Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Feb. 9, 2026, 12:59 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
227371 6 警告 WordPress.org - WordPress の plugins/wp-db-backup.php におけるディレクトリトラバーサルの脆弱性 - CVE-2006-5705 2012-12-20 18:02 2006-10-27 Show GitHub Exploit DB Packet Storm
227372 4.3 警告 Tiki Software Community Association - Tikiwiki の featured_link.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2006-5703 2012-12-20 18:02 2006-11-3 Show GitHub Exploit DB Packet Storm
227373 5 警告 Tiki Software Community Association - Tikiwiki における重要な情報 (MySQL ユーザ名およびパスワード) を取得される脆弱性 CWE-200
情報漏えい 		CVE-2006-5702 2012-12-20 18:02 2006-11-3 Show GitHub Exploit DB Packet Storm
227374 6.4 警告 uni-vert - Uni-Vert PhpLeague の consult/classement.php における SQL インジェクションの脆弱性 - CVE-2006-5676 2012-12-20 18:02 2006-11-2 Show GitHub Exploit DB Packet Storm
227375 7.5 危険 spider friendly - phpBB モジュール Spider Friendly の admin/modules_data.php における PHP リモートファイルインクルージョンの脆弱性 - CVE-2006-5665 2012-12-20 18:02 2006-11-2 Show GitHub Exploit DB Packet Storm
227376 6.8 警告 virtech - VIRtech Netquery の nquser.php におけるクロスサイトスクリプティングの脆弱性 - CVE-2006-5661 2012-12-20 18:02 2006-11-2 Show GitHub Exploit DB Packet Storm
227377 7.6 危険 studio achtundachtzig - BlooMooWeb ActiveX コントロールにおける任意のファイルをダウンロードされる脆弱性 - CVE-2006-5658 2012-12-20 18:02 2006-11-2 Show GitHub Exploit DB Packet Storm
227378 10 危険 vilistextum - Vilistextum の src/text.c における脆弱性 - CVE-2006-5657 2012-12-20 18:02 2006-11-2 Show GitHub Exploit DB Packet Storm
227379 5 警告 vilistextum - Vilistextum の src/util.c におけるサービス運用妨害 (DoS) の脆弱性 CWE-399
リソース管理の問題 		CVE-2006-5656 2012-12-20 18:02 2006-11-2 Show GitHub Exploit DB Packet Storm
227380 4.3 警告 サン・マイクロシステムズ - Sun Java System Messenger Express の index スクリプトにおけるクロスサイトスクリプティングの脆弱性 - CVE-2006-5653 2012-12-20 18:02 2006-11-2 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:April 25, 2026, 4:08 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
198141 8.8 HIGH
Network 		graphicsmagick graphicsmagick In GraphicsMagick 1.3.26, an allocation failure vulnerability was found in the function ReadMNGImage in coders/png.c when a small MNG file has a MEND chunk with a large length value. CWE-20
 Improper Input Validation  		CVE-2017-13147 2024-11-21 12:11 2017-08-24 Show GitHub Exploit DB Packet Storm
198142 6.1 MEDIUM
Network 		qodeinteractive bridge DOM based Cross-site scripting (XSS) vulnerability in the Bridge theme before 11.2 for WordPress allows remote attackers to inject arbitrary JavaScript. CWE-79
Cross-site Scripting 		CVE-2017-13138 2024-11-21 12:11 2017-08-23 Show GitHub Exploit DB Packet Storm
198143 9.8 CRITICAL
Network 		formcrafts formcraft The FormCraft Basic plugin 1.0.5 for WordPress has SQL injection in the id parameter to form.php. CWE-89
SQL Injection 		CVE-2017-13137 2024-11-21 12:11 2017-08-23 Show GitHub Exploit DB Packet Storm
198144 8.8 HIGH
Network 		imagemagick imagemagick In ImageMagick before 6.9.8-5 and 7.x before 7.0.5-6, there is a memory leak in the ReadMATImage function in coders/mat.c. CWE-772
 Missing Release of Resource after Effective Lifetime 		CVE-2017-13146 2024-11-21 12:11 2017-08-23 Show GitHub Exploit DB Packet Storm
198145 6.5 MEDIUM
Network 		imagemagick
debian
canonical 		imagemagick
debian_linux
ubuntu_linux 		In ImageMagick before 6.9.8-8 and 7.x before 7.0.5-9, the ReadJP2Image function in coders/jp2.c does not properly validate the channel geometry, leading to a crash. CWE-20
 Improper Input Validation  		CVE-2017-13145 2024-11-21 12:11 2017-08-23 Show GitHub Exploit DB Packet Storm
198146 6.5 MEDIUM
Network 		imagemagick imagemagick In ImageMagick before 6.9.7-10, there is a crash (rather than a "width or height exceeds limit" error report) if the image dimensions are too large, as demonstrated by use of the mpc coder. CWE-20
 Improper Input Validation  		CVE-2017-13144 2024-11-21 12:11 2017-08-23 Show GitHub Exploit DB Packet Storm
198147 7.5 HIGH
Network 		imagemagick imagemagick In ImageMagick before 6.9.7-6 and 7.x before 7.0.4-6, the ReadMATImage function in coders/mat.c uses uninitialized data, which might allow remote attackers to obtain sensitive information from proces… CWE-200
Information Exposure 		CVE-2017-13143 2024-11-21 12:11 2017-08-23 Show GitHub Exploit DB Packet Storm
198148 6.5 MEDIUM
Network 		imagemagick imagemagick In ImageMagick before 6.9.9-0 and 7.x before 7.0.6-1, a crafted PNG file could trigger a crash because there was an insufficient check for short files. CWE-754
 Improper Check for Unusual or Exceptional Conditions 		CVE-2017-13142 2024-11-21 12:11 2017-08-23 Show GitHub Exploit DB Packet Storm
198149 6.5 MEDIUM
Network 		imagemagick imagemagick In ImageMagick before 6.9.9-4 and 7.x before 7.0.6-4, a crafted file could trigger a memory leak in ReadOnePNGImage in coders/png.c. CWE-772
 Missing Release of Resource after Effective Lifetime 		CVE-2017-13141 2024-11-21 12:11 2017-08-23 Show GitHub Exploit DB Packet Storm
198150 6.5 MEDIUM
Network 		imagemagick imagemagick In ImageMagick before 6.9.9-1 and 7.x before 7.0.6-2, the ReadOnePNGImage function in coders/png.c allows remote attackers to cause a denial of service (application hang in LockSemaphoreInfo) via a P… CWE-119
Incorrect Access of Indexable Resource ('Range Error')  		CVE-2017-13140 2024-11-21 12:11 2017-08-23 Show GitHub Exploit DB Packet Storm