Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":July 1, 2026, 12:08 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
233911 7.5 危険 sebrac - SebracCMS における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-5195 2012-12-20 18:52 2008-11-21 Show GitHub Exploit DB Packet Storm
233912 7.5 危険 softvisions software - SoftVisions Software obm の checkavail.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-5194 2012-12-20 18:52 2008-11-21 Show GitHub Exploit DB Packet Storm
233913 7.5 危険 seportal - SePortal における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-5191 2012-12-20 18:52 2008-11-21 Show GitHub Exploit DB Packet Storm
233914 5 警告 Ruby on Rails project - Ruby on Rails における CRLF インジェクションの脆弱性 CWE-352
同一生成元ポリシー違反 		CVE-2008-5189 2012-12-20 18:52 2008-10-19 Show GitHub Exploit DB Packet Storm
233915 9.3 危険 visicommedia - AceFTP Freeware および AceFTP Pro の FTP クライアントにおけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2008-5175 2012-12-20 18:52 2008-11-19 Show GitHub Exploit DB Packet Storm
233916 9 危険 testmaker - testMaker における任意の PHP コードを実行される脆弱性 CWE-94
コード・インジェクション 		CVE-2008-5173 2012-12-20 18:52 2008-11-19 Show GitHub Exploit DB Packet Storm
233917 9.3 危険 phpblaster - phpBLASTER CMS の admin/minibb/index.php におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2008-5171 2012-12-20 18:52 2008-11-19 Show GitHub Exploit DB Packet Storm
233918 4.3 警告 theratstudios - The Rat CMS におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2008-5164 2012-12-20 18:52 2008-11-19 Show GitHub Exploit DB Packet Storm
233919 7.5 危険 theratstudios - The Rat CMS における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-5163 2012-12-20 18:52 2008-11-19 Show GitHub Exploit DB Packet Storm
233920 6.9 警告 uoregon - tau における任意のファイルを上書きされる脆弱性 CWE-59
リンク解釈の問題 		CVE-2008-5157 2012-12-20 18:52 2008-11-18 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:July 1, 2026, 4:27 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
345391 - neon_software neon_responder Neon Responder 5.4 for LANsurveyor allows remote attackers to cause a denial of service (application outage) via a crafted Clock Synchronisation packet that triggers an access violation. NVD-CWE-Other
CVE-2006-1941 2018-10-19 01:37 2006-04-21 Show GitHub Exploit DB Packet Storm
345392 - k-meleon_project
mozilla
netscape 		k-meleon
firefox
navigator 		Mozilla Firefox 1.5.0.2 and possibly other versions before 1.5.0.4, Netscape 8.1, 8.0.4, and 7.2, and K-Meleon 0.9.13 allows user-assisted remote attackers to open local files via a web page with an … NVD-CWE-Other
CVE-2006-1942 2018-10-19 01:37 2006-04-21 Show GitHub Exploit DB Packet Storm
345393 - solarwinds tftp_server Directory traversal vulnerability in SolarWinds TFTP Server 8.1 and earlier allows remote attackers to download arbitrary files via a crafted GET request including "....//" sequences, which are colla… NVD-CWE-Other
CVE-2006-1951 2018-10-19 01:37 2006-04-25 Show GitHub Exploit DB Packet Storm
345394 - caucho_technology resin Directory traversal vulnerability in Caucho Resin 3.0.17 and 3.0.18 for Windows allows remote attackers to read arbitrary files via a "C:%5C" (encoded drive letter) in a URL. NVD-CWE-Other
CVE-2006-1953 2018-10-19 01:37 2006-05-17 Show GitHub Exploit DB Packet Storm
345395 - caucho_technology resin This vulnerability is addressed in the following product release: Caucho Technology, Resin, 3.0.19 The following product releases are not vulnerable: Caucho Technology, Resin, 3.0.16 Caucho T… NVD-CWE-Other
CVE-2006-1953 2018-10-19 01:37 2006-05-17 Show GitHub Exploit DB Packet Storm
345396 - wired_community_software wwwthreads Multiple SQL injection vulnerabilities in WWWThreads RC 3 allow remote attackers to execute arbitrary SQL commands via (1) the forumreferrer cookie to register.php and (2) the messages parameter in m… NVD-CWE-Other
CVE-2006-1958 2018-10-19 01:37 2006-04-21 Show GitHub Exploit DB Packet Storm
345397 - actualscripts actualanalyzer PHP remote file inclusion vulnerability in direct.php in ActualScripts ActualAnalyzer Lite 2.72 and earlier, Gold 7.63 and earlier, and Server 8.23 and earlier allows remote attackers to execute arbi… NVD-CWE-Other
CVE-2006-1959 2018-10-19 01:37 2006-04-21 Show GitHub Exploit DB Packet Storm
345398 - cisco wireless_lan_solution_engine Cross-site scripting (XSS) vulnerability in the appliance web user interface in Cisco CiscoWorks Wireless LAN Solution Engine (WLSE) and WLSE Express before 2.13 allows remote attackers to inject arb… NVD-CWE-Other
CVE-2006-1960 2018-10-19 01:37 2006-04-21 Show GitHub Exploit DB Packet Storm
345399 - cisco user_registration_tool
wireless_lan_solution_engine
ciscoworks_2000_service_management_solution
hosting_solution_engine
ethernet_subscriber_solution_engine 		Cisco CiscoWorks Wireless LAN Solution Engine (WLSE) and WLSE Express before 2.13, Hosting Solution Engine (HSE) and User Registration Tool (URT) before 20060419, and all versions of Ethernet Subscri… NVD-CWE-Other
CVE-2006-1961 2018-10-19 01:37 2006-04-21 Show GitHub Exploit DB Packet Storm
345400 - pcpin pcpin_chat SQL injection vulnerability in PCPIN Chat 5.0.4 and earlier allows remote attackers to execute arbitrary SQL commands via the username field (login parameter) to main.php. CWE-89
SQL Injection 		CVE-2006-1962 2018-10-19 01:37 2006-04-21 Show GitHub Exploit DB Packet Storm