Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Feb. 9, 2026, 12:59 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
216511 5 警告 Little CMS - OpenJDK などの製品で使用される Little CMS におけるサービス運用妨害 (DoS) の脆弱性 CWE-Other
その他 		CVE-2013-4160 2014-01-24 14:02 2013-06-25 Show GitHub Exploit DB Packet Storm
216512 5 警告 シスコシステムズ - Cisco ASR 5000 シリーズのデバイス上で稼働する Gateway GPRS Support Node コンポーネントにおけるトップアップ支払の制限を回避される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2014-0669 2014-01-24 13:56 2014-01-22 Show GitHub Exploit DB Packet Storm
216513 4 警告 シスコシステムズ - Cisco MediaSens の Search and Play インターフェースにおける任意の記録をダウンロードされる脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2014-0672 2014-01-24 12:28 2014-01-22 Show GitHub Exploit DB Packet Storm
216514 5.8 警告 シスコシステムズ - Cisco MediaSense におけるオープンリダイレクトの脆弱性 CWE-20
不適切な入力確認 		CVE-2014-0671 2014-01-24 12:24 2014-01-22 Show GitHub Exploit DB Packet Storm
216515 4.3 警告 シスコシステムズ - Cisco MediaSense の Search and Play インターフェースにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2014-0670 2014-01-24 12:17 2014-01-22 Show GitHub Exploit DB Packet Storm
216516 6.8 警告 Seagate Technology LLC - Seagate BlackArmor NAS 220 デバイスのファームウェアにおけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反 		CVE-2013-6922 2014-01-23 18:35 2013-12-3 Show GitHub Exploit DB Packet Storm
216517 7.2 危険 レッドハット - Red Hat Enterprise Virtualization で使用される SPICE サービスにおける権限を取得される脆弱性 CWE-Other
その他 		CVE-2013-2152 2014-01-23 18:17 2013-06-10 Show GitHub Exploit DB Packet Storm
216518 3.2 注意 Linux NFS - nfs-utils の rpc-gssd におけるその他の制限ファイルを読まれる脆弱性 CWE-200
情報漏えい 		CVE-2013-1923 2014-01-23 18:13 2013-04-3 Show GitHub Exploit DB Packet Storm
216519 7.2 危険 レッドハット - Red Hat Enterprise Virtualization における権限を取得される脆弱性 CWE-Other
その他 		CVE-2013-2151 2014-01-23 18:12 2013-06-10 Show GitHub Exploit DB Packet Storm
216520 9.3 危険 Lenovo - Lenovo Thinkpad Bluetooth with Enhanced Data Rate ソフトウェアにおける任意のコードを実行される脆弱性 CWE-Other
その他 		CVE-2013-1361 2014-01-23 17:57 2013-01-15 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:April 25, 2026, 4:08 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
279371 - hummingbird enterprise_collaboration Hummingbird Collaboration (aka Hummingbird Enterprise Collaboration) 5.21 and earlier allows remote attackers to misrepresent the type and name of a file via modified doc_ext and id parameters, which… NVD-CWE-Other
CVE-2006-0173 2018-10-20 00:43 2006-01-12 Show GitHub Exploit DB Packet Storm
279372 - hummingbird collaboration
enterprise_collaboration 		Hummingbird Collaboration (aka Hummingbird Enterprise Collaboration) 5.21 and earlier allows remote attackers to obtain sensitive information (intranet IP addresses and enumerations of valid paramete… NVD-CWE-Other
CVE-2006-0174 2018-10-20 00:43 2006-01-12 Show GitHub Exploit DB Packet Storm
279373 - webwiz web_wiz_forums Cross-site scripting (XSS) vulnerability in search_form.asp in Web Wiz Forums 6.34 allows remote attackers to inject arbitrary web script or HTML via the search parameter. CWE-79
Cross-site Scripting 		CVE-2006-0175 2018-10-20 00:43 2006-01-12 Show GitHub Exploit DB Packet Storm
279374 - xmame xmame Buffer overflow in certain functions in src/fileio.c and src/unix/fileio.c in xmame before 11 January 2006 may allow local users to gain privileges via a long (1) -lang, (2) -ctrlr, (3) -pb, or (4) -… NVD-CWE-Other
CVE-2006-0176 2018-10-20 00:43 2006-01-12 Show GitHub Exploit DB Packet Storm
279375 - calogic calogic_calendars Cross-site scripting (XSS) vulnerability in CaLogic Calendars 1.2.2 allows remote attackers to inject arbitrary web script or HTML via the Title field on the "Adding New Event" page, and possibly oth… NVD-CWE-Other
CVE-2006-0180 2018-10-20 00:43 2006-01-12 Show GitHub Exploit DB Packet Storm
279376 - acal calendar_project login.php in ACal Calendar Project 2.2.5 allows remote attackers to bypass authentication by setting the ACalAuthenticate cookie variable to "inside". NVD-CWE-Other
CVE-2006-0182 2018-10-20 00:43 2006-01-12 Show GitHub Exploit DB Packet Storm
279377 - acal calendar_project Direct static code injection vulnerability in edit.php in ACal Calendar Project 2.2.5 allows authenticated users to execute arbitrary PHP code via (1) the edit=header value, which modifies header.php… NVD-CWE-Other
CVE-2006-0183 2018-10-20 00:43 2006-01-12 Show GitHub Exploit DB Packet Storm
279378 - microsoft visual_studio_.net By design, Microsoft Visual Studio 2005 automatically executes code in the Load event of a user-defined control (UserControl1_Load function), which allows user-assisted attackers to execute arbitrary… NVD-CWE-Other
CVE-2006-0187 2018-10-20 00:43 2006-01-12 Show GitHub Exploit DB Packet Storm
279379 - estara softphone Buffer overflow in eStara Softphone 3.0.1.14 through 3.0.1.46 allows remote attackers to execute arbitrary code via a long attribute (aka "a") field in the SDP data of a SIP packet on UDP port 5060. NVD-CWE-Other
CVE-2006-0189 2018-10-20 00:43 2006-01-13 Show GitHub Exploit DB Packet Storm
279380 - estara softphone This is the vendor provided solution: "eStara has released Softphone version 3.0.1.47 to resolve the buffer overflow demonstrated in parsing SDP with long "a=" lines. Licensed customers can downl… NVD-CWE-Other
CVE-2006-0189 2018-10-20 00:43 2006-01-13 Show GitHub Exploit DB Packet Storm