Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":July 1, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
248991 5 警告 aspapps - ASPPortal におけるデータベースをダウンロードされる脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2008-5562 2012-06-26 16:03 2008-12-15 Show GitHub Exploit DB Packet Storm
248992 5 警告 dazzlindonna - PostEcards におけるデータベースファイルをダウンロードされる脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2008-5560 2012-06-26 16:03 2008-12-15 Show GitHub Exploit DB Packet Storm
248993 7.5 危険 dazzlindonna - PostEcards の sendcard.cfm における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-5559 2012-06-26 16:03 2008-12-15 Show GitHub Exploit DB Packet Storm
248994 4.3 警告 Digium - Asterisk Open Source におけるサービス運用妨害 (DoS) の脆弱性 CWE-287
不適切な認証 		CVE-2008-5558 2012-06-26 16:03 2008-12-17 Show GitHub Exploit DB Packet Storm
248995 9.3 危険 ESET
マイクロソフト		 - ESet NOD32 Antivirus における HTML 文書内のマルウェアの検知を回避される脆弱性 CWE-20
不適切な入力確認 		CVE-2008-5534 2012-06-26 16:03 2008-12-12 Show GitHub Exploit DB Packet Storm
248996 9.3 危険 フォーティネット
マイクロソフト		 - Fortinet Antivirus における HTML 文書内のマルウェアの検知を回避される脆弱性 CWE-20
不適切な入力確認 		CVE-2008-5531 2012-06-26 16:03 2008-12-12 Show GitHub Exploit DB Packet Storm
248997 9.3 危険 マイクロソフト
AVG Technologies		 - Ewido Security Suite における HTML ドキュメント内のマルウェアの検出を回避される脆弱性 CWE-20
不適切な入力確認 		CVE-2008-5530 2012-06-26 16:03 2008-12-12 Show GitHub Exploit DB Packet Storm
248998 9.3 危険 マイクロソフト
アラジン		 - Aladdin eSafe における HTML 文書のマルウェアの検出を回避される脆弱性 CWE-20
不適切な入力確認 		CVE-2008-5528 2012-06-26 16:03 2008-12-12 Show GitHub Exploit DB Packet Storm
248999 9.3 危険 ESET
マイクロソフト		 - ESET Smart Security における HTML 文書内のマルウェアの検知を回避される脆弱性 CWE-20
不適切な入力確認 		CVE-2008-5527 2012-06-26 16:03 2008-12-12 Show GitHub Exploit DB Packet Storm
249000 9.3 危険 マイクロソフト
Doctor Web		 - DrWeb Anti-virus における HTML 文書のマルウェアの検知が回避される脆弱性 CWE-20
不適切な入力確認 		CVE-2008-5526 2012-06-26 16:03 2008-12-12 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:July 1, 2026, 4:27 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
345671 - arab_portal arab_portal Multiple cross-site scripting (XSS) vulnerabilities in Arab Portal 2.0.1 stable allow remote attackers to inject arbitrary web script or HTML via the (1) adminJump and (2) forum_middle parameters in … NVD-CWE-Other
CVE-2006-1665 2018-10-19 01:33 2006-04-7 Show GitHub Exploit DB Packet Storm
345672 - arab_portal arab_portal SQL injection vulnerability in forum.php in Arab Portal 2.0.1 stable allows remote attackers to execute arbitrary SQL commands via the mineID parameter. NVD-CWE-Other
CVE-2006-1666 2018-10-19 01:33 2006-04-7 Show GitHub Exploit DB Packet Storm
345673 - phpheaven phpmychat SQL injection vulnerability in chat/messagesL.php3 in phpHeaven Team PHPMyChat 0.14.5 and earlier allows remote attackers to execute arbitrary SQL commands via the T parameter. NOTE: this issue can … NVD-CWE-Other
CVE-2006-1669 2018-10-19 01:33 2006-04-7 Show GitHub Exploit DB Packet Storm
345674 - phpwebgallery phpwebgallery Multiple cross-site scripting (XSS) vulnerabilities in PHPWebGallery 1.4.1 allow remote attackers to inject arbitrary web script or HTML via the (1) cat, (2) num, and (3) search parameters to (a) cat… NVD-CWE-Other
CVE-2006-1675 2018-10-19 01:33 2006-04-11 Show GitHub Exploit DB Packet Storm
345675 - jupiter_cms jupiter_cms Cross-site scripting (XSS) vulnerability in modules/online.php in Jupiter CMS 1.1.5 allows remote attackers to inject arbitrary web script or HTML via the layout parameter to index.php. NVD-CWE-Other
CVE-2006-1679 2018-10-19 01:33 2006-04-11 Show GitHub Exploit DB Packet Storm
345676 - jupiter_cms jupiter_cms Jupiter CMS 1.1.5, when display_errors is enabled, allows remote attackers to obtain the full server path via a direct request to modules/online.php. NVD-CWE-Other
CVE-2006-1680 2018-10-19 01:33 2006-04-11 Show GitHub Exploit DB Packet Storm
345677 - chipmunk_scripts chipmunk_guestbook SQL injection vulnerability in admin/login.php in Chipmunk Guestbook allows remote attackers to execute arbitrary SQL commands and bypass login authentication via the User name. NVD-CWE-Other
CVE-2006-1683 2018-10-19 01:33 2006-04-11 Show GitHub Exploit DB Packet Storm
345678 - hp hp-ux Unspecified vulnerability in su in HP HP-UX B.11.11, when using the LDAP netgroup feature, allows local users to gain unspecified access. NVD-CWE-Other
CVE-2006-1689 2018-10-19 01:33 2006-04-11 Show GitHub Exploit DB Packet Storm
345679 - hp hp-ux HP-UX B.11.11: Install PHCO_34545 or later. NVD-CWE-Other
CVE-2006-1689 2018-10-19 01:33 2006-04-11 Show GitHub Exploit DB Packet Storm
345680 - matt_wright matt_wright_guestbook Cross-site scripting (XSS) vulnerability in Matt Wright Guestbook 2.3.1 allows remote attackers to execute arbitrary web script or HTML via the (1) Your Name, (2) E-Mail, or (3) Comments fields when … NVD-CWE-Other
CVE-2006-1697 2018-10-19 01:33 2006-04-11 Show GitHub Exploit DB Packet Storm