Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Feb. 9, 2026, 12:59 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
241641 10 危険 シスコシステムズ - Cisco Network Services (CNS) NetFlow Collection Engine (NFC) における製品の設定を変更される脆弱性 - CVE-2007-2282 2012-06-26 15:46 2007-04-25 Show GitHub Exploit DB Packet Storm
241642 7.5 危険 dcp-portal - DCP-Portal における PHP リモートファイルインクルージョンの脆弱性 - CVE-2007-2278 2012-06-26 15:46 2007-04-25 Show GitHub Exploit DB Packet Storm
241643 7.5 危険 alessandro lulli - Alessandro Lulli wavewoo の include/loading.php における PHP リモートファイルインクルージョンの脆弱性 - CVE-2007-2273 2012-06-26 15:46 2007-04-25 Show GitHub Exploit DB Packet Storm
241644 7.5 危険 awbs - AWBS の docs/front-end-demo/cart2.php における PHP リモートファイルインクルージョンの脆弱性 - CVE-2007-2272 2012-06-26 15:46 2007-04-25 Show GitHub Exploit DB Packet Storm
241645 7.5 危険 bibtex - bibtex mase における PHP リモートファイルインクルージョンの脆弱性 CWE-94
コード・インジェクション 		CVE-2007-2260 2012-06-26 15:46 2007-04-25 Show GitHub Exploit DB Packet Storm
241646 7.5 危険 esforum - EsForum の forum.php における SQL インジェクションの脆弱性 - CVE-2007-2259 2012-06-26 15:46 2007-04-25 Show GitHub Exploit DB Packet Storm
241647 7.5 危険 fully modded phpbb - Fully Modded phpBB2 の subscp.php における PHP リモートファイルインクルージョンの脆弱性 - CVE-2007-2257 2012-06-26 15:46 2007-04-25 Show GitHub Exploit DB Packet Storm
241648 7.5 危険 alexscriptengine - Download-Engine における PHP リモートファイルインクルージョンの脆弱性 - CVE-2007-2255 2012-06-26 15:46 2007-04-25 Show GitHub Exploit DB Packet Storm
241649 7.5 危険 DeltaScripts - PHP Classifieds の admin/setup/level2.php における PHP リモートファイルインクルージョンの脆弱性 - CVE-2007-2254 2012-06-26 15:46 2007-04-25 Show GitHub Exploit DB Packet Storm
241650 5 警告 Exponent CMS project - Exponent CMS におけるパス情報を取得される脆弱性 CWE-200
情報漏えい 		CVE-2007-2253 2012-06-26 15:46 2007-04-25 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:April 20, 2026, 4:09 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
279791 - gentoo linux The configuration of NetHack 3.4.3-r1 and earlier, Falcon's Eye 1.9.4a and earlier, and Slash'EM 0.0.760 and earlier on Gentoo Linux allows local users in the games group to modify saved games files … NVD-CWE-Other
CVE-2006-1390 2018-10-19 01:32 2006-03-25 Show GitHub Exploit DB Packet Storm
279792 - gentoo linux This vulnerability applies only to the following games/versions: 1) NetHack 3.4.3-r1 and previous 2) Falcon's Eye 1.9.4a and previous 3) Slash'EM 0.0.760 and previous NVD-CWE-Other
CVE-2006-1390 2018-10-19 01:32 2006-03-25 Show GitHub Exploit DB Packet Storm
279793 - pablo_software_solutions baby_asp_web_server
quick_and_easy_web_server 		The (a) Quick 'n Easy Web Server before 3.1.1 and (b) Baby ASP Web Server 2.7.2 allows remote attackers to obtain the source code of ASP files via (1) . (dot) and (2) space characters in the extensio… NVD-CWE-Other
CVE-2006-1391 2018-10-19 01:32 2006-03-25 Show GitHub Exploit DB Packet Storm
279794 - phpadsnew
phppgads 		phpadsnew
phppgads 		Multiple cross-site scripting (XSS) vulnerabilities in (a) phpAdsNew and (b) phpPgAds before 2.0.8 allow remote attackers to inject arbitrary web script or HTML via the (1) certain parameters to the … NVD-CWE-Other
CVE-2006-1397 2018-10-19 01:32 2006-03-28 Show GitHub Exploit DB Packet Storm
279795 - sixal g-book Cross-site scripting (XSS) vulnerability in guestbook.php in G-Book 1.0 allows remote attackers to inject arbitrary web script or HTML via the g_message parameter. NVD-CWE-Other
CVE-2006-1398 2018-10-19 01:32 2006-03-28 Show GitHub Exploit DB Packet Storm
279796 - tft_gallery tft_gallery TFT Gallery 0.10 stores sensitive information under the web root with insufficient access control, which allows remote attackers to download the admin password file and obtain password hashes via a d… NVD-CWE-Other
CVE-2006-1412 2018-10-19 01:32 2006-03-28 Show GitHub Exploit DB Packet Storm
279797 - nuked-klan nuked-klan SQL injection vulnerability in the Calendar module in nuked-klan 1.7.5 and earlier allows remote attackers to execute arbitrary SQL commands via the m parameter to index.php. NVD-CWE-Other
CVE-2006-1419 2018-10-19 01:32 2006-03-29 Show GitHub Exploit DB Packet Storm
279798 - arabless saphplesson SQL injection vulnerability in print.php in SaphpLesson 2.0 allows remote attackers to execute arbitrary SQL commands via the lessid parameter. NVD-CWE-Other
CVE-2006-1420 2018-10-19 01:32 2006-03-29 Show GitHub Exploit DB Packet Storm
279799 - arthur_konze_webdesign akocomment Multiple SQL injection vulnerabilities in akocomment.php in AkoComment 2.0 module for Mambo, with magic_quotes_gpc disabled, allow remote attackers to execute arbitrary SQL commands via the (1) acnam… NVD-CWE-Other
CVE-2006-1421 2018-10-19 01:32 2006-03-29 Show GitHub Exploit DB Packet Storm
279800 - arthur_konze_webdesign akocomment In order to exploit this vulnerability, the 'magic_quotes_gpc' parameter must be disabled. NVD-CWE-Other
CVE-2006-1421 2018-10-19 01:32 2006-03-29 Show GitHub Exploit DB Packet Storm