Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Feb. 9, 2026, 12:59 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
216281 7.5 危険 Kolja Schleich - WordPress 用 LeagueManager プラグインの leaguemanager.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2013-1852 2014-02-6 16:41 2013-03-15 Show GitHub Exploit DB Packet Storm
216282 4.3 警告 Geeklog - Geeklog の Calendar プラグインの calendar/index.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2013-1470 2014-02-6 16:40 2013-02-20 Show GitHub Exploit DB Packet Storm
216283 4.3 警告 glFusion - glFusion におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2013-1466 2014-02-6 16:39 2013-01-30 Show GitHub Exploit DB Packet Storm
216284 4.3 警告 フォーティネット - Fortinet Fortiweb にクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2013-7181 2014-02-6 16:35 2014-02-3 Show GitHub Exploit DB Packet Storm
216285 4.3 警告 フォーティネット - Fortinet FortiOS にクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2013-7182 2014-02-6 16:34 2014-02-3 Show GitHub Exploit DB Packet Storm
216286 6.9 警告 Rockwell Automation - Rockwell Automation RSLogix 5000 における重要な情報を取得される脆弱性 CWE-255
証明書・パスワード管理
CVE-2014-0755 2014-02-6 15:33 2014-02-4 Show GitHub Exploit DB Packet Storm
216287 5.6 警告 SystemTap - SystemTap における重要な情報を取得される脆弱性 CWE-399
リソース管理の問題
CVE-2012-0875 2014-02-6 15:33 2012-02-20 Show GitHub Exploit DB Packet Storm
216288 6.8 警告 KDE project
Novell
Canonical
- Ark におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル
CVE-2011-2725 2014-02-6 15:32 2011-07-26 Show GitHub Exploit DB Packet Storm
216289 6.8 警告 Rapid7 - Rapid7 Nexpose のセキュリティコンソールにおけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反
CVE-2012-6493 2014-02-6 14:40 2012-12-19 Show GitHub Exploit DB Packet Storm
216290 9.3 危険 Csound - Csound の util/lpci_main.c 内の main 関数におけるスタックベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー
CVE-2012-2108 2014-02-6 14:38 2012-04-4 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:April 24, 2026, 4 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
280051 - spid spid Directory traversal vulnerability in scan_lang_insert.php in Boris Herbiniere-Seve SPiD 1.3.1 allows remote attackers to read arbitrary files via the lang parameter. CWE-22
Path Traversal
CVE-2006-0976 2018-10-19 01:30 2006-03-3 Show GitHub Exploit DB Packet Storm
280052 - craig_morrison mts_pro Craig Morrison Mail Transport System Professional (aka MTS Pro) acts as an open relay when configured to relay all mail through an external SMTP server, which allows remote attackers to relay mail by… NVD-CWE-Other
CVE-2006-0977 2018-10-19 01:30 2006-03-3 Show GitHub Exploit DB Packet Storm
280053 - argosoft argosoft_mail_server Multiple cross-site scripting (XSS) vulnerabilities in the View Headers (aka viewheaders) functionality in ArGoSoft Mail Server Pro 1.8.8.5 allow remote attackers to inject arbitrary web script or HT… NVD-CWE-Other
CVE-2006-0978 2018-10-19 01:30 2006-03-3 Show GitHub Exploit DB Packet Storm
280054 - argosoft argosoft_mail_server This vulnerability affects ArGoSoft, Mail Server Pro version 1.8.8.5, and may affect all previous versions. NVD-CWE-Other
CVE-2006-0978 2018-10-19 01:30 2006-03-3 Show GitHub Exploit DB Packet Storm
280055 - jay_eckles cgi_calendar Multiple cross-site scripting (XSS) vulnerabilities in Jay Eckles CGI Calendar 2.7 allow remote attackers to inject arbitrary web script or HTML via the year parameter in (1) index.cgi and (2) viewda… NVD-CWE-Other
CVE-2006-0980 2018-10-19 01:30 2006-03-3 Show GitHub Exploit DB Packet Storm
280056 - e-merge e-merge_winace Directory traversal vulnerability in e-merge WinAce 2.6 and earlier allows remote attackers to create and overwrite arbitrary files via certain crafted pathnames in a (1) zip or (2) tar archive. NVD-CWE-Other
CVE-2006-0981 2018-10-19 01:30 2006-03-3 Show GitHub Exploit DB Packet Storm
280057 - e-merge e-merge_winace This vulnerability affects e-merge, WinAce versions 2.6 and previous. NVD-CWE-Other
CVE-2006-0981 2018-10-19 01:30 2006-03-3 Show GitHub Exploit DB Packet Storm
280058 - mcafee virex The on-access scanner for McAfee Virex 7.7 for Macintosh, in some circumstances, might not activate when malicious content is accessed from the web browser, and might not prevent the content from bei… NVD-CWE-Other
CVE-2006-0982 2018-10-19 01:30 2006-03-3 Show GitHub Exploit DB Packet Storm
280059 - david_barrett qwikiwiki Cross-site scripting (XSS) vulnerability in index.php in QwikiWiki 1.4 allows remote attackers to inject arbitrary web script or HTML via the page parameter. NVD-CWE-Other
CVE-2006-0983 2018-10-19 01:30 2006-03-3 Show GitHub Exploit DB Packet Storm
280060 - ej3 topo Cross-site scripting (XSS) vulnerability in inc_header.php in EJ3 TOPo 2.2.178 allows remote attackers to inject arbitrary web script or HTML via the gTopNombre parameter. NVD-CWE-Other
CVE-2006-0984 2018-10-19 01:30 2006-03-3 Show GitHub Exploit DB Packet Storm