Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":July 1, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
215851	3.5	注意	アルバネットワークス株式会社	-	Aruba Networks ClearPass Policy Manager におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2015-4132	2015-06-1 14:23	2015-05-28	Show	GitHub Exploit DB Packet Storm

215852	4	警告	アルバネットワークス株式会社	-	Aruba Networks ClearPass Policy Manager におけるディレクトリトラバーサルの脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2015-1551	2015-06-1 14:23	2015-03-25	Show	GitHub Exploit DB Packet Storm

215853	9	危険	アルバネットワークス株式会社	-	Aruba Networks ClearPass Policy Manager におけるディレクトリトラバーサルの脆弱性	CWE-22 パス・トラバーサル	CVE-2015-1550	2015-06-1 14:23	2015-03-25	Show	GitHub Exploit DB Packet Storm

215854	6.5	警告	アルバネットワークス株式会社	-	Aruba Networks ClearPass Policy Manager における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2015-1392	2015-06-1 14:23	2015-03-25	Show	GitHub Exploit DB Packet Storm

215855	9	危険	アルバネットワークス株式会社	-	Aruba Networks ClearPass Policy Manager における任意のコードを実行される脆弱性	CWE-noinfo 情報不足	CVE-2014-6628	2015-06-1 14:23	2014-09-19	Show	GitHub Exploit DB Packet Storm

215856	5.8	警告	phpwind	-	phpwind の goto.php におけるオープンリダイレクトの脆弱性	CWE-Other その他	CVE-2015-4134	2015-06-1 12:07	2015-05-24	Show	GitHub Exploit DB Packet Storm

215857	4.3	警告	phpwind	-	phpwind の goto.php におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2015-4135	2015-06-1 12:07	2015-05-24	Show	GitHub Exploit DB Packet Storm

215858	4	警告	サン・マイクロシステムズ日立オラクル	-	複数の Oracle Java 製品における JSSE に関する脆弱性	CWE-noinfo 情報不足	CVE-2014-6593	2015-05-29 18:20	2015-01-20	Show	GitHub Exploit DB Packet Storm

215859	4.3	警告	サン・マイクロシステムズ日立オラクル	-	Oracle Java SE における Libraries に関する脆弱性	CWE-noinfo 情報不足	CVE-2014-6587	2015-05-29 17:01	2015-01-20	Show	GitHub Exploit DB Packet Storm

215860	2.6	注意	サン・マイクロシステムズ日立オラクル	-	Oracle Java SE における 2D に関する脆弱性	CWE-noinfo 情報不足	CVE-2014-6585	2015-05-29 16:57	2015-01-20	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:July 1, 2026, 4:27 a.m.

No	CVSS	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
357891	-	hyper_estraier	hyper_estraier	Cross-site request forgery (CSRF) vulnerability in the communicate function in estmaster.c for Hyper Estraier before 1.3.3 allows remote attackers to perform unauthorized actions as other users via u…	NVD-CWE-Other	CVE-2006-3671	2011-03-8 11:39	2006-07-19	Show	GitHub Exploit DB Packet Storm

357892	-	hyper_estraier	hyper_estraier	This vulnerability is addressed in the following product release: Hyper Estraier, Hyper Estraier, 1.3.3	NVD-CWE-Other	CVE-2006-3671	2011-03-8 11:39	2006-07-19	Show	GitHub Exploit DB Packet Storm

357893	-	hp	openvms	Unspecified vulnerability in [SYSEXE]SMPUTIL.EXE in HP OpenVMS 7.3-2 allows local users and "remote users" to cause a denial of service (crash).	NVD-CWE-Other	CVE-2006-3686	2011-03-8 11:39	2006-07-21	Show	GitHub Exploit DB Packet Storm

357894	-	citrix	metaframe metaframe_presentation_server presentation_server	Citrix MetaFrame up to XP 1.0 Feature 1, except when running on Windows Server 2003, installs a registry key with an insecure ACL, which allows remote authenticated users to gain privileges.	NVD-CWE-Other	CVE-2006-3779	2011-03-8 11:39	2006-07-24	Show	GitHub Exploit DB Packet Storm

357895	-	krusader	krusader	Krusader 1.50-beta1 up to 1.70.0 stores passwords for remote connections in cleartext in the bookmark file (krbookmarks.xml), which allows attackers to steal passwords by obtaining the file.	NVD-CWE-Other	CVE-2006-3816	2011-03-8 11:39	2006-07-25	Show	GitHub Exploit DB Packet Storm

357896	-	geodesicsolutions	geoauctions_enterprise	SQL injection vulnerability in index.php in GeodesicSolutions GeoAuctions Enterprise 1.0.6 allows remote attackers to execute arbitrary SQL commands via the d parameter.	NVD-CWE-Other	CVE-2006-3822	2011-03-8 11:39	2006-07-25	Show	GitHub Exploit DB Packet Storm

357897	-	geodesicsolutions	geoauctions_enterprise	Successful exploitation requires that the 'accumulative feedback' feature is turned on.	NVD-CWE-Other	CVE-2006-3822	2011-03-8 11:39	2006-07-25	Show	GitHub Exploit DB Packet Storm

357898	-	phpfaber	topsites	Cross-site scripting (XSS) vulnerability in index.php in phpFaber TopSites 2.0.9 allows remote attackers to inject arbitrary web script or HTML via the i_cat parameter. NOTE: the provenance of this …	NVD-CWE-Other	CVE-2006-3902	2011-03-8 11:39	2006-07-28	Show	GitHub Exploit DB Packet Storm

357899	-	intel	2200bg_proset_wireless 2915abg_proset_wireless	Unspecified vulnerability in the Centrino (1) w22n50.sys, (2) w22n51.sys, (3) w29n50.sys, and (4) w29n51.sys Microsoft Windows drivers for Intel 2200BG and 2915ABG PRO/Wireless Network Connection bef…	NVD-CWE-Other	CVE-2006-3992	2011-03-8 11:39	2006-08-5	Show	GitHub Exploit DB Packet Storm

357900	-	intel	2200bg_proset_wireless 2915abg_proset_wireless	Affected versions are only vulnerable with driver version 9.0.4.16 This vulnerability is addressed in the following product releases: Intel, 2200BG PROSet/Wireless, 10.5 Intel, 2915ABG PROSet/Wire…	NVD-CWE-Other	CVE-2006-3992	2011-03-8 11:39	2006-08-5	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed