Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 20, 2026, 6 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
250711 7.5 危険 dimension of phpbb - Dimension of phpBB における PHP リモートファイルインクルージョンの脆弱性 - CVE-2006-5222 2012-06-26 15:37 2006-10-10 Show GitHub Exploit DB Packet Storm
250712 7.5 危険 cahier de textes - Cahier de texte における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2006-5221 2012-06-26 15:37 2006-10-10 Show GitHub Exploit DB Packet Storm
250713 7.5 危険 emek portal - Emek Portal の giris_yap.asp における SQL インジェクションの脆弱性 - CVE-2006-5217 2012-06-26 15:37 2006-10-10 Show GitHub Exploit DB Packet Storm
250714 5 警告 ciphertrust - IronWebMail におけるディレクトリトラバーサルの脆弱性 - CVE-2006-5210 2012-06-26 15:37 2006-10-16 Show GitHub Exploit DB Packet Storm
250715 7.5 危険 DeltaScripts - PHP Classifieds における SQL インジェクションの脆弱性 - CVE-2006-5208 2012-06-26 15:37 2006-10-10 Show GitHub Exploit DB Packet Storm
250716 10 危険 CA Technologies - 複数の CA 製品で使用される RPC インターフェースにおけるスタックベースのバッファオーバーフローの脆弱性 - CVE-2006-5171 2012-06-26 15:37 2007-01-11 Show GitHub Exploit DB Packet Storm
250717 5 警告 アドビシステムズ - Adobe Breeze Licensed Server および Breeze Licensed Server における任意のファイルを読まれる脆弱性 - CVE-2006-5200 2012-06-26 15:37 2006-10-10 Show GitHub Exploit DB Packet Storm
250718 2.1 注意 アドビシステムズ - Adobe Contribute Publishing Server におけるサーバへのアクセス権限を取得される脆弱性 - CVE-2006-5199 2012-06-26 15:37 2006-10-10 Show GitHub Exploit DB Packet Storm
250719 7.5 危険 bulletin board ace - BBaCE の includes/functions.php における PHP リモートファイルインクルージョンの脆弱性 - CVE-2006-5187 2012-06-26 15:37 2006-10-10 Show GitHub Exploit DB Packet Storm
250720 7.5 危険 dayfox designs - Dayfox Designs Dayfox Blog における PHP リモートファイルインクルージョンの脆弱性 - CVE-2006-5183 2012-06-26 15:37 2006-10-10 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 20, 2026, 4:01 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
277071 7.5 HIGH
Network
almera_responsive_portfolio_project almera_responsive_portfolio The ThemeMakers Almera Responsive Portfolio theme through 2015-05-15 for WordPress allows remote attackers to obtain sensitive information (such as user_login, user_pass, and user_email values) via a… CWE-200
Information Exposure
CVE-2015-9487 2024-11-21 11:40 2019-10-12 Show GitHub Exploit DB Packet Storm
277072 7.5 HIGH
Network
axioma_premium_responsive_project axioma_premium_responsive The ThemeMakers Axioma Premium Responsive theme through 2015-05-15 for WordPress allows remote attackers to obtain sensitive information (such as user_login, user_pass, and user_email values) via a d… CWE-200
Information Exposure
CVE-2015-9486 2024-11-21 11:40 2019-10-12 Show GitHub Exploit DB Packet Storm
277073 7.5 HIGH
Network
accio_responsive_onepage_parallax_site_template_project accio_responsive_onepage_parallax_site_template The ThemeMakers Accio Responsive Parallax One Page Site Template component through 2015-05-15 for WordPress allows remote attackers to obtain sensitive information (such as user_login, user_pass, and… CWE-200
Information Exposure
CVE-2015-9485 2024-11-21 11:40 2019-10-12 Show GitHub Exploit DB Packet Storm
277074 7.5 HIGH
Network
accio_one_page_parallax_responsive_theme_project accio_one_page_parallax_responsive_theme The ThemeMakers Accio One Page Parallax Responsive theme through 2015-05-15 for WordPress allows remote attackers to obtain sensitive information (such as user_login, user_pass, and user_email values… CWE-200
Information Exposure
CVE-2015-9484 2024-11-21 11:40 2019-10-12 Show GitHub Exploit DB Packet Storm
277075 7.5 HIGH
Network
invento_\/_architecture_building_agency_template_project invento_\/_architecture_building_agency_template The ThemeMakers Invento Responsive Gallery/Architecture Template component through 2015-05-15 for WordPress allows remote attackers to obtain sensitive information (such as user_login, user_pass, and… CWE-200
Information Exposure
CVE-2015-9483 2024-11-21 11:40 2019-10-12 Show GitHub Exploit DB Packet Storm
277076 7.5 HIGH
Network
car_dealer_\/_auto_dealer_responsive_project car_dealer_\/_auto_dealer_responsive The ThemeMakers Car Dealer / Auto Dealer Responsive theme through 2015-05-15 for WordPress allows remote attackers to obtain sensitive information (such as user_login, user_pass, and user_email value… CWE-200
Information Exposure
CVE-2015-9482 2024-11-21 11:40 2019-10-12 Show GitHub Exploit DB Packet Storm
277077 7.5 HIGH
Network
diplomat_\|_political_project diplomat_\|_political The ThemeMakers Diplomat | Political theme through 2015-05-15 for WordPress allows remote attackers to obtain sensitive information (such as user_login, user_pass, and user_email values) via a direct… CWE-200
Information Exposure
CVE-2015-9481 2024-11-21 11:40 2019-10-12 Show GitHub Exploit DB Packet Storm
277078 7.5 HIGH
Network
robot-cpa robotcpa The RobotCPA plugin 5 for WordPress has directory traversal via the f.php l parameter. CWE-22
Path Traversal
CVE-2015-9480 2024-11-21 11:40 2019-10-11 Show GitHub Exploit DB Packet Storm
277079 9.8 CRITICAL
Network
advancedcustomfields acf_fronted_display The ACF-Frontend-Display plugin through 2015-07-03 for WordPress has arbitrary file upload via an action=upload request to js/blueimp-jQuery-File-Upload-d45deb1/server/php/index.php. CWE-434
 Unrestricted Upload of File with Dangerous Type 
CVE-2015-9479 2024-11-21 11:40 2019-10-11 Show GitHub Exploit DB Packet Storm
277080 6.1 MEDIUM
Network
no-margin-for-error prettyphoto prettyPhoto before 3.1.6 has js/jquery.prettyPhoto.js XSS. CWE-79
Cross-site Scripting
CVE-2015-9478 2024-11-21 11:40 2019-10-11 Show GitHub Exploit DB Packet Storm