Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Feb. 9, 2026, 12:59 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
241221 7.8 危険 Drupal - Drupal 用の Print モジュールにおけるノードアクセスモジュール内の制限された投稿を読まれる脆弱性 - CVE-2007-3689 2012-06-26 15:46 2007-07-9 Show GitHub Exploit DB Packet Storm
241222 2.6 注意 Dotclear - DotClear におけるクロスサイトリクエストフォージェリの脆弱性 - CVE-2007-3688 2012-06-26 15:46 2007-07-11 Show GitHub Exploit DB Packet Storm
241223 7.5 危険 aigaion - Aigaion の pagetopic.php における SQL インジェクションの脆弱性 - CVE-2007-3683 2012-06-26 15:46 2007-07-11 Show GitHub Exploit DB Packet Storm
241224 4.3 警告 シトリックス・システムズ - Citrix EPA ActiveX コントロールにおける任意のプログラムをクライアントシステム上にダウンロードされる脆弱性 - CVE-2007-3679 2012-06-26 15:46 2007-07-25 Show GitHub Exploit DB Packet Storm
241225 4.3 警告 Dotclear - DotClear の ecrire/tools.php におけるクロスサイトスクリプティングの脆弱性 - CVE-2007-3672 2012-06-26 15:46 2007-07-10 Show GitHub Exploit DB Packet Storm
241226 5 警告 activereportsexcelreport - ActiveReportsExcelReport の EXCLEXPT.DLL におけるサービス運用妨害 (DoS) の脆弱性 - CVE-2007-3667 2012-06-26 15:46 2007-07-10 Show GitHub Exploit DB Packet Storm
241227 5 警告 eltima software - Eltima Software RunService ActiveX コントロールにおけるサービス運用妨害 (DoS) の脆弱性 - CVE-2007-3664 2012-06-26 15:46 2007-07-10 Show GitHub Exploit DB Packet Storm
241228 5 警告 eltima software - VSPort.DLL におけるサービス運用妨害 (DoS) の脆弱性 - CVE-2007-3661 2012-06-26 15:46 2007-07-10 Show GitHub Exploit DB Packet Storm
241229 4.3 警告 fascript - Farsi Script FaName におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2007-3653 2012-06-26 15:46 2008-07-8 Show GitHub Exploit DB Packet Storm
241230 6.8 警告 fascript - Farsi Script FaName の class/page.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2007-3652 2012-06-26 15:46 2008-07-8 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:April 23, 2026, 4 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
288431 - phpbb phpbb PHP remote file inclusion vulnerability in includes/functions_static_topics.php in the Nivisec Static Topics module for phpBB 1.0 and earlier allows remote attackers to execute arbitrary PHP code via… CWE-94
Code Injection 		CVE-2006-5191 2017-10-19 10:29 2006-10-10 Show GitHub Exploit DB Packet Storm
288432 - phpbb phpbb Successful exploitation requires that "register_globals" is enabled. CWE-94
Code Injection 		CVE-2006-5191 2017-10-19 10:29 2006-10-10 Show GitHub Exploit DB Packet Storm
288433 - phpgreetz phpgreetz PHP remote file inclusion vulnerability in includes/footer.php in phpGreetz 0.99 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the PHPGREETZ_INCLUDE_DIR parameter. NVD-CWE-Other
CVE-2006-5192 2017-10-19 10:29 2006-10-10 Show GitHub Exploit DB Packet Storm
288434 - invision_power_services invision_gallery Directory traversal vulnerability in Invision Gallery 2.0.7 allows remote attackers to read arbitrary files via a .. (dot dot) sequence in the dir parameter in (1) index.php and (2) forum/index.php, … NVD-CWE-Other
CVE-2006-5205 2017-10-19 10:29 2006-10-10 Show GitHub Exploit DB Packet Storm
288435 - invision_power_services invision_gallery SQL injection vulnerability in Invision Gallery 2.0.7 allows remote attackers to execute arbitrary SQL commands via the album parameter in (1) index.php and (2) forum/index.php, when the rate command… NVD-CWE-Other
CVE-2006-5206 2017-10-19 10:29 2006-10-10 Show GitHub Exploit DB Packet Storm
288436 - deltascripts php_classifieds Multiple SQL injection vulnerabilities in PHP Classifieds 7.1 allow remote attackers to execute arbitrary SQL commands via (1) the catid_search parameter in search.php and (2) the catid parameter in … NVD-CWE-Other
CVE-2006-5208 2017-10-19 10:29 2006-10-10 Show GitHub Exploit DB Packet Storm
288437 - phpbb_group phpbb PHP remote file inclusion vulnerability in admin/admin_topic_action_logging.php in Admin Topic Action Logging Mod 0.95 and earlier, as used in phpBB 2.0 up to 2.0.21, allows remote attackers to execu… NVD-CWE-Other
CVE-2006-5209 2017-10-19 10:29 2006-10-10 Show GitHub Exploit DB Packet Storm
288438 - sergey_lyubka simple_httpd Stack-based buffer overflow in Sergey Lyubka Simple HTTPD (shttpd) 1.34 allows remote attackers to execute arbitrary code via a long URI. NVD-CWE-Other
CVE-2006-5216 2017-10-19 10:29 2006-10-10 Show GitHub Exploit DB Packet Storm
288439 - dimension_of_phpbb dimension_of_phpbb Multiple PHP remote file inclusion vulnerabilities in Dimension of phpBB 0.2.6 and earlier allow remote attackers to execute arbitrary PHP code via a URL in the phpbb_root_path parameter in (1) inclu… NVD-CWE-Other
CVE-2006-5222 2017-10-19 10:29 2006-10-11 Show GitHub Exploit DB Packet Storm
288440 - dimitri_seitz security_suite_ip_logger PHP remote file inclusion vulnerability in includes/logger_engine.php in Dimitri Seitz Security Suite IP Logger 1.0.0 in dwingmods for phpBB allows remote attackers to execute arbitrary PHP code via … NVD-CWE-Other
CVE-2006-5224 2017-10-19 10:29 2006-10-11 Show GitHub Exploit DB Packet Storm