Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Feb. 9, 2026, 12:59 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
210521 4.3 警告 Mozilla Foundation - Mozilla Firefox および SeaMonkey の Chrome Object Wrapper の実装における DOM オブジェクト制限を回避される脆弱性 CWE-Other
その他 		CVE-2014-8631 2014-12-12 15:11 2014-12-2 Show GitHub Exploit DB Packet Storm
210522 6.8 警告 Mozilla Foundation - 複数の Mozilla 製品における任意のコードを実行される脆弱性 CWE-20
不適切な入力確認 		CVE-2014-1594 2014-12-12 15:11 2014-12-2 Show GitHub Exploit DB Packet Storm
210523 6.8 警告 Mozilla Foundation - 複数の Mozilla 製品の mozilla::FileBlockCache::Read 関数におけるスタックベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2014-1593 2014-12-12 15:10 2014-12-2 Show GitHub Exploit DB Packet Storm
210524 6.8 警告 Mozilla Foundation - 複数の Mozilla 製品の xul.dll の nsHtml5TreeOperation 関数における任意のコードを実行される脆弱性 CWE-Other
その他 		CVE-2014-1592 2014-12-12 15:10 2014-12-2 Show GitHub Exploit DB Packet Storm
210525 4.3 警告 Mozilla Foundation - Mozilla Firefox および SeaMonkey における重要な情報を取得される脆弱性 CWE-Other
その他 		CVE-2014-1591 2014-12-12 15:09 2014-12-2 Show GitHub Exploit DB Packet Storm
210526 4.3 警告 Mozilla Foundation - 複数の Mozilla 製品の XMLHttpRequest.prototype.send メソッドにおけるサービス運用妨害 (DoS) の脆弱性 CWE-20
不適切な入力確認 		CVE-2014-1590 2014-12-12 15:09 2014-12-2 Show GitHub Exploit DB Packet Storm
210527 6.8 警告 Mozilla Foundation - Mozilla Firefox および SeaMonkey におけるアクセス制限を回避される脆弱性 CWE-Other
その他 		CVE-2014-1589 2014-12-12 15:09 2014-12-2 Show GitHub Exploit DB Packet Storm
210528 6.8 警告 Mozilla Foundation - Mozilla Firefox および SeaMonkey のブラウザエンジンにおけるサービス運用妨害 (DoS) の脆弱性 CWE-noinfo
情報不足 		CVE-2014-1588 2014-12-12 15:08 2014-12-2 Show GitHub Exploit DB Packet Storm
210529 6.8 警告 Mozilla Foundation - 複数の Mozilla 製品のブラウザエンジンにおけるサービス運用妨害 (DoS) の脆弱性 CWE-20
不適切な入力確認 		CVE-2014-1587 2014-12-12 15:08 2014-12-2 Show GitHub Exploit DB Packet Storm
210530 3.5 注意 マイクロソフト - Microsoft Exchange Server の Outlook Web App におけるユーザを任意の Web サイトにリダイレクトされる脆弱性 CWE-20
不適切な入力確認 		CVE-2014-6336 2014-12-12 11:19 2014-12-9 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:April 26, 2026, 4:08 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
284271 - jinzora jinzora PHP remote file inclusion vulnerability in extras/mt.php in Jinzora 2.6 allows remote attackers to execute arbitrary PHP code via the web_root parameter. NVD-CWE-Other
CVE-2006-7131 2018-10-17 01:29 2007-03-6 Show GitHub Exploit DB Packet Storm
284272 - tiny_portal tiny_portal Cross-site scripting (XSS) vulnerability in TinyPortal before 0.8.6 allows remote attackers to inject arbitrary web script or HTML via the shoutbox. NVD-CWE-Other
CVE-2006-7137 2018-10-17 01:29 2007-03-7 Show GitHub Exploit DB Packet Storm
284273 - oracle apex SQL injection vulnerability in wwv_flow_utilities.gen_popup_list in the WWV_FLOW_UTILITIES package for Oracle APEX/HTMLDB before 2.2 allows remote authenticated users to execute arbitrary SQL by modi… CWE-89
SQL Injection 		CVE-2006-7138 2018-10-17 01:29 2007-03-8 Show GitHub Exploit DB Packet Storm
284274 - oracle apex This vulnerability is addressed in the following product patch: http://www.oracle.com/technology/deploy/security/critical-patch-updates/cpuoct2006.html CWE-89
SQL Injection 		CVE-2006-7138 2018-10-17 01:29 2007-03-8 Show GitHub Exploit DB Packet Storm
284275 - kde k-mail Kmail 1.9.1 on KDE 3.5.2, with "Prefer HTML to Plain Text" enabled, allows remote attackers to cause a denial of service (crash) via an HTML e-mail with certain table and frameset tags that trigger a… CWE-20
 Improper Input Validation  		CVE-2006-7139 2018-10-17 01:29 2007-03-8 Show GitHub Exploit DB Packet Storm
284276 - call-center-software call-center-software Cross-site scripting (XSS) vulnerability in Call Center Software 0.93 and earlier allows remote attackers to inject arbitrary web script or HTML via the problem description field. NVD-CWE-Other
CVE-2006-7143 2018-10-17 01:29 2007-03-8 Show GitHub Exploit DB Packet Storm
284277 - call-center-software call-center-software SQL injection vulnerability in Call Center Software 0.93 and earlier allows remote attackers to execute arbitrary SQL commands and bypass authentication via the user name in the login page. NVD-CWE-Other
CVE-2006-7144 2018-10-17 01:29 2007-03-8 Show GitHub Exploit DB Packet Storm
284278 - call-center-software call-center-software edit_user.php in Call Center Software 0.93 and earlier allows remote attackers to obtain sensitive information such as account passwords via a modified user_id parameter. NVD-CWE-Other
CVE-2006-7145 2018-10-17 01:29 2007-03-8 Show GitHub Exploit DB Packet Storm
284279 - phpbb maluinfo PHP remote file inclusion vulnerability in includes/bb_usage_stats.php in maluinfo 206.2.38 for Brazilian PHPBB allows remote attackers to execute arbitrary PHP code via the phpbb_root_path parameter… NVD-CWE-Other
CVE-2006-7148 2018-10-17 01:29 2007-03-8 Show GitHub Exploit DB Packet Storm
284280 - mambo mambo Multiple cross-site scripting (XSS) vulnerabilities in Mambo 4.6.x allow remote attackers to inject arbitrary web script or HTML via (1) the query string to (a) index.php, which reflects the string i… NVD-CWE-Other
CVE-2006-7149 2018-10-17 01:29 2007-03-8 Show GitHub Exploit DB Packet Storm