Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 7, 2026, 10 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
241151 7.5 危険 johannes erdfelt - Johannes Erdfelt Kawf における PHP リモートファイルインクルージョンの脆弱性 - CVE-2006-5522 2012-09-25 15:36 2006-10-26 Show GitHub Exploit DB Packet Storm
241152 7.5 危険 net-dns.org - Net_DNS の DNS/RR.php における PHP リモートファイルインクルージョンの脆弱性 - CVE-2006-5521 2012-09-25 15:36 2006-10-26 Show GitHub Exploit DB Packet Storm
241153 6.8 警告 mambweather - Mambo 用の MambWeather コンポーネントにおける PHP リモートファイルインクルージョンの脆弱性 CWE-94
コード・インジェクション 		CVE-2006-5519 2012-09-25 15:36 2006-10-26 Show GitHub Exploit DB Packet Storm
241154 4.3 警告 phpadsnew
phppgads		 - phpAdsNew などの製品で使用される lib-history.inc.php におけるクロスサイトスクリプティングの脆弱性 - CVE-2006-5515 2012-09-25 15:36 2006-10-26 Show GitHub Exploit DB Packet Storm
241155 2.6 注意 jaxultrabb - JUBB の delete.php における任意の Web スクリプトなどを挿入される脆弱性 - CVE-2006-5511 2012-09-25 15:36 2006-10-25 Show GitHub Exploit DB Packet Storm
241156 7.5 危険 middlebury college - Segue CMS の themes/program/themesettings.inc.php におけるディレクトリトラバーサルの脆弱性 - CVE-2006-5498 2012-09-25 15:36 2006-10-25 Show GitHub Exploit DB Packet Storm
241157 7.5 危険 middlebury college - Segue CMS における PHP リモートファイルインクルージョンの脆弱性 - CVE-2006-5497 2012-09-25 15:36 2006-10-25 Show GitHub Exploit DB Packet Storm
241158 4 警告 Maarch - Maerys Archive における重要な情報を取得される脆弱性 - CVE-2006-5492 2012-09-25 15:36 2006-10-25 Show GitHub Exploit DB Packet Storm
241159 7.5 危険 middlebury college - Segue CMS における SQL インジェクションの脆弱性 - CVE-2006-5490 2012-09-25 15:36 2006-10-25 Show GitHub Exploit DB Packet Storm
241160 10 危険 marshal - Marshal MailMarshal SMTP などにおけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2006-5487 2012-09-25 15:36 2006-11-10 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 7, 2026, 4:13 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
355951 - horde turba Cross-site scripting (XSS) vulnerability in Horde Turba module before 1.2.5 allows remote attackers to inject arbitrary web script or HTML via the parent's frame page title. NVD-CWE-Other
CVE-2005-1315 2008-09-6 05:48 2005-05-2 Show GitHub Exploit DB Packet Storm
355952 - horde chora Cross-site scripting (XSS) vulnerability in Horde Chora module before 1.2.3 allows remote attackers to inject arbitrary web script or HTML via the parent's frame page title. NVD-CWE-Other
CVE-2005-1317 2008-09-6 05:48 2005-04-25 Show GitHub Exploit DB Packet Storm
355953 - horde forwards Cross-site scripting (XSS) vulnerability in Horde Forwards E-Mail Forwarding Manager before 2.2.2 allows remote attackers to inject arbitrary web script or HTML via the parent's frame page title. NVD-CWE-Other
CVE-2005-1318 2008-09-6 05:48 2005-05-2 Show GitHub Exploit DB Packet Storm
355954 - horde imp Cross-site scripting (XSS) vulnerability in Horde IMP Webmail client before 3.2.8 allows remote attackers to inject arbitrary web script or HTML via the parent's frame page title. NVD-CWE-Other
CVE-2005-1319 2008-09-6 05:48 2005-05-2 Show GitHub Exploit DB Packet Storm
355955 - horde mnemo Cross-site scripting (XSS) vulnerability in Horde Mnemo Note Manager before 1.1.4 allows remote attackers to inject arbitrary web script or HTML via the parent's frame page title. NVD-CWE-Other
CVE-2005-1320 2008-09-6 05:48 2005-05-2 Show GitHub Exploit DB Packet Storm
355956 - horde vaction Cross-site scripting (XSS) vulnerability in Horde Vacation module before 2.2.2 allows remote attackers to inject arbitrary web script or HTML via the parent's frame page title. NVD-CWE-Other
CVE-2005-1321 2008-09-6 05:48 2005-05-2 Show GitHub Exploit DB Packet Storm
355957 - horde nag Cross-site scripting (XSS) vulnerability in Horde Nag Task List Manager before 1.1.3 allows remote attackers to inject arbitrary web script or HTML via the parent's frame page title. NVD-CWE-Other
CVE-2005-1322 2008-09-6 05:48 2005-05-2 Show GitHub Exploit DB Packet Storm
355958 - voodoo_circle voodoo_circle Buffer overflow in VooDoo cIRCle BOTNET before 1.0.33 allows remote authenticated attackers to cause a denial of service (client crash) via a crafted packet. NVD-CWE-Other
CVE-2005-1326 2008-09-6 05:48 2005-05-2 Show GitHub Exploit DB Packet Storm
355959 - woltlab burning_board Cross-site scripting (XSS) vulnerability in pms.php for Woltlab Burning Board 2.3.1 PL2 and earlier allows remote attackers to inject arbitrary web script or HTML via the folderid parameter. NVD-CWE-Other
CVE-2005-1327 2008-09-6 05:48 2005-05-2 Show GitHub Exploit DB Packet Storm
355960 - apple mac_os_x
mac_os_x_server 		AppKit in Mac OS X 10.3.9 allows attackers to cause a denial of service (Cocoa application crash) via a malformed TIFF image that causes the NXSeek to use an incorrect offset, leading to an unhandled… CWE-20
 Improper Input Validation  		CVE-2005-1330 2008-09-6 05:48 2005-05-4 Show GitHub Exploit DB Packet Storm