Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 24, 2026, 6 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
251281 6 警告 cPanel - cPanel WHM におけるクロスサイトスクリプティングの脆弱性 - CVE-2006-6198 2012-06-26 15:38 2006-11-30 Show GitHub Exploit DB Packet Storm
251282 6.8 警告 b2evolution - b2evolution におけるクロスサイトスクリプティングの脆弱性 - CVE-2006-6197 2012-06-26 15:38 2006-11-30 Show GitHub Exploit DB Packet Storm
251283 6.8 警告 fixit knowledge solutions - Fixit iDMS Pro Image Gallery の search 機能におけるクロスサイトスクリプティングの脆弱性 - CVE-2006-6196 2012-06-26 15:38 2006-11-30 Show GitHub Exploit DB Packet Storm
251284 7.5 危険 fixit knowledge solutions - Fixit iDMS Pro Image Gallery における SQL インジェクションの脆弱性 - CVE-2006-6195 2012-06-26 15:38 2006-11-30 Show GitHub Exploit DB Packet Storm
251285 7.5 危険 fisasp.com - Ultimate Survey Pro の index.asp における SQL インジェクションの脆弱性 - CVE-2006-6194 2012-06-26 15:38 2006-11-30 Show GitHub Exploit DB Packet Storm
251286 7.5 危険 basicforum - BasicForum の edit.asp における SQL インジェクションの脆弱性 - CVE-2006-6193 2012-06-26 15:38 2006-11-30 Show GitHub Exploit DB Packet Storm
251287 7.5 危険 8pixel - 8pixel.net SimpleBlog の admin ディレクトリのスクリプトにおける特権を用いたアクションを実行される脆弱性 - CVE-2006-6192 2012-06-26 15:38 2006-11-30 Show GitHub Exploit DB Packet Storm
251288 7.5 危険 8pixel - 8pixel.net simpleblog の admin/edit.asp における SQL インジェクションの脆弱性 - CVE-2006-6191 2012-06-26 15:38 2006-11-30 Show GitHub Exploit DB Packet Storm
251289 7.5 危険 anna irc bot - Anna^ IRC Bot の anna.pl における SQL インジェクションの脆弱性 - CVE-2006-6190 2012-06-26 15:38 2006-11-30 Show GitHub Exploit DB Packet Storm
251290 7.5 危険 clicktech - ClickTech Click Blog の displayCalendar.asp における SQL インジェクションの脆弱性 - CVE-2006-6189 2012-06-26 15:38 2006-11-30 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 25, 2026, 4:04 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
247041 4.8 MEDIUM
Network
hoosk hoosk Hoosk v1.7.0 allows XSS via the Navigation Title of a new page entered at admin/pages/new. CWE-79
Cross-site Scripting
CVE-2018-16772 2024-11-21 12:53 2018-09-10 Show GitHub Exploit DB Packet Storm
247042 9.8 CRITICAL
Network
hoosk hoosk Hoosk v1.7.0 allows PHP code execution via a SiteUrl that is provided during installation and mishandled in config.php. CWE-94
Code Injection
CVE-2018-16771 2024-11-21 12:53 2018-09-10 Show GitHub Exploit DB Packet Storm
247043 8.8 HIGH
Network
webassembly_virtual_machine_project webassembly_virtual_machine In WAVM through 2018-07-26, a crafted file sent to the WebAssembly Virtual Machine may cause a denial of service (application crash) or possibly have unspecified other impact because a certain new_al… NVD-CWE-noinfo
CVE-2018-16770 2024-11-21 12:53 2018-09-10 Show GitHub Exploit DB Packet Storm
247044 8.8 HIGH
Network
webassembly_virtual_machine_project webassembly_virtual_machine In WAVM through 2018-07-26, a crafted file sent to the WebAssembly Virtual Machine may cause a denial of service (application crash) or possibly have unspecified other impact because libRuntime.so!ll… NVD-CWE-noinfo
CVE-2018-16769 2024-11-21 12:53 2018-09-10 Show GitHub Exploit DB Packet Storm
247045 8.8 HIGH
Network
webassembly_virtual_machine_project webassembly_virtual_machine In WAVM through 2018-07-26, a crafted file sent to the WebAssembly Virtual Machine may cause a denial of service (application crash) or possibly have unspecified other impact because of an unspecifie… CWE-119
Incorrect Access of Indexable Resource ('Range Error') 
CVE-2018-16768 2024-11-21 12:53 2018-09-10 Show GitHub Exploit DB Packet Storm
247046 8.8 HIGH
Network
webassembly_virtual_machine_project webassembly_virtual_machine In WAVM through 2018-07-26, a crafted file sent to the WebAssembly Virtual Machine may cause a denial of service (application crash) or possibly have unspecified other impact because of an unspecifie… CWE-119
Incorrect Access of Indexable Resource ('Range Error') 
CVE-2018-16767 2024-11-21 12:53 2018-09-10 Show GitHub Exploit DB Packet Storm
247047 8.8 HIGH
Network
webassembly_virtual_machine_project webassembly_virtual_machine In WAVM through 2018-07-26, a crafted file sent to the WebAssembly Virtual Machine may cause a denial of service (application crash) or possibly have unspecified other impact because Errors::unreacha… CWE-670
 Always-Incorrect Control Flow Implementation
CVE-2018-16766 2024-11-21 12:53 2018-09-10 Show GitHub Exploit DB Packet Storm
247048 8.8 HIGH
Network
webassembly_virtual_machine_project webassembly_virtual_machine In WAVM through 2018-07-26, a crafted file sent to the WebAssembly Virtual Machine may cause a denial of service (application crash) or possibly have unspecified other impact because of an unspecifie… CWE-119
Incorrect Access of Indexable Resource ('Range Error') 
CVE-2018-16765 2024-11-21 12:53 2018-09-10 Show GitHub Exploit DB Packet Storm
247049 8.8 HIGH
Network
webassembly_virtual_machine_project webassembly_virtual_machine In WAVM through 2018-07-26, a crafted file sent to the WebAssembly Virtual Machine may cause a denial of service (application crash) or possibly have unspecified other impact because of an IR::Functi… CWE-125
Out-of-bounds Read
CVE-2018-16764 2024-11-21 12:53 2018-09-10 Show GitHub Exploit DB Packet Storm
247050 9.8 CRITICAL
Network
thedaylightstudio fuel_cms FUEL CMS 1.4.1 allows PHP Code Evaluation via the pages/select/ filter parameter or the preview/ data parameter. This can lead to Pre-Auth Remote Code Execution. CWE-74
Injection
CVE-2018-16763 2024-11-21 12:53 2018-09-10 Show GitHub Exploit DB Packet Storm