Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":July 1, 2026, 4:01 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
240101 4.3 警告 ljscripts - Auto-Surf Traffic Exchange Script におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2009-4460 2012-09-25 17:38 2009-12-30 Show GitHub Exploit DB Packet Storm
240102 6.8 警告 カスペルスキー - Kaspersky Anti-Virus などにおける SYSTEM 権限を取得される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2009-4452 2012-09-25 17:38 2009-12-29 Show GitHub Exploit DB Packet Storm
240103 6.8 警告 php.html - kandalf upper の upper.php における任意のコードを実行される脆弱性 CWE-Other
その他 		CVE-2009-4451 2012-09-25 17:38 2009-12-29 Show GitHub Exploit DB Packet Storm
240104 4.3 警告 LiveZilla - LiveZilla の map.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2009-4450 2012-09-25 17:38 2009-12-29 Show GitHub Exploit DB Packet Storm
240105 6.3 警告 mybboard - MyBB におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2009-4449 2012-09-25 17:38 2009-12-29 Show GitHub Exploit DB Packet Storm
240106 5 警告 mybboard - MyBB の inc/functions_time.php におけるサービス運用妨害 (DoS) の脆弱性 CWE-399
リソース管理の問題 		CVE-2009-4448 2012-09-25 17:38 2009-12-19 Show GitHub Exploit DB Packet Storm
240107 7.5 危険 jax scripts - Jax Guestbook における管理者の設定を変更される脆弱性 CWE-287
不適切な認証 		CVE-2009-4447 2012-09-25 17:38 2009-12-29 Show GitHub Exploit DB Packet Storm
240108 4.3 警告 ikemcg - phpInstantGallery の admin.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2009-4446 2012-09-25 17:38 2009-12-29 Show GitHub Exploit DB Packet Storm
240109 6 警告 マイクロソフト - Microsoft IIS における任意の拡張子を伴う空ファイルを作成される脆弱性 CWE-20
不適切な入力確認 		CVE-2009-4445 2012-09-25 17:38 2009-12-29 Show GitHub Exploit DB Packet Storm
240110 6 警告 マイクロソフト - Microsoft IIS におけるサードパーティの拡張制限を回避される脆弱性 CWE-20
不適切な入力確認 		CVE-2009-4444 2012-09-25 17:38 2009-12-27 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:July 1, 2026, 4:27 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
345471 - blursoft blur6ex Directory traversal vulnerability in index.php in blur6ex 0.3.452 allows remote attackers to include arbitrary files via the shard parameter. NOTE: this issue can be exploited to produce resultant X… NVD-CWE-Other
CVE-2006-1762 2018-10-19 01:36 2006-04-13 Show GitHub Exploit DB Packet Storm
345472 - blursoft blur6ex Multiple SQL injection vulnerabilities in index.php in blur6ex 0.3.452 allows remote attackers to execute arbitrary SQL commands via the ID parameter in a (1) g_reply or (2) g_permaPost action to the… NVD-CWE-Other
CVE-2006-1763 2018-10-19 01:36 2006-04-13 Show GitHub Exploit DB Packet Storm
345473 - jbook jbook Cross-site scripting (XSS) vulnerability in index.php in JBook 1.3 allows remote attackers to inject arbitrary web script or HTML via the page parameter. NVD-CWE-Other
CVE-2006-1765 2018-10-19 01:36 2006-04-13 Show GitHub Exploit DB Packet Storm
345474 - nicecoder indexu Multiple PHP remote file inclusion vulnerabilities in nicecoder.com INDEXU 5.0.0 and 5.0.1 allow remote attackers to execute arbitrary PHP code via a URL in the theme_path parameter in (1) index.php,… NVD-CWE-Other
CVE-2006-1767 2018-10-19 01:36 2006-04-13 Show GitHub Exploit DB Packet Storm
345475 - tritanium_scripts tritanium_bulletin_board Multiple cross-site scripting (XSS) vulnerabilities in register.php in Tritanium Bulletin Board (TBB) 1.2.3 allow remote attackers to inject arbitrary web script or HTML via the (1) newuser_name, (2)… NVD-CWE-Other
CVE-2006-1768 2018-10-19 01:36 2006-04-13 Show GitHub Exploit DB Packet Storm
345476 - tritanium_scripts tritanium_bulletin_board Succesful exploitation requires that "register_globals" is enabled. NVD-CWE-Other
CVE-2006-1768 2018-10-19 01:36 2006-04-13 Show GitHub Exploit DB Packet Storm
345477 - userland manila Multiple cross-site scripting (XSS) vulnerabilities in UserLand Manila 9.5 and earlier allow remote attackers to inject arbitrary web script or HTML via (1) the mode parameter in msgReader$1 and (2) … NVD-CWE-Other
CVE-2006-1769 2018-10-19 01:36 2006-04-13 Show GitHub Exploit DB Packet Storm
345478 - azerbaijan_development_group azdgvote Multiple PHP remote file inclusion vulnerabilities in Azerbaijan Design & Development Group (AZDG) AzDGVote allow remote attackers to execute arbitrary PHP code via a URL in the int_path parameter in… NVD-CWE-Other
CVE-2006-1770 2018-10-19 01:36 2006-04-13 Show GitHub Exploit DB Packet Storm
345479 - saxotech saxopress Directory traversal vulnerability in misc in pbcs.dll in SAXoTECH SAXoPRESS, aka Saxotech Online (formerly Publicus) allows remote attackers to read arbitrary files and possibly execute arbitrary pro… NVD-CWE-Other
CVE-2006-1771 2018-10-19 01:36 2006-04-13 Show GitHub Exploit DB Packet Storm
345480 - hp compaqhttpserver
system_management_homepage 		HP System Management Homepage (SMH) 2.1.3.132, when running on CompaqHTTPServer/9.9 on Windows, Linux, or Tru64 UNIX, and when "Trust by Certificates" is not enabled, allows remote attackers to bypas… NVD-CWE-Other
CVE-2006-1774 2018-10-19 01:36 2006-04-13 Show GitHub Exploit DB Packet Storm