Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Feb. 9, 2026, 12:59 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
217221 6.8 警告 CRU Acquisition Group - CRU Ditto Forensic FieldStation のファームウェアにおけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反 		CVE-2013-6883 2013-12-19 15:54 2013-10-15 Show GitHub Exploit DB Packet Storm
217222 4.3 警告 CRU Acquisition Group - CRU Ditto Forensic FieldStation のファームウェアにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2013-6882 2013-12-19 15:52 2013-12-12 Show GitHub Exploit DB Packet Storm
217223 2.1 注意 valve software - Valve SteamOS の valve-bugreporter パッケージの Valve Bug Reporter における重要な情報を取得される脆弱性 CWE-310
暗号の問題 		CVE-2013-7128 2013-12-19 15:51 2013-12-14 Show GitHub Exploit DB Packet Storm
217224 4.3 警告 ThemeBeans - WordPress 用 ThemeBeans Blooog Theme におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2013-7129 2013-12-19 14:47 2013-12-2 Show GitHub Exploit DB Packet Storm
217225 2.1 注意 アップル - Apple Mac OS X 上で稼働する Safari における重要な情報を取得される脆弱性 CWE-310
暗号の問題 		CVE-2013-7127 2013-12-19 14:41 2013-12-13 Show GitHub Exploit DB Packet Storm
217226 8.8 危険 Google - Android におけるアクセス制限を回避される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2013-6271 2013-12-19 12:13 2013-11-27 Show GitHub Exploit DB Packet Storm
217227 4.7 警告 Eaton - 複数の Cooper Power Systems 製品 の DNP3 コンポーネントにおけるサービス運用妨害 (DoS) の脆弱性 CWE-20
不適切な入力確認 		CVE-2013-2816 2013-12-19 11:58 2013-12-12 Show GitHub Exploit DB Packet Storm
217228 7.1 危険 Eaton - Cooper Power Systems Cybectec DNP3 Master OPC Server におけるサービス運用妨害 (DoS) の脆弱性 CWE-20
不適切な入力確認 		CVE-2013-2814 2013-12-19 11:56 2013-12-12 Show GitHub Exploit DB Packet Storm
217229 7.1 危険 Eaton - 複数の Cooper Power Systems 製品 の DNP3 コンポーネントにおけるサービス運用妨害 (DoS) の脆弱性 CWE-20
不適切な入力確認 		CVE-2013-2813 2013-12-19 11:55 2013-12-12 Show GitHub Exploit DB Packet Storm
217230 8 危険 シーメンス - Siemens RuggedCom ROS の統合された HTTPS サーバにおける管理者アクションの制限を回避される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2013-6926 2013-12-18 16:56 2013-12-6 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:April 26, 2026, 4:08 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
279011 - php php The stripos function in PHP before 5.1.5 has unknown impact and attack vectors related to an out-of-bounds read. NVD-CWE-Other
CVE-2006-4485 2018-10-31 01:25 2006-09-1 Show GitHub Exploit DB Packet Storm
279012 - php php Integer overflow in memory allocation routines in PHP before 5.1.6, when running on a 64-bit system, allows context-dependent attackers to bypass the memory_limit restriction. CWE-189
Numeric Errors 		CVE-2006-4486 2018-10-31 01:25 2006-09-1 Show GitHub Exploit DB Packet Storm
279013 - microsoft office Unspecified vulnerability in Microsoft Word 2000, 2002, and Office 2003 allows remote user-assisted attackers to execute arbitrary code via unspecified vectors involving a crafted file resulting in a… NVD-CWE-noinfo
CVE-2006-4534 2018-10-31 01:25 2006-09-6 Show GitHub Exploit DB Packet Storm
279014 - php php PHP 4.x up to 4.4.4 and PHP 5 up to 5.1.6 allows local users to bypass certain Apache HTTP Server httpd.conf options, such as safe_mode and open_basedir, via the ini_restore function, which resets th… NVD-CWE-Other
CVE-2006-4625 2018-10-31 01:25 2006-09-13 Show GitHub Exploit DB Packet Storm
279015 - microsoft office Unspecified vulnerability in PowerPoint in Microsoft Office 2000, Office XP and Office 2003 allows user-assisted attackers to execute arbitrary code via a crafted record in a PPT file, as exploited b… CWE-94
Code Injection 		CVE-2006-4694 2018-10-31 01:25 2006-09-28 Show GitHub Exploit DB Packet Storm
279016 - ffmpeg ffmpeg Multiple buffer overflows in libavcodec in ffmpeg before 0.4.9_p20060530 allow remote attackers to cause a denial of service or possibly execute arbitrary code via multiple unspecified vectors in (1)… NVD-CWE-Other
CVE-2006-4800 2018-10-31 01:25 2006-09-15 Show GitHub Exploit DB Packet Storm
279017 - php php Integer overflow in PHP 5 up to 5.1.6 and 4 before 4.3.0 allows remote attackers to execute arbitrary code via an argument to the unserialize PHP function with a large value for the number of array e… CWE-94
Code Injection 		CVE-2006-4812 2018-10-31 01:25 2006-10-10 Show GitHub Exploit DB Packet Storm
279018 - cisco ids_sensor_software
ips_sensor_software 		The web administration interface (mainApp) to Cisco IDS before 4.1(5c), and IPS 5.0 before 5.0(6p1) and 5.1 before 5.1(2) allows remote attackers to cause a denial of service (unresponsive device) vi… NVD-CWE-Other
CVE-2006-4910 2018-10-31 01:25 2006-09-21 Show GitHub Exploit DB Packet Storm
279019 - sun solaris
sunos 		Unspecified vulnerability in Sun Solaris 8, 9 and 10 allows remote attackers to cause a denial of service (panic) via crafted IPv6 packets, a different vulnerability than CVE-2006-5013. NVD-CWE-Other
CVE-2006-5073 2018-10-31 01:25 2006-09-29 Show GitHub Exploit DB Packet Storm
279020 - php php Race condition in the symlink function in PHP 5.1.6 and earlier allows local users to bypass the open_basedir restriction by using a combination of symlink, mkdir, and unlink functions to change the … CWE-362
Race Condition 		CVE-2006-5178 2018-10-31 01:25 2006-10-10 Show GitHub Exploit DB Packet Storm