Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 30, 2026, 6 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
241041 7.5 危険 lizge - Lizge V.20 Web Portal の index.php における PHP リモートファイルインクルージョンの脆弱性 - CVE-2006-4230 2012-09-25 15:35 2006-08-18 Show GitHub Exploit DB Packet Storm
241042 7.5 危険 Mambo Foundation
Joomla!
- Mambo および Joomla! 用の com_lm における PHP リモートファイルインクルージョンの脆弱性 - CVE-2006-4229 2012-09-25 15:35 2006-08-18 Show GitHub Exploit DB Packet Storm
241043 9.3 危険 IBM - IBM Access Support eGatherer におけるスタックベースのバッファオーバーフローの脆弱性 - CVE-2006-4221 2012-09-25 15:35 2006-08-18 Show GitHub Exploit DB Packet Storm
241044 4.3 警告 Novell - Novell GroupWise WebAccess の webacc におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2006-4220 2012-09-25 15:35 2006-12-31 Show GitHub Exploit DB Packet Storm
241045 7.5 危険 マイクロソフト - The Terminal Services COM object におけるサービス運用妨害 (DoS) の脆弱性 - CVE-2006-4219 2012-09-25 15:35 2006-08-18 Show GitHub Exploit DB Packet Storm
241046 7.5 危険 mamboxchange - Mambo 用の mmp コンポーネントにおける PHP リモートファイルインクルージョンの脆弱性 - CVE-2006-4203 2012-09-25 15:35 2006-08-17 Show GitHub Exploit DB Packet Storm
241047 7.5 危険 musicbrainz - libmusicbrainz および SVN 8406 におけるバッファオーバーフローの脆弱性 - CVE-2006-4197 2012-09-25 15:35 2006-08-17 Show GitHub Exploit DB Packet Storm
241048 6.8 警告 mamboxchange - Mambo 用の peoplebook コンポーネントにおける PHP リモートファイルインクルージョンの脆弱性 CWE-94
コード・インジェクション
CVE-2006-4195 2012-09-25 15:35 2006-08-17 Show GitHub Exploit DB Packet Storm
241049 7.5 危険 マイクロソフト - Microsoft Internet Explorer 6.0 SP1 における任意のコードを実行される脆弱性 - CVE-2006-4193 2012-09-25 15:35 2006-08-16 Show GitHub Exploit DB Packet Storm
241050 2.1 注意 Novell - Novell eDirectory の iManager におけるパスワードを取得される脆弱性 - CVE-2006-4186 2012-09-25 15:35 2006-08-16 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 30, 2026, 4:16 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
285081 - netfortris trixbox maint/modules/home/index.php in Fonality trixbox allows remote attackers to execute arbitrary commands via shell metacharacters in the lang parameter. CWE-94
Code Injection
CVE-2014-5112 2024-11-21 11:11 2014-07-29 Show GitHub Exploit DB Packet Storm
285082 - netfortris trixbox Multiple directory traversal vulnerabilities in Fonality trixbox allow remote attackers to read arbitrary files via a .. (dot dot) in the lang parameter to (1) home/index.php, (2) asterisk_info/aster… CWE-22
Path Traversal
CVE-2014-5111 2024-11-21 11:11 2014-07-29 Show GitHub Exploit DB Packet Storm
285083 - netfortris trixbox Cross-site scripting (XSS) vulnerability in user/help/html/index.php in Fonality trixbox allows remote attackers to inject arbitrary web script or HTML via the id_nodo parameter. CWE-79
Cross-site Scripting
CVE-2014-5110 2024-11-21 11:11 2014-07-29 Show GitHub Exploit DB Packet Storm
285084 - netfortris trixbox SQL injection vulnerability in maint/modules/endpointcfg/endpoint_generic.php in Fonality trixbox allows remote attackers to execute arbitrary SQL commands via the mac parameter in a Submit action. CWE-89
SQL Injection
CVE-2014-5109 2024-11-21 11:11 2014-07-29 Show GitHub Exploit DB Packet Storm
285085 - concrete5
concretecms
concrete5
concrete_cms
Cross-site scripting (XSS) vulnerability in single_pages\download_file.php in concrete5 before 5.6.3 allows remote attackers to inject arbitrary web script or HTML via the HTTP Referer header to inde… CWE-79
Cross-site Scripting
CVE-2014-5108 2024-11-21 11:11 2014-07-29 Show GitHub Exploit DB Packet Storm
285086 - concrete5
concretecms
concrete5
concrete_cms
concrete5 before 5.6.3 allows remote attackers to obtain the installation path via a direct request to (1) system/basics/editor.php, (2) system/view.php, (3) system/environment/file_storage_locations… CWE-200
Information Exposure
CVE-2014-5107 2024-11-21 11:11 2014-07-29 Show GitHub Exploit DB Packet Storm
285087 - invisioncommunity invision_power_board Cross-site scripting (XSS) vulnerability in Invision Power IP.Board (aka IPB or Power Board) 3.4.x through 3.4.6 allows remote attackers to inject arbitrary web script or HTML via the HTTP Referer he… CWE-79
Cross-site Scripting
CVE-2014-5106 2024-11-21 11:11 2014-07-29 Show GitHub Exploit DB Packet Storm
285088 - ol-commerce_project ol-commerce Multiple cross-site scripting (XSS) vulnerabilities in ol-commerce 2.1.1 allow remote attackers to inject arbitrary web script or HTML via the (1) a_country parameter in a process action to affiliate… CWE-79
Cross-site Scripting
CVE-2014-5105 2024-11-21 11:11 2014-07-29 Show GitHub Exploit DB Packet Storm
285089 - ol-commerce_project ol-commerce Multiple SQL injection vulnerabilities in ol-commerce 2.1.1 allow remote attackers to execute arbitrary SQL commands via the (1) a_country parameter in a process action to affiliate_signup.php, (2) a… CWE-89
SQL Injection
CVE-2014-5104 2024-11-21 11:11 2014-07-29 Show GitHub Exploit DB Packet Storm
285090 - microsoft windows_xp Microsoft Windows XP SP3 does not validate addresses in certain IRP handler routines, which allows local users to write data to arbitrary memory locations, and consequently gain privileges, via a cra… CWE-20
 Improper Input Validation 
CVE-2014-4971 2024-11-21 11:11 2014-07-27 Show GitHub Exploit DB Packet Storm