Vulnerability Search Top

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

Vulnerability Information Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 17, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
231371	7.5	危険	university of glasgow	-	University of Glasgow SID の client.php における PHP リモートファイルインクルージョンの脆弱性	-	CVE-2006-5419	2012-12-20 18:02	2006-10-20	Show	GitHub Exploit DB Packet Storm

231372	6.8	警告	phpBB	-	phpBB 用の SearchIndexer の pbpbb アーカイブにおける PHP リモートファイルインクルージョンの脆弱性	CWE-94 コード・インジェクション	CVE-2006-5418	2012-12-20 18:02	2006-10-20	Show	GitHub Exploit DB Packet Storm

231373	7.5	危険	supermod	-	YaBBSM 用の SuperMod における PHP リモートファイルインクルージョンの脆弱性	-	CVE-2006-5413	2012-12-20 18:02	2006-10-20	Show	GitHub Exploit DB Packet Storm

231374	6.2	警告	東芝	-	複数製品に使用される Toshiba Bluetooth ワイアレスデバイスドライバにおけるサービス運用妨害 (DoS) の脆弱性	-	CVE-2006-5405	2012-12-20 18:02	2006-10-18	Show	GitHub Exploit DB Packet Storm

231375	2.6	注意	シマンテック	-	Norton AntiVirus などの Symantec Automated Support Assistant で使用される ActiveX コントロールにおける重要な情報を取得される脆弱性	-	CVE-2006-5404	2012-12-20 18:02	2006-10-5	Show	GitHub Exploit DB Packet Storm

231376	5.1	警告	シマンテック	-	Norton AntiVirus などの Symantec Automated Support Assistant で使用される ActiveX コントロールにおけるスタックベースのバッファオーバーフローの脆弱性	-	CVE-2006-5403	2012-12-20 18:02	2006-10-5	Show	GitHub Exploit DB Packet Storm

231377	7.5	危険	phpmybibli	-	PHPmybibli における PHP リモートファイルインクルージョンの脆弱性	CWE-94 コード・インジェクション	CVE-2006-5402	2012-12-20 18:02	2006-10-18	Show	GitHub Exploit DB Packet Storm

231378	7.5	危険	phprecipebook	-	PHPRecipeBook の classes/Import_MM.class.php における PHP リモートファイルインクルージョンの脆弱性	CWE-94 コード・インジェクション	CVE-2006-5399	2012-12-20 18:02	2006-10-18	Show	GitHub Exploit DB Packet Storm

231379	7.5	危険	simplog	-	Simplog の comments.php における SQL インジェクションの脆弱性	-	CVE-2006-5398	2012-12-20 18:02	2006-10-18	Show	GitHub Exploit DB Packet Storm

231380	2.1	注意	X.Org Foundation	-	X.Org libX11 の Xinput モジュールにおける XCOMPOSEFILE 環境変数によって使用されるファイルが読み込まれる脆弱性	-	CVE-2006-5397	2012-12-20 18:02	2006-11-2	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 17, 2026, 4:15 a.m.

No	CVSS	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
351411	-	sylpheed sylpheed-claws altlinux gentoo redhat	sylpheed sylpheed-claws alt_linux linux enterprise_linux fedora_core linux_advanced_workstation	Buffer overflow in Sylpheed before 1.0.3 and other versions before 1.9.5 allows remote attackers to execute arbitrary code via an e-mail message with certain headers containing non-ASCII characters t…	NVD-CWE-Other	CVE-2005-0667	2008-09-6 05:46	2005-03-7	Show	GitHub Exploit DB Packet Storm

351412	-	christian_hilgers	http_anti_virus_proxy_\(havp\)	Unknown vulnerability in HTTP Anti Virus Proxy (HAVP) before 0.51 prevents viruses from being properly detected in certain files such as (1) .CAB or (2) .ZIP files.	NVD-CWE-Other	CVE-2005-0668	2008-09-6 05:46	2005-03-4	Show	GitHub Exploit DB Packet Storm

351413	-	ca3de	ca3de	Format string vulnerability in Carsten's 3D Engine (Ca3DE), March 2004 version and earlier, allows remote attackers to execute arbitrary code via format string specifiers in a command.	NVD-CWE-Other	CVE-2005-0671	2008-09-6 05:46	2005-03-3	Show	GitHub Exploit DB Packet Storm

351414	-	ca3de	ca3de	Carsten's 3D Engine (Ca3DE), March 2004 version and earlier, allows remote attackers to execute arbitrary code via text strings that are not null terminated, which triggers a null dereference.	NVD-CWE-Other	CVE-2005-0672	2008-09-6 05:46	2005-05-2	Show	GitHub Exploit DB Packet Storm

351415	-	phpbb_group	phpbb	Cross-site scripting (XSS) vulnerability in usercp_register.php for phpBB 2.0.13 allows remote attackers to inject arbitrary web script or HTML by setting the (1) allowhtml, (2) allowbbcode, or (3) a…	NVD-CWE-Other	CVE-2005-0673	2008-09-6 05:46	2005-05-2	Show	GitHub Exploit DB Packet Storm

351416	-	phpoutsourcing	zorum	Cross-site scripting (XSS) vulnerability in index.php for Zorum 3.5 allows remote attackers to inject arbitrary web script or HTML via the (1) list or (2) frommethod parameters.	NVD-CWE-Other	CVE-2005-0675	2008-09-6 05:46	2005-05-2	Show	GitHub Exploit DB Packet Storm

351417	-	phpoutsourcing	zorum	index.php in Zorum 3.5 allows remote attackers to trigger an SQL error, and possibly inject arbitrary SQL commands, via the search capability.	NVD-CWE-Other	CVE-2005-0676	2008-09-6 05:46	2005-05-4	Show	GitHub Exploit DB Packet Storm

351418	-	phpoutsourcing	zorum	index.php for Zorum 3.5 allows remote attackers to perform certain actions as other users by modifying the id parameter.	NVD-CWE-Other	CVE-2005-0677	2008-09-6 05:46	2005-05-2	Show	GitHub Exploit DB Packet Storm

351419	-	kde	kde	Multiple vulnerabilities in fliccd, when installed setuid root as part of the kdeedu Kstars support for Instrument Neutral Distributed Interface (INDI) in KDE 3.3 to 3.3.2, allow local users and remo…	NVD-CWE-Other	CVE-2005-0011	2008-09-6 05:45	2005-05-2	Show	GitHub Exploit DB Packet Storm

351420	-	-	-	The f2c translator in the f2c package 3.1 allows local users to read arbitrary files via a symlink attack on temporary files.	NVD-CWE-Other	CVE-2005-0017	2008-09-6 05:45	2005-05-2	Show	GitHub Exploit DB Packet Storm