Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Feb. 9, 2026, 12:59 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
241441 7.5 危険 Dokeos - Dokeos の main/auth/my_progress.php における SQL インジェクションの脆弱性 - CVE-2007-2902 2012-06-26 15:46 2007-05-30 Show GitHub Exploit DB Packet Storm
241442 4.3 警告 Dokeos - Dokeos におけるクロスサイトスクリプティングの脆弱性 - CVE-2007-2901 2012-06-26 15:46 2007-05-30 Show GitHub Exploit DB Packet Storm
241443 7.5 危険 2z project - 2z project の includes/rating.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2007-2898 2012-06-26 15:46 2007-05-30 Show GitHub Exploit DB Packet Storm
241444 2.1 注意 bochs - Bochs のフロッピーディスクコントローラーのエミュレータにおけるサービス運用妨害 (DoS) の脆弱性 - CVE-2007-2894 2012-06-26 15:46 2007-05-29 Show GitHub Exploit DB Packet Storm
241445 7.2 危険 bochs - Bochs NE2000 エミュレータデバイスの bx_ne2k_c::rx_frame 関数におけるヒープベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2007-2893 2012-06-26 15:46 2007-05-29 Show GitHub Exploit DB Packet Storm
241446 4.3 警告 asp-nuke - ASP-Nuke の news.asp におけるクロスサイトスクリプティングの脆弱性 - CVE-2007-2892 2012-06-26 15:46 2007-05-29 Show GitHub Exploit DB Packet Storm
241447 7.5 危険 firmworx - FirmWorX における PHP リモートファイルインクルージョンの脆弱性 - CVE-2007-2891 2012-06-26 15:46 2007-05-29 Show GitHub Exploit DB Packet Storm
241448 7.5 危険 cpcommerce - cpCommerce の category.php における SQL インジェクションの脆弱性 - CVE-2007-2890 2012-06-26 15:46 2007-05-29 Show GitHub Exploit DB Packet Storm
241449 7.5 危険 Dokeos - Dokeos の tracking/courseLog.php における SQL インジェクションの脆弱性 - CVE-2007-2889 2012-06-26 15:46 2007-05-29 Show GitHub Exploit DB Packet Storm
241450 7.6 危険 EZB Systems - UltralSO におけるスタックベースのバッファオーバーフローの脆弱性 - CVE-2007-2888 2012-06-26 15:46 2007-05-29 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:April 21, 2026, 4:10 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
279811 - vscripts vnews Multiple cross-site scripting (XSS) vulnerabilities in news.php in vscripts (aka Kuba Kunkiewicz) VNews 1.2 allow remote attackers to inject arbitrary web script or HTML via the (1) autorkomentarza a… NVD-CWE-Other
CVE-2006-1544 2018-10-19 01:33 2006-03-30 Show GitHub Exploit DB Packet Storm
279812 - vscripts vnews Direct static code injection vulnerability in admin/config.php in vscripts (aka Kuba Kunkiewicz) VNews 1.2 allows remote authenticated administrators to execute code by inserting the code into variab… NVD-CWE-Other
CVE-2006-1545 2018-10-19 01:33 2006-03-30 Show GitHub Exploit DB Packet Storm
279813 - php php PHP 4.4.2 and 5.1.2 allows local users to cause a crash (segmentation fault) by defining and executing a recursive function. NOTE: it has been reported by a reliable third party that some later vers… CWE-399
 Resource Management Errors 		CVE-2006-1549 2018-10-19 01:33 2006-04-11 Show GitHub Exploit DB Packet Storm
279814 - php php Upgrade to PHP 5.1.3-RC3 CWE-399
 Resource Management Errors 		CVE-2006-1549 2018-10-19 01:33 2006-04-11 Show GitHub Exploit DB Packet Storm
279815 - dia dia Multiple buffer overflows in the xfig import code (xfig-import.c) in Dia 0.87 and later before 0.95-pre6 allow user-assisted attackers to have an unknown impact via a crafted xfig file, possibly invo… CWE-119
Incorrect Access of Indexable Resource ('Range Error')  		CVE-2006-1550 2018-10-19 01:33 2006-03-31 Show GitHub Exploit DB Packet Storm
279816 - georges_auberger pajax Eval injection vulnerability in pajax_call_dispatcher.php in PAJAX 0.5.1 and earlier allows remote attackers to execute arbitrary code via the (1) $method and (2) $args parameters. NVD-CWE-Other
CVE-2006-1551 2018-10-19 01:33 2006-04-14 Show GitHub Exploit DB Packet Storm
279817 - tachyon vsns_lemon SQL injection vulnerability in functions/final_functions.php in VSNS Lemon 3.2.0, with magic_quotes_gpc disabled, allows remote attackers to execute arbitrary SQL commands via the id parameter. NVD-CWE-Other
CVE-2006-1553 2018-10-19 01:33 2006-03-31 Show GitHub Exploit DB Packet Storm
279818 - tachyon vsns_lemon Successful exploitation requires that the "magic_quotes_gpc" parameter is disabled. NVD-CWE-Other
CVE-2006-1553 2018-10-19 01:33 2006-03-31 Show GitHub Exploit DB Packet Storm
279819 - tachyon vsns_lemon Cross-site scripting (XSS) vulnerability in VSNS Lemon 3.2.0 allows remote attackers to inject arbitrary web script or HTML via the name parameter while adding a comment. NVD-CWE-Other
CVE-2006-1554 2018-10-19 01:33 2006-03-31 Show GitHub Exploit DB Packet Storm
279820 - tachyon vsns_lemon Successful exploitation requires that the "magic_quotes_gpc" parameter is disabled. NVD-CWE-Other
CVE-2006-1554 2018-10-19 01:33 2006-03-31 Show GitHub Exploit DB Packet Storm