Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Feb. 9, 2026, 12:59 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
227021 4.3 警告 professional home page tools login script - Professional Home Page Tools Login Script におけるクロスサイトスクリプティングの脆弱性 - CVE-2006-7078 2012-12-20 18:18 2007-03-2 Show GitHub Exploit DB Packet Storm
227022 6.8 警告 phpBB - phpBB 用の Advanced Guestbook における SQL インジェクションの脆弱性 - CVE-2006-7077 2012-12-20 18:18 2007-03-2 Show GitHub Exploit DB Packet Storm
227023 4.3 警告 phpBB - phpBB 用の Advanced Guestbook におけるクロスサイトスクリプティングの脆弱性 - CVE-2006-7076 2012-12-20 18:18 2007-03-2 Show GitHub Exploit DB Packet Storm
227024 7.5 危険 smartsitecms - SmartSiteCMS の admin.php における認証を回避される脆弱性 - CVE-2006-7074 2012-12-20 18:18 2007-03-2 Show GitHub Exploit DB Packet Storm
227025 7.5 危険 socketwiz - Socketwiz Bookmarks の smarty_config.php における PHP リモートファイルインクルージョンの脆弱性 - CVE-2006-7069 2012-12-20 18:18 2007-03-2 Show GitHub Exploit DB Packet Storm
227026 7.5 危険 tinyphpforum - TinyPHPforum の profile.php におけるディレクトリトラバーサルの脆弱性 - CVE-2006-7063 2012-12-20 18:18 2007-02-23 Show GitHub Exploit DB Packet Storm
227027 9.3 危険 scriptsez.net - Scriptsez.net E-Dating System におけるプライベートメッセージを読まれる脆弱性 - CVE-2006-7061 2012-12-20 18:18 2007-02-23 Show GitHub Exploit DB Packet Storm
227028 5.8 警告 サン・マイクロシステムズ - Sun Solaris の .iked などに使用されている libike ライブラリにおける PKCS #1 v1.5 署名を偽造される脆弱性 CWE-DesignError
CVE-2006-7140 2012-12-20 18:18 2006-11-27 Show GitHub Exploit DB Packet Storm
227029 5 警告 scriptsez.net - Scriptsez.net E-Dating System の cindex.php におけるフルパスを取得される脆弱性 - CVE-2006-7060 2012-12-20 18:18 2007-02-23 Show GitHub Exploit DB Packet Storm
227030 4.3 警告 scriptsez.net - Scriptsez.net E-Dating System におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2006-7059 2012-12-20 18:18 2007-02-23 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:April 25, 2026, 4:08 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
307031 - wordpress wordpress Multiple cross-site scripting (XSS) vulnerabilities in template-functions-post.php in WordPress 1.5 and earlier allow remote attackers to execute arbitrary commands via the (1) content or (2) title o… NVD-CWE-Other
CVE-2005-1102 2016-10-18 12:17 2005-05-2 Show GitHub Exploit DB Packet Storm
307032 - sygate_technologies security_agent Sygate Security Agent (SSA) in Sygate Secure Enterprise 3.5 through 4.1 does not prevent the security policy from being updated by unprivileged users, which allows local users to modify the policy by… NVD-CWE-Other
CVE-2005-1103 2016-10-18 12:17 2005-04-12 Show GitHub Exploit DB Packet Storm
307033 - centra centra Multiple cross-site scripting (XSS) vulnerabilities in Centra 7 allow remote attackers to inject arbitrary web script or HTML via the (1) username, (2) first name, or (3) last name fields. NVD-CWE-Other
CVE-2005-1104 2016-10-18 12:17 2005-05-2 Show GitHub Exploit DB Packet Storm
307034 - sun javamail Directory traversal vulnerability in the MimeBodyPart.getFileName method in JavaMail 1.3.2 allows remote attackers to write arbitrary files via a .. (dot dot) in the filename in the Content-Dispositi… NVD-CWE-Other
CVE-2005-1105 2016-10-18 12:17 2005-05-2 Show GitHub Exploit DB Packet Storm
307035 - apple quicktime_pictureviewer PictureViewer in QuickTime for Windows 6.5.2 allows remote attackers to cause a denial of service (application crash) via a GIF image with the maximum depth start value, possibly triggering an intege… NVD-CWE-Other
CVE-2005-1106 2016-10-18 12:17 2005-05-2 Show GitHub Exploit DB Packet Storm
307036 - phpbb_group
smartor 		phpbb
photo_album 		Multiple cross-site scripting (XSS) vulnerabilities in Photo Album 2.0.53 module for phpBB allow remote attackers to inject arbitrary web script or HTML via the bsid parameter to (1) album_cat.php or… NVD-CWE-Other
CVE-2005-1115 2016-10-18 12:17 2005-05-2 Show GitHub Exploit DB Packet Storm
307037 - phpbb_group phpbb Cross-site scripting (XSS) vulnerability in the Calendar module for phpBB allow remote attackers to inject arbitrary web script or HTML via the start parameter to calendar_scheduler.php. NVD-CWE-Other
CVE-2005-1116 2016-10-18 12:17 2005-05-2 Show GitHub Exploit DB Packet Storm
307038 - all4www all4www-homepagecreator PHP remote file inclusion vulnerability in index.php in All4WWW-Homepagecreator 1.0a allows remote attackers to execute arbitrary PHP code by modifying the site parameter to reference a URL on a remo… NVD-CWE-Other
CVE-2005-1117 2016-10-18 12:17 2005-05-2 Show GitHub Exploit DB Packet Storm
307039 - ibm iseries_as_400 The POP3 server in IBM iSeries AS/400 returns different error messages when the user exists or not, which allows remote attackers to determine valid user IDs on the server. NVD-CWE-Other
CVE-2005-1133 2016-10-18 12:17 2005-05-2 Show GitHub Exploit DB Packet Storm
307040 - alexander_palmo simple_php_blog Cross-site scripting (XSS) vulnerability in search.php for Simple PHP Blog (sphpBlog) 0.4.0 allows remote attackers to inject arbitrary web script or HTML via the q parameter. NVD-CWE-Other
CVE-2005-1135 2016-10-18 12:17 2005-05-2 Show GitHub Exploit DB Packet Storm