Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Feb. 9, 2026, 12:59 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
216991 4 警告 andrew godwin - Andrew Godwin ByteHoard の index.php における絶対パストラバーサルの脆弱性 - CVE-2006-2633 2013-12-26 15:44 2006-05-30 Show GitHub Exploit DB Packet Storm
216992 5.1 警告 artmedic webdesign - artmedic newsletter における任意のファイルを変更される脆弱性 - CVE-2006-2609 2013-12-26 15:44 2006-05-26 Show GitHub Exploit DB Packet Storm
216993 5.1 警告 artmedic webdesign - artmedic newsletter における任意のファイルを変更される脆弱性 - CVE-2006-2608 2013-12-26 15:44 2006-05-26 Show GitHub Exploit DB Packet Storm
216994 5.1 警告 eSyndiCat - eSyndicat Directory の admin/cron.php における任意のファイルをインクルードされる脆弱性 - CVE-2006-2578 2013-12-26 15:44 2006-05-24 Show GitHub Exploit DB Packet Storm
216995 5 警告 AlstraSoft - Alstrasoft Article Manager Pro における重要な情報を取得される脆弱性 - CVE-2006-2566 2013-12-26 15:44 2006-05-24 Show GitHub Exploit DB Packet Storm
216996 5 警告 Snitz - Snitz Forums 用 Avatar MOD の avatar_upload.asp におけるファイルタイプのチェックを回避される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2006-2530 2013-12-26 15:44 2006-05-22 Show GitHub Exploit DB Packet Storm
216997 7.5 危険 smartisoft - phpBazar の Admin/admin.php における認証を回避される脆弱性 - CVE-2006-2527 2013-12-26 15:44 2006-05-22 Show GitHub Exploit DB Packet Storm
216998 5 警告 Bitrix - Bitrix Site Manager におけるユーザを他の Web サイトへリダイレクトされる脆弱性 - CVE-2006-2478 2013-12-26 15:44 2006-05-19 Show GitHub Exploit DB Packet Storm
216999 5 警告 Bitrix - Bitrix Site Manager における重要な情報を取得される脆弱性 - CVE-2006-2476 2013-12-26 15:44 2006-05-19 Show GitHub Exploit DB Packet Storm
217000 6.4 警告 duware - DUware DUbanner の add.asp における任意のコードを実行される脆弱性 - CVE-2006-2428 2013-12-26 15:44 2006-05-17 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:April 16, 2026, 4 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
280001 - dynamic_dataworx nurealestate SQL injection vulnerability in propertysdetails.asp in Dynamic Dataworx NuRealestate (NuRems) 1.0 and earlier allows remote attackers to execute arbitrary SQL commands via the PropID parameter. NVD-CWE-Other
CVE-2006-5886 2018-10-18 06:45 2006-11-15 Show GitHub Exploit DB Packet Storm
280002 - dynamic_dataworx nuschool SQL injection vulnerability in CampusNewsDetails.asp in Dynamic Dataworx NuSchool 1.0 allows remote attackers to execute arbitrary SQL commands via the NewsID parameter. NVD-CWE-Other
CVE-2006-5887 2018-10-18 06:45 2006-11-15 Show GitHub Exploit DB Packet Storm
280003 - superfreaker_studios upublisher SQL injection vulnerability in viewarticle.asp in Superfreaker Studios UPublisher 1.0 allows remote attackers to execute arbitrary SQL commands via the ID parameter. NVD-CWE-Other
CVE-2006-5888 2018-10-18 06:45 2006-11-15 Show GitHub Exploit DB Packet Storm
280004 - superfreaker_studios ustore SQL injection vulnerability in detail.asp in Superfreaker Studios UStore 1.0 allows remote attackers to execute arbitrary SQL commands via the ID parameter. NVD-CWE-Other
CVE-2006-5891 2018-10-18 06:45 2006-11-15 Show GitHub Exploit DB Packet Storm
280005 - the_net_guys aspired2poll SQL injection vulnerability in MoreInfo.asp in The Net Guys ASPired2Poll 1.0 and earlier allows remote attackers to execute arbitrary SQL commands via the id parameter. NVD-CWE-Other
CVE-2006-5892 2018-10-18 06:45 2006-11-15 Show GitHub Exploit DB Packet Storm
280006 - encapscms encapscms PHP remote file inclusion vulnerability in core/core.php in EncapsCMS 0.3.6 allows remote attackers to execute arbitrary PHP code via a URL in the root parameter. NVD-CWE-Other
CVE-2006-5895 2018-10-18 06:45 2006-11-15 Show GitHub Exploit DB Packet Storm
280007 - remlab web_mech_designer REMLAB Web Mech Designer 2.0.5 allows remote attackers to obtain the full path of the script via an incorrect Tonnage parameter to calculate.php that triggers a divide-by-zero error, which leaks the … NVD-CWE-Other
CVE-2006-5896 2018-10-18 06:45 2006-11-28 Show GitHub Exploit DB Packet Storm
280008 - phpheaven phpmychat_plus Multiple directory traversal vulnerabilities in PhpMyChat Plus 1.9 and earlier allow remote attackers to read arbitrary files via a .. (dot dot) in the ChatPath parameter to (1) avatar.php, (2) color… CWE-22
Path Traversal 		CVE-2006-5897 2018-10-18 06:45 2006-11-16 Show GitHub Exploit DB Packet Storm
280009 - phpheaven phpmychat Directory traversal vulnerability in localization/languages.lib.php3 in PhpMyChat 0.14.5 and earlier allows remote attackers to read arbitrary files via a .. (dot dot) in the ChatPath parameter. NVD-CWE-Other
CVE-2006-5898 2018-10-18 06:45 2006-11-16 Show GitHub Exploit DB Packet Storm
280010 - zend zend_framework_preview Cross-site scripting (XSS) vulnerability in the incubator/tests/Zend/Http/_files/testRedirections.php sample code in Zend Framework Preview 0.2.0 allows remote attackers to inject arbitrary web scrip… NVD-CWE-Other
CVE-2006-5900 2018-10-18 06:45 2006-11-16 Show GitHub Exploit DB Packet Storm