Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Feb. 9, 2026, 12:59 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
228041 4.3 警告 dkscript - DKScript.com Dragon's Kingdom Script におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2006-3539 2012-12-20 18:02 2006-07-12 Show GitHub Exploit DB Packet Storm
228042 5.8 警告 beatificfaith - BeatificFaith Eprayer Alpha の demo.php におけるクロスサイトスクリプティングの脆弱性 - CVE-2006-3538 2012-12-20 18:02 2006-07-12 Show GitHub Exploit DB Packet Storm
228043 7.5 危険 randshop - Randshop の index.php における PHP リモートファイルインクルージョンの脆弱性 - CVE-2006-3537 2012-12-20 18:02 2006-07-12 Show GitHub Exploit DB Packet Storm
228044 7.5 危険 ej3 - EJ3 TOPo の code/class_db_text.php における任意の PHP コードを実行される脆弱性 - CVE-2006-3536 2012-12-20 18:02 2006-07-12 Show GitHub Exploit DB Packet Storm
228045 5 警告 Nullsoft - Nullsoft SHOUTcast DSP におけるディレクトリトラバーサルの脆弱性 - CVE-2006-3535 2012-12-20 18:02 2006-07-12 Show GitHub Exploit DB Packet Storm
228046 7.8 危険 Nullsoft - Nullsoft SHOUTcast DSP におけるディレクトリトラバーサルの脆弱性 - CVE-2006-3534 2012-12-20 18:02 2006-07-12 Show GitHub Exploit DB Packet Storm
228047 5.8 警告 pivot - Pivot におけるクロスサイトスクリプティングの脆弱性 - CVE-2006-3533 2012-12-20 18:02 2006-07-12 Show GitHub Exploit DB Packet Storm
228048 5.1 警告 pivot - Pivot の includes/edit_new.php における任意の PHP コードを実行される脆弱性 - CVE-2006-3532 2012-12-20 18:02 2006-07-12 Show GitHub Exploit DB Packet Storm
228049 7.5 危険 pivot - Pivot の includes/editor/insert_image.php における任意のファイルをアップロードされる脆弱性 - CVE-2006-3531 2012-12-20 18:02 2006-07-12 Show GitHub Exploit DB Packet Storm
228050 6.8 警告 Joomla! - Mambo 用の PccookBook Component の com_pccookbook/pccookbook.php における PHP リモートファイルインクルージョンの脆弱性 CWE-94
コード・インジェクション 		CVE-2006-3530 2012-12-20 18:02 2006-07-12 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:April 24, 2026, 4 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
199501 6.1 MEDIUM
Network 		phoenixframework phoenix The Phoenix Framework versions 1.0.0 through 1.0.4, 1.1.0 through 1.1.6, 1.2.0, 1.2.2 and 1.3.0-rc.0 are vulnerable to unvalidated URL redirection, which may result in phishing or social engineering … CWE-601
Open Redirect 		CVE-2017-1000163 2024-11-21 12:04 2017-11-18 Show GitHub Exploit DB Packet Storm
199502 9.8 CRITICAL
Network 		xrootd xrootd ROOT xrootd version 4.6.0 and below is vulnerable to an unauthenticated shell command injection resulting in remote code execution CWE-78
OS Command  		CVE-2017-1000215 2024-11-21 12:04 2017-11-18 Show GitHub Exploit DB Packet Storm
199503 7.5 HIGH
Network 		jqueryfiletree_project jqueryfiletree jqueryFileTree 2.1.5 and older Directory Traversal CWE-22
Path Traversal 		CVE-2017-1000170 2024-11-21 12:04 2017-11-18 Show GitHub Exploit DB Packet Storm
199504 9.8 CRITICAL
Network 		quickerbb_project quickerbb QuickerBB version <= 0.7.2 is vulnerable to arbitrary file writes which can lead to remote code execution. This can lead to the complete takeover of the server hosting QuickerBB. CWE-20
 Improper Input Validation  		CVE-2017-1000169 2024-11-21 12:04 2017-11-18 Show GitHub Exploit DB Packet Storm
199505 6.5 MEDIUM
Network 		sodiumoxide_project sodiumoxide sodiumoxide 0.0.13 and older scalarmult() vulnerable to degenerate public keys NVD-CWE-noinfo
CVE-2017-1000168 2024-11-21 12:04 2017-11-18 Show GitHub Exploit DB Packet Storm
199506 9.8 CRITICAL
Network 		cygnux syspass Cygnux sysPass version 2.1.7 and older is vulnerable to a Local File Inclusion in the functionality of javascript files inclusion. The attacker can read the configuration files that contain the login… NVD-CWE-noinfo
CVE-2017-1000192 2024-11-21 12:04 2017-11-18 Show GitHub Exploit DB Packet Storm
199507 7.5 HIGH
Network 		jool jool Jool 3.5.0-3.5.1 is vulnerable to a kernel crashing packet resulting in a DOS. CWE-400
 Uncontrolled Resource Consumption 		CVE-2017-1000191 2024-11-21 12:04 2017-11-18 Show GitHub Exploit DB Packet Storm
199508 9.8 CRITICAL
Network 		alchemist-elixir alchemist-server Elixir's vim plugin, alchemist.vim is vulnerable to remote code execution in the bundled alchemist-server. A malicious website can execute requests against an ephemeral port on localhost that are the… NVD-CWE-noinfo
CVE-2017-1000212 2024-11-21 12:04 2017-11-18 Show GitHub Exploit DB Packet Storm
199509 5.3 MEDIUM
Network 		lynx_project lynx Lynx before 2.8.9dev.16 is vulnerable to a use after free in the HTML parser resulting in memory disclosure, because HTML_put_string() can append a chunk onto itself. CWE-416
 Use After Free 		CVE-2017-1000211 2024-11-21 12:04 2017-11-18 Show GitHub Exploit DB Packet Storm
199510 9.8 CRITICAL
Network 		htslib htslib samtools htslib library version 1.4.0 and earlier is vulnerable to buffer overflow in the CRAM rANS codec resulting in potential arbitrary code execution CWE-119
Incorrect Access of Indexable Resource ('Range Error')  		CVE-2017-1000206 2024-11-21 12:04 2017-11-18 Show GitHub Exploit DB Packet Storm