Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Feb. 9, 2026, 12:59 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
217151 4.3 警告 TYPO3 Association - TYPO3 の Backend User Administration モジュールにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2013-7077 2013-12-24 17:41 2013-12-10 Show GitHub Exploit DB Packet Storm
217152 4.3 警告 TYPO3 Association - TYPO3 の Extension Manager におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2013-7076 2013-12-24 17:41 2013-12-10 Show GitHub Exploit DB Packet Storm
217153 3.5 注意 TYPO3 Association - TYPO3 の Content Editing Wizards におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2013-7074 2013-12-24 17:40 2013-12-10 Show GitHub Exploit DB Packet Storm
217154 5 警告 iScripts - iScripts AutoHoster におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2013-7190 2013-12-24 16:50 2013-12-15 Show GitHub Exploit DB Packet Storm
217155 7.5 危険 iScripts - iScripts AutoHoster における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2013-7189 2013-12-24 16:50 2013-12-15 Show GitHub Exploit DB Packet Storm
217156 4.3 警告 DELL EMC (旧 EMC Corporation) - RSA Archer eGRC におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2013-6178 2013-12-24 16:07 2013-12-19 Show GitHub Exploit DB Packet Storm
217157 4 警告 IBM - IBM DB2 および DB2 Connect におけるサービス運用妨害 (DoS) の脆弱性 CWE-noinfo
情報不足 		CVE-2013-6717 2013-12-24 16:07 2013-12-16 Show GitHub Exploit DB Packet Storm
217158 4.3 警告 IBM - IBM Content Navigator におけるクリックジャッキング攻撃を実行される脆弱性 CWE-20
不適切な入力確認 		CVE-2013-5462 2013-12-24 16:06 2013-12-16 Show GitHub Exploit DB Packet Storm
217159 3.5 注意 IBM - IBM FileNet Business Process Framework における任意のファイルを読まれる脆弱性 CWE-200
情報漏えい 		CVE-2013-5452 2013-12-24 16:05 2013-12-19 Show GitHub Exploit DB Packet Storm
217160 4.9 警告 IBM - 複数の IBM InfoSphere Master Data Management 製品における Web セッションをハイジャックされる脆弱性 CWE-287
不適切な認証 		CVE-2013-5426 2013-12-24 16:04 2013-12-16 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:April 18, 2026, 4:11 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
279901 - orionserver orion_application_server Update to version 2.0.7 or contact the vendor for a patch. NVD-CWE-Other
CVE-2006-0816 2018-10-19 01:29 2006-03-24 Show GitHub Exploit DB Packet Storm
279902 - deerfield
icewarp
merak 		visnetic_mail_server
web_mail
mail_server 		Absolute path directory traversal vulnerability in (a) MERAK Mail Server for Windows 8.3.8r with before IceWarp Web Mail 5.6.1 and (b) VisNetic MailServer before 8.5.0.5 allows remote attackers to in… NVD-CWE-Other
CVE-2006-0817 2018-10-19 01:29 2006-07-21 Show GitHub Exploit DB Packet Storm
279903 - deerfield
icewarp
merak 		visnetic_mail_server
web_mail
mail_server 		Absolute path directory traversal vulnerability in (1) MERAK Mail Server for Windows 8.3.8r with before IceWarp Web Mail 5.6.1 and (2) VisNetic MailServer before 8.5.0.5 allows remote authenticated u… NVD-CWE-Other
CVE-2006-0818 2018-10-19 01:29 2006-07-21 Show GitHub Exploit DB Packet Storm
279904 - gnome dwarf_http_server Dwarf HTTP Server 1.3.2 allows remote attackers to obtain the source code of JSP files via (1) dot, (2) space, (3) slash, or (4) NULL characters in the filename extension of an HTTP request. NVD-CWE-Other
CVE-2006-0819 2018-10-19 01:29 2006-03-14 Show GitHub Exploit DB Packet Storm
279905 - gnome dwarf_http_server Cross-site scripting (XSS) vulnerability in Dwarf HTTP Server 1.3.2 allows remote attackers to inject arbitrary web script or HTML via unspecified error messages. NVD-CWE-Other
CVE-2006-0820 2018-10-19 01:29 2006-03-14 Show GitHub Exploit DB Packet Storm
279906 - geeklog geeklog Multiple SQL injection vulnerabilities in Geeklog 1.4.0 before 1.4.0sr1 and 1.3.11 before 1.3.11sr4 allow remote attackers to inject arbitrary SQL commands via the (1) userid variable to users.php or… NVD-CWE-Other
CVE-2006-0823 2018-10-19 01:29 2006-02-22 Show GitHub Exploit DB Packet Storm
279907 - geeklog geeklog Multiple unspecified vulnerabilities in lib-common.php in Geeklog 1.4.0 before 1.4.0sr1 and 1.3.11 before 1.3.11sr4 allow remote attackers to include arbitrary local files and execute arbitrary code … NVD-CWE-Other
CVE-2006-0824 2018-10-19 01:29 2006-02-22 Show GitHub Exploit DB Packet Storm
279908 - e-blah platinum Cross-site scripting vulnerability in E-Blah Platinum 9.7 allows remote attackers to inject arbitrary web script or HTML via the referer (HTTP_REFERER), which is not sanitized when the log file is vi… NVD-CWE-Other
CVE-2006-0829 2018-10-19 01:29 2006-02-22 Show GitHub Exploit DB Packet Storm
279909 - tasarim_rehberi tasarim_rehberi PHP remote file include vulnerability in index.php in Tasarim Rehberi allows remote attackers to execute arbitrary PHP code via a URL in the (1) sayfaadi or (2) sayfa parameter. NOTE: this might be … NVD-CWE-Other
CVE-2006-0831 2018-10-19 01:29 2006-02-22 Show GitHub Exploit DB Packet Storm
279910 - wpc.easy wpc.easy Multiple SQL injection vulnerabilities in admin.asp in WPC.easy allow remote attackers to execute arbitrary SQL commands via the (1) uid and (2) pwd parameter. NVD-CWE-Other
CVE-2006-0832 2018-10-19 01:29 2006-02-22 Show GitHub Exploit DB Packet Storm