Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 21, 2026, 6:01 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
232291 7.5 危険 sh-news - SH-News における PHP リモートファイルインクルージョンの脆弱性 - CVE-2006-5282 2012-12-20 18:02 2006-10-13 Show GitHub Exploit DB Packet Storm
232292 7.5 危険 phpmyagenda - phpMyAgenda の templates/header.php3 におけるディレクトリトラバーサルの脆弱性 - CVE-2006-5263 2012-12-20 18:02 2006-10-12 Show GitHub Exploit DB Packet Storm
232293 7.5 危険 phpmynews - PHPMyNews における PHP リモートファイルインクルージョンの脆弱性 - CVE-2006-5261 2012-12-20 18:02 2006-10-12 Show GitHub Exploit DB Packet Storm
232294 5.1 警告 webmedia explorer - Webmedia Explorer の includes/core.lib.php における PHP リモートファイルインクルージョンの脆弱性 - CVE-2006-5252 2012-12-20 18:02 2006-10-12 Show GitHub Exploit DB Packet Storm
232295 7.5 危険 tagit - tagit2b の tagmin/delTagUser.php における PHP リモートファイルインクルージョンの脆弱性 - CVE-2006-5249 2012-12-20 18:02 2006-10-11 Show GitHub Exploit DB Packet Storm
232296 7.8 危険 Polycom - Polycom SoundPoint IP 301 VoIP Desktop Phone におけるサービス運用妨害 (DoS) の脆弱性 - CVE-2006-5233 2012-12-20 18:02 2006-10-10 Show GitHub Exploit DB Packet Storm
232297 7.5 危険 rob hensley - Rob Hensley ackerTodo の Google Gadget login.php における SQL インジェクションの脆弱性 - CVE-2006-5228 2012-12-20 18:02 2006-10-10 Show GitHub Exploit DB Packet Storm
232298 6.8 警告 TorrentFlux - TorrentFlux の admin.php におけるクロスサイトスクリプティングの脆弱性 - CVE-2006-5227 2012-12-20 18:02 2006-10-10 Show GitHub Exploit DB Packet Storm
232299 7.5 危険 sergey lyubka - Sergey Lyubka Simple HTTPD におけるスタックベースのバッファオーバーフローの脆弱性 - CVE-2006-5216 2012-12-20 18:02 2006-10-10 Show GitHub Exploit DB Packet Storm
232300 5 警告 トレンドマイクロ - SMB および OSCE 用の CSM Suite におけるファイルを削除される脆弱性 - CVE-2006-5212 2012-12-20 18:02 2006-04-21 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 22, 2026, 4:08 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
293751 - moinmo moinmoin Multiple unrestricted file upload vulnerabilities in the (1) twikidraw (action/twikidraw.py) and (2) anywikidraw (action/anywikidraw.py) actions in MoinMoin before 1.9.6 allow remote authenticated us… NVD-CWE-Other
CVE-2012-6081 2024-11-21 10:45 2013-01-3 Show GitHub Exploit DB Packet Storm
293752 - moinmo moinmoin Directory traversal vulnerability in the _do_attachment_move function in the AttachFile action (action/AttachFile.py) in MoinMoin 1.9.3 through 1.9.5 allows remote attackers to overwrite arbitrary fi… CWE-22
Path Traversal
CVE-2012-6080 2024-11-21 10:45 2013-01-3 Show GitHub Exploit DB Packet Storm
293753 - owncloud owncloud Cross-site scripting (XSS) vulnerability in bookmarks/js/bookmarks.js in ownCloud 4.0.x before 4.0.10 and 4.5.x before 4.5.5 allows remote attackers to inject arbitrary web script or HTML via the PAT… CWE-79
Cross-site Scripting
CVE-2012-5666 2024-11-21 10:45 2013-01-3 Show GitHub Exploit DB Packet Storm
293754 - owncloud owncloud ownCloud 4.0.x before 4.0.10 and 4.5.x before 4.5.5 does not properly restrict access to settings.php, which allows remote attackers to edit app configurations of user_webdavauth and user_ldap by edi… CWE-264
Permissions, Privileges, and Access Controls
CVE-2012-5665 2024-11-21 10:45 2013-01-3 Show GitHub Exploit DB Packet Storm
293755 - steven_jones context The Context module 6.x-3.x before 6.x-3.1 and 7.x-3.x before 7.x-3.0-beta6 for Drupal does not properly restrict access to block content, which allows remote attackers to obtain sensitive information… CWE-264
Permissions, Privileges, and Access Controls
CVE-2012-5655 2024-11-21 10:45 2013-01-3 Show GitHub Exploit DB Packet Storm
293756 - nodewords_project nodewords The Nodewords: D6 Meta Tags module before 6.x-1.14 for Drupal, when configured to automatically generate description meta tags from node text, does not properly filter node content when creating tags… CWE-200
Information Exposure
CVE-2012-5654 2024-11-21 10:45 2013-01-3 Show GitHub Exploit DB Packet Storm
293757 - drupal
debian
drupal
debian_linux
The file upload feature in Drupal 6.x before 6.27 and 7.x before 7.18 allows remote authenticated users to bypass the protection mechanism and execute arbitrary PHP code via a null byte in a file nam… CWE-20
 Improper Input Validation 
CVE-2012-5653 2024-11-21 10:45 2013-01-3 Show GitHub Exploit DB Packet Storm
293758 - drupal drupal Drupal 6.x before 6.27 allows remote attackers to obtain sensitive information about uploaded files via a (1) RSS feed or (2) search result. CWE-200
Information Exposure
CVE-2012-5652 2024-11-21 10:45 2013-01-3 Show GitHub Exploit DB Packet Storm
293759 - drupal drupal Drupal 6.x before 6.27 and 7.x before 7.18 displays information for blocked users, which might allow remote attackers to obtain sensitive information by reading the search results. CWE-264
Permissions, Privileges, and Access Controls
CVE-2012-5651 2024-11-21 10:45 2013-01-3 Show GitHub Exploit DB Packet Storm
293760 - ircd-ratbox
ratbox
ircd-ratbox modules/m_capab.c in (1) ircd-ratbox before 3.0.8 and (2) Charybdis before 3.4.2 does not properly support capability negotiation during server handshakes, which allows remote attackers to cause a de… NVD-CWE-Other
CVE-2012-6084 2024-11-21 10:45 2013-01-2 Show GitHub Exploit DB Packet Storm