Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Feb. 9, 2026, 12:59 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
227821 5.1 警告 gonafish - Gonafish LinksCaffe の links.php における SQL インジェクションの脆弱性 - CVE-2006-3932 2012-12-20 18:02 2006-07-31 Show GitHub Exploit DB Packet Storm
227822 4.6 警告 tuomas airaksinen - Tuomas Airaksinen Midirecord の midirecord.cc におけるバッファオーバーフローの脆弱性 - CVE-2006-3931 2012-12-20 18:02 2006-07-31 Show GitHub Exploit DB Packet Storm
227823 7.5 危険 mamboxchange - a6mambohelpdesk Mambo コンポーネントの admin.a6mambohelpdesk.php における PHP リモートファイルインクルージョンの脆弱性 - CVE-2006-3930 2012-12-20 18:02 2006-07-31 Show GitHub Exploit DB Packet Storm
227824 4.3 警告 ZyXEL - Zyxel Prestige 660H-61 ADSL ルータの Forms/rpSysAdmin スクリプトにおけるクロスサイトスクリプティングの脆弱性 - CVE-2006-3929 2012-12-20 18:02 2006-07-31 Show GitHub Exploit DB Packet Storm
227825 7.5 危険 mikael software - WMNews の index.php における PHP リモートファイルインクルージョンの脆弱性 - CVE-2006-3928 2012-12-20 18:02 2006-07-31 Show GitHub Exploit DB Packet Storm
227826 4.3 警告 phpprobid - PhpProBid の auctionsearch.php におけるクロスサイトスクリプティングの脆弱性 - CVE-2006-3927 2012-12-20 18:02 2006-07-31 Show GitHub Exploit DB Packet Storm
227827 7.5 危険 phpprobid - PhpProBid における SQL インジェクションの脆弱性 - CVE-2006-3926 2012-12-20 18:02 2006-07-31 Show GitHub Exploit DB Packet Storm
227828 6.4 警告 interactual technologies - InterActual Player の iarecord.dll におけるスタックベースのバッファオーバーフローの脆弱性 - CVE-2006-3925 2012-12-20 18:02 2006-07-28 Show GitHub Exploit DB Packet Storm
227829 2.6 注意 fire-mouse - Fire-Mouse Toplist の add.php におけるクロスサイトスクリプティングの脆弱性 - CVE-2006-3923 2012-12-20 18:02 2006-07-28 Show GitHub Exploit DB Packet Storm
227830 7.5 危険 portailphp - PortailPHP の mod_membre/inscription.php における PHP リモートファイルインクルージョンの脆弱性 - CVE-2006-3922 2012-12-20 18:02 2006-07-28 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:April 26, 2026, 4:08 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
211481 9.8 CRITICAL
Network 		skyboxsecurity skybox_platform An issue was discovered in Skybox Platform before 7.5.201. Remote Unauthenticated Code Execution exists via a WAR archive containing a JSP file. The WAR file is sent to /skyboxview-softwareupdate/ser… CWE-20
 Improper Input Validation  		CVE-2015-9246 2024-11-21 11:40 2018-01-13 Show GitHub Exploit DB Packet Storm
211482 9.8 CRITICAL
Network 		progress openedge Insecure default configuration in Progress Software OpenEdge 10.2x and 11.x allows unauthenticated remote attackers to specify arbitrary URLs from which to load and execute malicious Java classes via… CWE-284
Improper Access Control 		CVE-2015-9245 2024-11-21 11:40 2017-10-31 Show GitHub Exploit DB Packet Storm
211483 7.2 HIGH
Network 		cfpaypal cp_contact_form_with_paypal The cp-contact-form-with-paypal (aka CP Contact Form with PayPal) plugin before 1.1.6 for WordPress has SQL injection via the cp_contactformpp_id parameter to cp_contactformpp.php. CWE-89
SQL Injection 		CVE-2015-9234 2024-11-21 11:40 2017-09-30 Show GitHub Exploit DB Packet Storm
211484 8.8 HIGH
Network 		codepeople cp_contact_form_with_paypal The cp-contact-form-with-paypal (aka CP Contact Form with PayPal) plugin before 1.1.6 for WordPress has CSRF with resultant XSS, related to cp_contactformpp.php and cp_contactformpp_admin_int_list.in… CWE-352
 Origin Validation Error 		CVE-2015-9233 2024-11-21 11:40 2017-09-30 Show GitHub Exploit DB Packet Storm
211485 5.3 MEDIUM
Network 		good good_for_enterprise The Good for Enterprise application 3.0.0.415 for Android does not use signature protection for its Authentication Delegation API intent. Also, the Good Dynamic application activation process does no… CWE-345
 Insufficient Verification of Data Authenticity 		CVE-2015-9232 2024-11-21 11:40 2017-09-21 Show GitHub Exploit DB Packet Storm
211486 7.5 HIGH
Network 		iterm2 iterm2 iTerm2 3.x before 3.1.1 allows remote attackers to discover passwords by reading DNS queries. A new (default) feature was added to iTerm2 version 3.0.0 (and unreleased 2.9.x versions such as 2.9.2015… CWE-200
Information Exposure 		CVE-2015-9231 2024-11-21 11:40 2017-09-21 Show GitHub Exploit DB Packet Storm
211487 4.8 MEDIUM
Network 		ait-pro bulletproof_security In the admin/db-backup-security/db-backup-security.php page in the BulletProof Security plugin before .52.5 for WordPress, XSS is possible for remote authenticated administrators via the DBTablePrefi… CWE-79
Cross-site Scripting 		CVE-2015-9230 2024-11-21 11:40 2017-09-13 Show GitHub Exploit DB Packet Storm
211488 4.8 MEDIUM
Network 		imagely nextgen_gallery In the nggallery-manage-gallery page in the Photocrati NextGEN Gallery plugin 2.1.15 for WordPress, XSS is possible for remote authenticated administrators via the images[1][alttext] parameter. CWE-79
Cross-site Scripting 		CVE-2015-9229 2024-11-21 11:40 2017-09-13 Show GitHub Exploit DB Packet Storm
211489 8.8 HIGH
Network 		imagely nextgen_gallery In post-new.php in the Photocrati NextGEN Gallery plugin 2.1.10 for WordPress, unrestricted file upload is available via the name parameter, if a file extension is changed from .jpg to .php. CWE-434
 Unrestricted Upload of File with Dangerous Type  		CVE-2015-9228 2024-11-21 11:40 2017-09-12 Show GitHub Exploit DB Packet Storm
211490 7.2 HIGH
Network 		alegrocart alegrocart PHP remote file inclusion vulnerability in the get_file function in upload/admin2/controller/report_logs.php in AlegroCart 1.2.8 allows remote administrators to execute arbitrary PHP code via a URL i… CWE-94
Code Injection 		CVE-2015-9227 2024-11-21 11:40 2017-09-12 Show GitHub Exploit DB Packet Storm