Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Feb. 9, 2026, 12:59 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
216581 4.3 警告 VastHTML - WordPress 用 ForumPress WP Forum Server プラグインにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2012-6622 2014-01-21 17:01 2012-04-18 Show GitHub Exploit DB Packet Storm
216582 7.5 危険 VastHTML - WordPress 用 ForumPress WP Forum Server プラグインにおける SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2012-6625 2014-01-21 16:09 2012-04-18 Show GitHub Exploit DB Packet Storm
216583 4.3 警告 Mightymess - WordPress 用 SoundCloud Is Gold プラグインにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2012-6624 2014-01-21 16:08 2012-05-15 Show GitHub Exploit DB Packet Storm
216584 7.5 危険 Brian Cabunac - b2ePMS の verify-user.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2012-6626 2014-01-21 14:52 2012-05-11 Show GitHub Exploit DB Packet Storm
216585 4.3 警告 Vessio - Vessio NetBill におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2012-6632 2014-01-21 14:26 2012-05-11 Show GitHub Exploit DB Packet Storm
216586 6.8 警告 Vessio - Vessio NetBill の accounts/admin/index.php におけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反 		CVE-2012-6631 2014-01-21 14:24 2012-05-11 Show GitHub Exploit DB Packet Storm
216587 7.5 危険 Google - Google Chrome の content/browser/web_contents/web_contents_view_aura.cc におけるサービス運用妨害 (DoS) の脆弱性 CWE-399
リソース管理の問題 		CVE-2013-6645 2014-01-20 18:05 2014-01-14 Show GitHub Exploit DB Packet Storm
216588 7.5 危険 Google - Google Chrome の Web Worker の実装におけるサービス運用妨害 (DoS) の脆弱性 CWE-399
リソース管理の問題 		CVE-2013-6646 2014-01-20 17:48 2014-01-14 Show GitHub Exploit DB Packet Storm
216589 7.5 危険 Google - Google Chrome におけるサービス運用妨害 (DoS) の脆弱性 CWE-noinfo
情報不足 		CVE-2013-6644 2014-01-20 17:47 2014-01-14 Show GitHub Exploit DB Packet Storm
216590 7.5 危険 Google - Google Chrome の browser/ui/views/sync/one_click_signin_bubble_view.cc における任意の Google アカウントとの同期を誘発される脆弱性 CWE-287
不適切な認証 		CVE-2013-6643 2014-01-20 17:47 2014-01-14 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:April 26, 2026, 4:08 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
289721 - university_of_glasgow specimen_image_database PHP remote file inclusion vulnerability in client.php in University of Glasgow Specimen Image Database (SID), when register_globals is enabled, allows remote attackers to execute arbitrary PHP code v… NVD-CWE-Other
CVE-2006-5419 2017-10-19 10:29 2006-10-20 Show GitHub Exploit DB Packet Storm
289722 - wsn_forum wsn_forum WSN Forum 1.3.4 and earlier allows remote attackers to execute arbitrary PHP code via a modified pathname in the pathtoconfig parameter that points to an avatar image that contains PHP code, which is… NVD-CWE-Other
CVE-2006-5421 2017-10-19 10:29 2006-10-20 Show GitHub Exploit DB Packet Storm
289723 - local_calendar_system local_calendar_system PHP remote file inclusion vulnerability in lib/lcUser.php in LoCal Calendar System 1.1 remote attackers to execute arbitrary PHP code via a URL in the LIBDIR parameter. NVD-CWE-Other
CVE-2006-5426 2017-10-19 10:29 2006-10-21 Show GitHub Exploit DB Packet Storm
289724 - php_amx php_amx PHP remote file inclusion vulnerability in plugins/main.php in Php AMX 0.9.0, when register_globals is enabled or magic_quotes_gpc is disabled, allows remote attackers to execute arbitrary PHP code v… NVD-CWE-Other
CVE-2006-5427 2017-10-19 10:29 2006-10-21 Show GitHub Exploit DB Packet Storm
289725 - barry_nauta brim Multiple PHP remote file inclusion vulnerabilities in Barry Nauta BRIM 1.2.1 and earlier allow remote attackers to execute arbitrary PHP code via a URL in the renderer parameter in template.tpl.php i… NVD-CWE-Other
CVE-2006-5429 2017-10-19 10:29 2006-10-21 Show GitHub Exploit DB Packet Storm
289726 - marc_giombetti phppowercards Multiple direct static code injection vulnerabilities in db/txt.inc.php in phpPowerCards 2.10, when register_globals is enabled, allow remote attackers to create or overwrite arbitrary files via the … NVD-CWE-Other
CVE-2006-5432 2017-10-19 10:29 2006-10-21 Show GitHub Exploit DB Packet Storm
289727 - timm_maass alice_cms PHP remote file inclusion vulnerability in modules/guestbook/index.php in ALiCE-CMS 0.1 allows remote attackers to execute arbitrary PHP code via a URL in the CONFIG[local_root] parameter. NVD-CWE-Other
CVE-2006-5433 2017-10-19 10:29 2006-10-21 Show GitHub Exploit DB Packet Storm
289728 - p-news p-news PHP remote file inclusion vulnerability in p-news.php in P-News 1.16 and 1.17 allows remote attackers to execute arbitrary PHP code via a URL in the pn_lang parameter. NVD-CWE-Other
CVE-2006-5434 2017-10-19 10:29 2006-10-21 Show GitHub Exploit DB Packet Storm
289729 - hinton_design phpht_topsites PHP remote file inclusion vulnerability in common.php in Hinton Design phpht Topsites allows remote attackers to execute arbitrary PHP code via a URL in the phpht_real_path parameter. NVD-CWE-Other
CVE-2006-5458 2017-10-19 10:29 2006-10-24 Show GitHub Exploit DB Packet Storm
289730 - softerra php_developer_library PHP remote file inclusion vulnerability in example/lib/grid3.lib.php in Softerra PHP Developer Library 1.5.3 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the (1) cfg… NVD-CWE-Other
CVE-2006-5471 2017-10-19 10:29 2006-10-25 Show GitHub Exploit DB Packet Storm