Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Feb. 9, 2026, 12:59 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
239601 6.9 警告 Debian - Honeyd の test.sh における任意のファイルを上書きされる脆弱性 CWE-59
リンク解釈の問題
CVE-2008-3928 2012-06-26 16:02 2008-08-24 Show GitHub Exploit DB Packet Storm
239602 7.5 危険 bitlbee - BitlBee における既存のアカウントを "再作成" される脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2008-3920 2012-06-26 16:02 2008-09-4 Show GitHub Exploit DB Packet Storm
239603 5.8 警告 Django Software Foundation - Django の管理アプリケーションにおけるデータを削除される脆弱性 CWE-352
同一生成元ポリシー違反
CVE-2008-3909 2012-06-26 16:02 2008-09-4 Show GitHub Exploit DB Packet Storm
239604 3.5 注意 trixbox
Digium
- Asterisk Open Source における有効なユーザ名を列挙される脆弱性 CWE-200
情報漏えい
CVE-2008-3903 2012-06-26 16:02 2008-09-4 Show GitHub Exploit DB Packet Storm
239605 2.1 注意 マイクロソフト
freed0m
- DiskCryptor における重要な情報を取得される脆弱性 CWE-200
情報漏えい
CVE-2008-3897 2012-06-26 16:02 2008-09-3 Show GitHub Exploit DB Packet Storm
239606 2.1 注意 GNU Project - Grub Legacy における重要な情報を取得される脆弱性 CWE-200
情報漏えい
CVE-2008-3896 2012-06-26 16:02 2008-09-3 Show GitHub Exploit DB Packet Storm
239607 7.5 危険 Google - Google Apps 用の SAML SSO サービス におけるユーザになりすまされる脆弱性 CWE-287
不適切な認証
CVE-2008-3891 2012-06-26 16:02 2008-09-3 Show GitHub Exploit DB Packet Storm
239608 7.2 危険 Advanced Micro Devices (AMD)
FreeBSD
- amd64 プラットフォーム上の FreeBSD のカーネルにおける権限を取得される脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2008-3890 2012-06-26 16:02 2008-09-3 Show GitHub Exploit DB Packet Storm
239609 7.5 危険 ASP indir - Mini-NUKE Freehost の members.asp における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2008-3888 2012-06-26 16:02 2008-09-2 Show GitHub Exploit DB Packet Storm
239610 6 警告 dotProject - dotProject の index.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2008-3887 2012-06-26 16:02 2008-09-2 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:April 18, 2026, 4:11 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
256711 - net2ftp net2ftp PHP remote file inclusion vulnerability in index.php in net2ftp, possibly 0.1 through 0.62, allows remote attackers to execute arbitrary PHP code via a URL in the application_rootdir parameter. NOTE:… NVD-CWE-Other
CVE-2006-5097 2024-08-8 05:15 2006-09-30 Show GitHub Exploit DB Packet Storm
256712 - my-bic my-bic PHP remote file inclusion vulnerability in mybic_server.php in Jim Plush My-BIC 0.6.5 allows remote attackers to execute arbitrary PHP code via a URL in the file parameter. NOTE: the provenance of t… NVD-CWE-Other
CVE-2006-5089 2024-08-8 05:15 2006-09-30 Show GitHub Exploit DB Packet Storm
256713 - php_system_administration_toolkit php_system_administration_toolkit PHP remote file inclusion vulnerability in loader.php in PHP System Administration Toolkit (PHPSaTK) allows remote attackers to execute arbitrary PHP code via a URL in the GLOBALS[config] parameter. … NVD-CWE-Other
CVE-2006-5067 2024-08-8 05:15 2006-09-28 Show GitHub Exploit DB Packet Storm
256714 - squiz mysource_classic
mysource_matrix
MySource Matrix 3.8 and earlier, and MySource 2.x, allow remote attackers to use the application as an HTTP proxy server via the sq_remote_page_url parameter to access arbitrary sites with the server… NVD-CWE-Other
CVE-2006-5036 2024-08-8 05:15 2006-09-28 Show GitHub Exploit DB Packet Storm
256715 - squiz mysource_matrix MySource Matrix after 3.8 allows remote attackers to use the application as an HTTP proxy server via a MIME encoded URL in the sq_content_src parameter to access arbitrary sites with the server's IP … NVD-CWE-Other
CVE-2006-5037 2024-08-8 05:15 2006-09-28 Show GitHub Exploit DB Packet Storm
256716 - marc_cagninacci mclinkscounter Multiple PHP remote file inclusion vulnerabilities in Marc Cagninacci mcLinksCounter 1.1 allow remote attackers to execute arbitrary PHP code via a URL in the langfile parameter in (1) login.php, (2)… CWE-94
Code Injection
CVE-2006-4863 2024-08-8 05:15 2006-09-20 Show GitHub Exploit DB Packet Storm
256717 - hitweb hitweb Multiple PHP remote file inclusion vulnerabilities in Brian Fraval Hitweb 3.0 allow remote attackers to execute arbitrary PHP code via a URL in the REP_CLASS parameter to (1) index.php, (2) arbo.php,… NVD-CWE-Other
CVE-2006-4848 2024-08-8 05:15 2006-09-19 Show GitHub Exploit DB Packet Storm
256718 - phpopenchat phpopenchat PHP remote file inclusion vulnerability in contrib/yabbse/poc.php in phpopenchat before 3.0.2 allows remote attackers to execute arbitrary PHP code via the sourcedir parameter. NOTE: this issue was … NVD-CWE-Other
CVE-2006-4677 2024-08-8 05:15 2006-09-12 Show GitHub Exploit DB Packet Storm
256719 - linux linux_kernel The source code tar archive of the Linux kernel 2.6.16, 2.6.17.11, and possibly other versions specifies weak permissions (0666 and 0777) for certain files and directories, which might allow local us… NVD-CWE-Other
CVE-2006-4663 2024-08-8 05:15 2006-09-9 Show GitHub Exploit DB Packet Storm
256720 - modulebased_cms modulebased_cms PHP remote file inclusion vulnerability in ModuleBased CMS Pre-Alpha allows remote attackers to execute arbitrary PHP code via the _SERVER parameter in (1) admin/avatar.php, (2) libs/archive.class.ph… NVD-CWE-Other
CVE-2006-4545 2024-08-8 05:15 2006-09-6 Show GitHub Exploit DB Packet Storm