Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Feb. 9, 2026, 12:59 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
216691 8.3 危険 Samba Project - Samba の winbindd の librpc/rpc/dcerpc_util.c におけるバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2013-4408 2014-01-17 11:06 2013-12-9 Show GitHub Exploit DB Packet Storm
216692 4.3 警告 Mozilla Foundation - Linux 上で稼働する Mozilla Firefox および SeaMonkey におけるクリップボードデータを読まれる脆弱性 CWE-200
情報漏えい 		CVE-2013-6672 2014-01-17 10:59 2013-12-10 Show GitHub Exploit DB Packet Storm
216693 6.4 警告 Nagios Enterprises, LLC - Nagios Core の contrib/daemonchk.c 内の process_cgivars 関数における重要な情報を取得される脆弱性 CWE-119
バッファエラー 		CVE-2013-7205 2014-01-16 17:55 2013-12-20 Show GitHub Exploit DB Packet Storm
216694 5.5 警告 Nagios Enterprises, LLC
The Icinga Project		 - Nagios Core および Icinga におけるプロセスメモリから重要な情報を取得される脆弱性 CWE-20
不適切な入力確認 		CVE-2013-7108 2014-01-16 17:52 2013-12-17 Show GitHub Exploit DB Packet Storm
216695 4.3 警告 オラクル - Oracle Supply Chain Products Suite の Oracle Demantra Demand Management における DM Others に関する脆弱性 CWE-noinfo
情報不足 		CVE-2014-0379 2014-01-16 17:47 2014-01-14 Show GitHub Exploit DB Packet Storm
216696 5.5 警告 オラクル - Oracle Supply Chain Products Suite の Oracle Demantra Demand Management における DM Others に関する脆弱性 CWE-noinfo
情報不足 		CVE-2014-0372 2014-01-16 17:46 2014-01-14 Show GitHub Exploit DB Packet Storm
216697 3.5 注意 オラクル - Oracle Supply Chain Products Suite の Oracle Demantra Demand Management における DM Others に関する脆弱性 CWE-noinfo
情報不足 		CVE-2014-0371 2014-01-16 17:46 2014-01-14 Show GitHub Exploit DB Packet Storm
216698 5.5 警告 オラクル - Oracle Supply Chain Products Suite の Oracle Agile Product Lifecycle Management for Process における Manage Data Cache に関する脆弱性 CWE-noinfo
情報不足 		CVE-2013-5897 2014-01-16 17:45 2014-01-14 Show GitHub Exploit DB Packet Storm
216699 4 警告 Apache Software Foundation - Apache CloudStack におけるネットワーク ACL を一覧表示される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2014-0031 2014-01-16 17:19 2014-01-10 Show GitHub Exploit DB Packet Storm
216700 6.9 警告 クアルコム
Android for MSM		 - MSM デバイス用 Qualcomm Innovation Center Android コントリビューションなどで使用される Linux Kernel 用 MSM カメラドライバにおける権限を取得される脆弱性 CWE-20
不適切な入力確認 		CVE-2013-6123 2014-01-16 16:48 2013-10-11 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:April 23, 2026, 4 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
280461 - fixit_knowledge_solutions idms_pro_image_gallery Cross-site scripting (XSS) vulnerability in the search functionality in Fixit iDMS Pro Image Gallery allows remote attackers to inject arbitrary web script or HTML via a search field (txtsearchtext p… NVD-CWE-Other
CVE-2006-6196 2018-10-18 06:47 2006-12-1 Show GitHub Exploit DB Packet Storm
280462 - b2evolution b2evolution Multiple cross-site scripting (XSS) vulnerabilities in b2evolution 1.8.2 through 1.9 beta allow remote attackers to inject arbitrary web script or HTML via the (1) app_name parameter in (a) _404_not_… NVD-CWE-Other
CVE-2006-6197 2018-10-18 06:47 2006-12-1 Show GitHub Exploit DB Packet Storm
280463 - cpanel webhost_manager Multiple cross-site scripting (XSS) vulnerabilities in cPanel WebHost Manager (WHM) 3.1.0 allow remote authenticated users to inject arbitrary web script or HTML via the (1) email parameter to (a) sc… NVD-CWE-Other
CVE-2006-6198 2018-10-18 06:47 2006-12-1 Show GitHub Exploit DB Packet Storm
280464 - francisco_burzi php-nuke Multiple SQL injection vulnerabilities in the (1) rate_article and (2) rate_complete functions in modules/News/index.php in the News module in Francisco Burzi PHP-Nuke 7.9 and earlier, when magic_quo… NVD-CWE-Other
CVE-2006-6200 2018-10-18 06:47 2006-12-1 Show GitHub Exploit DB Packet Storm
280465 - borland_software
revilloc 		c\+\+_builder
c_builder
delphi
developer_studio
idsql32.dll
mailserver 		Heap-based buffer overflow in Borland idsql32.dll 5.1.0.4, as used by RevilloC MailServer; 5.2.0.2 as used by Borland Developer Studio 2006; and possibly other versions allows remote attackers to exe… NVD-CWE-Other
CVE-2006-6201 2018-10-18 06:47 2006-12-1 Show GitHub Exploit DB Packet Storm
280466 - warhound warhound_general_shopping_cart SQL injection vulnerability in item.asp in WarHound General Shopping Cart allows remote attackers to execute arbitrary SQL commands via the ItemID parameter. NVD-CWE-Other
CVE-2006-6206 2018-10-18 06:47 2006-12-1 Show GitHub Exploit DB Packet Storm
280467 - midicart_software midicart_asp_plus_shopping_cart
midicart_asp_shopping_cart 		Multiple SQL injection vulnerabilities in MidiCart ASP Shopping Cart and ASP Plus Shopping Cart allow remote attackers to execute arbitrary SQL commands via the (1) id2006quant parameter to (a) item_… NVD-CWE-Other
CVE-2006-6209 2018-10-18 06:47 2006-12-1 Show GitHub Exploit DB Packet Storm
280468 - iisworks asp_listpics SQL injection vulnerability in listpics.asp in ASP ListPics 5.0 allows remote attackers to execute arbitrary SQL commands via the ID parameter. NVD-CWE-Other
CVE-2006-6210 2018-10-18 06:47 2006-12-1 Show GitHub Exploit DB Packet Storm
280469 - birdblog birdblog Multiple cross-site scripting (XSS) vulnerabilities in BirdBlog 1.4.0 allow remote attackers to inject arbitrary web script or HTML via the (1) msg parameter to (a) admin/admincore.php, the (2) month… NVD-CWE-Other
CVE-2006-6211 2018-10-18 06:47 2006-12-1 Show GitHub Exploit DB Packet Storm
280470 - php-nuke mermaid_module PHP remote file inclusion vulnerability in formdisp.php in the Mermaid 1.2 module for PHP-Nuke allows remote attackers to execute arbitrary PHP code via a URL in the module_name parameter. NVD-CWE-Other
CVE-2006-6217 2018-10-18 06:47 2006-12-1 Show GitHub Exploit DB Packet Storm