Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 3, 2026, 6:08 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
248551 7.5 危険 der dirigent - DeDi における PHP リモートファイルインクルージョンの脆弱性 CWE-94
コード・インジェクション 		CVE-2006-5507 2012-06-26 15:37 2006-10-25 Show GitHub Exploit DB Packet Storm
248552 7.5 危険 ben3w - 2BGal における PHP リモートファイルインクルージョンの脆弱性 - CVE-2006-5505 2012-06-26 15:37 2006-10-25 Show GitHub Exploit DB Packet Storm
248553 7.5 危険 AOL - AOL Security Edition の YGPPicDownload.dll におけるヒープベースのバッファオーバーフローの脆弱性 - CVE-2006-5502 2012-06-26 15:37 2006-10-25 Show GitHub Exploit DB Packet Storm
248554 7.5 危険 AOL - AOL Security Edition の YGPPicDownload.dll におけるバッファオーバーフローの脆弱性 - CVE-2006-5501 2012-06-26 15:37 2006-10-25 Show GitHub Exploit DB Packet Storm
248555 7.5 危険 digitalhive - DigitalHive の template/purpletech/base_include.php における PHP リモートファイルインクルージョンの脆弱性 - CVE-2006-5493 2012-06-26 15:37 2006-10-25 Show GitHub Exploit DB Packet Storm
248556 7.5 危険 ceary - UltraCMS の include/index.php における SQL インジェクションの脆弱性 - CVE-2006-5491 2012-06-26 15:37 2006-10-25 Show GitHub Exploit DB Packet Storm
248557 2.1 注意 FreeBSD - FreeBSD の p1003_1b.c における不特定のサービス運用妨害 (DoS) の脆弱性 - CVE-2006-5483 2012-06-26 15:37 2006-05-20 Show GitHub Exploit DB Packet Storm
248558 2.1 注意 FreeBSD - FreeBSD の ufs_vnops.c におけるサービス運用妨害 (DoS) の脆弱性 - CVE-2006-5482 2012-06-26 15:37 2006-05-31 Show GitHub Exploit DB Packet Storm
248559 7.5 危険 Castor Project - 2le.net Castor PHP Web Builder における PHP リモートファイルインクルージョンの脆弱性 CWE-94
コード・インジェクション 		CVE-2006-5481 2012-06-26 15:37 2006-10-24 Show GitHub Exploit DB Packet Storm
248560 5.1 警告 Castor Project - 2le.net Castor PHP Web Builder の lib/rs.php における PHP リモートファイルインクルージョンの脆弱性 CWE-94
コード・インジェクション 		CVE-2006-5480 2012-06-26 15:37 2006-10-24 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 3, 2026, 4:18 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
210871 7.2 HIGH
Network 		jizhicms jizhicms An arbitrary file upload vulnerability in Jizhicms v1.5 allows attackers to execute arbitrary code via a crafted .jpg file which is later changed to a PHP file. CWE-434
 Unrestricted Upload of File with Dangerous Type  		CVE-2020-21483 2024-11-21 14:12 2021-09-16 Show GitHub Exploit DB Packet Storm
210872 5.4 MEDIUM
Network 		rgcms_project rgcms A cross-site scripting (XSS) vulnerability in RGCMS v1.06 allows attackers to obtain the administrator's cookie via a crafted payload in the Name field under the Message Board module CWE-79
Cross-site Scripting 		CVE-2020-21482 2024-11-21 14:12 2021-09-16 Show GitHub Exploit DB Packet Storm
210873 7.2 HIGH
Network 		rgcms_project rgcms An arbitrary file upload vulnerability in RGCMS v1.06 allows attackers to execute arbitrary code via a crafted .txt file which is later changed to a PHP file. CWE-434
 Unrestricted Upload of File with Dangerous Type  		CVE-2020-21481 2024-11-21 14:12 2021-09-16 Show GitHub Exploit DB Packet Storm
210874 7.2 HIGH
Network 		rgcms_project rgcms An arbitrary file write vulnerability in RGCMS v1.06 allows attackers to execute arbitrary code via a crafted PHP file. NVD-CWE-noinfo
CVE-2020-21480 2024-11-21 14:12 2021-09-16 Show GitHub Exploit DB Packet Storm
210875 9.8 CRITICAL
Network 		feehi feehicms An arbitrary file upload vulnerability in Feehi CMS v2.0.8 and below allows attackers to execute arbitrary code via a crafted PHP file. CWE-434
 Unrestricted Upload of File with Dangerous Type  		CVE-2020-21322 2024-11-21 14:12 2021-09-16 Show GitHub Exploit DB Packet Storm
210876 4.3 MEDIUM
Network 		emlog emlog emlog v6.0 contains a Cross-Site Request Forgery (CSRF) via /admin/link.php?action=addlink, which allows attackers to arbitrarily add articles. CWE-352
 Origin Validation Error 		CVE-2020-21321 2024-11-21 14:12 2021-09-16 Show GitHub Exploit DB Packet Storm
210877 9.8 CRITICAL
Network 		metinfo metinfo MetInfo 7.0.0 contains a SQL injection vulnerability via admin/?n=logs&c=index&a=dodel. CWE-89
SQL Injection 		CVE-2020-21127 2024-11-21 14:12 2021-09-16 Show GitHub Exploit DB Packet Storm
210878 8.8 HIGH
Network 		metinfo metinfo MetInfo 7.0.0 contains a Cross-Site Request Forgery (CSRF) via admin/?n=admin&c=index&a=doSaveInfo. CWE-352
 Origin Validation Error 		CVE-2020-21126 2024-11-21 14:12 2021-09-16 Show GitHub Exploit DB Packet Storm
210879 9.8 CRITICAL
Network 		ureport_project ureport An arbitrary file creation vulnerability in UReport 2.2.9 allows attackers to execute arbitrary code. NVD-CWE-noinfo
CVE-2020-21125 2024-11-21 14:12 2021-09-16 Show GitHub Exploit DB Packet Storm
210880 9.8 CRITICAL
Network 		ureport_project ureport UReport 2.2.9 allows attackers to execute arbitrary code due to a lack of access control to the designer page. CWE-863
 Incorrect Authorization 		CVE-2020-21124 2024-11-21 14:12 2021-09-16 Show GitHub Exploit DB Packet Storm