Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 1, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
232541 4.3 警告 Ando Saabas - Sphider におけるクロスサイトスクリプティングの脆弱性 - CVE-2006-7058 2012-12-20 18:18 2007-02-23 Show GitHub Exploit DB Packet Storm
232542 7.5 危険 Ando Saabas - Sphider の search.php における SQL インジェクションの脆弱性 - CVE-2006-7057 2012-12-20 18:18 2007-02-23 Show GitHub Exploit DB Packet Storm
232543 6.8 警告 sweetphp - TotalCalendar の index.php における PHP リモートファイルインクルージョンの脆弱性 - CVE-2006-7055 2012-12-20 18:18 2007-02-23 Show GitHub Exploit DB Packet Storm
232544 6.8 警告 Wikka Development Team - WikkaWiki におけるクロスサイトスクリプティングの脆弱性 - CVE-2006-7050 2012-12-20 18:18 2007-02-23 Show GitHub Exploit DB Packet Storm
232545 7.5 危険 Wikka Development Team - WikkaWiki の Method メソッドにおけるアクセス制限を回避される脆弱性 - CVE-2006-7049 2012-12-20 18:18 2007-02-23 Show GitHub Exploit DB Packet Storm
232546 5 警告 shoutpro - Shoutpro の include.php における禁止 IP 制限を回避される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2006-7047 2012-12-20 18:18 2007-02-23 Show GitHub Exploit DB Packet Storm
232547 7.8 危険 super link exchange script - Super Link Exchange Script の make_thumbnail.php におけるディレクトリトラバーサルの脆弱性 - CVE-2006-7035 2012-12-20 18:18 2007-02-22 Show GitHub Exploit DB Packet Storm
232548 7.5 危険 super link exchange script - Super Link Exchange Script の directory.php における SQL インジェクションの脆弱性 - CVE-2006-7034 2012-12-20 18:18 2007-02-22 Show GitHub Exploit DB Packet Storm
232549 6.8 警告 super link exchange script - Super Link Exchange Script におけるクロスサイトスクリプティングの脆弱性 - CVE-2006-7033 2012-12-20 18:18 2007-02-22 Show GitHub Exploit DB Packet Storm
232550 10 危険 tufat - FlashBB の phpbb/getmsg.php における PHP リモートファイルインクルージョンの脆弱性 - CVE-2006-7032 2012-12-20 18:18 2007-02-22 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 1, 2026, 4:12 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
61 6.5 MEDIUM
Network 		- - Open STA Manager 2.3 contains a path traversal vulnerability that allows authenticated users to download arbitrary files by manipulating the file parameter. Attackers can send GET requests to modules… New CWE-22
Path Traversal 		CVE-2018-25421 2026-05-31 01:17 2026-05-31 Show GitHub Exploit DB Packet Storm
62 8.2 HIGH
Network 		- - AiOPMSD Final 1.0.0 contains an SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary SQL queries by injecting malicious code through the 'id' parameter. Attackers ca… New CWE-89
SQL Injection 		CVE-2018-25420 2026-05-31 01:17 2026-05-31 Show GitHub Exploit DB Packet Storm
63 8.2 HIGH
Network 		- - AiOPMSD Final 1.0.0 contains an SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary SQL queries by injecting malicious code through the genre parameter. Attackers c… New CWE-89
SQL Injection 		CVE-2018-25419 2026-05-31 01:17 2026-05-31 Show GitHub Exploit DB Packet Storm
64 8.2 HIGH
Network 		- - AiOPMSD Final 1.0.0 contains an SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary SQL queries by injecting malicious code through the year parameter. Attackers ca… New CWE-89
SQL Injection 		CVE-2018-25418 2026-05-31 01:17 2026-05-31 Show GitHub Exploit DB Packet Storm
65 8.2 HIGH
Network 		- - AiOPMSD Final 1.0.0 contains an SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary SQL queries by injecting malicious code through the quality parameter. Attackers… New CWE-89
SQL Injection 		CVE-2018-25417 2026-05-31 01:17 2026-05-31 Show GitHub Exploit DB Packet Storm
66 8.2 HIGH
Network 		- - AiOPMSD Final 1.0.0 contains an SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary SQL queries by injecting malicious code through the country parameter. Attackers… New CWE-89
SQL Injection 		CVE-2018-25416 2026-05-31 01:17 2026-05-31 Show GitHub Exploit DB Packet Storm
67 8.2 HIGH
Network 		- - AiOPMSD Final 1.0.0 contains an SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary SQL queries by injecting malicious code through the director parameter. Attacker… New CWE-89
SQL Injection 		CVE-2018-25415 2026-05-31 01:17 2026-05-31 Show GitHub Exploit DB Packet Storm
68 8.2 HIGH
Network 		- - AiOPMSD Final 1.0.0 contains an SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary SQL queries by injecting malicious code through the actor parameter. Attackers c… New CWE-89
SQL Injection 		CVE-2018-25414 2026-05-31 01:17 2026-05-31 Show GitHub Exploit DB Packet Storm
69 8.2 HIGH
Network 		- - AiOPMSD Final 1.0.0 contains an SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary SQL queries by injecting malicious code through the 'q' parameter. Attackers can… New CWE-89
SQL Injection 		CVE-2018-25413 2026-05-31 01:17 2026-05-31 Show GitHub Exploit DB Packet Storm
70 9.8 CRITICAL
Network 		- - Delta Sql 1.8.2 contains an arbitrary file upload vulnerability that allows unauthenticated attackers to upload malicious files by sending POST requests to docs_upload.php with crafted multipart form… New CWE-306
Missing Authentication for Critical Function 		CVE-2018-25412 2026-05-31 01:17 2026-05-31 Show GitHub Exploit DB Packet Storm