Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Feb. 9, 2026, 12:59 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
239171 7.5 危険 codeavalanche - CodeAvalanche Directory における管理者パスワードを含むデータベースファイルをダウンロードされる脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2008-5898 2012-06-26 16:10 2009-01-12 Show GitHub Exploit DB Packet Storm
239172 7.5 危険 codeavalanche - CodeAvalanche FreeWallpaper における管理者パスワードを含むデータベースファイルをダウンロードされる脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2008-5897 2012-06-26 16:10 2009-01-12 Show GitHub Exploit DB Packet Storm
239173 7.5 危険 codeavalanche - CodeAvalanche RateMySite における管理者パスワードを含むデータベースファイルをダウンロードされる脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2008-5896 2012-06-26 16:10 2009-01-12 Show GitHub Exploit DB Packet Storm
239174 7.5 危険 gobbl - Gobbl CMS の admin/auth.php における管理アクセス権を取得される脆弱性 CWE-287
不適切な認証 		CVE-2008-5880 2012-06-26 16:10 2009-01-8 Show GitHub Exploit DB Packet Storm
239175 4.3 警告 FastStone Soft - FastStone Image Viewer におけるサービス運用妨害 (DoS) の脆弱性 CWE-20
不適切な入力確認 		CVE-2008-5870 2012-06-26 16:10 2009-01-8 Show GitHub Exploit DB Packet Storm
239176 5 警告 freelyrics - FreeLyrics の source.php におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2008-5861 2012-06-26 16:10 2009-01-6 Show GitHub Exploit DB Packet Storm
239177 5.1 警告 constructr - Constructr CMS の backend/template.php におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2008-5860 2012-06-26 16:10 2009-01-6 Show GitHub Exploit DB Packet Storm
239178 5.1 警告 constructr - Constructr CMS の index.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-5859 2012-06-26 16:10 2009-01-6 Show GitHub Exploit DB Packet Storm
239179 5 警告 class - ClaSS の scripts/export.php におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2008-5856 2012-06-26 16:10 2009-01-6 Show GitHub Exploit DB Packet Storm
239180 5 警告 chicomas - Chilek Content Management System におけるデータベースのバックアップを読み取られる脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2008-5853 2012-06-26 16:10 2009-01-6 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:April 20, 2026, 4:09 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
256801 - centipaid centipaid PHP remote file inclusion vulnerability in centipaid_class.php in CentiPaid 1.4.3 allows remote attackers to execute arbitrary code via a URL in the class_pwd parameter. NOTE: this issue has been di… CWE-94
Code Injection 		CVE-2006-6975 2024-08-8 06:15 2007-02-9 Show GitHub Exploit DB Packet Storm
256802 - enigma wordpress_bridge PHP remote file inclusion vulnerability in the Enigma2 plugin (Enigma2.php) in Enigma WordPress Bridge allows remote attackers to execute arbitrary PHP code via a URL in the boarddir parameter. NOTE… NVD-CWE-Other
CVE-2006-6863 2024-08-8 06:15 2006-12-31 Show GitHub Exploit DB Packet Storm
256803 - phpirc_bot phpirc_bot PHP remote file inclusion vulnerability in php4you.php in PHPIrc_bot 0.2 allows remote attackers to execute arbitrary PHP code via a URL in the dir parameter. NOTE: this issue is disputed by CVE, si… NVD-CWE-Other
CVE-2006-6883 2024-08-8 06:15 2006-12-31 Show GitHub Exploit DB Packet Storm
256804 - rad_inks rad_upload PHP remote file inclusion vulnerability in upload.php in Rad Upload 3.02 allows remote attackers to execute arbitrary PHP code via a URL in the save_path parameter. NOTE: CVE disputes this vulnerabi… NVD-CWE-Other
CVE-2006-6549 2024-08-8 06:15 2006-12-15 Show GitHub Exploit DB Packet Storm
256805 - phorum phorum PHP remote file inclusion vulnerability in common.php in Phorum 3.2.11 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the db_file parameter. NOTE: CVE disputes this v… NVD-CWE-Other
CVE-2006-6550 2024-08-8 06:15 2006-12-15 Show GitHub Exploit DB Packet Storm
256806 - php animated_smiley_generator PHP remote file inclusion vulnerability in signer/final.php in warez distributions of Animated Smiley Generator allows remote attackers to execute arbitrary PHP code via a URL in the smiley parameter… NVD-CWE-Other
CVE-2006-6541 2024-08-8 06:15 2006-12-14 Show GitHub Exploit DB Packet Storm
256807 - wikyblog wikyblog Directory traversal vulnerability in WBmap.php in WikyBlog 1.3.2 and earlier allows remote attackers to include and execute arbitrary local files via directory traversal sequences in the l parameter.… NVD-CWE-Other
CVE-2006-6465 2024-08-8 06:15 2006-12-12 Show GitHub Exploit DB Packet Storm
256808 - phpadsnew phpadsnew PHP remote file inclusion vulnerability in admin/lib-maintenance.inc.php in phpAdsNew 2.0.4-pr2 allows remote attackers to execute arbitrary PHP code via a URL in the phpAds_path parameter, a differe… NVD-CWE-Other
CVE-2006-6415 2024-08-8 06:15 2006-12-10 Show GitHub Exploit DB Packet Storm
256809 - netbsd
freebsd
openbsd 		netbsd
freebsd
openbsd 		Integer overflow in banner/banner.c in FreeBSD, NetBSD, and OpenBSD might allow local users to modify memory via a long banner. NOTE: CVE and multiple third parties dispute this issue. Since banner … NVD-CWE-Other
CVE-2006-6397 2024-08-8 06:15 2006-12-8 Show GitHub Exploit DB Packet Storm
256810 - symantec livestate_agent_for_windows Symantec LiveState 7.1 Agent for Windows allows local users to gain privileges by stopping the shstart.exe process and open "Web Self-Service" from the system tray icon, which will open a browser win… NVD-CWE-Other
CVE-2006-6308 2024-08-8 06:15 2006-12-7 Show GitHub Exploit DB Packet Storm