Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Feb. 9, 2026, 12:59 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
216541 4.3 警告 IBM - 複数の IBM 製品におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2013-6746 2014-01-23 15:36 2013-12-23 Show GitHub Exploit DB Packet Storm
216542 10 危険 IBM - IBM Java SDK における脆弱性 CWE-noinfo
情報不足
CVE-2013-0485 2014-01-23 15:36 2013-04-9 Show GitHub Exploit DB Packet Storm
216543 4.3 警告 IBM - IBM Platform Symphony における重要な情報を取得される脆弱性 CWE-310
暗号の問題
CVE-2013-6305 2014-01-23 15:33 2013-10-31 Show GitHub Exploit DB Packet Storm
216544 2.1 注意 IBM - IBM Tivoli Federated Identity Manager および Tivoli Federated Identity Manager Business Gateway におけるトランザクションを完了される脆弱性 CWE-287
不適切な認証
CVE-2013-5429 2014-01-23 15:33 2013-12-31 Show GitHub Exploit DB Packet Storm
216545 4 警告 The Tor Project - Tor における暗号保護メカニズムを回避される脆弱性 CWE-310
暗号の問題
CVE-2013-7295 2014-01-23 12:13 2013-12-22 Show GitHub Exploit DB Packet Storm
216546 7.8 危険 デル - Dell PowerConnect スイッチ上で稼働する GoAhead Web Server のログインページにおけるサービス運用妨害 (DoS) の脆弱性 CWE-20
不適切な入力確認
CVE-2013-3606 2014-01-22 19:13 2014-01-17 Show GitHub Exploit DB Packet Storm
216547 6.8 警告 デル - Dell PowerConnect スイッチ上で稼働する OpenManage Web Application におけるサービス運用妨害 (DoS) の脆弱性 CWE-20
不適切な入力確認
CVE-2013-3595 2014-01-22 19:13 2014-01-17 Show GitHub Exploit DB Packet Storm
216548 10 危険 デル - Dell PowerConnect スイッチの SSH サービスにおけるサービス運用妨害 (DoS) の脆弱性 CWE-20
不適切な入力確認
CVE-2013-3594 2014-01-22 19:12 2014-01-17 Show GitHub Exploit DB Packet Storm
216549 4 警告 WordPress.org - WordPress の wp-admin/press-this.php における publish アクションを実行される脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2011-5270 2014-01-22 18:49 2011-04-26 Show GitHub Exploit DB Packet Storm
216550 2.1 注意 WordPress.org - WordPress におけるアクセス制限を回避される脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2010-5297 2014-01-22 18:47 2010-06-27 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:April 21, 2026, 4:10 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
279921 - articlesone 99articles_directory PHP remote file include vulnerability in index.php in 99Articles.com (aka ArticlesOne.com) Free articles directory allows remote attackers to include and execute arbitrary PHP code via a URL in the p… NVD-CWE-Other
CVE-2006-1350 2018-10-19 01:32 2006-03-22 Show GitHub Exploit DB Packet Storm
279922 - aspportal aspportal Multiple SQL injection vulnerabilities in ASPPortal 3.1.1 and earlier allow remote attackers to execute arbitrary SQL commands via (1) the downloadid parameter in download_click.asp and (2) content_I… NVD-CWE-Other
CVE-2006-1353 2018-10-19 01:32 2006-03-22 Show GitHub Exploit DB Packet Storm
279923 - f5 firepass_4100 Cross-site scripting (XSS) vulnerability in my.support.php3 in F5 Firepass 4100 SSL VPN 5.4.2 allows remote attackers to inject arbitrary web script or HTML via the s parameter. NVD-CWE-Other
CVE-2006-1357 2018-10-19 01:32 2006-03-22 Show GitHub Exploit DB Packet Storm
279924 - musicbox musicbox Multiple SQL injection vulnerabilities in MusicBox 2.3 Beta 2 allow remote attackers to execute arbitrary SQL commands via the (1) id, (2) type, or (3) show parameter to (a) index.php; or the (4) mes… CWE-89
SQL Injection
CVE-2006-1360 2018-10-19 01:32 2006-03-23 Show GitHub Exploit DB Packet Storm
279925 - mini-nuke mini-nuke_cms Multiple SQL injection vulnerabilities in Mini-Nuke CMS System 1.8.2 and earlier allow remote attackers to execute arbitrary SQL commands via (1) the uid parameter in (a) members.asp, the (2) catid p… NVD-CWE-Other
CVE-2006-1362 2018-10-19 01:32 2006-03-23 Show GitHub Exploit DB Packet Storm
279926 7.5 HIGH
Network
microsoft asp.net Microsoft w3wp (aka w3wp.exe) does not properly handle when the AspCompat directive is not used when referencing COM components in ASP.NET, which allows remote attackers to cause a denial of service … CWE-400
 Uncontrolled Resource Consumption
CVE-2006-1364 2018-10-19 01:32 2006-03-23 Show GitHub Exploit DB Packet Storm
279927 - php_live php_live Cross-site scripting (XSS) vulnerability in status_image.php in PHP Live! 3.0 allows remote attackers to inject arbitrary web script or HTML via the base_url parameter. NVD-CWE-Other
CVE-2006-1373 2018-10-19 01:32 2006-03-24 Show GitHub Exploit DB Packet Storm
279928 - counterpane password_safe PasswordSafe 3.0 beta, when running on Windows before XP, uses a weak random number generator (C++ rand function) during generation of the database encryption key, which makes it easier for attackers… NVD-CWE-Other
CVE-2006-1378 2018-10-19 01:32 2006-03-24 Show GitHub Exploit DB Packet Storm
279929 - counterpane password_safe This vulnerability exists only in Windows OS environments before XP. For some reason it would not let me notate that in the "vulnerable software" section. NVD-CWE-Other
CVE-2006-1378 2018-10-19 01:32 2006-03-24 Show GitHub Exploit DB Packet Storm
279930 - jelsoft impex PHP remote file inclusion vulnerability in impex/ImpExData.php in vBulletin ImpEx module 1.74, when register_globals is disabled, allows remote attackers to include arbitrary files via the systempath… NVD-CWE-Other
CVE-2006-1382 2018-10-19 01:32 2006-03-24 Show GitHub Exploit DB Packet Storm