Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
Urgent
Important
Warning
Warning
CVE
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
脅威度ソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Jan. 11, 2025, 10:02 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
191611 7.5 危険 kevin a. gordon - Kevin A. Gordon Open Geo Targeting における PHP リモートファイルインクルージョンの脆弱性 - CVE-2006-5141 2012-09-25 15:36 2006-10-3 Show GitHub Exploit DB Packet Storm
191612 7.5 危険 lappy512 - Lappy512 phpkimagehost の display.php における SQL インジェクションの脆弱性 - CVE-2006-5140 2012-09-25 15:36 2006-10-3 Show GitHub Exploit DB Packet Storm
191613 5 警告 mkportal - MkPortal における Web サイトコンテンツを破損される脆弱性 - CVE-2006-5139 2012-09-25 15:36 2006-10-3 Show GitHub Exploit DB Packet Storm
191614 4 警告 ヒューレット・パッカード - Mercury SiteScope におけるサービス運用妨害 (DoS) の脆弱性 - CVE-2006-5134 2012-09-25 15:36 2006-10-3 Show GitHub Exploit DB Packet Storm
191615 5 警告 joshua muheim - Joshua Muheim phpMyWebmin の window.php におけるディレクトリトラバーサルの脆弱性 - CVE-2006-5125 2012-09-25 15:36 2006-10-3 Show GitHub Exploit DB Packet Storm
191616 7.5 危険 joshua muheim - Joshua Muheim phpMyWebmin における PHP リモートファイルインクルージョンの脆弱性 - CVE-2006-5124 2012-09-25 15:36 2006-10-3 Show GitHub Exploit DB Packet Storm
191617 4.9 警告 ヒューレット・パッカード - Mercury SiteScope におけるクロスサイトスクリプティングの脆弱性 - CVE-2006-5122 2012-09-25 15:36 2006-10-3 Show GitHub Exploit DB Packet Storm
191618 5.1 警告 KGB - KGB の kgcall.php におけるディレクトリトラバーサルの脆弱性 - CVE-2006-5115 2012-09-25 15:36 2006-10-3 Show GitHub Exploit DB Packet Storm
191619 7.5 危険 intervations - InterVations NaviCOPA Web Server におけるバッファオーバーフローの脆弱性 - CVE-2006-5112 2012-09-25 15:36 2006-10-3 Show GitHub Exploit DB Packet Storm
191620 5 警告 Libksba project - SUSE LINUX 上の newpg パッケージの gpgsm におけるサービス運用妨害 (DoS) の脆弱性 - CVE-2006-5111 2012-09-25 15:36 2006-10-3 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:Jan. 11, 2025, 5:03 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
271051 - ibm websphere_application_server Unspecified vulnerability in WebSphere 5.1.1 (or any earlier cumulative fix) Common Configuration Mode + CommonArchive and J2EE Models might allow attackers to obtain sensitive information via the tr… NVD-CWE-Other
CVE-2006-2434 2011-03-8 11:36 2006-05-17 Show GitHub Exploit DB Packet Storm
271052 - ibm websphere_application_server Unspecified vulnerability in IBM WebSphere Application Server 5.0.2 and earlier, and 5.1.1 and earlier, has unknown impact and attack vectors related to "Inserting certain script tags in urls [that] … NVD-CWE-noinfo
CVE-2006-2435 2011-03-8 11:36 2006-05-17 Show GitHub Exploit DB Packet Storm
271053 - ibm websphere_application_server WebSphere Application Server 5.0.2 (or any earlier cumulative fix) stores admin and LDAP passwords in plaintext in the FFDC logs when a login to WebSphere fails, which allows attackers to gain privil… NVD-CWE-Other
CVE-2006-2436 2011-03-8 11:36 2006-05-17 Show GitHub Exploit DB Packet Storm
271054 - caucho_technology resin The viewfile servlet in the documentation package (resin-doc) for Caucho Resin 3.0.17 and 3.0.18 allows remote attackers to obtain the source code for file under the web root via the file parameter. NVD-CWE-Other
CVE-2006-2437 2011-03-8 11:36 2006-05-17 Show GitHub Exploit DB Packet Storm
271055 - kphone kphone kphone 4.2 creates .qt/kphonerc with world-readable permissions, which allows local users to read usernames and SIP passwords. NVD-CWE-Other
CVE-2006-2442 2011-03-8 11:36 2006-05-18 Show GitHub Exploit DB Packet Storm
271056 - s9y serendipity Cross-site request forgery (CSRF) vulnerability in the Entry Manager in Serendipity before 1.0-beta3 allows remote attackers to perform unauthorized actions as a logged-in user via a link or IMG tag. NVD-CWE-Other
CVE-2006-2495 2011-03-8 11:36 2006-05-20 Show GitHub Exploit DB Packet Storm
271057 - fckeditor fckeditor editor/filemanager/upload/php/upload.php in FCKeditor before 2.3 Beta, when the upload feature is enabled, does not verify the Type parameter, which allows remote attackers to upload arbitrary file t… NVD-CWE-Other
CVE-2006-2529 2011-03-8 11:36 2006-05-23 Show GitHub Exploit DB Packet Storm
271058 - xtreme_scripts xtreme_topsites Multiple SQL injection vulnerabilities in Xtreme Topsites 1.1, with magic_quotes_gpc disabled, allow remote attackers to execute arbitrary SQL commands via the (1) searchthis parameter in lostid.php … NVD-CWE-Other
CVE-2006-2544 2011-03-8 11:36 2006-05-23 Show GitHub Exploit DB Packet Storm
271059 - florian_amrhein newsportal Cross-site scripting (XSS) vulnerability in Florian Amrhein NewsPortal before 0.37, and possibly TR Newsportal (TRanx rebuilded), allows remote attackers to inject arbitrary web script or HTML via un… NVD-CWE-Other
CVE-2006-2556 2011-03-8 11:36 2006-05-24 Show GitHub Exploit DB Packet Storm
271060 - e107 e107 SQL injection vulnerability in e107 before 0.7.5 allows remote attackers to execute arbitrary SQL commands via unknown attack vectors. NVD-CWE-Other
CVE-2006-2590 2011-03-8 11:36 2006-05-25 Show GitHub Exploit DB Packet Storm