Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 20, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
232451	5.1	警告	gonafish	-	Gonafish LinksCaffe の links.php における SQL インジェクションの脆弱性	-	CVE-2006-3932	2012-12-20 18:02	2006-07-31	Show	GitHub Exploit DB Packet Storm

232452	4.6	警告	tuomas airaksinen	-	Tuomas Airaksinen Midirecord の midirecord.cc におけるバッファオーバーフローの脆弱性	-	CVE-2006-3931	2012-12-20 18:02	2006-07-31	Show	GitHub Exploit DB Packet Storm

232453	7.5	危険	mamboxchange	-	a6mambohelpdesk Mambo コンポーネントの admin.a6mambohelpdesk.php における PHP リモートファイルインクルージョンの脆弱性	-	CVE-2006-3930	2012-12-20 18:02	2006-07-31	Show	GitHub Exploit DB Packet Storm

232454	4.3	警告	ZyXEL	-	Zyxel Prestige 660H-61 ADSL ルータの Forms/rpSysAdmin スクリプトにおけるクロスサイトスクリプティングの脆弱性	-	CVE-2006-3929	2012-12-20 18:02	2006-07-31	Show	GitHub Exploit DB Packet Storm

232455	7.5	危険	mikael software	-	WMNews の index.php における PHP リモートファイルインクルージョンの脆弱性	-	CVE-2006-3928	2012-12-20 18:02	2006-07-31	Show	GitHub Exploit DB Packet Storm

232456	4.3	警告	phpprobid	-	PhpProBid の auctionsearch.php におけるクロスサイトスクリプティングの脆弱性	-	CVE-2006-3927	2012-12-20 18:02	2006-07-31	Show	GitHub Exploit DB Packet Storm

232457	7.5	危険	phpprobid	-	PhpProBid における SQL インジェクションの脆弱性	-	CVE-2006-3926	2012-12-20 18:02	2006-07-31	Show	GitHub Exploit DB Packet Storm

232458	6.4	警告	interactual technologies	-	InterActual Player の iarecord.dll におけるスタックベースのバッファオーバーフローの脆弱性	-	CVE-2006-3925	2012-12-20 18:02	2006-07-28	Show	GitHub Exploit DB Packet Storm

232459	2.6	注意	fire-mouse	-	Fire-Mouse Toplist の add.php におけるクロスサイトスクリプティングの脆弱性	-	CVE-2006-3923	2012-12-20 18:02	2006-07-28	Show	GitHub Exploit DB Packet Storm

232460	7.5	危険	portailphp	-	PortailPHP の mod_membre/inscription.php における PHP リモートファイルインクルージョンの脆弱性	-	CVE-2006-3922	2012-12-20 18:02	2006-07-28	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 20, 2026, 4:14 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
293181	7.8	HIGH Local	soapbox_project	soapbox	Soapbox through 0.3.1: Sandbox bypass - runs a second instance of Soapbox within a sandboxed Soapbox.	CWE-269 Improper Privilege Management	CVE-2012-6302	2024-11-21 10:45	2020-01-25	Show	GitHub Exploit DB Packet Storm

293182	7.5	HIGH Network	freeciv	freeciv	Freeciv before 2.3.3 allows remote attackers to cause a denial of service via a crafted packet.	CWE-400 Uncontrolled Resource Consumption	CVE-2012-6083	2024-11-21 10:45	2020-01-24	Show	GitHub Exploit DB Packet Storm

293183	9.8	CRITICAL Network	ht_editor_project	ht_editor	HT Editor 2.0.20 has a Remote Stack Buffer Overflow Vulnerability	CWE-787 Out-of-bounds Write	CVE-2012-5867	2024-11-21 10:45	2020-01-24	Show	GitHub Exploit DB Packet Storm

293184	9.8	CRITICAL Network	babygekko	babygekko	BabyGekko before 1.2.4 allows PHP file inclusion.	CWE-20 Improper Input Validation	CVE-2012-5699	2024-11-21 10:45	2020-01-24	Show	GitHub Exploit DB Packet Storm

293185	8.8	HIGH Network	babygekko	babygekko	BabyGekko before 1.2.4 has SQL injection.	CWE-89 SQL Injection	CVE-2012-5698	2024-11-21 10:45	2020-01-24	Show	GitHub Exploit DB Packet Storm

293186	9.8	CRITICAL Network	bulbsecurity	smartphone_pentest_framework	Bulb Security Smartphone Pentest Framework (SPF) 0.1.2 through 0.1.4 allows remote attackers to execute arbitrary commands via shell metacharacters in the hostingPath parameter to (1) SEAttack.pl or …	CWE-78 OS Command	CVE-2012-5878	2024-11-21 10:45	2020-01-4	Show	GitHub Exploit DB Packet Storm

293187	8.8	HIGH Adjacent	bulbsecurity	smartphone_pentest_framework	Bulb Security Smartphone Pentest Framework (SPF) before 0.1.3 allows remote attackers to execute arbitrary commands via shell metacharacters in the ipAddressTB parameter to (1) remoteAttack.pl or (2)…	CWE-78 OS Command	CVE-2012-5693	2024-11-21 10:45	2020-01-4	Show	GitHub Exploit DB Packet Storm

293188	7.5	HIGH Network	openbsd	textproc\/isearch	The isearch package (textproc/isearch) before 1.47.01nb1 uses the tempnam() function to create insecure temporary files into a publicly-writable area (/tmp).	CWE-269 CWE-459 Improper Privilege Management Incomplete Cleanup	CVE-2012-5663	2024-11-21 10:45	2019-12-31	Show	GitHub Exploit DB Packet Storm

293189	7.5	HIGH Network	freeciv fedoraproject	freeciv fedora	A denial of service flaw was found in the way the server component of Freeciv before 2.3.4 processed certain packets. A remote attacker could send a specially-crafted packet that, when processed woul…	CWE-400 Uncontrolled Resource Consumption	CVE-2012-5645	2024-11-21 10:45	2019-12-31	Show	GitHub Exploit DB Packet Storm

293190	7.5	HIGH Network	gnome debian	gnome_keyring debian_linux	gnome-keyring does not discard stored secrets when using gnome_keyring_lock_all_sync function	CWE-20 Improper Input Validation	CVE-2012-6111	2024-11-21 10:45	2019-12-21	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed