Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Feb. 9, 2026, 12:59 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
241751 4.3 警告 drake team - Drake CMS の admin/classes/ui.dta.php におけるクロスサイトスクリプティングの脆弱性 - CVE-2007-1848 2012-06-26 15:46 2007-04-3 Show GitHub Exploit DB Packet Storm
241752 7.5 危険 avatic - Aardvark Topsites PHP における PHP リモートファイルインクルージョンの脆弱性 - CVE-2007-1844 2012-06-26 15:46 2007-04-3 Show GitHub Exploit DB Packet Storm
241753 7.5 危険 codebb - CodeBB における PHP リモートファイルインクルージョンの脆弱性 - CVE-2007-1839 2012-06-26 15:46 2007-04-2 Show GitHub Exploit DB Packet Storm
241754 9 危険 data domain - Data Domain OS のコマンドライン管理インターフェースにおける任意のコマンドを実行される脆弱性 - CVE-2007-1836 2012-06-26 15:46 2007-04-2 Show GitHub Exploit DB Packet Storm
241755 7.8 危険 シスコシステムズ - CUCM におけるサービス運用妨害 (DoS) の脆弱性 - CVE-2007-1834 2012-06-26 15:46 2007-03-28 Show GitHub Exploit DB Packet Storm
241756 5 警告 シスコシステムズ - CUCM の SCCP 実装におけるサービス運用妨害 (DoS) の脆弱性 - CVE-2007-1833 2012-06-26 15:46 2007-03-28 Show GitHub Exploit DB Packet Storm
241757 7.8 危険 シスコシステムズ - CUCM の IPSec Manager Service におけるサービス運用妨害 (DoS) の脆弱性 - CVE-2007-1826 2012-06-26 15:46 2007-03-28 Show GitHub Exploit DB Packet Storm
241758 10 危険 Alcatel-Lucent - Alcatel-Lucent Lucent Technologies ボイスメールシステムにおけるメールボックスを再設定される脆弱性 - CVE-2007-1822 2012-06-26 15:46 2007-04-2 Show GitHub Exploit DB Packet Storm
241759 10 危険 dproxy - dproxy-nexgen の dns_decode_reverse_name 関数におけるスタックベースのバッファオーバーフローの脆弱性 - CVE-2007-1866 2012-06-26 15:46 2004-06-24 Show GitHub Exploit DB Packet Storm
241760 7.5 危険 forum picture and meta tags - phpBB の Forum ピクチャなどの MOD_forum_fields_parse.php における PHP リモートファイルインクルージョンの脆弱性 - CVE-2007-1818 2012-06-26 15:46 2007-04-2 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:April 23, 2026, 4 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
279551 - arabless saphplesson SaphpLesson 3.0 does not initialize array variables, which allows remote attackers to obtain the full path via an non-array (1) hrow parameter to (a) show.php or (b) index.php; the (2) Lsnrow paramet… NVD-CWE-Other
CVE-2006-2278 2018-10-19 01:38 2006-05-10 Show GitHub Exploit DB Packet Storm
279552 - arabless saphplesson Multiple SQL injection vulnerabilities in SaphpLesson 3.0 allow remote attackers to execute arbitrary SQL commands via (1) the Find parameter in (a) search.php, and the (2) LID and (3) Rate parameter… NVD-CWE-Other
CVE-2006-2279 2018-10-19 01:38 2006-05-10 Show GitHub Exploit DB Packet Storm
279553 - openengine openengine Directory traversal vulnerability in website.php in openEngine 1.8 Beta 2 and earlier allows remote attackers to list arbitrary directories and read arbitrary files via a .. (dot dot) in the template… NVD-CWE-Other
CVE-2006-2280 2018-10-19 01:38 2006-05-10 Show GitHub Exploit DB Packet Storm
279554 - x-scripts x-poll X-Scripts X-Poll (xpoll) 2.30 allows remote attackers to execute arbitrary PHP code by using admin/images/add.php to upload a PHP file, then access it. CWE-94
Code Injection 		CVE-2006-2281 2018-10-19 01:38 2006-05-10 Show GitHub Exploit DB Packet Storm
279555 - x7_group x7_chat Cross-site scripting (XSS) vulnerability in X7 Chat 2.0.2 and earlier allows remote attackers to inject arbitrary web script or HTML via a javascript URI in the URL of an avatar, possibly related to … NVD-CWE-Other
CVE-2006-2282 2018-10-19 01:38 2006-05-10 Show GitHub Exploit DB Packet Storm
279556 - spiffyjr phpraid Multiple PHP remote file inclusion vulnerabilities in SpiffyJr phpRaid 2.9.5 through 3.0.b3 allow remote attackers to execute arbitrary PHP code via a URL in the phpbb_root_path parameter in (1) auth… NVD-CWE-Other
CVE-2006-2283 2018-10-19 01:38 2006-05-10 Show GitHub Exploit DB Packet Storm
279557 - claroline
dokeos 		claroline
dokeos 		Multiple PHP remote file inclusion vulnerabilities in Claroline 1.7.5 allow remote attackers to execute arbitrary PHP code via a URL in the (1) clarolineRepositorySys parameter in ldap.inc.php and th… NVD-CWE-Other
CVE-2006-2284 2018-10-19 01:38 2006-05-10 Show GitHub Exploit DB Packet Storm
279558 - claroline
dokeos 		claroline
dokeos 		Successful exploitation requires that "register_globals" is enabled. NVD-CWE-Other
CVE-2006-2284 2018-10-19 01:38 2006-05-10 Show GitHub Exploit DB Packet Storm
279559 - oracle database_server SQL injection vulnerability in Oracle Database Server 9.2.0.7 and 10.1.0.5 allows remote attackers to execute arbitrary SQL commands via the DELETE_FROM_TABLE function in the DBMS_LOGMNR_SESSION (Log… CWE-89
SQL Injection 		CVE-2006-1871 2018-10-19 01:37 2006-04-20 Show GitHub Exploit DB Packet Storm
279560 - oracle database_server Unspecified vulnerability in Oracle Database Server 9.0.1.5 and 9.2.0.7 has unknown impact and attack vectors in the Oracle Enterprise Manager Intelligent Agent component, aka Vuln# DB07. NVD-CWE-Other
CVE-2006-1872 2018-10-19 01:37 2006-04-20 Show GitHub Exploit DB Packet Storm