Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Feb. 9, 2026, 12:59 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
217141 7.5 危険 INNER ESTEEM SDN BHD - Dynamic Biz Website Builder における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2013-7192 2013-12-24 18:57 2013-12-16 Show GitHub Exploit DB Packet Storm
217142 4.3 警告 Tenmiles - Tenmiles Helpdesk Pilot におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2013-7191 2013-12-24 18:52 2013-12-6 Show GitHub Exploit DB Packet Storm
217143 9.3 危険 Steinberg Media Technologies GmbH - Steinberg MyMp3PRO におけるバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2013-7186 2013-12-24 18:48 2013-12-5 Show GitHub Exploit DB Packet Storm
217144 5 警告 Digium - 複数の Asterisk 製品の apps/app_sms.c の unpacksms16 関数におけるバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2013-7100 2013-12-24 18:47 2013-12-16 Show GitHub Exploit DB Packet Storm
217145 4.7 警告 NovaTech - 複数の Orion Substation Automation Platform 製品におけるサービス運用妨害 (DoS) の脆弱性 CWE-20
不適切な入力確認 		CVE-2013-2822 2013-12-24 18:30 2013-12-18 Show GitHub Exploit DB Packet Storm
217146 7.1 危険 NovaTech - 複数の Orion Substation Automation Platform 製品におけるサービス運用妨害 (DoS) の脆弱性 CWE-20
不適切な入力確認 		CVE-2013-2821 2013-12-24 18:30 2013-12-18 Show GitHub Exploit DB Packet Storm
217147 7.2 危険 クイックヒール・テクノロジーズ・ジャパン株式会社 - Quick Heal AntiVirus Pro の pepoly.dll におけるスタックベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2013-6767 2013-12-24 18:27 2013-12-16 Show GitHub Exploit DB Packet Storm
217148 6.8 警告 Idleman - Leed の action.php におけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反 		CVE-2013-2628 2013-12-24 18:06 2013-12-18 Show GitHub Exploit DB Packet Storm
217149 7.5 危険 Idleman - Leed の action.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2013-2627 2013-12-24 18:05 2013-12-18 Show GitHub Exploit DB Packet Storm
217150 4.3 警告 TYPO3 Association - TYPO3 Flow の ActionController ベースクラスの errorAction メソッドにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2013-7082 2013-12-24 17:57 2013-12-10 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:April 16, 2026, 4 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
280001 - dynamic_dataworx nurealestate SQL injection vulnerability in propertysdetails.asp in Dynamic Dataworx NuRealestate (NuRems) 1.0 and earlier allows remote attackers to execute arbitrary SQL commands via the PropID parameter. NVD-CWE-Other
CVE-2006-5886 2018-10-18 06:45 2006-11-15 Show GitHub Exploit DB Packet Storm
280002 - dynamic_dataworx nuschool SQL injection vulnerability in CampusNewsDetails.asp in Dynamic Dataworx NuSchool 1.0 allows remote attackers to execute arbitrary SQL commands via the NewsID parameter. NVD-CWE-Other
CVE-2006-5887 2018-10-18 06:45 2006-11-15 Show GitHub Exploit DB Packet Storm
280003 - superfreaker_studios upublisher SQL injection vulnerability in viewarticle.asp in Superfreaker Studios UPublisher 1.0 allows remote attackers to execute arbitrary SQL commands via the ID parameter. NVD-CWE-Other
CVE-2006-5888 2018-10-18 06:45 2006-11-15 Show GitHub Exploit DB Packet Storm
280004 - superfreaker_studios ustore SQL injection vulnerability in detail.asp in Superfreaker Studios UStore 1.0 allows remote attackers to execute arbitrary SQL commands via the ID parameter. NVD-CWE-Other
CVE-2006-5891 2018-10-18 06:45 2006-11-15 Show GitHub Exploit DB Packet Storm
280005 - the_net_guys aspired2poll SQL injection vulnerability in MoreInfo.asp in The Net Guys ASPired2Poll 1.0 and earlier allows remote attackers to execute arbitrary SQL commands via the id parameter. NVD-CWE-Other
CVE-2006-5892 2018-10-18 06:45 2006-11-15 Show GitHub Exploit DB Packet Storm
280006 - encapscms encapscms PHP remote file inclusion vulnerability in core/core.php in EncapsCMS 0.3.6 allows remote attackers to execute arbitrary PHP code via a URL in the root parameter. NVD-CWE-Other
CVE-2006-5895 2018-10-18 06:45 2006-11-15 Show GitHub Exploit DB Packet Storm
280007 - remlab web_mech_designer REMLAB Web Mech Designer 2.0.5 allows remote attackers to obtain the full path of the script via an incorrect Tonnage parameter to calculate.php that triggers a divide-by-zero error, which leaks the … NVD-CWE-Other
CVE-2006-5896 2018-10-18 06:45 2006-11-28 Show GitHub Exploit DB Packet Storm
280008 - phpheaven phpmychat_plus Multiple directory traversal vulnerabilities in PhpMyChat Plus 1.9 and earlier allow remote attackers to read arbitrary files via a .. (dot dot) in the ChatPath parameter to (1) avatar.php, (2) color… CWE-22
Path Traversal 		CVE-2006-5897 2018-10-18 06:45 2006-11-16 Show GitHub Exploit DB Packet Storm
280009 - phpheaven phpmychat Directory traversal vulnerability in localization/languages.lib.php3 in PhpMyChat 0.14.5 and earlier allows remote attackers to read arbitrary files via a .. (dot dot) in the ChatPath parameter. NVD-CWE-Other
CVE-2006-5898 2018-10-18 06:45 2006-11-16 Show GitHub Exploit DB Packet Storm
280010 - zend zend_framework_preview Cross-site scripting (XSS) vulnerability in the incubator/tests/Zend/Http/_files/testRedirections.php sample code in Zend Framework Preview 0.2.0 allows remote attackers to inject arbitrary web scrip… NVD-CWE-Other
CVE-2006-5900 2018-10-18 06:45 2006-11-16 Show GitHub Exploit DB Packet Storm