Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Feb. 9, 2026, 12:59 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
216571 3.3 注意 VMware - 複数の VMware 製品におけるサービス運用妨害 (DoS) の脆弱性 CWE-DesignError
CVE-2014-1208 2014-01-22 11:29 2014-01-16 Show GitHub Exploit DB Packet Storm
216572 4.3 警告 VMware - VMware ESXi および ESX におけるサービス運用妨害 (DoS) の脆弱性 CWE-Other
その他 		CVE-2014-1207 2014-01-22 11:29 2014-01-16 Show GitHub Exploit DB Packet Storm
216573 7.5 危険 Sonatype Inc. - Sonatype Nexus における任意のオブジェクトを作成される脆弱性 CWE-94
コード・インジェクション 		CVE-2014-0792 2014-01-22 11:04 2014-01-7 Show GitHub Exploit DB Packet Storm
216574 4.3 警告 The GetSimple Team - GetSimple CMS におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2013-7243 2014-01-21 17:06 2013-12-31 Show GitHub Exploit DB Packet Storm
216575 6.8 警告 Conceptronic - Conceptronic CIPCAMPTIWL Camera のファームウェアにおけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反 		CVE-2013-7204 2014-01-21 17:06 2013-12-23 Show GitHub Exploit DB Packet Storm
216576 4.3 警告 Rick Mead - WordPress 用 Media Library Categories プラグインにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2012-6630 2014-01-21 17:04 2012-05-15 Show GitHub Exploit DB Packet Storm
216577 6.8 警告 XYZScripts - WordPress 用 Newsletter Manager プラグインにおけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反 		CVE-2012-6629 2014-01-21 17:03 2012-05-15 Show GitHub Exploit DB Packet Storm
216578 4.3 警告 XYZScripts - WordPress 用 Newsletter Manager プラグインにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2012-6628 2014-01-21 17:03 2012-04-20 Show GitHub Exploit DB Packet Storm
216579 4.3 警告 XYZScripts - WordPress 用 Newsletter Manager プラグインの admin/test_mail.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2012-6627 2014-01-21 17:02 2012-05-15 Show GitHub Exploit DB Packet Storm
216580 4.3 警告 VastHTML - WordPress 用 ForumPress WP Forum Server プラグインにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2012-6623 2014-01-21 17:01 2012-07-14 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:April 25, 2026, 4:08 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
289561 - siteatschool siteatschool Multiple PHP remote file inclusion vulnerabilities in Site@School (S@S) 2.4.02 and earlier allow remote attackers to execute arbitrary PHP code via a URL in the cmsdir parameter to (1) starnet/module… NVD-CWE-Other
CVE-2006-4920 2017-10-19 10:29 2006-09-21 Show GitHub Exploit DB Packet Storm
289562 - siteatschool siteatschool Unrestricted file upload vulnerability in starnet/editors/htmlarea/popups/images.php in Site@School (S@S) 2.4.02 and earlier allows remote attackers to upload and execute arbitrary files with executa… NVD-CWE-Other
CVE-2006-4922 2017-10-19 10:29 2006-09-21 Show GitHub Exploit DB Packet Storm
289563 - boesch_it-consulting progsys PHP remote file inclusion vulnerability in includes/pear/Net/DNS/RR.php in ProgSys 0.151 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the phpdns_basedir parameter. CWE-94
Code Injection 		CVE-2006-4944 2017-10-19 10:29 2006-09-23 Show GitHub Exploit DB Packet Storm
289564 - cardway digitalwebshop Multiple PHP remote file inclusion vulnerabilities in Cardway (aka Frederic Boudaud) DigitalWebShop 1.128 and earlier allow remote attackers to execute arbitrary PHP code via a URL in the _PHPLIB[lib… NVD-CWE-Other
CVE-2006-4945 2017-10-19 10:29 2006-09-23 Show GitHub Exploit DB Packet Storm
289565 - cmsdevelopment business_card_web_builder PHP remote file inclusion vulnerability in include/startup.inc.php in CMSDevelopment Business Card Web Builder (BCWB) 0.99, and possibly 2.5 Beta and earlier, allows remote attackers to execute arbit… NVD-CWE-Other
CVE-2006-4946 2017-10-19 10:29 2006-09-23 Show GitHub Exploit DB Packet Storm
289566 - cmsdevelopment business_card_web_builder Successful exploitation requires that "register_globals" is enabled. NVD-CWE-Other
CVE-2006-4946 2017-10-19 10:29 2006-09-23 Show GitHub Exploit DB Packet Storm
289567 - the_myreview_system myreview SQL injection vulnerability in the GetMember function in functions.php in MyReview 1.9.4 allows remote attackers to execute arbitrary SQL commands via the email parameter to Admin.php. NVD-CWE-Other
CVE-2006-4957 2017-10-19 10:29 2006-09-23 Show GitHub Exploit DB Packet Storm
289568 - blue_dragon php_blue_dragon Cross-site scripting (XSS) vulnerability in index.php Php Blue Dragon 2.9.1 and earlier allows remote attackers to inject arbitrary web script or HTML via the m parameter, which is reflected in an er… NVD-CWE-Other
CVE-2006-4960 2017-10-19 10:29 2006-09-23 Show GitHub Exploit DB Packet Storm
289569 - blue_dragon php_blue_dragon SQL injection vulnerability in the GetModuleConfig function in public_includes/pub_kernel/pbd_modules.php in Php Blue Dragon 2.9.1 and earlier allows remote attackers to execute arbitrary SQL command… NVD-CWE-Other
CVE-2006-4961 2017-10-19 10:29 2006-09-23 Show GitHub Exploit DB Packet Storm
289570 - blue_dragon php_blue_dragon Directory traversal vulnerability in pbd_engine.php in Php Blue Dragon 2.9.1 and earlier allows remote attackers to read and execute arbitrary local files via a .. (dot dot) sequence via the phpExt p… NVD-CWE-Other
CVE-2006-4962 2017-10-19 10:29 2006-09-23 Show GitHub Exploit DB Packet Storm