Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Feb. 9, 2026, 12:59 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
210611 5 警告 The phpMyAdmin Project - phpMyAdmin の libraries/common.inc.php におけるサービス運用妨害 (DoS) の脆弱性 CWE-399
リソース管理の問題
CVE-2014-9218 2014-12-9 11:55 2014-12-3 Show GitHub Exploit DB Packet Storm
210612 4.3 警告 VMware - VMware vCenter Server Appliance における ESXi ホスト上の CIM サーバになりすまされる脆弱性 CWE-310
暗号の問題
CVE-2014-8371 2014-12-9 11:52 2014-12-4 Show GitHub Exploit DB Packet Storm
210613 4.3 警告 VMware - VMware vCenter Server Appliance におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2014-3797 2014-12-9 11:43 2014-12-4 Show GitHub Exploit DB Packet Storm
210614 7.5 危険 The PHP Group - PHP の ext/xmlrpc/libxmlrpc/xmlrpc.c 内の date_from_ISO8601 関数におけるスタックベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー
CVE-2014-8626 2014-12-8 17:21 2014-10-22 Show GitHub Exploit DB Packet Storm
210615 7.5 危険 レッドハット - Red Hat OpenShift Enterprise における任意のギアのネットワークリソースにアクセスされる脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2014-3674 2014-12-8 17:11 2014-11-3 Show GitHub Exploit DB Packet Storm
210616 2.1 注意 レッドハット - Red Hat OpenShift Enterprise におけるリモートシステムの IP アドレスおよびポート番号の情報を取得される脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2014-3602 2014-12-8 17:10 2014-11-3 Show GitHub Exploit DB Packet Storm
210617 7.5 危険 OpenBSD - OpenSSH の schnorr.c の hash_buffer 関数におけるサービス運用妨害 (DoS) の脆弱性 CWE-119
バッファエラー
CVE-2014-1692 2014-12-8 17:07 2014-01-29 Show GitHub Exploit DB Packet Storm
210618 6 警告 OpenBSD - OpenSSH の sshd における ForceCommand およびログインシェルの制限を回避される脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2013-4548 2014-12-8 17:07 2013-11-7 Show GitHub Exploit DB Packet Storm
210619 4.3 警告 The PHP Group
アップル
- PHP の OpenSSL モジュール内の openssl.c における任意の SSL サーバになりすまされる脆弱性 CWE-20
不適切な入力確認
CVE-2013-4248 2014-12-8 17:00 2013-08-15 Show GitHub Exploit DB Packet Storm
210620 3.3 注意 LG Electronics - LG Electronics 製モバイルアクセスルータにアクセス制限不備の脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2014-7243 2014-12-8 16:07 2014-12-2 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:April 25, 2026, 4:08 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
284201 - iss blackice_pc_protection ISS BlackICE PC Protection 3.6 cpj and cpu, and possibly earlier versions, allows local users to bypass the protection scheme by using the ZwDeleteFile API function to delete the critical filelock.tx… NVD-CWE-Other
CVE-2006-7129 2018-10-17 01:29 2007-03-6 Show GitHub Exploit DB Packet Storm
284202 - jinzora jinzora PHP remote file inclusion vulnerability in backend/primitives/cache/media.php in Jinzora 2.1 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the include_path parameter,… CWE-94
Code Injection
CVE-2006-7130 2018-10-17 01:29 2007-03-6 Show GitHub Exploit DB Packet Storm
284203 - jinzora jinzora PHP remote file inclusion vulnerability in extras/mt.php in Jinzora 2.6 allows remote attackers to execute arbitrary PHP code via the web_root parameter. NVD-CWE-Other
CVE-2006-7131 2018-10-17 01:29 2007-03-6 Show GitHub Exploit DB Packet Storm
284204 - tiny_portal tiny_portal Cross-site scripting (XSS) vulnerability in TinyPortal before 0.8.6 allows remote attackers to inject arbitrary web script or HTML via the shoutbox. NVD-CWE-Other
CVE-2006-7137 2018-10-17 01:29 2007-03-7 Show GitHub Exploit DB Packet Storm
284205 - oracle apex SQL injection vulnerability in wwv_flow_utilities.gen_popup_list in the WWV_FLOW_UTILITIES package for Oracle APEX/HTMLDB before 2.2 allows remote authenticated users to execute arbitrary SQL by modi… CWE-89
SQL Injection
CVE-2006-7138 2018-10-17 01:29 2007-03-8 Show GitHub Exploit DB Packet Storm
284206 - oracle apex This vulnerability is addressed in the following product patch: http://www.oracle.com/technology/deploy/security/critical-patch-updates/cpuoct2006.html CWE-89
SQL Injection
CVE-2006-7138 2018-10-17 01:29 2007-03-8 Show GitHub Exploit DB Packet Storm
284207 - kde k-mail Kmail 1.9.1 on KDE 3.5.2, with "Prefer HTML to Plain Text" enabled, allows remote attackers to cause a denial of service (crash) via an HTML e-mail with certain table and frameset tags that trigger a… CWE-20
 Improper Input Validation 
CVE-2006-7139 2018-10-17 01:29 2007-03-8 Show GitHub Exploit DB Packet Storm
284208 - call-center-software call-center-software Cross-site scripting (XSS) vulnerability in Call Center Software 0.93 and earlier allows remote attackers to inject arbitrary web script or HTML via the problem description field. NVD-CWE-Other
CVE-2006-7143 2018-10-17 01:29 2007-03-8 Show GitHub Exploit DB Packet Storm
284209 - call-center-software call-center-software SQL injection vulnerability in Call Center Software 0.93 and earlier allows remote attackers to execute arbitrary SQL commands and bypass authentication via the user name in the login page. NVD-CWE-Other
CVE-2006-7144 2018-10-17 01:29 2007-03-8 Show GitHub Exploit DB Packet Storm
284210 - call-center-software call-center-software edit_user.php in Call Center Software 0.93 and earlier allows remote attackers to obtain sensitive information such as account passwords via a modified user_id parameter. NVD-CWE-Other
CVE-2006-7145 2018-10-17 01:29 2007-03-8 Show GitHub Exploit DB Packet Storm