Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 2, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
248641 5.1 警告 dmitry sheiko - Dmitry Sheiko SAPID Gallery における PHP リモートファイルインクルージョンの脆弱性 - CVE-2006-4065 2012-06-26 15:37 2006-08-9 Show GitHub Exploit DB Packet Storm
248642 7.5 危険 csaba godor - Csaba Godor SAPID Blog Beta における PHP リモートファイルインクルージョンの脆弱性 - CVE-2006-4063 2012-06-26 15:37 2006-08-9 Show GitHub Exploit DB Packet Storm
248643 5.1 警告 dmitry sheiko - Dmitry Sheiko SAPID Shop の usr/extensions/get_tree.inc.php における PHP リモートファイルインクルージョンの脆弱性 - CVE-2006-4062 2012-06-26 15:37 2006-08-9 Show GitHub Exploit DB Packet Storm
248644 7.5 危険 ehmig - ME Download System における PHP リモートファイルインクルージョンの脆弱性 - CVE-2006-4054 2012-06-26 15:37 2006-08-9 Show GitHub Exploit DB Packet Storm
248645 5.1 警告 ehmig - ME Download System の templates/header.php における PHP リモートファイルインクルージョンの脆弱性 - CVE-2006-4053 2012-06-26 15:37 2006-08-9 Show GitHub Exploit DB Packet Storm
248646 7.5 危険 david walker - phpAMA の auto_check_renewals.php における PHP リモートファイルインクルージョンの脆弱性 - CVE-2006-4050 2012-06-26 15:37 2006-08-9 Show GitHub Exploit DB Packet Storm
248647 7.5 危険 brad fears - Brad Fears phpCodeCabine の Beautifier/Core.php における PHP リモートファイルインクルージョンの脆弱性 - CVE-2006-4044 2012-06-26 15:37 2006-08-9 Show GitHub Exploit DB Packet Storm
248648 7.5 危険 chaossoft - GaesteChaos の eintragen.php における SQL インジェクションの脆弱性 - CVE-2006-4039 2012-06-26 15:37 2006-08-9 Show GitHub Exploit DB Packet Storm
248649 4.3 警告 chaossoft - GaesteChaos の eintragen.php におけるクロスサイトスクリプティングの脆弱性 - CVE-2006-4038 2012-06-26 15:37 2006-08-9 Show GitHub Exploit DB Packet Storm
248650 10 危険 fenestrae - Fenestrae Faxination Server における任意のコードを実行される脆弱性 - CVE-2006-4037 2012-06-26 15:37 2006-08-9 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 2, 2026, 4:18 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
210621 6.1 MEDIUM
Network 		shopex ecshop Cross Site Scripting (XSS) vulnerability in ECShop 4.0 due to security filtering issues, in the user.php file, we can use the html entity encoding to bypass the security policy of the safety.php file… CWE-79
Cross-site Scripting 		CVE-2020-20640 2024-11-21 14:12 2021-06-29 Show GitHub Exploit DB Packet Storm
210622 9.8 CRITICAL
Network 		ibos ibos In IBOS 4.5.4 Open, Arbitrary File Inclusion causes getshell via /system/modules/dashboard/controllers/CronController.php. CWE-434
 Unrestricted Upload of File with Dangerous Type  		CVE-2020-21786 2024-11-21 14:12 2021-06-25 Show GitHub Exploit DB Packet Storm
210623 8.8 HIGH
Network 		ibos ibos In IBOS 4.5.4 Open, the database backup has Command Injection Vulnerability. CWE-77
Command Injection 		CVE-2020-21785 2024-11-21 14:12 2021-06-25 Show GitHub Exploit DB Packet Storm
210624 9.8 CRITICAL
Network 		phpwcms phpwcms phpwcms 1.9.13 is vulnerable to Code Injection via /phpwcms/setup/setup.php. CWE-94
Code Injection 		CVE-2020-21784 2024-11-21 14:12 2021-06-25 Show GitHub Exploit DB Packet Storm
210625 6.1 MEDIUM
Network 		ibos ibos In IBOS 4.5.4 the email function has a cross site scripting (XSS) vulnerability in emailbody[content] parameter. CWE-79
Cross-site Scripting 		CVE-2020-21783 2024-11-21 14:12 2021-06-25 Show GitHub Exploit DB Packet Storm
210626 4.3 MEDIUM
Network 		crmeb crmeb In CRMEB 3.1.0+ strict domain name filtering leads to SSRF(Server-Side Request Forgery). The vulnerable code is in file /crmeb/app/admin/controller/store/CopyTaobao.php. CWE-918
Server-Side Request Forgery (SSRF)  		CVE-2020-21788 2024-11-21 14:12 2021-06-25 Show GitHub Exploit DB Packet Storm
210627 9.8 CRITICAL
Network 		crmeb crmeb CRMEB 3.1.0+ is vulnerable to File Upload Getshell via /crmeb/crmeb/services/UploadService.php. CWE-434
 Unrestricted Upload of File with Dangerous Type  		CVE-2020-21787 2024-11-21 14:12 2021-06-25 Show GitHub Exploit DB Packet Storm
210628 9.8 CRITICAL
Network 		txjia imcat SQL Injection vulnerability in imcat v5.2 via the fm[auser] parameters in coms/add_coms.php. CWE-89
SQL Injection 		CVE-2020-20392 2024-11-21 14:12 2021-06-24 Show GitHub Exploit DB Packet Storm
210629 5.4 MEDIUM
Network 		get-simple getsimplecms Cross Site Scripting vulnerability in GetSimpleCMS 3.4.0a in admin/snippets.php via (1) Add Snippet and (2) Save snippets. CWE-79
Cross-site Scripting 		CVE-2020-20391 2024-11-21 14:12 2021-06-24 Show GitHub Exploit DB Packet Storm
210630 4.8 MEDIUM
Network 		get-simple getsimplecms Cross Site Scripting (XSS) vulnerability in GetSimpleCMS 3.4.0a in admin/edit.php. CWE-79
Cross-site Scripting 		CVE-2020-20389 2024-11-21 14:12 2021-06-24 Show GitHub Exploit DB Packet Storm