Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 25, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
240541	7.5	危険	perlunity	-	phpunity.postcard の phpunity-postcard.php における PHP リモートファイルインクルージョンの脆弱性	CWE-94 コード・インジェクション	CVE-2006-4869	2012-09-25 15:35	2006-09-19	Show	GitHub Exploit DB Packet Storm

240542	7.5	危険	mohammed mehdi panjwani	-	Mohammed Mehdi Panjwani Complain Center の loginprocess.asp における SQL インジェクションの脆弱性	-	CVE-2006-4861	2012-09-25 15:35	2006-09-19	Show	GitHub Exploit DB Packet Storm

240543	10	危険	limbo cms	-	Limbo CMS の index.php などにおける脆弱性	-	CVE-2006-4860	2012-09-25 15:35	2006-09-19	Show	GitHub Exploit DB Packet Storm

240544	7.5	危険	limbo cms	-	Limbo CMS の contact コンポーネントにおける images/contact フォルダへ PHP コードをアップロードされる脆弱性	-	CVE-2006-4859	2012-09-25 15:35	2006-09-19	Show	GitHub Exploit DB Packet Storm

240545	6.8	警告	mamboxchange	-	Mambo 用の serverstat コンポーネントにおける PHP リモートファイルインクルージョンの脆弱性	CWE-94 コード・インジェクション	CVE-2006-4858	2012-09-25 15:35	2006-09-19	Show	GitHub Exploit DB Packet Storm

240546	7.5	危険	haberx	-	Haberx の kategorix.asp における SQL インジェクションの脆弱性	-	CVE-2006-4853	2012-09-25 15:35	2006-09-18	Show	GitHub Exploit DB Packet Storm

240547	7.5	危険	mobilepublisherphp	-	MobilePublisherPHP の header.php における PHP リモートファイルインクルージョンの脆弱性	-	CVE-2006-4849	2012-09-25 15:35	2006-09-18	Show	GitHub Exploit DB Packet Storm

240548	6.5	警告	Ipswitch, Inc.	-	Ipswitch WS_FTP Server におけるバッファオーバーフローの脆弱性	-	CVE-2006-4847	2012-09-25 15:35	2006-09-14	Show	GitHub Exploit DB Packet Storm

240549	10	危険	Kryo	-	iodine における脆弱性	-	CVE-2006-4831	2012-09-25 15:35	2006-09-15	Show	GitHub Exploit DB Packet Storm

240550	7.5	危険	photopost	-	PhotoPost の zipndownload.php における PHP リモートファイルインクルージョンの脆弱性	-	CVE-2006-4828	2012-09-25 15:35	2006-09-15	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 26, 2026, 4:05 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
285201	7.8	HIGH Local	suphp	suphp	suPHP before 0.7.2 source-highlighting feature allows security bypass which could lead to arbitrary code execution	CWE-287 Improper Authentication	CVE-2014-1867	2024-11-21 11:05	2019-12-13	Show	GitHub Exploit DB Packet Storm

285202	6.1	MEDIUM Network	posh_project	posh	Multiple cross-site scripting (XSS) vulnerabilities in POSH (aka Posh portal or Portaneo) 3.0 through 3.2.1 allow remote attackers to inject arbitrary web script or HTML via the (1) error parameter t…	CWE-79 Cross-site Scripting	CVE-2014-2214	2024-11-21 11:05	2019-11-23	Show	GitHub Exploit DB Packet Storm

285203	6.1	MEDIUM Network	posh_project	posh	Open redirect vulnerability in the password reset functionality in POSH 3.0 through 3.2.1 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in th…	CWE-601 Open Redirect	CVE-2014-2213	2024-11-21 11:05	2019-11-23	Show	GitHub Exploit DB Packet Storm

285204	5.5	MEDIUM Local	rply_project	rply	python-rply before 0.7.4 insecurely creates temporary files.	CWE-59 Link Following	CVE-2014-1938	2024-11-21 11:05	2019-11-22	Show	GitHub Exploit DB Packet Storm

285205	7.5	HIGH Network	gamera_project	gamera	Gamera before 3.4.1 insecurely creates temporary files.	CWE-20 Improper Input Validation	CVE-2014-1937	2024-11-21 11:05	2019-11-22	Show	GitHub Exploit DB Packet Storm

285206	7.5	HIGH Network	rc_project debian	rc debian_linux	rc before 1.7.1-5 insecurely creates temporary files.	CWE-20 Improper Input Validation	CVE-2014-1936	2024-11-21 11:05	2019-11-22	Show	GitHub Exploit DB Packet Storm

285207	5.3	MEDIUM Network	9base_project debian	9base debian_linux	9base 1:6-6 and 1:6-7 insecurely creates temporary files which results in predictable filenames.	CWE-20 Improper Input Validation	CVE-2014-1935	2024-11-21 11:05	2019-11-22	Show	GitHub Exploit DB Packet Storm

285208	5.5	MEDIUM Local	x_file_explorer_project debian	x_file_explorer debian_linux	X File Explorer (aka xfe) might allow local users to bypass intended access restrictions and gain access to arbitrary files by leveraging failure to use directory masks when creating files on Samba a…	CWE-264 Permissions, Privileges, and Access Controls	CVE-2014-2079	2024-11-21 11:05	2018-07-16	Show	GitHub Exploit DB Packet Storm

285209	7.8	HIGH Local	enlightenment	enlightenment	Enlightenment before 0.17.6 might allow local users to gain privileges via vectors involving the gdb method.	CWE-264 Permissions, Privileges, and Access Controls	CVE-2014-1846	2024-11-21 11:05	2018-04-28	Show	GitHub Exploit DB Packet Storm

285210	7.8	HIGH Local	enlightenment	enlightenment	An unspecified setuid root helper in Enlightenment before 0.17.6 allows local users to gain privileges by leveraging failure to properly sanitize the environment.	CWE-264 Permissions, Privileges, and Access Controls	CVE-2014-1845	2024-11-21 11:05	2018-04-28	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed