Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Feb. 9, 2026, 12:59 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
217131 5.8 警告 IBM - IBM SPSS Collaboration and Deployment Services におけるオープンリダイレクトの脆弱性 CWE-20
不適切な入力確認 		CVE-2013-4046 2013-12-24 20:50 2013-12-16 Show GitHub Exploit DB Packet Storm
217132 4.3 警告 IBM - IBM SPSS Collaboration and Deployment Services のポータルアプリケーションにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2013-4045 2013-12-24 20:50 2013-12-16 Show GitHub Exploit DB Packet Storm
217133 4 警告 IBM - IBM SPSS Collaboration and Deployment Services におけるアプリケーションログファイルを読まれる脆弱性 CWE-200
情報漏えい 		CVE-2013-4044 2013-12-24 20:49 2013-12-16 Show GitHub Exploit DB Packet Storm
217134 3.5 注意 eFront Learning - eFront の www/administrator.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2013-7194 2013-12-24 19:36 2013-12-12 Show GitHub Exploit DB Packet Storm
217135 9.3 危険 UPC - UPC Ireland Cisco EPC 2425 ルータにおけるアクセス権を取得される脆弱性 CWE-310
暗号の問題 		CVE-2013-7136 2013-12-24 19:15 2013-12-11 Show GitHub Exploit DB Packet Storm
217136 7.5 危険 nCrafts - WordPress 用 FormCraft プラグインの form.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2013-7187 2013-12-24 19:15 2013-12-8 Show GitHub Exploit DB Packet Storm
217137 6.8 警告 シスコシステムズ - Cisco EPC3925 デバイスの goform/Quick_setup におけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反 		CVE-2013-6976 2013-12-24 19:14 2013-12-23 Show GitHub Exploit DB Packet Storm
217138 4.6 警告 シスコシステムズ - Cisco NX-OS の filesys におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2012-4135 2013-12-24 19:07 2013-12-19 Show GitHub Exploit DB Packet Storm
217139 4.6 警告 シスコシステムズ - Cisco NX-OS の tar におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2012-4131 2013-12-24 19:07 2013-12-23 Show GitHub Exploit DB Packet Storm
217140 7.5 危険 INNER ESTEEM SDN BHD - C2C Forward Auction Creator における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2013-7193 2013-12-24 18:58 2013-12-14 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:April 20, 2026, 4:09 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
280241 - de_marchi_daniele quickcam The qcamvc_video_init function in qcamvc.c in De Marchi Daniele QuickCam VC Linux device driver (aka quickcam-vc) 1.0.9 and earlier does not properly check a boundary, triggering memory corruption, w… NVD-CWE-Other
CVE-2006-6854 2018-10-18 06:49 2006-12-31 Show GitHub Exploit DB Packet Storm
280242 - docebolms docebolms Cross-site scripting (XSS) vulnerability in modules/credits/credits.php in Docebo LMS allows remote attackers to inject arbitrary web script or HTML via the lang parameter. NVD-CWE-Other
CVE-2006-6857 2018-10-18 06:49 2006-12-31 Show GitHub Exploit DB Packet Storm
280243 - mythcontrol mythcontrol Buffer overflow in the sendToMythTV function in MythControlServer.c in MythControl 1.0 and earlier allows remote attackers to execute arbitrary code via a crafted sendStr string to the Bluetooth inte… NVD-CWE-Other
CVE-2006-6860 2018-10-18 06:49 2006-12-31 Show GitHub Exploit DB Packet Storm
280244 - outfront spooky_login Multiple SQL injection vulnerabilities in Outfront Spooky Login 2.7 allow remote attackers to execute arbitrary SQL commands via (1) the UserUpdate parameter to login/register.asp or (2) unspecified … NVD-CWE-Other
CVE-2006-6861 2018-10-18 06:49 2006-12-31 Show GitHub Exploit DB Packet Storm
280245 - outfront spooky_login Multiple cross-site scripting (XSS) vulnerabilities in Outfront Spooky Login 2.7 allow remote attackers to inject arbitrary web script or HTML via unspecified parameters to (1) login/login.asp or (2)… NVD-CWE-Other
CVE-2006-6862 2018-10-18 06:49 2006-12-31 Show GitHub Exploit DB Packet Storm
280246 - enigma2 coppermine_bridge PHP remote file inclusion vulnerability in E2_header.inc.php in Enigma2 Coppermine Bridge 1.0 allows remote attackers to execute arbitrary PHP code via a URL in the boarddir parameter. NVD-CWE-Other
CVE-2006-6864 2018-10-18 06:49 2006-12-31 Show GitHub Exploit DB Packet Storm
280247 - softartisans fileup Directory traversal vulnerability in SAFileUpSamples/util/viewsrc.asp in SoftArtisans FileUp (SAFileUp) 5.0.14 allows remote attackers to read arbitrary files via a %c0%ae. (Unicode dot dot) in the p… NVD-CWE-Other
CVE-2006-6865 2018-10-18 06:49 2006-12-31 Show GitHub Exploit DB Packet Storm
280248 - openser openser
openser_osp_module 		Buffer overflow in the validateospheader function in the Open Settlement Protocol (OSP) module in OpenSER 1.1.0 and earlier allows remote attackers to execute arbitrary code via a crafted OSP header. NVD-CWE-Other
CVE-2006-6875 2018-10-18 06:49 2006-12-31 Show GitHub Exploit DB Packet Storm
280249 - openser openser Buffer overflow in the fetchsms function in the SMS handling module (libsms_getsms.c) in OpenSER 1.2.0 and earlier allows remote attackers to cause a denial of service (crash) via a crafted SMS messa… NVD-CWE-Other
CVE-2006-6876 2018-10-18 06:49 2006-12-31 Show GitHub Exploit DB Packet Storm
280250 - stavros_markou atmelwlandriver Buffer overflow in the Get_Wep function in cofvnet.c for ATMEL Linux PCI PCMCIA USB Drivers drivers 3.4.1.1 corruption allows attackers to execute arbitrary code via a long name argument. CWE-119
Incorrect Access of Indexable Resource ('Range Error')  		CVE-2006-6881 2018-10-18 06:49 2006-12-31 Show GitHub Exploit DB Packet Storm