Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 15, 2026, 6 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
231291 4.3 警告 Zend Technologies Ltd. - ZendGData Preview におけるクロスサイトスクリプティングの脆弱性 - CVE-2006-5717 2012-12-20 18:02 2006-11-3 Show GitHub Exploit DB Packet Storm
231292 7.5 危険 phpeasydata pro - PHPEasyData Pro の index.php における SQL インジェクションの脆弱性 - CVE-2006-5707 2012-12-20 18:02 2006-11-3 Show GitHub Exploit DB Packet Storm
231293 6 警告 WordPress.org - WordPress の plugins/wp-db-backup.php におけるディレクトリトラバーサルの脆弱性 - CVE-2006-5705 2012-12-20 18:02 2006-10-27 Show GitHub Exploit DB Packet Storm
231294 4.3 警告 Tiki Software Community Association - Tikiwiki の featured_link.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2006-5703 2012-12-20 18:02 2006-11-3 Show GitHub Exploit DB Packet Storm
231295 5 警告 Tiki Software Community Association - Tikiwiki における重要な情報 (MySQL ユーザ名およびパスワード) を取得される脆弱性 CWE-200
情報漏えい
CVE-2006-5702 2012-12-20 18:02 2006-11-3 Show GitHub Exploit DB Packet Storm
231296 6.4 警告 uni-vert - Uni-Vert PhpLeague の consult/classement.php における SQL インジェクションの脆弱性 - CVE-2006-5676 2012-12-20 18:02 2006-11-2 Show GitHub Exploit DB Packet Storm
231297 7.5 危険 spider friendly - phpBB モジュール Spider Friendly の admin/modules_data.php における PHP リモートファイルインクルージョンの脆弱性 - CVE-2006-5665 2012-12-20 18:02 2006-11-2 Show GitHub Exploit DB Packet Storm
231298 6.8 警告 virtech - VIRtech Netquery の nquser.php におけるクロスサイトスクリプティングの脆弱性 - CVE-2006-5661 2012-12-20 18:02 2006-11-2 Show GitHub Exploit DB Packet Storm
231299 7.6 危険 studio achtundachtzig - BlooMooWeb ActiveX コントロールにおける任意のファイルをダウンロードされる脆弱性 - CVE-2006-5658 2012-12-20 18:02 2006-11-2 Show GitHub Exploit DB Packet Storm
231300 10 危険 vilistextum - Vilistextum の src/text.c における脆弱性 - CVE-2006-5657 2012-12-20 18:02 2006-11-2 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 16, 2026, 4 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
292101 - gehealthcare precision_mpi GE Healthcare Precision MPi has a password of (1) orion for the serviceapp user, (2) orion for the clinical operator user, and (3) PlatinumOne for the administrator user, which has unspecified impact… CWE-255
Credentials Management
CVE-2012-6660 2024-11-21 10:46 2015-08-4 Show GitHub Exploit DB Packet Storm
292102 - yoast wordpress_seo Cross-site scripting (XSS) vulnerability in js/wp-seo-metabox.js in the WordPress SEO by Yoast plugin before 2.2 for WordPress allows remote attackers to inject arbitrary web script or HTML via the p… CWE-79
Cross-site Scripting
CVE-2012-6692 2024-11-21 10:46 2015-06-18 Show GitHub Exploit DB Packet Storm
292103 - oscmax oscmax Multiple cross-site request forgery (CSRF) vulnerabilities in the admin panel in osCMax before 2.5.1 allow remote attackers to hijack the authentication of administrators for requests that conduct SQ… CWE-352
 Origin Validation Error
CVE-2012-6691 2024-11-21 10:46 2015-05-21 Show GitHub Exploit DB Packet Storm
292104 - fastcgi fcgi FastCGI (aka fcgi and libfcgi) 2.4.0 allows remote attackers to cause a denial of service (segmentation fault and crash) via a large number of connections. CWE-20
 Improper Input Validation 
CVE-2012-6687 2024-11-21 10:46 2015-02-20 Show GitHub Exploit DB Packet Storm
292105 - redcloth
debian
redcloth_library
debian_linux
Cross-site scripting (XSS) vulnerability in the RedCloth library 4.2.9 for Ruby and earlier allows remote attackers to inject arbitrary web script or HTML via a javascript: URI. CWE-79
Cross-site Scripting
CVE-2012-6684 2024-11-21 10:46 2015-01-8 Show GitHub Exploit DB Packet Storm
292106 - debian
canonical
gnu
debian_linux
ubuntu_linux
glibc
iconvdata/ibm930.c in GNU C Library (aka glibc) before 2.16 allows context-dependent attackers to cause a denial of service (out-of-bounds read) via a multibyte character value of "0xffff" to the ico… CWE-20
 Improper Input Validation 
CVE-2012-6656 2024-11-21 10:46 2014-12-6 Show GitHub Exploit DB Packet Storm
292107 - redhat
jqueryui
enterprise_linux_desktop
enterprise_linux_workstation
enterprise_linux_server
enterprise_linux_hpc_node
jquery_ui
Cross-site scripting (XSS) vulnerability in the default content option in jquery.ui.tooltip.js in the Tooltip widget in jQuery UI before 1.10.0 allows remote attackers to inject arbitrary web script … CWE-79
Cross-site Scripting
CVE-2012-6662 2024-11-21 10:46 2014-11-25 Show GitHub Exploit DB Packet Storm
292108 - phpmoneybooks phpmoneybooks Directory traversal vulnerability in index.php in phpMoneyBooks 1.0.4 allows remote attackers to read arbitrary files via a .. (dot dot) in the file parameter, a different vulnerability than CVE-2012… CWE-22
Path Traversal
CVE-2012-6665 2024-11-21 10:46 2014-11-18 Show GitHub Exploit DB Packet Storm
292109 - plone
zope
plone
zope
Zope before 2.13.19, as used in Plone before 4.2.3 and 4.3 before beta 1, does not reseed the pseudo-random number generator (PRNG), which makes it easier for remote attackers to guess the value via … CWE-310
Cryptographic Issues
CVE-2012-6661 2024-11-21 10:46 2014-11-4 Show GitHub Exploit DB Packet Storm
292110 - tp-link tl-wr841n_firmware
tl-wr841n
Multiple cross-site scripting (XSS) vulnerabilities in the TP-LINK TL-WR841N router with firmware 3.13.9 Build 120201 Rel.54965n and earlier allow remote administrators to inject arbitrary web script… CWE-79
Cross-site Scripting
CVE-2012-6316 2024-11-21 10:46 2014-09-30 Show GitHub Exploit DB Packet Storm