Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Feb. 9, 2026, 12:59 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
214571 4.3 警告 シマンテック - Symantec Messaging Gateway の管理コンソールにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2014-1648 2014-04-25 15:24 2014-04-22 Show GitHub Exploit DB Packet Storm
214572 7.5 危険 KnowledgeTree - KnowledgeTree の webservice/clienttools/services/mdownload.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2014-2737 2014-04-25 15:15 2014-03-28 Show GitHub Exploit DB Packet Storm
214573 3.3 注意 freedesktop.org - Xpdf および Poppler の goo/gfile.cc 内の openTempFile 関数における任意のファイルを上書きされる脆弱性 CWE-59
リンク解釈の問題 		CVE-2013-4472 2014-04-25 14:59 2013-10-26 Show GitHub Exploit DB Packet Storm
214574 3.3 注意 npm, Inc. - Node Packaged Modules の lib/npm.js における任意のファイルを上書きされる脆弱性 CWE-59
リンク解釈の問題 		CVE-2013-4116 2014-04-25 14:26 2013-07-8 Show GitHub Exploit DB Packet Storm
214575 4.3 警告 Apache Software Foundation - Apache Archiva におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2013-2187 2014-04-25 14:14 2013-02-19 Show GitHub Exploit DB Packet Storm
214576 3.3 注意 Jonathan Leung - Ruby 用 Show In Browser gem における任意の Web スクリプトまたは HTML を挿入される脆弱性 CWE-59
リンク解釈の問題 		CVE-2013-2105 2014-04-25 14:06 2013-05-18 Show GitHub Exploit DB Packet Storm
214577 4.3 警告 k5n.us - Craig Knudsen WebCalendar におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2013-1421 2014-04-25 13:57 2013-02-22 Show GitHub Exploit DB Packet Storm
214578 6.8 警告 PaperCut Software International Pty - Papercut MF および NG の管理 UI におけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反 		CVE-2014-2659 2014-04-25 13:39 2014-04-10 Show GitHub Exploit DB Packet Storm
214579 4.3 警告 CJ Niemira - phpMyID の MyID.php の wrap_html 関数におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2014-2890 2014-04-25 12:26 2014-04-17 Show GitHub Exploit DB Packet Storm
214580 4.9 警告 アップル - Apple OS X のカーネルにおける ASLR 保護メカニズムを回避される脆弱性 CWE-200
情報漏えい 		CVE-2014-1322 2014-04-25 12:21 2014-04-22 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:April 26, 2026, 4:08 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
289751 - otscms otscms PHP remote file inclusion vulnerability in OTSCMS/OTSCMS.php in Open Tibia Server Content Management System (OTSCMS) 2.0.0 through 2.1.3 allows remote attackers to execute arbitrary PHP code via a UR… NVD-CWE-Other
CVE-2006-5548 2017-10-19 10:29 2006-10-27 Show GitHub Exploit DB Packet Storm
289752 - qksoft qk_smtp Stack-based buffer overflow in QK SMTP 3.01 and earlier might allow remote attackers to execute arbitrary code via a long argument to the RCPT TO command. NVD-CWE-Other
CVE-2006-5551 2017-10-19 10:29 2006-10-27 Show GitHub Exploit DB Packet Storm
289753 - revilloc_solutions revilloc_mailserver Multiple heap-based buffer overflows in RevilloC MailServer 1.21 and earlier allow remote attackers to cause a denial of service (CPU consumption or application crash) or execute arbitrary code via a… CWE-119
Incorrect Access of Indexable Resource ('Range Error')  		CVE-2006-5552 2017-10-19 10:29 2006-10-27 Show GitHub Exploit DB Packet Storm
289754 - blackdot imageview Directory traversal vulnerability in index.php in Imageview 5 allows remote attackers to read or execute arbitrary local files via a .. (dot dot) in the user_settings cookie, as demonstrated by using… NVD-CWE-Other
CVE-2006-5554 2017-10-19 10:29 2006-10-27 Show GitHub Exploit DB Packet Storm
289755 - epnadmin epnadmin PHP remote file inclusion vulnerability in constantes.inc.php in EPNadmin 0.7 and 0.7.1 allows remote attackers to execute arbitrary PHP code via the langage parameter. NVD-CWE-Other
CVE-2006-5555 2017-10-19 10:29 2006-10-27 Show GitHub Exploit DB Packet Storm
289756 - hp hp-ux Buffer overflow in the localtime_r function, and certain other functions, in libc in HP-UX B.11.11 and possibly other versions allows local users to execute arbitrary code via a long TZ environment v… NVD-CWE-Other
CVE-2006-5556 2017-10-19 10:29 2006-10-28 Show GitHub Exploit DB Packet Storm
289757 - hp hp-ux Stack-based buffer overflow in the (1) swpackage and (2) swmodify commands in HP-UX B.11.11 and possibly other versions allows local users to execute arbitrary code via a long -S argument. NOTE: thi… NVD-CWE-Other
CVE-2006-5557 2017-10-19 10:29 2006-10-28 Show GitHub Exploit DB Packet Storm
289758 - hp hp-ux Format string vulnerability in the swask command in HP-UX B.11.11 and possibly other versions allows local users to execute arbitrary code via format string specifiers in the -s argument. NOTE: this… NVD-CWE-Other
CVE-2006-5558 2017-10-19 10:29 2006-10-28 Show GitHub Exploit DB Packet Storm
289759 - discuz discuz_gbk SQL injection vulnerability in admincp.php in Discuz! GBK 5.0.0 allows remote attackers to execute arbitrary SQL commands via the cdb_auth cookie. NVD-CWE-Other
CVE-2006-5561 2017-10-19 10:29 2006-10-28 Show GitHub Exploit DB Packet Storm
289760 - open_source_technology_group sourceforge PHP remote file inclusion vulnerability in include/database.php in SourceForge (aka alexandria) 1.0.4 allows remote attackers to execute arbitrary PHP code via the sys_dbtype parameter. NVD-CWE-Other
CVE-2006-5562 2017-10-19 10:29 2006-10-28 Show GitHub Exploit DB Packet Storm