Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Feb. 9, 2026, 12:59 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
217191 4.9 警告 strongSwan - strongSwan における他のユーザとして認証される脆弱性 CWE-287
不適切な認証 		CVE-2013-2944 2013-12-19 19:11 2013-04-30 Show GitHub Exploit DB Packet Storm
217192 6.5 警告 Moodle - Moodle における任意の site-wide リポジトリを読まれる脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2013-1836 2013-12-19 19:08 2013-03-25 Show GitHub Exploit DB Packet Storm
217193 3.5 注意 Moodle - Moodle における重要な情報を取得される脆弱性 CWE-200
情報漏えい 		CVE-2013-1835 2013-12-19 19:08 2013-03-25 Show GitHub Exploit DB Packet Storm
217194 4 警告 Moodle - Moodle の notes/edit.php におけるノートを別のユーザに再割り当てされる脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2013-1834 2013-12-19 19:08 2013-03-25 Show GitHub Exploit DB Packet Storm
217195 3.5 注意 Moodle - Moodle の File Picker モジュールにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2013-1833 2013-12-19 19:08 2013-03-25 Show GitHub Exploit DB Packet Storm
217196 4 警告 Moodle - Moodle の repository/webdav/lib.php における重要な情報を取得される脆弱性 CWE-200
情報漏えい 		CVE-2013-1832 2013-12-19 19:08 2013-03-25 Show GitHub Exploit DB Packet Storm
217197 5 警告 Moodle - Moodle の lib/setuplib.php における重要な情報を取得される脆弱性 CWE-200
情報漏えい 		CVE-2013-1831 2013-12-19 19:07 2013-03-25 Show GitHub Exploit DB Packet Storm
217198 5 警告 Moodle - Moodle の user/view.php における重要な情報を取得される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2013-1830 2013-12-19 19:07 2013-03-25 Show GitHub Exploit DB Packet Storm
217199 7.2 危険 freedesktop.org - Dbus-glib の dbus-gproxy における権限を取得される脆弱性 CWE-20
不適切な入力確認 		CVE-2013-0292 2013-12-19 19:07 2013-03-5 Show GitHub Exploit DB Packet Storm
217200 6.4 警告 Zend Technologies Ltd. - Zend Framework の Zend_XmlRpc における任意のファイルを読まれる脆弱性 CWE-noinfo
情報不足 		CVE-2012-3363 2013-12-19 19:07 2013-02-13 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:April 20, 2026, 4:09 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
279591 - snipegallery snipe_gallery Multiple cross-site scripting (XSS) vulnerabilities in Snipe Gallery 3.1.4 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) gallery_id parameter in view.php, (2) … CWE-79
Cross-site Scripting 		CVE-2006-1826 2018-10-19 01:36 2006-04-18 Show GitHub Exploit DB Packet Storm
279592 - opera opera_browser Integer signedness error in Opera before 8.54 allows remote attackers to execute arbitrary code via long values in a stylesheet attribute, which pass a length check. NOTE: a sign extension problem m… CWE-189
Numeric Errors 		CVE-2006-1834 2018-10-19 01:36 2006-04-20 Show GitHub Exploit DB Packet Storm
279593 - vincent_hor calendarix
calendarix_advanced 		Cross-site scripting (XSS) vulnerability in yearcal.php in Calendarix allows remote attackers to inject arbitrary web script or HTML via the ycyear parameter. NVD-CWE-Other
CVE-2006-1835 2018-10-19 01:36 2006-04-20 Show GitHub Exploit DB Packet Storm
279594 - symantec liveupdate
norton_antivirus
norton_internet_security
norton_personal_firewall
norton_system_works
norton_utilities 		Untrusted search path vulnerability in unspecified components in Symantec LiveUpdate for Macintosh 3.0.0 through 3.5.0 do not set the execution path, which allows local users to gain privileges via a… NVD-CWE-Other
CVE-2006-1836 2018-10-19 01:36 2006-04-20 Show GitHub Exploit DB Packet Storm
279595 - php_album php_album PHP remote file inclusion vulnerability in language.php in PHP Album 0.3.2.3, when register_globals is enabled, allows remote attackers to execute arbitrary code via an FTP URL in the data_dir parame… NVD-CWE-Other
CVE-2006-1839 2018-10-19 01:36 2006-04-20 Show GitHub Exploit DB Packet Storm
279596 - kailash_nadh boastmachine Cross-site scripting (XSS) vulnerability in search.php in boastMachine (bMachine) 2.7, and possibly other versions before 2.9b, allows remote attackers to inject arbitrary web script or HTML via the … NVD-CWE-Other
CVE-2006-1841 2018-10-19 01:36 2006-04-20 Show GitHub Exploit DB Packet Storm
279597 - cynical_games shoutbook Cross-site scripting (XSS) vulnerability in global.php in ShoutBOOK 1.1 allows remote attackers to inject arbitrary web script or HTML via the (1) NAME and (2) COMMENTS parameters. NVD-CWE-Other
CVE-2006-1842 2018-10-19 01:36 2006-04-20 Show GitHub Exploit DB Packet Storm
279598 - linpha linpha Multiple cross-site scripting (XSS) vulnerabilities in stats_view.php in LinPHA 1.1.0 allow remote attackers to inject arbitrary web script or HTML via the (1) date_from, (2) date_to, and (3) date pa… NVD-CWE-Other
CVE-2006-1848 2018-10-19 01:36 2006-04-20 Show GitHub Exploit DB Packet Storm
279599 - linux linux_kernel Directory traversal vulnerability in smbfs in Linux 2.6.16 and earlier allows local users to escape chroot restrictions for an SMB-mounted filesystem via "..\\" sequences, a similar vulnerability to … NVD-CWE-Other
CVE-2006-1864 2018-10-19 01:36 2006-04-27 Show GitHub Exploit DB Packet Storm
279600 - oracle database_server Multiple unspecified vulnerabilities in Oracle Database Server 8.1.7.4, 9.0.1.5, 9.2.0.7, 10.1.0.5, and other versions have unknown impact and attack vectors in the (1) Advanced Replication component… NVD-CWE-noinfo
CVE-2006-1866 2018-10-19 01:36 2006-04-20 Show GitHub Exploit DB Packet Storm