Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Feb. 9, 2026, 12:59 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
217271 5.8 警告 OpenStack - OpenStack Identity の ec2tokens API における権限を取得される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2013-6391 2013-12-17 18:39 2013-12-14 Show GitHub Exploit DB Packet Storm
217272 5.8 警告 Devscripts Devel Team - devscripts の Uscan における任意のファイルを削除される脆弱性 CWE-20
不適切な入力確認 		CVE-2013-7085 2013-12-17 18:33 2013-12-12 Show GitHub Exploit DB Packet Storm
217273 2.1 注意 ACME Laboratories
Gentoo Linux
Novell
Fedora Project
Open Source Development Team		 - sthttpd および thttpd の thttpd.c における重要な情報を取得される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2013-0348 2013-12-17 18:19 2013-02-26 Show GitHub Exploit DB Packet Storm
217274 4.3 警告 Quagga - Quagga の bgp_attr.c の bgp_attr_unknown 関数におけるサービス運用妨害 (DoS) の脆弱性 CWE-noinfo
情報不足 		CVE-2013-6051 2013-12-17 17:43 2013-11-26 Show GitHub Exploit DB Packet Storm
217275 6.8 警告 Devscripts Devel Team - devscripts の scripts/uscan.pl の get_main_source_dir 関数における任意のコマンドを実行される脆弱性 CWE-94
コード・インジェクション 		CVE-2013-7050 2013-12-17 17:14 2013-12-11 Show GitHub Exploit DB Packet Storm
217276 7.5 危険 SAP - SAP EMR Unwired における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2013-7096 2013-12-17 17:12 2013-11-20 Show GitHub Exploit DB Packet Storm
217277 10 危険 SAP - SAP Customer Relationship Management の XML パーサにおける脆弱性 CWE-noinfo
情報不足 		CVE-2013-7095 2013-12-17 17:12 2013-11-20 Show GitHub Exploit DB Packet Storm
217278 7.5 危険 SAP - SAP NetWeaver の RSDDCVER_COUNT_TAB_COLS 関数における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2013-7094 2013-12-17 17:11 2013-11-20 Show GitHub Exploit DB Packet Storm
217279 5 警告 SAP - SAP Network Interface Router における認証を回避される脆弱性 CWE-287
不適切な認証 		CVE-2013-7093 2013-12-17 17:10 2013-11-20 Show GitHub Exploit DB Packet Storm
217280 5 警告 RockMongo - RockMongo におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2013-5107 2013-12-17 16:54 2013-08-16 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:April 26, 2026, 4:08 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
279011 - php php The stripos function in PHP before 5.1.5 has unknown impact and attack vectors related to an out-of-bounds read. NVD-CWE-Other
CVE-2006-4485 2018-10-31 01:25 2006-09-1 Show GitHub Exploit DB Packet Storm
279012 - php php Integer overflow in memory allocation routines in PHP before 5.1.6, when running on a 64-bit system, allows context-dependent attackers to bypass the memory_limit restriction. CWE-189
Numeric Errors 		CVE-2006-4486 2018-10-31 01:25 2006-09-1 Show GitHub Exploit DB Packet Storm
279013 - microsoft office Unspecified vulnerability in Microsoft Word 2000, 2002, and Office 2003 allows remote user-assisted attackers to execute arbitrary code via unspecified vectors involving a crafted file resulting in a… NVD-CWE-noinfo
CVE-2006-4534 2018-10-31 01:25 2006-09-6 Show GitHub Exploit DB Packet Storm
279014 - php php PHP 4.x up to 4.4.4 and PHP 5 up to 5.1.6 allows local users to bypass certain Apache HTTP Server httpd.conf options, such as safe_mode and open_basedir, via the ini_restore function, which resets th… NVD-CWE-Other
CVE-2006-4625 2018-10-31 01:25 2006-09-13 Show GitHub Exploit DB Packet Storm
279015 - microsoft office Unspecified vulnerability in PowerPoint in Microsoft Office 2000, Office XP and Office 2003 allows user-assisted attackers to execute arbitrary code via a crafted record in a PPT file, as exploited b… CWE-94
Code Injection 		CVE-2006-4694 2018-10-31 01:25 2006-09-28 Show GitHub Exploit DB Packet Storm
279016 - ffmpeg ffmpeg Multiple buffer overflows in libavcodec in ffmpeg before 0.4.9_p20060530 allow remote attackers to cause a denial of service or possibly execute arbitrary code via multiple unspecified vectors in (1)… NVD-CWE-Other
CVE-2006-4800 2018-10-31 01:25 2006-09-15 Show GitHub Exploit DB Packet Storm
279017 - php php Integer overflow in PHP 5 up to 5.1.6 and 4 before 4.3.0 allows remote attackers to execute arbitrary code via an argument to the unserialize PHP function with a large value for the number of array e… CWE-94
Code Injection 		CVE-2006-4812 2018-10-31 01:25 2006-10-10 Show GitHub Exploit DB Packet Storm
279018 - cisco ids_sensor_software
ips_sensor_software 		The web administration interface (mainApp) to Cisco IDS before 4.1(5c), and IPS 5.0 before 5.0(6p1) and 5.1 before 5.1(2) allows remote attackers to cause a denial of service (unresponsive device) vi… NVD-CWE-Other
CVE-2006-4910 2018-10-31 01:25 2006-09-21 Show GitHub Exploit DB Packet Storm
279019 - sun solaris
sunos 		Unspecified vulnerability in Sun Solaris 8, 9 and 10 allows remote attackers to cause a denial of service (panic) via crafted IPv6 packets, a different vulnerability than CVE-2006-5013. NVD-CWE-Other
CVE-2006-5073 2018-10-31 01:25 2006-09-29 Show GitHub Exploit DB Packet Storm
279020 - php php Race condition in the symlink function in PHP 5.1.6 and earlier allows local users to bypass the open_basedir restriction by using a combination of symlink, mkdir, and unlink functions to change the … CWE-362
Race Condition 		CVE-2006-5178 2018-10-31 01:25 2006-10-10 Show GitHub Exploit DB Packet Storm