Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":July 1, 2026, 4:01 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
247941 7.5 危険 2fly - 2FLY Gift Delivery System の 2fly_gift.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2009-2915 2012-06-26 16:10 2009-08-21 Show GitHub Exploit DB Packet Storm
247942 7.5 危険 clone2009 - Ebay Clone における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2009-2894 2012-06-26 16:10 2009-08-20 Show GitHub Exploit DB Packet Storm
247943 6.8 警告 arabless - SaphpLesson の admin/login.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2009-2883 2012-06-26 16:10 2009-08-20 Show GitHub Exploit DB Packet Storm
247944 4.3 警告 datingpro - PG MatchMaking におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2009-2882 2012-06-26 16:10 2009-08-20 Show GitHub Exploit DB Packet Storm
247945 7.5 危険 artis.imag - Basilic における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2009-2881 2012-06-26 16:10 2009-08-20 Show GitHub Exploit DB Packet Storm
247946 7.3 危険 シスコシステムズ - Cisco Aironet Lightweight Access Point などの OTAP 機能におけるサービス運用妨害 (DoS) の脆弱性 CWE-Other
その他
CVE-2009-2861 2012-06-26 16:10 2009-08-25 Show GitHub Exploit DB Packet Storm
247947 4.3 警告 classifiedphpscript - PHP Open Classifieds Script におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2009-2785 2012-06-26 16:10 2009-08-17 Show GitHub Exploit DB Packet Storm
247948 7.5 危険 garagesalesjunkie - GarageSales Script の visitor/view.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2009-2777 2012-06-26 16:10 2009-08-14 Show GitHub Exploit DB Packet Storm
247949 4.3 警告 freearcadescript - Free Arcade Script におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2009-2771 2012-06-26 16:10 2009-08-14 Show GitHub Exploit DB Packet Storm
247950 7.5 危険 dd-wrt - DD-WRT 24 sp1 の管理 GUI の httpd の httpd.c における設定を変更される脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2009-2766 2012-06-26 16:10 2009-07-20 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:July 1, 2026, 4:27 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
346341 - symantec_veritas netbackup_puredisk_remote_office_edition This vulnerability is addresses in the following patch: Symantec Veritas, NetBackup PureDisk Remote Office Edition, 6.0 MP1 20060816 NVD-CWE-Other
CVE-2006-4228 2018-10-18 06:34 2006-08-19 Show GitHub Exploit DB Packet Storm
346342 - joomla
mambo
moslistmessenger_component PHP remote file inclusion vulnerability in archive.php in the mosListMessenger Component (com_lm) before 20060719 for Mambo and Joomla! allows remote attackers to execute arbitrary PHP code via a URL… NVD-CWE-Other
CVE-2006-4229 2018-10-18 06:34 2006-08-19 Show GitHub Exploit DB Packet Storm
346343 - lizge lizge_web_portal Multiple PHP remote file inclusion vulnerabilities in index.php in Lizge V.20 Web Portal allow remote attackers to execute arbitrary PHP code via a URL in the (1) lizge or (2) bade parameters. NVD-CWE-Other
CVE-2006-4230 2018-10-18 06:34 2006-08-19 Show GitHub Exploit DB Packet Storm
346344 - irfanview irfanview IrfanView 3.98 (with plugins) allows remote attackers to cause a denial of service (application crash) via a crafted CUR image file. NVD-CWE-Other
CVE-2006-4231 2018-10-18 06:34 2006-08-19 Show GitHub Exploit DB Packet Storm
346345 - powergap powergap_business
powergap_lite
Multiple PHP remote file inclusion vulnerabilities in POWERGAP allow remote attackers to execute arbitrary PHP code via a URL in the (1) shopid parameter to (a) s01.php, (b) s02.php, (c) s03.php, and… NVD-CWE-Other
CVE-2006-4236 2018-10-18 06:34 2006-08-22 Show GitHub Exploit DB Packet Storm
346346 - mamboxchange reporter PHP remote file inclusion vulnerability in processor/reporter.sql.php in the Reporter Mambo component (com_reporter) allows remote attackers to execute arbitrary PHP code via a URL in the mosConfig_a… NVD-CWE-Other
CVE-2006-4241 2018-10-18 06:34 2006-08-22 Show GitHub Exploit DB Packet Storm
346347 - joomla jim_instant_messaging_component PHP remote file inclusion vulnerability in install.jim.php in the JIM 1.0.1 component for Joomla or Mambo allows remote attackers to execute arbitrary PHP code via a URL in the mosConfig_absolute_pat… NVD-CWE-Other
CVE-2006-4242 2018-10-18 06:34 2006-08-22 Show GitHub Exploit DB Packet Storm
346348 - joomla jim_instant_messaging_component Successful exploitation requires that "register_globals" is enabled. NVD-CWE-Other
CVE-2006-4242 2018-10-18 06:34 2006-08-22 Show GitHub Exploit DB Packet Storm
346349 - horde horde
imp
Cross-site scripting (XSS) vulnerability in horde/imp/search.php in Horde IMP H3 before 4.1.3 allows remote attackers to include arbitrary web script or HTML via multiple unspecified vectors related … NVD-CWE-Other
CVE-2006-4255 2018-10-18 06:34 2006-08-22 Show GitHub Exploit DB Packet Storm
346350 - horde application_framework index.php in Horde Application Framework before 3.1.2 allows remote attackers to include web pages from other sites, which could be useful for phishing attacks, via a URL in the url parameter, aka "c… NVD-CWE-Other
CVE-2006-4256 2018-10-18 06:34 2006-08-22 Show GitHub Exploit DB Packet Storm