Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":June 20, 2026, 4 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
250781	2.6	注意	a.l-pifou	-	A.l-Pifou におけるディレクトリトラバーサルの脆弱性	-	CVE-2006-4914	2012-06-26 15:37	2006-09-20	Show	GitHub Exploit DB Packet Storm

250782	7.5	危険	AlstraSoft	-	AlstraSoft E-friends の chat/getStartOptions.php におけるディレクトリトラバーサルの脆弱性	-	CVE-2006-4913	2012-06-26 15:37	2006-09-20	Show	GitHub Exploit DB Packet Storm

250783	7.5	危険	シスコシステムズ	-	Cisco IPS におけるトラフィックインスペクションを回避される脆弱性	-	CVE-2006-4911	2012-06-26 15:37	2006-09-20	Show	GitHub Exploit DB Packet Storm

250784	5	警告	シスコシステムズ	-	Cisco IDS の mainApp におけるサービス運用妨害 (DoS) の脆弱性	-	CVE-2006-4910	2012-06-26 15:37	2006-09-20	Show	GitHub Exploit DB Packet Storm

250785	2.6	注意	シスコシステムズ	-	Cisco Guard DDoS Mitigation Appliance におけるクロスサイトスクリプティングの脆弱性	-	CVE-2006-4909	2012-06-26 15:37	2006-09-20	Show	GitHub Exploit DB Packet Storm

250786	7.5	危険	artmedic webdesign	-	Artmedic Links の index.php における PHP リモートファイルインクルージョンの脆弱性	-	CVE-2006-4905	2012-06-26 15:37	2006-09-20	Show	GitHub Exploit DB Packet Storm

250787	6.4	警告	CA Technologies	-	CA eTrust Security Command Center および eTrust Audit における警告を偽装される脆弱性	-	CVE-2006-4901	2012-06-26 15:37	2006-09-22	Show	GitHub Exploit DB Packet Storm

250788	5.5	警告	CA Technologies	-	CA eTrust Security Command Center におけるディレクトリトラバーサルの脆弱性	-	CVE-2006-4900	2012-06-26 15:37	2006-09-22	Show	GitHub Exploit DB Packet Storm

250789	5	警告	CA Technologies	-	CA eTrust Security Command Center の ePPIServlet スクリプトにおけるサーバのパスを取得される脆弱性	-	CVE-2006-4899	2012-06-26 15:37	2006-09-22	Show	GitHub Exploit DB Packet Storm

250790	7.5	危険	guanxicrm	-	guanxiCRM の include/phpxd/phpXD.php における PHP リモートファイルインクルーションの脆弱性	-	CVE-2006-4898	2012-06-26 15:37	2006-09-19	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:June 20, 2026, 4:01 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
255341	5.3	MEDIUM Network	moodle	moodle	In Moodle 2.x and 3.x, searching of arbitrary blogs is possible because a capability check is missing.	CWE-668 Exposure of Resource to Wrong Sphere	CVE-2017-7490	2024-11-21 12:32	2017-05-15	Show	GitHub Exploit DB Packet Storm

255342	6.3	MEDIUM Network	moodle	moodle	In Moodle 2.x and 3.x, remote authenticated users can take ownership of arbitrary blogs by editing an external blog link.	CWE-269 Improper Privilege Management	CVE-2017-7489	2024-11-21 12:32	2017-05-15	Show	GitHub Exploit DB Packet Storm

255343	7.8	HIGH Local	linux debian	linux_kernel debian_linux	The ipxitf_ioctl function in net/ipx/af_ipx.c in the Linux kernel through 4.11.1 mishandles reference counts, which allows local users to cause a denial of service (use-after-free) or possibly have u…	CWE-416 Use After Free	CVE-2017-7487	2024-11-21 12:32	2017-05-15	Show	GitHub Exploit DB Packet Storm

255344	9.8	CRITICAL Network	dolibarr	dolibarr_erp\/crm	Dolibarr ERP/CRM 4.0.4 stores passwords with the MD5 algorithm, which makes brute-force attacks easier.	CWE-326 Inadequate Encryption Strength	CVE-2017-7888	2024-11-21 12:32	2017-05-10	Show	GitHub Exploit DB Packet Storm

255345	6.1	MEDIUM Network	dolibarr	dolibarr_erp\/crm	Dolibarr ERP/CRM 4.0.4 has XSS in doli/societe/list.php via the sall parameter.	CWE-79 Cross-site Scripting	CVE-2017-7887	2024-11-21 12:32	2017-05-10	Show	GitHub Exploit DB Packet Storm

255346	9.8	CRITICAL Network	dolibarr	dolibarr_erp\/crm	Dolibarr ERP/CRM 4.0.4 has SQL Injection in doli/theme/eldy/style.css.php via the lang parameter.	CWE-89 SQL Injection	CVE-2017-7886	2024-11-21 12:32	2017-05-10	Show	GitHub Exploit DB Packet Storm

255347	7.8	HIGH Local	swftools	swftools	A Use After Free in the pdf2swf part of swftools 0.9.2 and earlier allows remote attackers to execute arbitrary code via a malformed PDF document, possibly a consequence of an error in Gfx.cc in Xpdf…	CWE-416 Use After Free	CVE-2017-7698	2024-11-21 12:32	2017-05-10	Show	GitHub Exploit DB Packet Storm

255348	7.1	HIGH Network	advantech	webaccess	An Absolute Path Traversal issue was discovered in Advantech WebAccess Version 8.1 and prior. The absolute path traversal vulnerability has been identified, which may allow an attacker to traverse th…	CWE-22 Path Traversal	CVE-2017-7929	2024-11-21 12:32	2017-05-6	Show	GitHub Exploit DB Packet Storm

255349	7.3	HIGH Network	dahuasecurity	dh-ipc-hdbw23a0rn-zs_firmware dh-ipc-hdbw13a0sn_firmware dh-ipc-hdw1xxx_firmware dh-ipc-hdw2xxx_firmware dh-ipc-hdw4xxx_firmware dh-ipc-hfw1xxx_firmware dh-ipc-hfw2xxx_firmware d…	A Use of Password Hash Instead of Password for Authentication issue was discovered in Dahua DH-IPC-HDBW23A0RN-ZS, DH-IPC-HDBW13A0SN, DH-IPC-HDW1XXX, DH-IPC-HDW2XXX, DH-IPC-HDW4XXX, DH-IPC-HFW1XXX, DH…	CWE-798 Use of Hard-coded Credentials	CVE-2017-7927	2024-11-21 12:32	2017-05-6	Show	GitHub Exploit DB Packet Storm

255350	9.8	CRITICAL Network	dahuasecurity	dh-ipc-hdbw23a0rn-zs_firmware dh-ipc-hdbw13a0sn_firmware dh-ipc-hdw1xxx_firmware dh-ipc-hdw2xxx_firmware dh-ipc-hdw4xxx_firmware dh-ipc-hfw1xxx_firmware dh-ipc-hfw2xxx_firmware d…	A Password in Configuration File issue was discovered in Dahua DH-IPC-HDBW23A0RN-ZS, DH-IPC-HDBW13A0SN, DH-IPC-HDW1XXX, DH-IPC-HDW2XXX, DH-IPC-HDW4XXX, DH-IPC-HFW1XXX, DH-IPC-HFW2XXX, DH-IPC-HFW4XXX,…	CWE-522 Insufficiently Protected Credentials	CVE-2017-7925	2024-11-21 12:32	2017-05-6	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed