Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Feb. 9, 2026, 12:59 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
227101 7.5 危険 PHP Outburst - UPB の chat/login.php における任意の PHP コードを挿入される脆弱性 - CVE-2006-6790 2012-12-20 18:02 2006-12-27 Show GitHub Exploit DB Packet Storm
227102 7.5 危険 phpbbxtra - Phpbbxtra の includes/archive/archive_topic.php における PHP リモートファイルインクルージョンの脆弱性 - CVE-2006-6789 2012-12-20 18:02 2006-12-27 Show GitHub Exploit DB Packet Storm
227103 6.8 警告 timberwolf - TimberWolf の shownews.php におけるクロスサイトスクリプティングの脆弱性 - CVE-2006-6778 2012-12-20 18:02 2006-12-27 Show GitHub Exploit DB Packet Storm
227104 9.3 危険 w3m project - w3m の file.c におけるフォーマットストリングの脆弱性 CWE-134
書式文字列の問題 		CVE-2006-6772 2012-12-20 18:02 2006-12-27 Show GitHub Exploit DB Packet Storm
227105 6.8 警告 pwp technologies - PWP Technologies The Classified Ad System の default.asp におけるクロスサイトスクリプティングの脆弱性 - CVE-2006-6768 2012-12-20 18:02 2006-12-27 Show GitHub Exploit DB Packet Storm
227106 7.5 危険 phpmymanga - Phpmymanga の template.php における PHP リモートファイルインクルージョンの脆弱性 CWE-94
コード・インジェクション 		CVE-2006-6760 2012-12-20 18:02 2006-12-26 Show GitHub Exploit DB Packet Storm
227107 2.1 注意 phpprofiles - phpProfiles におけるディレクトリコンテンツをリスト化される脆弱性 - CVE-2006-6744 2012-12-20 18:02 2006-12-26 Show GitHub Exploit DB Packet Storm
227108 4.6 警告 phpprofiles - phpProfiles におけるファイルを削除される脆弱性 - CVE-2006-6743 2012-12-20 18:02 2006-12-26 Show GitHub Exploit DB Packet Storm
227109 7.5 危険 phpprofiles - phpProfiles における PHP リモートファイルインクルージョンの脆弱性 CWE-94
コード・インジェクション 		CVE-2006-6740 2012-12-20 18:02 2006-12-26 Show GitHub Exploit DB Packet Storm
227110 5 警告 phpbuilder - PHPBuilder におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2006-6725 2012-12-20 18:02 2006-12-26 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:April 24, 2026, 4 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
307181 - visionsoft audit The Visionsoft Audit on Demand Service (VSAOD) in Visionsoft Audit 12.4.0.0 does not require authentication for (1) the "LOG." command, which allows remote attackers to create or overwrite arbitrary … NVD-CWE-Other
CVE-2007-4149 2012-11-6 12:44 2007-08-4 Show GitHub Exploit DB Packet Storm
307182 - nonnoi_solutions asp_barcode The Nonnoi ASP/Barcode ActiveX control (nonnoi_ASPBarcode.dll) allows remote attackers to overwrite arbitrary files via an argument to the SaveBarcode function. NVD-CWE-Other
CVE-2007-3660 2012-11-6 12:42 2007-07-11 Show GitHub Exploit DB Packet Storm
307183 - jelsoft vbulletin Cross-site scripting (XSS) vulnerability in calendar.php in Jelsoft vBulletin 3.6.x before 3.6.7 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, related to the… NVD-CWE-Other
CVE-2007-2909 2012-11-6 12:40 2007-05-30 Show GitHub Exploit DB Packet Storm
307184 - jelsoft vbulletin Cross-site scripting (XSS) vulnerability in Jelsoft vBulletin before 3.6.7 PL1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, related to the vb_367_xss_fix_pl… CWE-79
Cross-site Scripting 		CVE-2007-2910 2012-11-6 12:40 2007-05-30 Show GitHub Exploit DB Packet Storm
307185 - microsoft windows_2003_server Microsoft Windows Server 2003, when time restrictions are in effect for user accounts, generates different error messages for failed login attempts with a valid user name than for those with an inval… NVD-CWE-Other
CVE-2007-2999 2012-11-6 12:40 2007-06-5 Show GitHub Exploit DB Packet Storm
307186 - nagiosql nagiosql PHP remote file inclusion vulnerability in functions/prepend_adm.php in NagiosQL 2.00-P00 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the SETS[path][IT] parameter. … NVD-CWE-Other
CVE-2007-2710 2012-11-6 12:39 2007-05-16 Show GitHub Exploit DB Packet Storm
307187 - subversion subversion Subversion 1.4.3 and earlier does not properly implement the "partial access" privilege for users who have access to changed paths but not copied paths, which allows remote authenticated users to obt… NVD-CWE-Other
CVE-2007-2448 2012-11-6 12:38 2007-06-15 Show GitHub Exploit DB Packet Storm
307188 - trend_micro serverprotect Buffer overflow in AgRpcCln.dll for Trend Micro ServerProtect 5.58 for Windows before Security Patch 3 Build 1176 allows remote attackers to execute arbitrary code via unknown vectors related to RPC … NVD-CWE-Other
CVE-2007-2528 2012-11-6 12:38 2007-05-9 Show GitHub Exploit DB Packet Storm
307189 - wikkawiki wikkawiki SQL injection vulnerability in libs/Wakka.class.php in WikkaWiki (Wikka Wiki) before 1.1.6.3 allows remote attackers to execute arbitrary SQL commands via the limit parameter. NOTE: this issue only … NVD-CWE-Other
CVE-2007-2612 2012-11-6 12:38 2007-05-11 Show GitHub Exploit DB Packet Storm
307190 - kkeim kmita_gallery Multiple cross-site scripting (XSS) vulnerabilities in Kmita Gallery allow remote attackers to inject arbitrary web script or HTML via the (1) begin parameter to index.php and the (2) searchtext para… CWE-79
Cross-site Scripting 		CVE-2008-5068 2012-10-31 12:06 2008-11-14 Show GitHub Exploit DB Packet Storm