Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 1, 2026, 2 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
217721 4.3 警告 e107.org - e107 の Chatbox Plugin におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2006-0857 2014-03-11 17:43 2006-02-23 Show GitHub Exploit DB Packet Storm
217722 6.5 警告 truenorth software - TrueNorth Internet Anywhere eMailserver の IMAP サービスにおけるバッファオーバーフローの脆弱性 - CVE-2006-0853 2014-03-11 17:43 2006-02-23 Show GitHub Exploit DB Packet Storm
217723 4.3 警告 calacode - Calacode @Mail におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2006-0842 2014-03-11 17:43 2006-02-22 Show GitHub Exploit DB Packet Storm
217724 10 危険 京セラ株式会社 - Kyocera プリンタにおける管理メニューにアクセスされる脆弱性 - CVE-2006-0789 2014-03-11 17:43 2006-02-19 Show GitHub Exploit DB Packet Storm
217725 2.6 注意 mybulletinboard - MyBulletinBoard の calendar.php におけるクロスサイトスクリプティングの脆弱性 - CVE-2006-0770 2014-03-11 17:43 2006-02-18 Show GitHub Exploit DB Packet Storm
217726 5 警告 CGIWrap - CGIWrap における重要な情報を取得される脆弱性 - CVE-2006-0767 2014-03-11 17:43 2006-02-18 Show GitHub Exploit DB Packet Storm
217727 5.1 警告 BlackBerry - 複数ベンダの製品用 Motion BlackBerry Enterprise Server におけるバッファオーバーフローの脆弱性 - CVE-2006-0761 2014-03-11 17:43 2006-02-18 Show GitHub Exploit DB Packet Storm
217728 4.3 警告 fuzzymonkey
m blom		 - My Blog などの製品で使用される M. Blom HTML::BBCode におけるクロスサイトスクリプティングの脆弱性 - CVE-2006-0735 2014-03-11 17:43 2006-02-16 Show GitHub Exploit DB Packet Storm
217729 7.5 危険 virtual hosting control system - Virtual Hosting Control System における許可されていないアクセス権を取得される脆弱性 - CVE-2006-0684 2014-03-11 17:43 2006-02-15 Show GitHub Exploit DB Packet Storm
217730 7.8 危険 sony ericsson - 複数の Sony Ericsson 製品におけるバッファオーバーフローの脆弱性 - CVE-2006-0671 2014-03-11 17:43 2006-02-13 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 1, 2026, 4:54 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
295341 - exoscripts exophpdesk ExoPHPDesk 1.2.1 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by upgrades/upgr… CWE-200
Information Exposure 		CVE-2011-3736 2024-11-21 10:31 2011-09-24 Show GitHub Exploit DB Packet Storm
295342 - escortwebsitedesign escort-agency-cms Escort Agency CMS (aka escort-agency-cms) allows remote attackers to obtain sensitive information via crafted array parameters in a request to a .php file, which reveals the installation path in an e… CWE-200
Information Exposure 		CVE-2011-3735 2024-11-21 10:31 2011-09-24 Show GitHub Exploit DB Packet Storm
295343 - energine energine Energine 2.3.8 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by core/framework/… CWE-200
Information Exposure 		CVE-2011-3734 2024-11-21 10:31 2011-09-24 Show GitHub Exploit DB Packet Storm
295344 - elgg elgg Elgg 1.7.6 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by vendors/simpletest/… CWE-200
Information Exposure 		CVE-2011-3733 2024-11-21 10:31 2011-09-24 Show GitHub Exploit DB Packet Storm
295345 - eggblog eggblog eggBlog 4.1.2 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by _lib/fckeditor/e… CWE-200
Information Exposure 		CVE-2011-3732 2024-11-21 10:31 2011-09-24 Show GitHub Exploit DB Packet Storm
295346 - e107 e107 e107 0.7.24 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by e107_plugins/pdf/e… CWE-200
Information Exposure 		CVE-2011-3731 2024-11-21 10:31 2011-09-24 Show GitHub Exploit DB Packet Storm
295347 - drupal drupal Drupal 7.0 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by modules/simpletest/… CWE-200
Information Exposure 		CVE-2011-3730 2024-11-21 10:31 2011-09-24 Show GitHub Exploit DB Packet Storm
295348 - dotproject dotproject dotproject 2.1.4 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by style/dp-grey… CWE-200
Information Exposure 		CVE-2011-3729 2024-11-21 10:31 2011-09-24 Show GitHub Exploit DB Packet Storm
295349 - boonex dolphin Dolphin 7.0.4 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by xmlrpc/BxDolXMLR… CWE-200
Information Exposure 		CVE-2011-3728 2024-11-21 10:31 2011-09-24 Show GitHub Exploit DB Packet Storm
295350 - dokuwiki dokuwiki DokuWiki 2009-12-25c allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by lib/tpl/i… CWE-200
Information Exposure 		CVE-2011-3727 2024-11-21 10:31 2011-09-24 Show GitHub Exploit DB Packet Storm