Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 7, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
247711 6.8 警告 daniel naber - Daniel Naber LanguageTool の埋め込み Web サーバにおけるクロスサイトスクリプティングの脆弱性 - CVE-2007-1939 2012-06-26 15:46 2007-04-10 Show GitHub Exploit DB Packet Storm
247712 6.8 警告 dreamcodes - Scorp Book の smilies.php における PHP リモートファイルインクルージョンの脆弱性 - CVE-2007-1937 2012-06-26 15:46 2007-04-10 Show GitHub Exploit DB Packet Storm
247713 7.5 危険 dreamcodes - PcP-Book におけるディレクトリトラバーサルの脆弱性 - CVE-2007-1933 2012-06-26 15:46 2007-04-10 Show GitHub Exploit DB Packet Storm
247714 7.8 危険 cattadoc - cattaDoc の download2.php におけるディレクトリトラバーサルの脆弱性 - CVE-2007-1930 2012-06-26 15:46 2007-04-10 Show GitHub Exploit DB Packet Storm
247715 5 警告 gna - Beryo の downloadpic.php におけるディレクトリトラバーサルの脆弱性 - CVE-2007-1929 2012-06-26 15:46 2007-04-10 Show GitHub Exploit DB Packet Storm
247716 7.5 危険 LedgerSMB
dws systems inc.		 - LedgerSMB における制限された機能にアクセスされる脆弱性 - CVE-2007-1923 2012-06-26 15:46 2007-04-10 Show GitHub Exploit DB Packet Storm
247717 4.3 警告 arizona-dream - Arizona Dream livor の index.php におけるクロスサイトスクリプティングの脆弱性 - CVE-2007-1919 2012-06-26 15:46 2007-04-10 Show GitHub Exploit DB Packet Storm
247718 6.8 警告 MyBB Group
ecardmax.com		 - eCardMAX Hot Editor および HotEditor プラグインの richedit/keyboard.php におけるディレクトリトラバーサルの脆弱性 - CVE-2007-1906 2012-06-26 15:46 2007-04-10 Show GitHub Exploit DB Packet Storm
247719 4.3 警告 AOL - AIM および ICQ におけるディレクトリトラバーサルの脆弱性 - CVE-2007-1904 2012-06-26 15:46 2007-04-10 Show GitHub Exploit DB Packet Storm
247720 9.3 危険 アカマイテクノロジーズ - Akamai Technologies Download Manager ActiveX コントロール (DownloadManagerV2.ocx) におけるスタックベースのバッファオーバーフローの脆弱性 - CVE-2007-1892 2012-06-26 15:46 2007-04-17 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 7, 2026, 4:13 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
346341 - cisco unified_callmanager Buffer overflow in Cisco Unified CallManager (CUCM) 5.0(1) through 5.0(3a) allows remote attackers to execute arbitrary code via a long hostname in a SIP request, aka bug CSCsd96542. NVD-CWE-Other
CVE-2006-3594 2017-07-20 10:32 2006-07-19 Show GitHub Exploit DB Packet Storm
346342 - libtunepimp libtunepimp Multiple stack-based buffer overflows in the LookupTRM::lookup function in libtunepimp (TunePimp) 0.4.2 allow remote user-assisted attackers to cause a denial of service (application crash) and possi… CWE-119
Incorrect Access of Indexable Resource ('Range Error')  		CVE-2006-3600 2017-07-20 10:32 2006-07-19 Show GitHub Exploit DB Packet Storm
346343 - ossp shiela OSSP shiela 1.1.5 and earlier allows remote authenticated users to execute arbitrary commands on the CVS server via shell metacharacters in a filename that is committed. CWE-20
 Improper Input Validation  		CVE-2006-3633 2017-07-20 10:32 2006-07-27 Show GitHub Exploit DB Packet Storm
346344 - squirrelmail squirrelmail SquirrelMail 1.4.6 and earlier, with register_globals enabled, allows remote attackers to hijack cookies in src/redirect.php via unknown vectors. NOTE: while "cookie theft" is frequently associated … NVD-CWE-Other
CVE-2006-3665 2017-07-20 10:32 2006-07-19 Show GitHub Exploit DB Packet Storm
346345 - myiosoft.com ajaxportal SQL injection vulnerability in AjaxPortal 3.0, with magic_quotes_gpc disabled, allows remote attackers to execute arbitrary SQL commands via the 'Search' field, a different vulnerability than CVE-200… NVD-CWE-Other
CVE-2006-3666 2017-07-20 10:32 2006-07-19 Show GitHub Exploit DB Packet Storm
346346 - dynamic_universal_music_bibliotheque dumb Heap-based buffer overflow in the it_read_envelope function in Dynamic Universal Music Bibliotheque (DUMB) 0.9.3 and earlier and current CVS as of 20060716, including libdumb, allows user-assisted at… CWE-119
Incorrect Access of Indexable Resource ('Range Error')  		CVE-2006-3668 2017-07-20 10:32 2006-07-19 Show GitHub Exploit DB Packet Storm
346347 - kde konqueror KDE Konqueror 3.5.1 and earlier allows remote attackers to cause a denial of service (application crash) by calling the replaceChild method on a DOM object, which triggers a null dereference, as demo… NVD-CWE-Other
CVE-2006-3672 2017-07-20 10:32 2006-07-19 Show GitHub Exploit DB Packet Storm
346348 - armagetron armagetron_advanced nNetObject.cpp in Armagetron Advanced 2.8.2 and earlier allows remote attackers to cause a denial of service (application crash) via a large owner value, which causes an assert error. NVD-CWE-Other
CVE-2006-3673 2017-07-20 10:32 2006-07-19 Show GitHub Exploit DB Packet Storm
346349 - armagetron armagetron_advanced nNetObject.cpp in Armagetron Advanced 2.8.2 and earlier allows remote attackers to cause a denial of service (CPU consumption) via a large number handled by the id_req_handler function. NVD-CWE-Other
CVE-2006-3674 2017-07-20 10:32 2006-07-19 Show GitHub Exploit DB Packet Storm
346350 - awstats awstats Multiple cross-site scripting (XSS) vulnerabilities in awstats.pl in AWStats 6.5 build 1.857 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) refererpagesfilter, … NVD-CWE-Other
CVE-2006-3681 2017-07-20 10:32 2006-07-21 Show GitHub Exploit DB Packet Storm