Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 4, 2026, 4 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
239321 7.5 危険 my referer - My_REFERER の login.php における PHP リモートファイルインクルージョンの脆弱性 - CVE-2007-4484 2012-09-25 16:59 2007-08-22 Show GitHub Exploit DB Packet Storm
239322 4.3 警告 マイクロソフト - Microsoft Internet Explorer 6.0 および 7 におけるクロスサイトスクリプティングの脆弱性 - CVE-2007-4478 2012-09-25 16:59 2007-08-22 Show GitHub Exploit DB Packet Storm
239323 9.3 危険 Intuit - Intuit QuickBooks Online Edition ActiveX コントロールにおける任意のファイルを上書きされる脆弱性 CWE-22
CWE-264
CVE-2007-4471 2012-09-25 16:59 2007-09-5 Show GitHub Exploit DB Packet Storm
239324 4.3 警告 nufw - NuFW における時間ベースのパケットフィルタルールを回避される脆弱性 - CVE-2007-4461 2012-09-25 16:59 2007-08-21 Show GitHub Exploit DB Packet Storm
239325 7.5 危険 Mambo Foundation
parkviewconsultants		 - Mambo 用の SimpleFAQ コンポーネントにおける SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2007-4456 2012-09-25 16:59 2007-08-21 Show GitHub Exploit DB Packet Storm
239326 6.8 警告 olate - od の environment.php における任意の PHP コードを実行される脆弱性 - CVE-2007-4454 2012-09-25 16:59 2007-08-21 Show GitHub Exploit DB Packet Storm
239327 4.6 警告 The PHP Group - PHP 用の win32std エクステンションにおけるバッファオーバーフローの脆弱性 - CVE-2007-4441 2012-09-25 16:59 2007-08-20 Show GitHub Exploit DB Packet Storm
239328 7.5 危険 lighthouse development - Squirrelcart の popup_window.php における PHP リモートファイルインクルージョンの脆弱性 - CVE-2007-4439 2012-09-25 16:59 2007-08-20 Show GitHub Exploit DB Packet Storm
239329 3.5 注意 intersystems - InterSystems Cache' の CSP 実装のログインページのリダイレクトロジックにおけるサーバ上のデータを変更される脆弱性 - CVE-2007-4427 2012-09-25 16:59 2007-08-20 Show GitHub Exploit DB Packet Storm
239330 5 警告 live for speed - LFS におけるサービス運用妨害 (DoS) の脆弱性 - CVE-2007-4426 2012-09-25 16:59 2007-08-20 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 5, 2026, 4:11 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
345981 - bea weblogic_server The HTTP handlers in BEA WebLogic Server 9.0, 8.1 up to SP5, 7.0 up to SP6, and 6.1 up to SP7 stores the username and password in cleartext in the WebLogic Server log when access to a web application… NVD-CWE-Other
CVE-2006-2469 2017-07-20 10:31 2006-05-19 Show GitHub Exploit DB Packet Storm
345982 - bea weblogic_server Unspecified vulnerability in the WebLogic Server Administration Console for BEA WebLogic Server 9.0 prevents the console from setting custom JDBC security policies correctly, which could allow attack… NVD-CWE-Other
CVE-2006-2470 2017-07-20 10:31 2006-05-19 Show GitHub Exploit DB Packet Storm
345983 - bea weblogic_server Multiple vulnerabilities in BEA WebLogic Server 8.1 through SP4, 7.0 through SP6, and 6.1 through SP7 leak sensitive information to remote attackers, including (1) DNS and IP addresses to address to … NVD-CWE-Other
CVE-2006-2471 2017-07-20 10:31 2006-05-19 Show GitHub Exploit DB Packet Storm
345984 - bea weblogic_server This vulnerability is addressed in the following product releases: BEA Systems, Weblogic Server, 8.1 SP 5 BEA Systems, Weblogic Express, 8.1 SP 5 BEA Systems, Weblogic Server, 7.0 SP 7 BEA System… NVD-CWE-Other
CVE-2006-2471 2017-07-20 10:31 2006-05-19 Show GitHub Exploit DB Packet Storm
345985 - bea weblogic_server Unspecified vulnerability in BEA WebLogic Server 9.1 and 9.0, 8.1 through SP5, 7.0 through SP6, and 6.1 through SP7 allows untrusted applications to obtain private server keys. NVD-CWE-Other
CVE-2006-2472 2017-07-20 10:31 2006-05-19 Show GitHub Exploit DB Packet Storm
345986 - bea weblogic_server Hyperlink #907650 has patches for the following products: WebLogic Server 9.1 WebLogic Server 9.0 This vulnerability is addressed in the following product releases: BEA Systems, Weblogic Server, … NVD-CWE-Other
CVE-2006-2472 2017-07-20 10:31 2006-05-19 Show GitHub Exploit DB Packet Storm
345987 - microchip_data_systems
pentaware 		ziptv_for_c\+\+_builder
ziptv_for_delphi_7
pentasuite-pro
pentazip 		Heap-based buffer overflow in the TZipTV component in (1) ZipTV for Delphi 7 2006.1.26 and for C++ Builder 2006-1.16, (2) PentaZip 8.5.1.190 and PentaSuite-PRO 8.5.1.221, and possibly other products,… CWE-119
Incorrect Access of Indexable Resource ('Range Error')  		CVE-2006-2482 2017-07-20 10:31 2006-09-9 Show GitHub Exploit DB Packet Storm
345988 - spymac spymac_web_os Multiple cross-site scripting (XSS) vulnerabilities in Spymac WebOS (WOS) 5.0 allow remote attackers to inject arbitrary web script or HTML via the (1) del_folder, (2) nick, or (3) action parameters … NVD-CWE-Other
CVE-2006-2488 2017-07-20 10:31 2006-05-20 Show GitHub Exploit DB Packet Storm
345989 - invision_power_services invision_power_board Invision Power Board (IPB) before 2.1.6 allows remote attackers to execute arbitrary PHP script via attack vectors involving (1) the post_icon variable in classes/post/class_post.php and (2) the df v… NVD-CWE-Other
CVE-2006-2498 2017-07-20 10:31 2006-05-20 Show GitHub Exploit DB Packet Storm
345990 - sun java_system_application_server
java_system_web_server
one_application_server
one_web_server 		Cross-site scripting (XSS) vulnerability in Sun ONE Web Server 6.0 SP9 and earlier, Java System Web Server 6.1 SP4 and earlier, Sun ONE Application Server 7 Platform and Standard Edition Update 6 and… NVD-CWE-Other
CVE-2006-2501 2017-07-20 10:31 2006-05-20 Show GitHub Exploit DB Packet Storm