Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Feb. 9, 2026, 12:59 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
240971 4.3 警告 abledesign - AbleDesign Dynamic Picture Frame の pframe.php におけるクロスサイトスクリプティングの脆弱性 - CVE-2007-4624 2012-06-26 15:54 2007-08-30 Show GitHub Exploit DB Packet Storm
240972 4.3 警告 dale mooney - Moonware の contact.php における CRLF インジェクションの脆弱性 CWE-20
不適切な入力確認 		CVE-2007-4612 2012-06-26 15:54 2007-08-30 Show GitHub Exploit DB Packet Storm
240973 7.5 危険 dale mooney - Moonware の viewevent.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2007-4611 2012-06-26 15:54 2007-08-30 Show GitHub Exploit DB Packet Storm
240974 6.8 警告 dale mooney - Moonware の config/upload.php における images/ 内の任意の PHP ファイルを実行される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2007-4610 2012-06-26 15:54 2007-08-30 Show GitHub Exploit DB Packet Storm
240975 6.4 警告 eyeOS Project - eyeOS における特定の不正な操作を実行される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2007-4609 2012-06-26 15:54 2007-08-30 Show GitHub Exploit DB Packet Storm
240976 9.3 危険 quicksoft
gate comm software		 - Quiksoft EasyMail SMTP Object のEasyMailSMTPObj ActiveX コントロールにおけるバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2007-4607 2012-06-26 15:54 2007-08-30 Show GitHub Exploit DB Packet Storm
240977 7.5 危険 dinkumsoft.com - DL PayCart の viewitem.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2007-4604 2012-06-26 15:54 2007-08-30 Show GitHub Exploit DB Packet Storm
240978 7.5 危険 altercoder - ACG News の index.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2007-4603 2012-06-26 15:54 2007-08-30 Show GitHub Exploit DB Packet Storm
240979 6.4 警告 entrust - Entrust ESP における証明書認証を偽装される脆弱性 CWE-255
証明書・パスワード管理 		CVE-2007-4594 2012-06-26 15:54 2007-08-29 Show GitHub Exploit DB Packet Storm
240980 7.5 危険 2532gigs - 2532|Gig の activateuser.php におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2007-4585 2012-06-26 15:54 2007-08-28 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:April 26, 2026, 4:08 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
313421 - sap saplpd
sapsprint 		Unspecified vulnerability in SAP SAPLPD and SAPSPRINT allows remote attackers to cause a denial of service (application crash) via a certain print job request. NOTE: the provenance of this informati… NVD-CWE-Other
CVE-2006-7220 2008-09-6 06:16 2007-07-10 Show GitHub Exploit DB Packet Storm
313422 - xwiki xwiki PreviewAction in XWiki 0.9.543 through 0.9.1252 does not set the Author field to the identity of the user who last modified a document, which allows remote authenticated users without programming rig… CWE-264
Permissions, Privileges, and Access Controls 		CVE-2006-7223 2008-09-6 06:16 2007-09-14 Show GitHub Exploit DB Packet Storm
313423 - scriptphp pronews admin/change.php in ProNews 1.5 does not check whether a user is permitted to change news items, which allows remote attackers to add or delete information within an item, and possibly have other imp… NVD-CWE-Other
CVE-2006-6580 2008-09-6 06:15 2006-12-16 Show GitHub Exploit DB Packet Storm
313424 - scriptmate user_manager ScriptMate User Manager 2.1 and earlier allow remote attackers to obtain sensitive information via unspecified vectors related to (1) the Logins box and (2) the Search box. NVD-CWE-Other
CVE-2006-6583 2008-09-6 06:15 2006-12-16 Show GitHub Exploit DB Packet Storm
313425 - torrentflux torrentflux Cross-site scripting (XSS) vulnerability in dir.php in TorrentFlux 2.2, when allows remote attackers to inject arbitrary web script or HTML via double URL-encoded strings in the dir parameter, a rela… NVD-CWE-Other
CVE-2006-6600 2008-09-6 06:15 2006-12-16 Show GitHub Exploit DB Packet Storm
313426 - moodle moodle Cross-site scripting (XSS) vulnerability in mod/forum/discuss.php in Moodle 1.6.1 allows remote attackers to inject arbitrary web script or HTML via the navtail parameter. NOTE: The provenance of th… NVD-CWE-Other
CVE-2006-6625 2008-09-6 06:15 2006-12-18 Show GitHub Exploit DB Packet Storm
313427 - moodle moodle Cross-site scripting (XSS) vulnerability in an unspecified component of Moodle 1.5 allows remote attackers to inject arbitrary web script or HTML via a javascript URI in the SRC attribute of an IMG e… NVD-CWE-Other
CVE-2006-6626 2008-09-6 06:15 2006-12-18 Show GitHub Exploit DB Packet Storm
313428 - ibm db2_universal_database IBM DB2 8.1 before FixPak 14 allows remote attackers to cause a denial of service via a crafted SQLJRA packet, which causes a NULL pointer dereference in the sqle_db2ra_as_recvrequest function in DB2… NVD-CWE-Other
CVE-2006-6638 2008-09-6 06:15 2006-12-20 Show GitHub Exploit DB Packet Storm
313429 - chetcpasswd chetcpasswd Multiple unspecified vulnerabilities in chetcpasswd 2.4.1 allow local users to gain privileges via unspecified vectors related to executing (1) the cp program, (2) the mail program, or (3) the progra… NVD-CWE-Other
CVE-2006-6639 2008-09-6 06:15 2006-12-20 Show GitHub Exploit DB Packet Storm
313430 - netbsd netbsd The sendmsg function in NetBSD-current before 20061023, NetBSD 3.0 and 3.0.1 before 20061024, and NetBSD 2.x before 20061029, when run on a 64-bit architecture, allows attackers to cause a denial of … NVD-CWE-Other
CVE-2006-6654 2008-09-6 06:15 2006-12-20 Show GitHub Exploit DB Packet Storm