Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 19, 2026, 6 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
250641 7.5 危険 digitalhive - DigitalHive の template/purpletech/base_include.php における PHP リモートファイルインクルージョンの脆弱性 - CVE-2006-5493 2012-06-26 15:37 2006-10-25 Show GitHub Exploit DB Packet Storm
250642 7.5 危険 ceary - UltraCMS の include/index.php における SQL インジェクションの脆弱性 - CVE-2006-5491 2012-06-26 15:37 2006-10-25 Show GitHub Exploit DB Packet Storm
250643 2.1 注意 FreeBSD - FreeBSD の p1003_1b.c における不特定のサービス運用妨害 (DoS) の脆弱性 - CVE-2006-5483 2012-06-26 15:37 2006-05-20 Show GitHub Exploit DB Packet Storm
250644 2.1 注意 FreeBSD - FreeBSD の ufs_vnops.c におけるサービス運用妨害 (DoS) の脆弱性 - CVE-2006-5482 2012-06-26 15:37 2006-05-31 Show GitHub Exploit DB Packet Storm
250645 7.5 危険 Castor Project - 2le.net Castor PHP Web Builder における PHP リモートファイルインクルージョンの脆弱性 CWE-94
コード・インジェクション
CVE-2006-5481 2012-06-26 15:37 2006-10-24 Show GitHub Exploit DB Packet Storm
250646 5.1 警告 Castor Project - 2le.net Castor PHP Web Builder の lib/rs.php における PHP リモートファイルインクルージョンの脆弱性 CWE-94
コード・インジェクション
CVE-2006-5480 2012-06-26 15:37 2006-10-24 Show GitHub Exploit DB Packet Storm
250647 2.6 注意 Drupal - Drupal における任意のフォーム情報を取得される脆弱性 - CVE-2006-5477 2012-06-26 15:37 2006-10-18 Show GitHub Exploit DB Packet Storm
250648 7.5 危険 Drupal - Drupal におけるクロスサイトリクエストフォージェリの脆弱性 - CVE-2006-5476 2012-06-26 15:37 2006-10-18 Show GitHub Exploit DB Packet Storm
250649 6.8 警告 Drupal - Drupal の XML パーサにおけるクロスサイトスクリプティングの脆弱性 - CVE-2006-5475 2012-06-26 15:37 2006-10-18 Show GitHub Exploit DB Packet Storm
250650 2.1 注意 Avahi - Avahi における Avahi へのネットワーク変更を傍受される脆弱性 - CVE-2006-5461 2012-06-26 15:37 2006-11-14 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 19, 2026, 4:01 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
280271 - adobe air_sdk
air_sdk_\&_compiler
air
flash_player
Use-after-free vulnerability in Adobe Flash Player before 18.0.0.232 on Windows and OS X and before 11.2.202.508 on Linux, Adobe AIR before 18.0.0.199, Adobe AIR SDK before 18.0.0.199, and Adobe AIR … NVD-CWE-Other
CVE-2015-5566 2024-11-21 11:33 2015-08-24 Show GitHub Exploit DB Packet Storm
280272 - net-snmp net-snmp The snmp_pdu_parse function in snmp_api.c in net-snmp 5.7.2 and earlier does not remove the varBind variable in a netsnmp_variable_list item when parsing of the SNMP PDU fails, which allows remote at… CWE-19
 Data Processing Errors
CVE-2015-5621 2024-11-21 11:33 2015-08-20 Show GitHub Exploit DB Packet Storm
280273 - views_bulk_operations_project views_bulk_operations The Views Bulk Operations (VBO) module 6.x-1.x and 7.x-3.x before 7.x-3.3 for Drupal, when the bulk operation for changing Roles is enabled, allows remote authenticated users to edit user accounts an… CWE-264
Permissions, Privileges, and Access Controls
CVE-2015-5515 2024-11-21 11:33 2015-08-19 Show GitHub Exploit DB Packet Storm
280274 - migrate_project migrate Cross-site scripting (XSS) vulnerability in the Migrate module 7.x-2.x before 7.x-2.8 for Drupal, when the migrate_ui submodule is enabled, allows user-assisted remote attackers to inject arbitrary w… CWE-79
Cross-site Scripting
CVE-2015-5514 2024-11-21 11:33 2015-08-19 Show GitHub Exploit DB Packet Storm
280275 - niif shibboleth_authentication Cross-site scripting (XSS) vulnerability in the Shibboleth authentication module 6.x-4.x before 6.x-4.2 and 7.x-4.x before 7.x-4.2 for Drupal allows remote authenticated users with the "Administer bl… CWE-79
Cross-site Scripting
CVE-2015-5513 2024-11-21 11:33 2015-08-19 Show GitHub Exploit DB Packet Storm
280276 - me_aliases_project me_aliases The me aliases module 6.x-2.x before 6.x-2.10 and 7.x-1.x before 7.x-1.2 for Drupal allows remote attackers to access Views using the "me" user argument handler by substituting "me" for a user id in … CWE-284
Improper Access Control
CVE-2015-5512 2024-11-21 11:33 2015-08-19 Show GitHub Exploit DB Packet Storm
280277 - hybridauth_social_login_project hybridauth_social_login The HybridAuth Social Login module 7.x-2.x before 7.x-2.13 for Drupal allows remote attackers to bypass the user registration by administrator only configuration and create an account via a social lo… CWE-264
Permissions, Privileges, and Access Controls
CVE-2015-5511 2024-11-21 11:33 2015-08-19 Show GitHub Exploit DB Packet Storm
280278 - content_construction_kit_project content_construction_kit Open redirect vulnerability in the Content Construction Kit (CCK) 6.x-2.x before 6.x-2.10 for Drupal allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via … NVD-CWE-Other
CVE-2015-5510 2024-11-21 11:33 2015-08-19 Show GitHub Exploit DB Packet Storm
280279 - administration_views_project administration_views The Administration Views module 7.x-1.x before 7.x-1.4 for Drupal, when used with other unspecified modules, does not properly grant access to administration pages, which allows remote administrators… CWE-264
Permissions, Privileges, and Access Controls
CVE-2015-5509 2024-11-21 11:33 2015-08-19 Show GitHub Exploit DB Packet Storm
280280 - the_extensible_catalog_drupal_toolkit_project the_extensible_catalog_drupal_toolkit Cross-site request forgery (CSRF) vulnerability in the XC NCIP Provider module in the eXtensible Catalog (XC) Drupal Toolkit allows remote attackers to hijack the authentication of users with the "ad… CWE-352
 Origin Validation Error
CVE-2015-5508 2024-11-21 11:33 2015-08-19 Show GitHub Exploit DB Packet Storm