Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 5, 2026, 4 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
238971 9.3 危険 macrovision - Macrovision の InstallShield Update Service Web Agent におけるバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2007-6654 2012-09-25 16:59 2008-01-4 Show GitHub Exploit DB Packet Storm
238972 5 警告 mihalism - Mihalism Multi Host の download.php におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2007-6653 2012-09-25 16:59 2008-01-4 Show GitHub Exploit DB Packet Storm
238973 7.5 危険 matpo bilder galerie - MatPo Bilder Galerie における PHP リモートファイルインクルージョンの脆弱性 CWE-94
コード・インジェクション 		CVE-2007-6649 2012-09-25 16:59 2008-01-4 Show GitHub Exploit DB Packet Storm
238974 4.3 警告 integry systems - LiveCart におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2007-6646 2012-09-25 16:59 2008-01-3 Show GitHub Exploit DB Packet Storm
238975 7.5 危険 Joomla! - Joomla! における特権を取得される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2007-6645 2012-09-25 16:59 2008-01-3 Show GitHub Exploit DB Packet Storm
238976 6.5 警告 Joomla! - Joomla! における任意のユーザを管理者グループへ昇格される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2007-6644 2012-09-25 16:59 2008-01-3 Show GitHub Exploit DB Packet Storm
238977 4.3 警告 Joomla! - Joomla! の com_poll コンポーネントにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2007-6643 2012-09-25 16:59 2008-01-3 Show GitHub Exploit DB Packet Storm
238978 10 危険 Bharat Mediratta - Menalto Gallery の Publish XP モジュールにおけるアルバムを作成される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2007-6685 2012-09-25 16:59 2007-12-24 Show GitHub Exploit DB Packet Storm
238979 5 警告 mortbay jetty - Mortbay Jetty におけるファイルのソースを読まれる脆弱性 CWE-22
パス・トラバーサル 		CVE-2007-6672 2012-09-25 16:59 2007-07-9 Show GitHub Exploit DB Packet Storm
238980 6.8 警告 Joomla! - Joomla! におけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反 		CVE-2007-6642 2012-09-25 16:59 2008-01-3 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 5, 2026, 4:11 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
346021 - freebsd freebsd Directory traversal vulnerability in smbfs smbfs on FreeBSD 4.10 up to 6.1 allows local users to escape chroot restrictions for an SMB-mounted filesystem via "..\\" sequences. NOTE: this is similar … NVD-CWE-Other
CVE-2006-2654 2017-07-20 10:31 2006-06-2 Show GitHub Exploit DB Packet Storm
346022 - freebsd freebsd The build process for ypserv in FreeBSD 5.3 up to 6.1 accidentally disables access restrictions when using the /var/yp/securenets file, which allows remote attackers to bypass intended access restric… NVD-CWE-Other
CVE-2006-2655 2017-07-20 10:31 2006-06-2 Show GitHub Exploit DB Packet Storm
346023 - sitescape sitescape_forum Dispatch.cgi/_user/uservCard/ in SiteScape Forum 7.2 and possibly earlier generates different responses in a way that allows remote attackers to enumerate valid usernames. NVD-CWE-Other
CVE-2006-2676 2017-07-20 10:31 2006-05-31 Show GitHub Exploit DB Packet Storm
346024 - sitescape sitescape_forum SiteScape Forum 7.2 and possibly earlier stores the avf.rc configuraiton file under the web document root with insufficient access control, which allows remote attackers to obtain sensitive path info… NVD-CWE-Other
CVE-2006-2677 2017-07-20 10:31 2006-05-31 Show GitHub Exploit DB Packet Storm
346025 - cisco vpn_client Unspecified vulnerability in the VPN Client for Windows Graphical User Interface (GUI) (aka the VPN client dialer) in Cisco VPN Client for Windows 4.8.00.* and earlier, except for 4.7.00.0533, allows… NVD-CWE-noinfo
CVE-2006-2679 2017-07-20 10:31 2006-05-31 Show GitHub Exploit DB Packet Storm
346026 - socketmail socketmail PHP remote file inclusion vulnerability in SocketMail Lite and Pro 2.2.6 and earlier, when register_globals and magic_quotes are enabled, allows remote attackers to execute arbitrary PHP code via a U… CWE-94
Code Injection 		CVE-2006-2681 2017-07-20 10:31 2006-05-31 Show GitHub Exploit DB Packet Storm
346027 - agtc_websolutions php-agtc_membership_system Cross-site scripting (XSS) vulnerability in adduser.php in PHP-AGTC Membership System 1.1a and earlier allows remote attackers to inject arbitrary web script or HTML via the email address (useremail … NVD-CWE-Other
CVE-2006-2687 2017-07-20 10:31 2006-05-31 Show GitHub Exploit DB Packet Storm
346028 - achievo achievo SQL injection vulnerability in the employees node (class.employee.inc) in Achievo 1.1.0 and earlier and 1.2 and earlier allows remote attackers to execute arbitrary SQL commands via the atkselector p… NVD-CWE-Other
CVE-2006-2688 2017-07-20 10:31 2006-05-31 Show GitHub Exploit DB Packet Storm
346029 - eva-web eva-web Multiple cross-site scripting (XSS) vulnerabilities in EVA-Web 2.1.2 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) debut_image parameter in (a) article-album.p… NVD-CWE-Other
CVE-2006-2689 2017-07-20 10:31 2006-05-31 Show GitHub Exploit DB Packet Storm
346030 - amule amule Unspecified "information leakage" vulnerabilities in aMuleWeb for AMule before 2.1.2 allow remote attackers to access arbitrary images, including dynamically generated images, via unknown vectors. NVD-CWE-Other
CVE-2006-2691 2017-07-20 10:31 2006-05-31 Show GitHub Exploit DB Packet Storm