Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 30, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
248051 5 警告 dew-code - Dew-NewPHPLinks の index.php におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2009-1624 2012-06-26 16:10 2009-05-12 Show GitHub Exploit DB Packet Storm
248052 4.3 警告 dew-code - Dew-NewPHPLinks の index.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2009-1623 2012-06-26 16:10 2009-05-12 Show GitHub Exploit DB Packet Storm
248053 7.5 危険 ecshop - EcShop の user.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2009-1622 2012-06-26 16:10 2009-05-12 Show GitHub Exploit DB Packet Storm
248054 4.3 警告 Coppermine Photo Gallery - CPG の docs/showdoc.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2009-1616 2012-06-26 16:10 2009-05-11 Show GitHub Exploit DB Packet Storm
248055 6.4 警告 easy-scripts - Easy Scripts Answer and Question Script の myaccount.php における任意のユーザアカウントを削除される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2009-1665 2012-06-26 16:10 2009-05-18 Show GitHub Exploit DB Packet Storm
248056 7.5 危険 easy-scripts - Easy Scripts Answer and Question Script の myaccount.php における権限を取得される脆弱性 CWE-287
不適切な認証 		CVE-2009-1664 2012-06-26 16:10 2009-05-18 Show GitHub Exploit DB Packet Storm
248057 6.8 警告 easy-scripts - Easy Scripts Answer and Question Script の myaccount.php における任意のコードを実行される脆弱性 CWE-Other
その他 		CVE-2009-1663 2012-06-26 16:10 2009-05-18 Show GitHub Exploit DB Packet Storm
248058 6.8 警告 anoldman - uTopic の admin/utopic.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2009-1661 2012-06-26 16:10 2009-05-18 Show GitHub Exploit DB Packet Storm
248059 7.5 危険 b2evolution - b2evolution の Starrating プラグインにおける SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2009-1657 2012-06-26 16:10 2009-05-18 Show GitHub Exploit DB Packet Storm
248060 6.5 警告 easy-scripts - Easy Scripts Answer and Question Script の myaccount.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2009-1655 2012-06-26 16:10 2009-05-16 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 30, 2026, 4:22 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
345741 - francisco_burzi php-nuke The CAPTCHA functionality in php-Nuke 6.0 through 7.9 uses fixed challenge/response pairs that only vary once per day based on the User Agent (HTTP_USER_AGENT), which allows remote attackers to bypas… NVD-CWE-Other
CVE-2006-0805 2018-10-19 01:29 2006-02-21 Show GitHub Exploit DB Packet Storm
345742 - john_lim adodb Multiple cross-site scripting (XSS) vulnerabilities in ADOdb 4.71, as used in multiple packages such as phpESP, allow remote attackers to inject arbitrary web script or HTML via (1) the next_page par… CWE-79
Cross-site Scripting 		CVE-2006-0806 2018-10-19 01:29 2006-02-21 Show GitHub Exploit DB Packet Storm
345743 - njstar chinese_word_processor
japanese_word_processor 		Stack-based buffer overflow in NJStar Chinese and Japanese Word Processor 4.x and 5.x before 5.10 allows user-assisted attackers to execute arbitrary code via font names in NJStar (.njx) documents. CWE-119
Incorrect Access of Indexable Resource ('Range Error')  		CVE-2006-0807 2018-10-19 01:29 2006-02-21 Show GitHub Exploit DB Packet Storm
345744 - visnetic visnetic_antivirus_plug-in_for_mail_server The VisNetic AntiVirus Plug-in (DKAVUpSch.exe) for Mail Server 4.6.0.4, 4.6.1.1, and possibly other versions before 4.6.1.2, does not drop privileges before executing other programs, which allows loc… NVD-CWE-Other
CVE-2006-0812 2018-10-19 01:29 2006-02-24 Show GitHub Exploit DB Packet Storm
345745 - winace winace Heap-based buffer overflow in WinACE 2.60 allows user-assisted attackers to execute arbitrary code via a large header block in an ARJ archive. CWE-119
Incorrect Access of Indexable Resource ('Range Error')  		CVE-2006-0813 2018-10-19 01:29 2006-02-24 Show GitHub Exploit DB Packet Storm
345746 - lighttpd lighttpd response.c in Lighttpd 1.4.10 and possibly previous versions, when run on Windows, allows remote attackers to read arbitrary source code via requests that contain trailing (1) "." (dot) and (2) space… NVD-CWE-Other
CVE-2006-0814 2018-10-19 01:29 2006-03-7 Show GitHub Exploit DB Packet Storm
345747 - networkactiv networkactiv_web_server NetworkActiv Web Server 3.5.15 allows remote attackers to read script source code via a crafted URL with a "/" (forward slash) after the file extension. NVD-CWE-Other
CVE-2006-0815 2018-10-19 01:29 2006-03-7 Show GitHub Exploit DB Packet Storm
345748 - orionserver orion_application_server Orion Application Server before 2.0.7, when running on Windows, allows remote attackers to obtain the source code of JSP files via (1) . (dot) and (2) space characters in the extension of a URL. NVD-CWE-Other
CVE-2006-0816 2018-10-19 01:29 2006-03-24 Show GitHub Exploit DB Packet Storm
345749 - orionserver orion_application_server Update to version 2.0.7 or contact the vendor for a patch. NVD-CWE-Other
CVE-2006-0816 2018-10-19 01:29 2006-03-24 Show GitHub Exploit DB Packet Storm
345750 - deerfield
icewarp
merak 		visnetic_mail_server
web_mail
mail_server 		Absolute path directory traversal vulnerability in (a) MERAK Mail Server for Windows 8.3.8r with before IceWarp Web Mail 5.6.1 and (b) VisNetic MailServer before 8.5.0.5 allows remote attackers to in… NVD-CWE-Other
CVE-2006-0817 2018-10-19 01:29 2006-07-21 Show GitHub Exploit DB Packet Storm