Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":July 1, 2026, 10 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
241851 7.5 危険 The Jamroom Network - Jamroom における PHP リモートファイルインクルージョンの脆弱性 CWE-94
コード・インジェクション 		CVE-2008-2883 2012-09-25 17:17 2008-06-21 Show GitHub Exploit DB Packet Storm
241852 9.3 危険 IBM - IBM AFP Viewer プラグインにおけるヒープベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2008-2880 2012-09-25 17:17 2008-06-26 Show GitHub Exploit DB Packet Storm
241853 7.5 危険 munky - mUnky の index.php におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2008-2876 2012-09-25 17:17 2008-06-26 Show GitHub Exploit DB Packet Storm
241854 4.3 警告 pegames - PEGames の itemplate2.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2008-2871 2012-09-25 17:17 2008-06-26 Show GitHub Exploit DB Packet Storm
241855 7.5 危険 kalptaru infotech - Kalptaru Infotech PHP Site Lock の index.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-2865 2012-09-25 17:17 2008-06-25 Show GitHub Exploit DB Packet Storm
241856 5 警告 Netwin Ltd - NetWin SurgeMail の IMAP サービスにおけるサービス運用妨害 (DoS) の脆弱性 CWE-noinfo
情報不足 		CVE-2008-2859 2012-09-25 17:17 2008-06-25 Show GitHub Exploit DB Packet Storm
241857 7.5 危険 ownrs - OwnRS Beta の clanek.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-2856 2012-09-25 17:17 2008-06-25 Show GitHub Exploit DB Packet Storm
241858 4.3 警告 ownrs - OwnRS Beta の clanek.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2008-2855 2012-09-25 17:17 2008-06-25 Show GitHub Exploit DB Packet Storm
241859 7.5 危険 orlando cms - Orlando CMS における PHP リモートファイルインクルージョンの脆弱性 CWE-94
コード・インジェクション 		CVE-2008-2854 2012-09-25 17:17 2008-06-25 Show GitHub Exploit DB Packet Storm
241860 10 危険 offsystem - OFF System におけるバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2008-2851 2012-09-25 17:17 2008-06-25 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:July 1, 2026, 4:27 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
345671 - arab_portal arab_portal Multiple cross-site scripting (XSS) vulnerabilities in Arab Portal 2.0.1 stable allow remote attackers to inject arbitrary web script or HTML via the (1) adminJump and (2) forum_middle parameters in … NVD-CWE-Other
CVE-2006-1665 2018-10-19 01:33 2006-04-7 Show GitHub Exploit DB Packet Storm
345672 - arab_portal arab_portal SQL injection vulnerability in forum.php in Arab Portal 2.0.1 stable allows remote attackers to execute arbitrary SQL commands via the mineID parameter. NVD-CWE-Other
CVE-2006-1666 2018-10-19 01:33 2006-04-7 Show GitHub Exploit DB Packet Storm
345673 - phpheaven phpmychat SQL injection vulnerability in chat/messagesL.php3 in phpHeaven Team PHPMyChat 0.14.5 and earlier allows remote attackers to execute arbitrary SQL commands via the T parameter. NOTE: this issue can … NVD-CWE-Other
CVE-2006-1669 2018-10-19 01:33 2006-04-7 Show GitHub Exploit DB Packet Storm
345674 - phpwebgallery phpwebgallery Multiple cross-site scripting (XSS) vulnerabilities in PHPWebGallery 1.4.1 allow remote attackers to inject arbitrary web script or HTML via the (1) cat, (2) num, and (3) search parameters to (a) cat… NVD-CWE-Other
CVE-2006-1675 2018-10-19 01:33 2006-04-11 Show GitHub Exploit DB Packet Storm
345675 - jupiter_cms jupiter_cms Cross-site scripting (XSS) vulnerability in modules/online.php in Jupiter CMS 1.1.5 allows remote attackers to inject arbitrary web script or HTML via the layout parameter to index.php. NVD-CWE-Other
CVE-2006-1679 2018-10-19 01:33 2006-04-11 Show GitHub Exploit DB Packet Storm
345676 - jupiter_cms jupiter_cms Jupiter CMS 1.1.5, when display_errors is enabled, allows remote attackers to obtain the full server path via a direct request to modules/online.php. NVD-CWE-Other
CVE-2006-1680 2018-10-19 01:33 2006-04-11 Show GitHub Exploit DB Packet Storm
345677 - chipmunk_scripts chipmunk_guestbook SQL injection vulnerability in admin/login.php in Chipmunk Guestbook allows remote attackers to execute arbitrary SQL commands and bypass login authentication via the User name. NVD-CWE-Other
CVE-2006-1683 2018-10-19 01:33 2006-04-11 Show GitHub Exploit DB Packet Storm
345678 - hp hp-ux Unspecified vulnerability in su in HP HP-UX B.11.11, when using the LDAP netgroup feature, allows local users to gain unspecified access. NVD-CWE-Other
CVE-2006-1689 2018-10-19 01:33 2006-04-11 Show GitHub Exploit DB Packet Storm
345679 - hp hp-ux HP-UX B.11.11: Install PHCO_34545 or later. NVD-CWE-Other
CVE-2006-1689 2018-10-19 01:33 2006-04-11 Show GitHub Exploit DB Packet Storm
345680 - matt_wright matt_wright_guestbook Cross-site scripting (XSS) vulnerability in Matt Wright Guestbook 2.3.1 allows remote attackers to execute arbitrary web script or HTML via the (1) Your Name, (2) E-Mail, or (3) Comments fields when … NVD-CWE-Other
CVE-2006-1697 2018-10-19 01:33 2006-04-11 Show GitHub Exploit DB Packet Storm