Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
Urgent
Important
Warning
Warning
CVE
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
脅威度ソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Jan. 31, 2025, 4:03 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
193371 7.5 危険 open newsletter - Open Newsletter の settings.php などのスクリプトにおける不正な管理者の操作を実行される脆弱性 - CVE-2006-6785 2012-09-25 15:36 2006-12-27 Show GitHub Exploit DB Packet Storm
193372 7.5 危険 netbula - Netbula Anyboard における SQL インジェクションの脆弱性 - CVE-2006-6784 2012-09-25 15:36 2006-12-27 Show GitHub Exploit DB Packet Storm
193373 7.5 危険 logahead - logahead UNU における任意のファイルをアップロードされる脆弱性 CWE-287
不適切な認証 		CVE-2006-6783 2012-09-25 15:36 2006-12-27 Show GitHub Exploit DB Packet Storm
193374 5 警告 hlstats - HLstats における重要な情報を取得される脆弱性 - CVE-2006-6781 2012-09-25 15:36 2006-12-27 Show GitHub Exploit DB Packet Storm
193375 9.4 危険 oftpd - oftpd におけるサービス運用妨害 (DoS) の脆弱性 - CVE-2006-6767 2012-09-25 15:36 2007-01-16 Show GitHub Exploit DB Packet Storm
193376 7.5 危険 hlstats - HLstats のログインフォームにおける SQL インジェクションの脆弱性 - CVE-2006-6780 2012-09-25 15:36 2006-12-27 Show GitHub Exploit DB Packet Storm
193377 6.8 警告 vBulletin Solutions, Inc. - Jelsoft vBulletin におけるクロスサイトスクリプティングの脆弱性 - CVE-2006-6779 2012-09-25 15:36 2006-12-27 Show GitHub Exploit DB Packet Storm
193378 6.8 警告 irokez - Irokez CMS における PHP リモートファイルインクルージョンの脆弱性 - CVE-2006-6771 2012-09-25 15:36 2006-12-27 Show GitHub Exploit DB Packet Storm
193379 6.8 警告 jinzora - Jinzora Media Jukebox における PHP リモートファイルインクルージョンの脆弱性 - CVE-2006-6770 2012-09-25 15:36 2006-12-27 Show GitHub Exploit DB Packet Storm
193380 6.8 警告 php live - PHP Live! におけるクロスサイトスクリプティングの脆弱性 - CVE-2006-6769 2012-09-25 15:36 2006-12-27 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:Feb. 1, 2025, 4:12 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
267641 - vubb vubb Multiple SQL injection vulnerabilities in VUBB alpha rc1 allow remote attackers to execute arbitrary SQL commands via the (1) f parameter to viewforum.php, (2) t parameter to viewtopic.php, and (3) v… NVD-CWE-Other
CVE-2005-4612 2017-07-20 10:29 2005-12-31 Show GitHub Exploit DB Packet Storm
267642 - vubb vubb Cross-site scripting (XSS) vulnerability in VUBB alpha rc1 allows remote attackers to inject arbitrary web script or HTML via unspecified fields in the user edit profile. NVD-CWE-Other
CVE-2005-4613 2017-07-20 10:29 2005-12-31 Show GitHub Exploit DB Packet Storm
267643 - sum_effect_software digishop Multiple SQL injection vulnerabilities in digiSHOP 3.1.17 and earlier allow remote attackers to execute arbitrary SQL commands or obtain the full installation path via (1) the c parameter in cart.php… NVD-CWE-Other
CVE-2005-4614 2017-07-20 10:29 2005-12-31 Show GitHub Exploit DB Packet Storm
267644 - - - SQL injection vulnerability in news.php in DapperDesk 3.0.1 and earlier allows remote attackers to execute arbitrary SQL commands via the page parameter. NVD-CWE-Other
CVE-2005-4615 2017-07-20 10:29 2005-12-31 Show GitHub Exploit DB Packet Storm
267645 - idevspot isupport SQL injection vulnerability in index.php in iSupport 1.06 allows remote attackers to execute arbitrary SQL commands via the include_file parameter. NVD-CWE-Other
CVE-2005-4616 2017-07-20 10:29 2005-12-31 Show GitHub Exploit DB Packet Storm
267646 - forperfect csupport SQL injection vulnerability in tickets.php in cSupport 1.0 and earlier allows remote attackers to execute arbitrary SQL commands via the pg parameter. CWE-89
SQL Injection 		CVE-2005-4617 2017-07-20 10:29 2005-12-31 Show GitHub Exploit DB Packet Storm
267647 - gfhost
gmailsite 		gfhost
gmailsite 		Cross-site scripting (XSS) vulnerability in index.php in (1) GmailSite 1.0 through 1.0.4 and (2) GFHost 0.1.1 through 0.4.2 allows remote attackers to inject arbitrary web script or HTML via the lng … NVD-CWE-Other
CVE-2005-4627 2017-07-20 10:29 2005-12-31 Show GitHub Exploit DB Packet Storm
267648 - clientexec clientexec SQL injection vulnerability in index.php in ClientExec 2.3 allows remote attackers to execute arbitrary SQL commands via the (1) billshowid, (2) billdetailid, (3) fuse, and (4) frmClientID parameters. NVD-CWE-Other
CVE-2005-4630 2017-07-20 10:29 2005-12-31 Show GitHub Exploit DB Packet Storm
267649 - - - Multiple cross-site scripting (XSS) vulnerabilities in index.php in Kayako SupportSuite 3.00.26 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) nav parameter in … NVD-CWE-Other
CVE-2005-4637 2017-07-20 10:29 2005-12-31 Show GitHub Exploit DB Packet Storm
267650 - kayako supportsuite index.php in Kayako SupportSuite 3.00.26 and earlier allow remote attackers to obtain the full path via (1) _a and (2) newsid parameters in the news module, (3) downloaditemid parameter in the downlo… NVD-CWE-Other
CVE-2005-4638 2017-07-20 10:29 2005-12-31 Show GitHub Exploit DB Packet Storm