Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Feb. 9, 2026, 12:59 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
216511 5 警告 Little CMS - OpenJDK などの製品で使用される Little CMS におけるサービス運用妨害 (DoS) の脆弱性 CWE-Other
その他 		CVE-2013-4160 2014-01-24 14:02 2013-06-25 Show GitHub Exploit DB Packet Storm
216512 5 警告 シスコシステムズ - Cisco ASR 5000 シリーズのデバイス上で稼働する Gateway GPRS Support Node コンポーネントにおけるトップアップ支払の制限を回避される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2014-0669 2014-01-24 13:56 2014-01-22 Show GitHub Exploit DB Packet Storm
216513 4 警告 シスコシステムズ - Cisco MediaSens の Search and Play インターフェースにおける任意の記録をダウンロードされる脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2014-0672 2014-01-24 12:28 2014-01-22 Show GitHub Exploit DB Packet Storm
216514 5.8 警告 シスコシステムズ - Cisco MediaSense におけるオープンリダイレクトの脆弱性 CWE-20
不適切な入力確認 		CVE-2014-0671 2014-01-24 12:24 2014-01-22 Show GitHub Exploit DB Packet Storm
216515 4.3 警告 シスコシステムズ - Cisco MediaSense の Search and Play インターフェースにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2014-0670 2014-01-24 12:17 2014-01-22 Show GitHub Exploit DB Packet Storm
216516 6.8 警告 Seagate Technology LLC - Seagate BlackArmor NAS 220 デバイスのファームウェアにおけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反 		CVE-2013-6922 2014-01-23 18:35 2013-12-3 Show GitHub Exploit DB Packet Storm
216517 7.2 危険 レッドハット - Red Hat Enterprise Virtualization で使用される SPICE サービスにおける権限を取得される脆弱性 CWE-Other
その他 		CVE-2013-2152 2014-01-23 18:17 2013-06-10 Show GitHub Exploit DB Packet Storm
216518 3.2 注意 Linux NFS - nfs-utils の rpc-gssd におけるその他の制限ファイルを読まれる脆弱性 CWE-200
情報漏えい 		CVE-2013-1923 2014-01-23 18:13 2013-04-3 Show GitHub Exploit DB Packet Storm
216519 7.2 危険 レッドハット - Red Hat Enterprise Virtualization における権限を取得される脆弱性 CWE-Other
その他 		CVE-2013-2151 2014-01-23 18:12 2013-06-10 Show GitHub Exploit DB Packet Storm
216520 9.3 危険 Lenovo - Lenovo Thinkpad Bluetooth with Enhanced Data Rate ソフトウェアにおける任意のコードを実行される脆弱性 CWE-Other
その他 		CVE-2013-1361 2014-01-23 17:57 2013-01-15 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:April 24, 2026, 4 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
279591 - ralph_capper tinyphpforum Multiple cross-site scripting (XSS) vulnerabilities in Ralph Capper Tiny PHP Forum (TPF) 3.6 allow remote attackers to inject arbitrary web script or HTML via (1) the uname parameter in a view action… CWE-79
Cross-site Scripting 		CVE-2006-1898 2018-10-19 01:37 2006-04-20 Show GitHub Exploit DB Packet Storm
279592 - dev neuron_blog Multiple cross-site scripting (XSS) vulnerabilities in dev Neuron Blog 1.1 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) name and (2) website parameters. NVD-CWE-Other
CVE-2006-1899 2018-10-19 01:37 2006-04-20 Show GitHub Exploit DB Packet Storm
279593 - w3c amaya Multiple buffer overflows in World Wide Web Consortium (W3C) Amaya 9.4, and possibly other versions including 8.x before 8.8.5, allow remote attackers to execute arbitrary code via a long value in (1… NVD-CWE-Other
CVE-2006-1900 2018-10-19 01:37 2006-04-20 Show GitHub Exploit DB Packet Storm
279594 - mozilla camino Mozilla Camino 1.0 and earlier allow remote attackers to cause a denial of service (null dereference and application crash or hang) via HTML with certain improperly nested elements. NOTE: this might… NVD-CWE-Other
CVE-2006-1901 2018-10-19 01:37 2006-04-20 Show GitHub Exploit DB Packet Storm
279595 - gnu gcc fold_binary in fold-const.c in GNU Compiler Collection (gcc) 4.1 improperly handles pointer overflow when folding a certain expr comparison to a corresponding offset comparison in cases other than EQ… CWE-119
Incorrect Access of Indexable Resource ('Range Error')  		CVE-2006-1902 2018-10-19 01:37 2006-04-20 Show GitHub Exploit DB Packet Storm
279596 - userland manila Multiple cross-site scripting (XSS) vulnerabilities in UserLand Manila allow remote attackers to inject arbitrary web script or HTML (1) via the referer parameter in sendMail, and via attributes of (… NVD-CWE-Other
CVE-2006-1903 2018-10-19 01:37 2006-04-20 Show GitHub Exploit DB Packet Storm
279597 - animegenesis gallery Cross-site scripting (XSS) vulnerability in index.php in AnimeGenesis Gallery allows remote attackers to inject arbitrary web script or HTML via the cat parameter. NVD-CWE-Other
CVE-2006-1904 2018-10-19 01:37 2006-04-20 Show GitHub Exploit DB Packet Storm
279598 - xine xine Multiple format string vulnerabilities in xiTK (xitk/main.c) in xine 0.99.3 allow remote attackers to execute arbitrary code via format string specifiers in a long filename on an EXTINFO line in a pl… NVD-CWE-Other
CVE-2006-1905 2018-10-19 01:37 2006-04-20 Show GitHub Exploit DB Packet Storm
279599 - jjgan852 phplister Cross-site scripting (XSS) vulnerability in index.php in jjgan852 phpLister 0.4.1 allows remote attackers to inject arbitrary web script or HTML via the page parameter. NVD-CWE-Other
CVE-2006-1906 2018-10-19 01:37 2006-04-20 Show GitHub Exploit DB Packet Storm
279600 - mybulletinboard mybulletinboard MyBB (MyBulletinBoard) 1.1.0 does not set the constant KILL_GLOBAL variable in (1) global.php and (2) inc/init.php, which allows remote attackers to initialize arbitrary variables that are processed … NVD-CWE-Other
CVE-2006-1912 2018-10-19 01:37 2006-04-21 Show GitHub Exploit DB Packet Storm