusion vulnerability in kernel/system/startup.php in J. He PHPGiggle 12.08 and earlier, as distributed on comscripts.com, allows remote attackers to execute arbitrary PHP code via … NVD-CWE-Other
CVE-2006-7119 2017-10-11 10:31 2007-03-6 Show GitHub Exploit DB Packet Storm