Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 25, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
232501	7.5	危険	simplechat	-	iWare Professional CMS 用の SimpleChat モジュールにおける chat_log.php へ任意の PHP コードを挿入される脆弱性	-	CVE-2006-5837	2012-12-20 18:02	2006-11-9	Show	GitHub Exploit DB Packet Storm

232502	6.8	警告	phpComasy	-	phpComasy CMS の index.php におけるクロスサイトスクリプティングの脆弱性	-	CVE-2006-5827	2012-12-20 18:02	2006-11-9	Show	GitHub Exploit DB Packet Storm

232503	5.8	警告	texas imperial software	-	Texas Imperial Software WFTPD Pro Server におけるバッファオーバーフローの脆弱性	-	CVE-2006-5826	2012-12-20 18:02	2006-11-9	Show	GitHub Exploit DB Packet Storm

232504	10	危険	シマンテック	-	Symantec Veritas NetBackup の NetBackup bpcd デーモンにおけるスタックベースのバッファオーバーフローの脆弱性	-	CVE-2006-5822	2012-12-20 18:02	2006-12-13	Show	GitHub Exploit DB Packet Storm

232505	10	危険	verity	-	Verity Ultraseek における Web 攻撃などに対するプロキシとしてサーバを使用される脆弱性	-	CVE-2006-5819	2012-12-20 18:02	2006-11-17	Show	GitHub Exploit DB Packet Storm

232506	6.8	警告	XOOPS	-	XOOPS の modules/wfdownloads/newlist.php におけるクロスサイトスクリプティングの脆弱性	-	CVE-2006-5810	2012-12-20 18:02	2006-11-8	Show	GitHub Exploit DB Packet Storm

232507	7.5	危険	the web drivers	-	The Web Drivers Simple Forum の message_details.php における SQL インジェクションの脆弱性	-	CVE-2006-5802	2012-12-20 18:02	2006-11-8	Show	GitHub Exploit DB Packet Storm

232508	2.6	注意	xenis	-	xenis.creator CMS の default.asp におけるクロスサイトスクリプティングの脆弱性	-	CVE-2006-5800	2012-12-20 18:02	2006-11-8	Show	GitHub Exploit DB Packet Storm

232509	6.8	警告	xenis	-	xenis.creator CMS の default.asp におけるクロスサイトスクリプティングの脆弱性	-	CVE-2006-5799	2012-12-20 18:02	2006-11-8	Show	GitHub Exploit DB Packet Storm

232510	7.5	危険	xenis	-	xenis.creator CMS の default.asp における SQL インジェクションの脆弱性	-	CVE-2006-5798	2012-12-20 18:02	2006-11-8	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 26, 2026, 4:05 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
293681	7.5	HIGH Network	boldgrid	w3_total_cache	W3 Total Cache before 0.9.2.5 exposes sensitive cached database information which allows remote attackers to download this information via their hash keys.	CWE-200 Information Exposure	CVE-2012-6079	2024-11-21 10:45	2019-11-23	Show	GitHub Exploit DB Packet Storm

293682	7.5	HIGH Network	boldgrid	w3_total_cache	W3 Total Cache before 0.9.2.5 generates hash keys insecurely which allows remote attackers to predict the values of the hashes.	CWE-200 Information Exposure	CVE-2012-6078	2024-11-21 10:45	2019-11-23	Show	GitHub Exploit DB Packet Storm

293683	7.5	HIGH Network	boldgrid	w3_total_cache	W3 Total Cache before 0.9.2.5 allows remote attackers to retrieve password hash information due to insecure storage of database cache files.	CWE-200 Information Exposure	CVE-2012-6077	2024-11-21 10:45	2019-11-23	Show	GitHub Exploit DB Packet Storm

293684	5.5	MEDIUM Local	redhat fedoraproject debian	tuned fedora enterprise_linux enterprise_linux_desktop enterprise_linux_server enterprise_linux_workstation debian_linux	tuned 2.10.0 creates its PID file with insecure permissions which allows local users to kill arbitrary processes.	CWE-276 Incorrect Default Permissions	CVE-2012-6136	2024-11-21 10:45	2019-11-21	Show	GitHub Exploit DB Packet Storm

293685	7.5	HIGH Network	phusion redhat	passenger openshift	RubyGems passenger 4.0.0 betas 1 and 2 allows remote attackers to delete arbitrary files during the startup process.	CWE-20 Improper Input Validation	CVE-2012-6135	2024-11-21 10:45	2019-11-20	Show	GitHub Exploit DB Packet Storm

293686	7.5	HIGH Network	nusoap_project debian	nusoap debian_linux	nuSOAP before 0.7.3-5 does not properly check the hostname of a cert.	CWE-295 Improper Certificate Validation	CVE-2012-6071	2024-11-21 10:45	2019-11-20	Show	GitHub Exploit DB Packet Storm

293687	7.5	HIGH Network	falconpl	falconpl	Falconpl before 0.9.6.9-git20120606 misuses the libcurl API which may allow remote attackers to interfere with security checks.	CWE-20 Improper Input Validation	CVE-2012-6070	2024-11-21 10:45	2019-11-20	Show	GitHub Exploit DB Packet Storm

293688	9.8	CRITICAL Network	call-cc	chicken	Chicken before 4.8.0 is susceptible to algorithmic complexity attacks related to hash table collisions.	CWE-20 Improper Input Validation	CVE-2012-6125	2024-11-21 10:45	2019-11-1	Show	GitHub Exploit DB Packet Storm

293689	5.3	MEDIUM Network	call-cc	chicken	A casting error in Chicken before 4.8.0 on 64-bit platform caused the random number generator to return a constant value. NOTE: the vendor states "This function wasn't used for security purposes (and…	CWE-338 Use of Cryptographically Weak Pseudo-Random Number Generator (PRNG)	CVE-2012-6124	2024-11-21 10:45	2019-11-1	Show	GitHub Exploit DB Packet Storm

293690	6.5	MEDIUM Network	call-cc debian	chicken debian_linux	Chicken before 4.8.0 does not properly handle NUL bytes in certain strings, which allows an attacker to conduct "poisoned NUL byte attack."	CWE-20 Improper Input Validation	CVE-2012-6123	2024-11-21 10:45	2019-11-1	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed