Vulnerability Search Top

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

Vulnerability Information Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 26, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
240441	7.5	危険	PHP Web Scripts	-	PHP Web Scripts Easy Banner Free の functions.php における PHP リモートファイルインクルージョンの脆弱性	-	CVE-2006-5166	2012-09-25 15:36	2006-10-5	Show	GitHub Exploit DB Packet Storm

240442	3.6	注意	IBM	-	Linux の IBM Informix Dynamic Server における任意のファイルへデータを追加される脆弱性	-	CVE-2006-5163	2012-09-25 15:36	2006-10-5	Show	GitHub Exploit DB Packet Storm

240443	5	警告	マイクロソフト	-	Microsoft Internet Explorer の wininet.dll におけるサービス運用妨害 (DoS) の脆弱性	-	CVE-2006-5162	2012-09-25 15:36	2006-10-5	Show	GitHub Exploit DB Packet Storm

240444	6.4	警告	IBM	-	IBM Client Security Password Manager におけるユーザ名などの資格情報を取得される脆弱性	-	CVE-2006-5161	2012-09-25 15:36	2006-10-5	Show	GitHub Exploit DB Packet Storm

240445	10	危険	マカフィー	-	McAfee ePolicy Orchestrator などにおけるバッファオーバーフローの脆弱性	-	CVE-2006-5156	2012-09-25 15:36	2006-10-5	Show	GitHub Exploit DB Packet Storm

240446	5	警告	Kerio Technologies	-	Sunbelt Kerio Personal Firewall の fwdrv.sys ドライバにおけるサービス運用妨害 (DoS) の脆弱性	-	CVE-2006-5153	2012-09-25 15:36	2006-10-5	Show	GitHub Exploit DB Packet Storm

240447	6.8	警告	マイクロソフト	-	Microsoft Internet Explorer 6 におけるクロスサイトスクリプティングの脆弱性	-	CVE-2006-5152	2012-09-25 15:36	2006-10-5	Show	GitHub Exploit DB Packet Storm

240448	6.5	警告	openbiblio	-	OpenBiblio の reports system における SQL インジェクションの脆弱性	-	CVE-2006-5150	2012-09-25 15:36	2006-10-5	Show	GitHub Exploit DB Packet Storm

240449	7.5	危険	openbiblio	-	OpenBiblio におけるディレクトリトラバーサルの脆弱性	CWE-22 パス・トラバーサル	CVE-2006-5149	2012-09-25 15:36	2006-10-5	Show	GitHub Exploit DB Packet Storm

240450	7.5	危険	olate	-	OlateDownload における SQL インジェクションの脆弱性	-	CVE-2006-5145	2012-09-25 15:36	2006-10-5	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 26, 2026, 4:05 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
285221	7.8	HIGH Local	echor_project	echor	The perform_request function in /lib/echor/backplane.rb in echor 0.1.6 Ruby Gem allows local users to inject arbitrary code by adding a semi-colon in their username or password.	CWE-77 Command Injection	CVE-2014-1834	2024-11-21 11:05	2018-02-3	Show	GitHub Exploit DB Packet Storm

285222	6.1	MEDIUM Network	oxidforge	eshop	CRLF injection vulnerability in OXID eShop Professional Edition before 4.7.11 and 4.8.x before 4.8.4, Enterprise Edition before 5.0.11 and 5.1.x before 5.1.4, and Community Edition before 4.7.11 and …	CWE-93 CRLF Injection	CVE-2014-2017	2024-11-21 11:05	2018-01-18	Show	GitHub Exploit DB Packet Storm

285223	7.1	HIGH Adjacent	arubanetworks	clearpass	Aruba Networks ClearPass Policy Manager 6.1.x, 6.2.x before 6.2.5.61640 and 6.3.x before 6.3.0.61712, when configured to use tunneled and non-tunneled EAP methods in a single policy construct, allows…	CWE-264 Permissions, Privileges, and Access Controls	CVE-2014-2071	2024-11-21 11:05	2018-01-9	Show	GitHub Exploit DB Packet Storm

285224	5.5	MEDIUM Local	numpy redhat fedoraproject	numpy enterprise_linux fedora	(1) core/tests/test_memmap.py, (2) core/tests/test_multiarray.py, (3) f2py/f2py2e.py, and (4) lib/tests/test_io.py in NumPy before 1.8.1 allow local users to write to arbitrary files via a symlink at…	CWE-59 Link Following	CVE-2014-1859	2024-11-21 11:05	2018-01-9	Show	GitHub Exploit DB Packet Storm

285225	5.5	MEDIUM Local	numpy	numpy	__init__.py in f2py in NumPy before 1.8.1 allows local users to write to arbitrary files via a symlink attack on a temporary file.	CWE-20 Improper Input Validation	CVE-2014-1858	2024-11-21 11:05	2018-01-9	Show	GitHub Exploit DB Packet Storm

285226	9.8	CRITICAL Network	tapatalk	tapatalk	Multiple SQL injection vulnerabilities in the Tapatalk plugin 4.9.0 and earlier and 5.x through 5.2.1 for vBulletin allow remote attackers to execute arbitrary SQL commands via a crafted xmlrpc API r…	CWE-89 SQL Injection	CVE-2014-2023	2024-11-21 11:05	2017-10-27	Show	GitHub Exploit DB Packet Storm

285227	7.1	HIGH Local	perltidy_project	perltidy	The make_temporary_filename function in perltidy 20120701-1 and earlier allows local users to obtain sensitive information or write to arbitrary files via a symlink attack, related to use of the tmpn…	CWE-284 Improper Access Control	CVE-2014-2277	2024-11-21 11:05	2017-10-18	Show	GitHub Exploit DB Packet Storm

285228	8.1	HIGH Network	percona	toolkit	The automatic version check functionality in the tools in Percona Toolkit 2.1 allows man-in-the-middle attackers to obtain sensitive information or execute arbitrary code by leveraging use of HTTP to…	CWE-200 Information Exposure	CVE-2014-2029	2024-11-21 11:05	2017-09-29	Show	GitHub Exploit DB Packet Storm

285229	6.1	MEDIUM Network	viprinet	multichannel_vpn_router_300_firmware	Multiple cross-site scripting (XSS) vulnerabilities in the old and new interfaces in Viprinet Multichannel VPN Router 300 allow remote attackers to inject arbitrary web script or HTML via the usernam…	CWE-79 Cross-site Scripting	CVE-2014-2045	2024-11-21 11:05	2017-01-21	Show	GitHub Exploit DB Packet Storm

285230	6.5	MEDIUM Network	cisco	ios_xe ios	The Zone-Based Firewall (ZBFW) functionality in Cisco IOS, possibly 15.4 and earlier, and IOS XE, possibly 3.13 and earlier, mishandles zone checking for existing sessions, which allows remote attack…	CWE-20 Improper Input Validation	CVE-2014-2146	2024-11-21 11:05	2016-09-23	Show	GitHub Exploit DB Packet Storm