Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 25, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
231091 4.3 警告 visionera ab - VisionProject におけるクロスサイトスクリプティングの脆弱性 - CVE-2007-4265 2012-12-20 18:33 2007-08-9 Show GitHub Exploit DB Packet Storm
231092 7.5 危険 prozilla - Prozilla Pub Site Directory の directory.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2007-4258 2012-12-20 18:33 2007-08-8 Show GitHub Exploit DB Packet Storm
231093 5 警告 ynp - YNP Portal System の showpage.cgi におけるディレクトリトラバーサルの脆弱性 - CVE-2007-4256 2012-12-20 18:33 2007-08-8 Show GitHub Exploit DB Packet Storm
231094 4.3 警告 toolbar gaming - Internet Explorer 用の Toolbar Gaming ツールバーにおけるサービス運用妨害 (DoS) の脆弱性 - CVE-2007-4248 2012-12-20 18:33 2007-08-8 Show GitHub Exploit DB Packet Storm
231095 9.3 危険 vietphp - VietPHP における PHP リモートファイルインクルージョンの脆弱性 - CVE-2007-4235 2012-12-20 18:33 2007-08-8 Show GitHub Exploit DB Packet Storm
231096 4.3 警告 PHPNUKE - PHP-Nuke の Search モジュールにおけるクロスサイトスクリプティングの脆弱性 - CVE-2007-4212 2012-12-20 18:33 2007-08-7 Show GitHub Exploit DB Packet Storm
231097 7.5 危険 redline software - la-nai CMS の module.php における SQL インジェクションの脆弱性 - CVE-2007-4210 2012-12-20 18:33 2007-08-7 Show GitHub Exploit DB Packet Storm
231098 4.3 警告 The Sleuth Kit - Brian Carrier TSK の ext2fs.c におけるサービス運用妨害 (DoS) 脆弱性 - CVE-2007-4195 2012-12-20 18:33 2007-08-7 Show GitHub Exploit DB Packet Storm
231099 5 警告 TIBCO Software - TIBCO RV クライアントのデフォルト設定におけるメッセージの内容をキャプチャされる脆弱性 - CVE-2007-4160 2012-12-20 18:33 2007-08-3 Show GitHub Exploit DB Packet Storm
231100 5 警告 TIBCO Software - TIBCO RV の特定のデーモンにおけるユーザ名などの重要な情報を取得される脆弱性 - CVE-2007-4159 2012-12-20 18:33 2007-08-3 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 25, 2026, 4:01 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
316661 - modulebased_cms modulebased_cms PHP remote file inclusion vulnerability in ModuleBased CMS Pre-Alpha allows remote attackers to execute arbitrary PHP code via the _SERVER parameter in (1) admin/avatar.php, (2) libs/archive.class.ph… NVD-CWE-Other
CVE-2006-4545 2024-08-8 05:15 2006-09-6 Show GitHub Exploit DB Packet Storm
316662 - joomla
mambo 		jim_component PHP remote file inclusion vulnerability in index.php in the JIM component for Mambo and Joomla! allows remote attackers to execute arbitrary PHP code via a URL in the mosConfig_absolute_path paramete… NVD-CWE-Other
CVE-2006-4556 2024-08-8 05:15 2006-09-6 Show GitHub Exploit DB Packet Storm
316663 - phpprojekt phpprojekt Multiple PHP remote file inclusion vulnerabilities in the Content Management module ("Content manager") for PHProjekt 0.6.1, when register_globals is enabled, allow remote attackers to execute arbitr… NVD-CWE-Other
CVE-2006-4609 2024-08-8 05:15 2006-09-7 Show GitHub Exploit DB Packet Storm
316664 - robert_jewell discloser PHP remote file inclusion vulnerability in plugins/plugins.php in Bob Jewell Discloser 0.0.4 allows remote attackers to execute arbitrary PHP code via a URL in the type parameter. NOTE: another rese… NVD-CWE-Other
CVE-2006-4557 2024-08-8 05:15 2006-09-6 Show GitHub Exploit DB Packet Storm
316665 - symantec gateway_security The proxy DNS service in Symantec Gateway Security (SGS) allows remote attackers to make arbitrary DNS queries to third-party DNS servers, while hiding the source IP address of the attacker. NOTE: a… NVD-CWE-Other
CVE-2006-4562 2024-08-8 05:15 2006-09-6 Show GitHub Exploit DB Packet Storm
316666 - microsoft terminal_server Microsoft Terminal Server, when running an application session with the "Start program at logon" and "Override settings from user profile and Client Connection Manager wizard" options, allows local u… NVD-CWE-Other
CVE-2006-4465 2024-08-8 05:15 2006-09-1 Show GitHub Exploit DB Packet Storm
316667 - xchat xchat Unspecified vulnerability in Xchat 2.6.7 and earlier allows remote attackers to cause a denial of service (crash) via unspecified vectors involving the PRIVMSG command. NOTE: the vendor has disputed… NVD-CWE-Other
CVE-2006-4455 2024-08-8 05:15 2006-08-31 Show GitHub Exploit DB Packet Storm
316668 - cutephp cutenews Multiple PHP remote file inclusion vulnerabilities in CuteNews 1.3.x allow remote attackers to execute arbitrary PHP code via a URL in the cutepath parameter to (1) show_news.php or (2) search.php. … NVD-CWE-Other
CVE-2006-4445 2024-08-8 05:15 2006-08-30 Show GitHub Exploit DB Packet Storm
316669 6.5 MEDIUM
Network 		logsign unified_secops_platform Logsign Unified SecOps Platform Directory Traversal Information Disclosure Vulnerability. This vulnerability allows remote attackers to disclose sensitive information on affected installations of Log… CWE-22
Path Traversal 		CVE-2024-7564 2024-08-8 04:59 2024-08-7 Show GitHub Exploit DB Packet Storm
316670 4.3 MEDIUM
Network 		google chrome Insufficient validation of untrusted input in Safe Browsing in Google Chrome prior to 127.0.6533.72 allowed a remote attacker who convinced a user to engage in specific UI gestures to bypass discreti… NVD-CWE-noinfo
CVE-2024-7005 2024-08-8 04:56 2024-08-7 Show GitHub Exploit DB Packet Storm