Vulnerability Search Top

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

Vulnerability Information Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":Feb. 9, 2026, 12:59 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
216711	4.3	警告	オラクル	-	Oracle Fusion Middleware の Oracle Identity Manager における End User Self Service に関する脆弱性	CWE-noinfo 情報不足	CVE-2013-5900	2014-01-16 15:30	2014-01-14	Show	GitHub Exploit DB Packet Storm

216712	4.1	警告	オラクル	-	Oracle Database Server の Spatial における脆弱性	CWE-noinfo 情報不足	CVE-2014-0378	2014-01-16 14:35	2014-01-14	Show	GitHub Exploit DB Packet Storm

216713	4	警告	オラクル	-	Oracle Database Server の Core RDBMS における SYS テーブルに関する脆弱性	CWE-noinfo 情報不足	CVE-2014-0377	2014-01-16 14:35	2014-01-14	Show	GitHub Exploit DB Packet Storm

216714	6.2	警告	Fedora Project	-	Fedora などのオペレーティングシステムで使用される DeviceKit の DeviceKit-disks におけるディレクトリトラバーサルの脆弱性	CWE-22 パス・トラバーサル	CVE-2010-0746	2014-01-16 14:28	2010-04-6	Show	GitHub Exploit DB Packet Storm

216715	5.5	警告	オラクル	-	Oracle Hyperion の Hyperion Essbase Administration Services における Admin Console に関する脆弱性	CWE-noinfo 情報不足	CVE-2014-0367	2014-01-16 14:19	2014-01-14	Show	GitHub Exploit DB Packet Storm

216716	4	警告	オラクル	-	Oracle E-Business Suite の Oracle Applications Framework における Attachments に関する脆弱性	CWE-noinfo 情報不足	CVE-2014-0366	2014-01-16 14:13	2014-01-14	Show	GitHub Exploit DB Packet Storm

216717	2.8	注意	オラクル	-	Oracle Siebel CRM の Siebel Life Sciences における Clinical Trip Report に関する脆弱性	CWE-noinfo 情報不足	CVE-2014-0370	2014-01-16 14:06	2014-01-14	Show	GitHub Exploit DB Packet Storm

216718	5	警告	オラクル	-	Oracle Siebel CRM の Siebel Core - EAI における Java Integration に関する脆弱性	CWE-noinfo 情報不足	CVE-2014-0369	2014-01-16 14:05	2014-01-14	Show	GitHub Exploit DB Packet Storm

216719	4.3	警告	オラクル	-	Oracle iLearning における Learner Pages に関する脆弱性	CWE-noinfo 情報不足	CVE-2014-0389	2014-01-16 13:49	2014-01-14	Show	GitHub Exploit DB Packet Storm

216720	4.3	警告	オラクル	-	Oracle Sun Solaris における Java Web Console に関する脆弱性	CWE-noinfo 情報不足	CVE-2014-0390	2014-01-16 13:36	2014-01-14	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:April 21, 2026, 4:10 a.m.

No	CVSS	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
279731	-	farsinews	farsinews	Directory traversal vulnerability in FarsiNews 2.5.3 Pro and earlier allows remote attackers to obtain the installation path via ".." sequences in the archive parameter to index.php, which leaks the …	NVD-CWE-Other	CVE-2006-1823	2018-10-19 01:36	2006-04-18	Show	GitHub Exploit DB Packet Storm

279732	-	phpguestbook	phpguestbook	Multiple cross-site scripting (XSS) vulnerabilities in PhpGuestbook.php in PhpGuestbook 1.0 allow remote attackers to inject arbitrary web script or HTML via the (1) Name, (2) Website, and (3) Commen…	NVD-CWE-Other	CVE-2006-1824	2018-10-19 01:36	2006-04-18	Show	GitHub Exploit DB Packet Storm

279733	-	snipegallery	snipe_gallery	Multiple cross-site scripting (XSS) vulnerabilities in Snipe Gallery 3.1.4 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) gallery_id parameter in view.php, (2) …	CWE-79 Cross-site Scripting	CVE-2006-1826	2018-10-19 01:36	2006-04-18	Show	GitHub Exploit DB Packet Storm

279734	-	opera	opera_browser	Integer signedness error in Opera before 8.54 allows remote attackers to execute arbitrary code via long values in a stylesheet attribute, which pass a length check. NOTE: a sign extension problem m…	CWE-189 Numeric Errors	CVE-2006-1834	2018-10-19 01:36	2006-04-20	Show	GitHub Exploit DB Packet Storm

279735	-	vincent_hor	calendarix calendarix_advanced	Cross-site scripting (XSS) vulnerability in yearcal.php in Calendarix allows remote attackers to inject arbitrary web script or HTML via the ycyear parameter.	NVD-CWE-Other	CVE-2006-1835	2018-10-19 01:36	2006-04-20	Show	GitHub Exploit DB Packet Storm

279736	-	symantec	liveupdate norton_antivirus norton_internet_security norton_personal_firewall norton_system_works norton_utilities	Untrusted search path vulnerability in unspecified components in Symantec LiveUpdate for Macintosh 3.0.0 through 3.5.0 do not set the execution path, which allows local users to gain privileges via a…	NVD-CWE-Other	CVE-2006-1836	2018-10-19 01:36	2006-04-20	Show	GitHub Exploit DB Packet Storm

279737	-	php_album	php_album	PHP remote file inclusion vulnerability in language.php in PHP Album 0.3.2.3, when register_globals is enabled, allows remote attackers to execute arbitrary code via an FTP URL in the data_dir parame…	NVD-CWE-Other	CVE-2006-1839	2018-10-19 01:36	2006-04-20	Show	GitHub Exploit DB Packet Storm

279738	-	kailash_nadh	boastmachine	Cross-site scripting (XSS) vulnerability in search.php in boastMachine (bMachine) 2.7, and possibly other versions before 2.9b, allows remote attackers to inject arbitrary web script or HTML via the …	NVD-CWE-Other	CVE-2006-1841	2018-10-19 01:36	2006-04-20	Show	GitHub Exploit DB Packet Storm

279739	-	cynical_games	shoutbook	Cross-site scripting (XSS) vulnerability in global.php in ShoutBOOK 1.1 allows remote attackers to inject arbitrary web script or HTML via the (1) NAME and (2) COMMENTS parameters.	NVD-CWE-Other	CVE-2006-1842	2018-10-19 01:36	2006-04-20	Show	GitHub Exploit DB Packet Storm

279740	-	linpha	linpha	Multiple cross-site scripting (XSS) vulnerabilities in stats_view.php in LinPHA 1.1.0 allow remote attackers to inject arbitrary web script or HTML via the (1) date_from, (2) date_to, and (3) date pa…	NVD-CWE-Other	CVE-2006-1848	2018-10-19 01:36	2006-04-20	Show	GitHub Exploit DB Packet Storm