Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Feb. 9, 2026, 12:59 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
216401 5 警告 株式会社ロックオン - EC-CUBE における情報改ざんの脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2014-0807 2014-01-30 18:37 2014-01-22 Show GitHub Exploit DB Packet Storm
216402 2.6 注意 株式会社ロックオン - EC-CUBE におけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反 		CVE-2013-5993 2014-01-30 18:36 2013-11-20 Show GitHub Exploit DB Packet Storm
216403 4.3 警告 株式会社ロックオン - EC-CUBE におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2013-5996 2014-01-30 18:35 2013-11-20 Show GitHub Exploit DB Packet Storm
216404 5.5 警告 株式会社ロックオン - EC-CUBE における情報漏えいの脆弱性 CWE-200
情報漏えい 		CVE-2013-5995 2014-01-30 18:34 2013-11-20 Show GitHub Exploit DB Packet Storm
216405 5 警告 株式会社ロックオン - EC-CUBE における情報漏えいの脆弱性 CWE-200
情報漏えい 		CVE-2013-5994 2014-01-30 18:32 2013-11-20 Show GitHub Exploit DB Packet Storm
216406 6.4 警告 株式会社ロックオン - EC-CUBE におけるアクセス制限不備の脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2013-2314 2014-01-30 18:31 2013-05-23 Show GitHub Exploit DB Packet Storm
216407 6 警告 Chamilo Association - Chamilo LMS の main/auth/profile.php の check_user_password 関数における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2013-6787 2014-01-30 15:53 2013-11-6 Show GitHub Exploit DB Packet Storm
216408 5 警告 Easytime Studio - iOS 用 Easytime Studio Easy File Manager におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2013-3921 2014-01-30 15:52 2013-11-21 Show GitHub Exploit DB Packet Storm
216409 7.5 危険 Doug Poulin - Command School Student Management System における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2014-1636 2014-01-30 14:46 2014-01-7 Show GitHub Exploit DB Packet Storm
216410 5 警告 Doug Poulin - Command School Student Management System におけるデータベースのバックアップをダウンロードされる脆弱性 CWE-200
情報漏えい 		CVE-2014-1637 2014-01-30 14:45 2014-01-7 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:April 24, 2026, 4 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
279661 - phpwebftp phpwebftp Multiple cross-site scripting (XSS) vulnerabilities in index.php in Edwin van Wijk phpWebFTP 2.3 allow remote attackers to inject arbitrary web script or HTML via the (1) port, (2) server, and (3) us… NVD-CWE-Other
CVE-2006-2048 2018-10-19 01:37 2006-04-27 Show GitHub Exploit DB Packet Storm
279662 - dcscripts dcforumlite Cross-site scripting (XSS) vulnerability in dcboard.cgi in DCScripts DCForumLite 3.0 allows remote attackers to inject arbitrary web script or HTML via the az parameter. NVD-CWE-Other
CVE-2006-2049 2018-10-19 01:37 2006-04-27 Show GitHub Exploit DB Packet Storm
279663 - dcscripts dcforumlite SQL injection vulnerability in dcboard.cgi in DCScripts DCForumLite 3.0 allows remote attackers to execute arbitrary SQL commands via the az parameter. NVD-CWE-Other
CVE-2006-2050 2018-10-19 01:37 2006-04-27 Show GitHub Exploit DB Packet Storm
279664 - nextage nextage_shopping_cart Multiple cross-site scripting (XSS) vulnerabilities in myadmin/index.php in NextAge Shopping Cart allow remote attackers to inject arbitrary web script or HTML via the (1) username and (2) password p… NVD-CWE-Other
CVE-2006-2051 2018-10-19 01:37 2006-04-27 Show GitHub Exploit DB Packet Storm
279665 - verosky_media instant_photo_gallery Cross-site scripting (XSS) vulnerability in Verosky Media Instant Photo Gallery allows remote attackers to inject arbitrary web script or HTML via the member parameter in a viewpro action in member.p… NVD-CWE-Other
CVE-2006-2052 2018-10-19 01:37 2006-04-27 Show GitHub Exploit DB Packet Storm
279666 - invision_power_services invision_power_board action_public/search.php in Invision Power Board (IPB) 2.1.x and 2.0.x before 20060425 allows remote attackers to execute arbitrary PHP code via a search with a crafted value of the lastdate paramete… NVD-CWE-Other
CVE-2006-2059 2018-10-19 01:37 2006-04-27 Show GitHub Exploit DB Packet Storm
279667 - invision_power_services invision_power_board Directory traversal vulnerability in action_admin/paysubscriptions.php in Invision Power Board (IPB) 2.1.x and 2.0.x before 20060425 allows remote authenticated administrators to include and execute … NVD-CWE-Other
CVE-2006-2060 2018-10-19 01:37 2006-04-27 Show GitHub Exploit DB Packet Storm
279668 - invision_power_services invision_power_board If you've downloaded IPB 2.1.5 since the time of this post, there is no need to update your installation as the main download has been updated. NVD-CWE-Other
CVE-2006-2060 2018-10-19 01:37 2006-04-27 Show GitHub Exploit DB Packet Storm
279669 - invision_power_services invision_board
invision_power_board 		SQL injection vulnerability in lib/func_taskmanager.php in Invision Power Board (IPB) 2.1.x and 2.0.x before 20060425 allows remote attackers to execute arbitrary SQL commands via the ck parameter, w… NVD-CWE-Other
CVE-2006-2061 2018-10-19 01:37 2006-04-27 Show GitHub Exploit DB Packet Storm
279670 - invision_power_services invision_board
invision_power_board 		The vendor has released an update to address this and other versions. NVD-CWE-Other
CVE-2006-2061 2018-10-19 01:37 2006-04-27 Show GitHub Exploit DB Packet Storm