Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 6, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
227481 7.5 危険 zeuscms - ZeusCMS の security.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2007-6622 2012-12-20 18:34 2008-01-3 Show GitHub Exploit DB Packet Storm
227482 4.3 警告 simpleforum - SimpleForum の simpleforum.cgi におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2007-6616 2012-12-20 18:34 2008-01-3 Show GitHub Exploit DB Packet Storm
227483 5.8 警告 skyfex - SkyFex Client の SkyFexClient.ocx におけるバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2007-6605 2012-12-20 18:34 2007-12-31 Show GitHub Exploit DB Packet Storm
227484 5 警告 xcms - XCMS の index.php におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2007-6604 2012-12-20 18:34 2007-12-31 Show GitHub Exploit DB Packet Storm
227485 4.3 警告 phpcredo - PHCDownload におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2007-6588 2012-12-20 18:34 2007-12-28 Show GitHub Exploit DB Packet Storm
227486 7.5 危険 Plogger Project - Plogger の plog-rss.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2007-6587 2012-12-20 18:34 2007-11-3 Show GitHub Exploit DB Packet Storm
227487 6.4 警告 socialengine - Social Engine におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2007-6581 2012-12-20 18:34 2007-12-28 Show GitHub Exploit DB Packet Storm
227488 7.5 危険 wallpaper - Wallpaper Site における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2007-6580 2012-12-20 18:34 2007-12-28 Show GitHub Exploit DB Packet Storm
227489 10 危険 Xfce - Xfce の Widget Library におけるメモリ二重解放の脆弱性 CWE-119
バッファエラー 		CVE-2007-6532 2012-12-20 18:34 2008-01-9 Show GitHub Exploit DB Packet Storm
227490 5 警告 Xfce - Xfce の Panel コンポーネントにおけるスタックベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2007-6531 2012-12-20 18:34 2008-01-9 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 6, 2026, 4:08 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
312721 - microsoft windows_2003_server
windows_xp
windows_2000 		Microsoft Windows NT 4.0, Windows 2000, Windows XP, and Windows Small Business Server 2003 allow remote attackers to cause a denial of service (IP stack hang) via a continuous stream of packets on TC… NVD-CWE-Other
CVE-2006-3880 2024-08-8 04:15 2006-07-27 Show GitHub Exploit DB Packet Storm
312722 - amazing_flash_commerce afcommerce_shopping_cart SQL injection vulnerability in Amazing Flash AFCommerce Shopping Cart allows remote attackers to execute arbitrary SQL commands via the search field. NOTE: the vendor has disputed this issue, statin… NVD-CWE-Other
CVE-2006-3794 2024-08-8 04:15 2006-07-24 Show GitHub Exploit DB Packet Storm
312723 - codeworks gnomedia_subberz PHP remote file inclusion vulnerability in user-func.php in Codeworks Gnomedia SubberZ[Lite] allows remote attackers to execute arbitrary PHP code via a URL in the myadmindir parameter. NOTE: this i… NVD-CWE-Other
CVE-2006-3689 2024-08-8 04:15 2006-07-21 Show GitHub Exploit DB Packet Storm
312724 - silentweb listmessenger PHP remote file inclusion vulnerability in enduser/listmessenger.php in ListMessenger 0.9.3 allows remote attackers to execute arbitrary PHP code via a URL in the lm_path parameter. NOTE: the vendor… NVD-CWE-Other
CVE-2006-3692 2024-08-8 04:15 2006-07-21 Show GitHub Exploit DB Packet Storm
312725 - adaptive_technology_resource_centre atutor SQL injection vulnerability in index.php in ATutor 1.5.3 allows remote attackers to execute arbitrary SQL commands via the fid parameter. NOTE: this issue has been disputed by the vendor, who states … NVD-CWE-Other
CVE-2006-3662 2024-08-8 04:15 2006-07-19 Show GitHub Exploit DB Packet Storm
312726 - invision_power_services invision_power_board Multiple SQL injection vulnerabilities in Invision Power Board (IPB) 1.x and 2.x allow remote attackers to execute arbitrary SQL commands via the (1) idcat and (2) code parameters in a ketqua action … NVD-CWE-Other
CVE-2006-3543 2024-08-8 04:15 2006-07-13 Show GitHub Exploit DB Packet Storm
312727 - invision_power_services invision_board Multiple SQL injection vulnerabilities in Invision Power Board (IPB) 1.3 Final allow remote attackers to execute arbitrary SQL commands via the CODE parameter in a (1) Stats, (2) Mail, and (3) Reg ac… NVD-CWE-Other
CVE-2006-3544 2024-08-8 04:15 2006-07-13 Show GitHub Exploit DB Packet Storm
312728 - microsoft internet_explorer Microsoft Internet Explorer 7.0 Beta allows remote attackers to cause a denial of service (application crash) via a web page with multiple empty APPLET start tags. NOTE: a third party has disputed t… NVD-CWE-Other
CVE-2006-3545 2024-08-8 04:15 2006-07-13 Show GitHub Exploit DB Packet Storm
312729 - vmware player EMC VMware Player allows user-assisted attackers to cause a denial of service (unrecoverable application failure) via a long value of the ide1:0.fileName parameter in the .vmx file of a virtual machi… NVD-CWE-Other
CVE-2006-3547 2024-08-8 04:15 2006-07-13 Show GitHub Exploit DB Packet Storm
312730 - tor tor Tor before 0.1.1.20 kills the circuit when it receives an unrecognized relay command, which causes network circuits to be disbanded. NOTE: while this item is listed under the "Security fixes" sectio… NVD-CWE-Other
CVE-2006-3416 2024-08-8 04:15 2006-07-7 Show GitHub Exploit DB Packet Storm