Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 21, 2026, 6:01 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
240071 7.5 危険 Invision Power Services, Inc - Invision Gallery における SQL インジェクションの脆弱性 - CVE-2006-5206 2012-09-25 15:36 2006-10-10 Show GitHub Exploit DB Packet Storm
240072 5 警告 Invision Power Services, Inc - Invision Gallery におけるディレクトリトラバーサルの脆弱性 - CVE-2006-5205 2012-09-25 15:36 2006-10-10 Show GitHub Exploit DB Packet Storm
240073 2.1 注意 Invision Power Services, Inc - IPB の action_admin/member.php におけるクロスサイトスクリプティングの脆弱性 - CVE-2006-5204 2012-09-25 15:36 2006-10-5 Show GitHub Exploit DB Packet Storm
240074 5.1 警告 Invision Power Services, Inc - IPB における SQL コマンドを実行される脆弱性 - CVE-2006-5203 2012-09-25 15:36 2006-10-10 Show GitHub Exploit DB Packet Storm
240075 5 警告 シスコシステムズ (Linksys) - Linksys WRT54g における任意の設定を変更される脆弱性 - CVE-2006-5202 2012-09-25 15:36 2006-10-10 Show GitHub Exploit DB Packet Storm
240076 5 警告 pdshoppro - PDshopPro におけるデータベースをダウンロードされる脆弱性 - CVE-2006-5197 2012-09-25 15:36 2006-10-10 Show GitHub Exploit DB Packet Storm
240077 7.8 危険 Motorola Solutions, Inc - Motorola SURFboard SB4200 Cable Modem におけるサービス運用妨害 (DoS) の脆弱性 - CVE-2006-5196 2012-09-25 15:36 2006-10-10 Show GitHub Exploit DB Packet Storm
240078 4.3 警告 net2ftp - net2ftp の index.php におけるクロスサイトスクリプティングの脆弱性 - CVE-2006-5194 2012-09-25 15:36 2006-10-10 Show GitHub Exploit DB Packet Storm
240079 4.3 警告 osCommerce - osCommerce Milestone におけるクロスサイトスクリプティングの脆弱性 - CVE-2006-5190 2012-09-25 15:36 2006-10-10 Show GitHub Exploit DB Packet Storm
240080 7.5 危険 klinza - klinza professional cms における PHP リモートファイルインクルージョンの脆弱性 - CVE-2006-5189 2012-09-25 15:36 2006-10-10 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 21, 2026, 4:10 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
286601 7.8 HIGH
Local 		redhat openshift OpenShift: Install script has temporary file creation vulnerability which can result in arbitrary code execution CWE-668
 Exposure of Resource to Wrong Sphere 		CVE-2014-0023 2024-11-21 11:01 2019-11-16 Show GitHub Exploit DB Packet Storm
286602 7.5 HIGH
Network 		chrony_project
debian
fedoraproject 		chrony
debian_linux
fedora 		Chrony before 1.29.1 has traffic amplification in cmdmon protocol NVD-CWE-Other
CVE-2014-0021 2024-11-21 11:01 2019-11-16 Show GitHub Exploit DB Packet Storm
286603 9.8 CRITICAL
Network 		hbwsl slidedeck_2 The slidedeck2 plugin before 2.3.5 for WordPress has file inclusion. CWE-20
 Improper Input Validation  		CVE-2013-7483 2024-11-21 11:01 2019-08-23 Show GitHub Exploit DB Packet Storm
286604 6.1 MEDIUM
Network 		reflex_gallery_project reflex_gallery The reflex-gallery plugin before 1.4.3 for WordPress has XSS. CWE-79
Cross-site Scripting 		CVE-2013-7482 2024-11-21 11:01 2019-08-22 Show GitHub Exploit DB Packet Storm
286605 6.1 MEDIUM
Network 		bestwebsoft contact_form The contact-form-plugin plugin before 3.3.5 for WordPress has XSS. CWE-79
Cross-site Scripting 		CVE-2013-7481 2024-11-21 11:01 2019-08-22 Show GitHub Exploit DB Packet Storm
286606 6.1 MEDIUM
Network 		pixelite events_manager The events-manager plugin before 5.3.6.1 for WordPress has XSS via the booking form and admin areas. CWE-79
Cross-site Scripting 		CVE-2013-7480 2024-11-21 11:01 2019-08-22 Show GitHub Exploit DB Packet Storm
286607 6.1 MEDIUM
Network 		pixelite events_manager The events-manager plugin before 5.3.9 for WordPress has XSS in the search form field. CWE-79
Cross-site Scripting 		CVE-2013-7479 2024-11-21 11:01 2019-08-22 Show GitHub Exploit DB Packet Storm
286608 6.1 MEDIUM
Network 		pixelite events_manager The events-manager plugin before 5.5 for WordPress has XSS via EM_Ticket::get_post. CWE-79
Cross-site Scripting 		CVE-2013-7478 2024-11-21 11:01 2019-08-22 Show GitHub Exploit DB Packet Storm
286609 6.1 MEDIUM
Network 		pixelite events_manager The events-manager plugin before 5.5.2 for WordPress has XSS in the booking form. CWE-79
Cross-site Scripting 		CVE-2013-7477 2024-11-21 11:01 2019-08-22 Show GitHub Exploit DB Packet Storm
286610 8.8 HIGH
Network 		simple_fields_project simple_fields The simple-fields plugin before 1.2 for WordPress has CSRF in the admin interface. CWE-352
 Origin Validation Error 		CVE-2013-7476 2024-11-21 11:01 2019-08-15 Show GitHub Exploit DB Packet Storm