Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Feb. 9, 2026, 12:59 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
217321 4.3 警告 Novell - SUSE Lifecycle Management Server における暗号保護メカニズムを破られる脆弱性 CWE-310
暗号の問題
CVE-2013-3710 2013-12-16 15:09 2013-12-3 Show GitHub Exploit DB Packet Storm
217322 6.8 警告 DELL EMC (旧 EMC Corporation) - EMC RSA Security Analytics および RSA NetWitness NextGen におけるアクセス制限を回避される脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2013-6180 2013-12-16 14:57 2013-12-4 Show GitHub Exploit DB Packet Storm
217323 7.5 危険 Tianjin ENORTH NETNEWS - Enorth Webpublisher CMS の m_worklog/log_searchday.jsp における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2013-6985 2013-12-16 14:40 2013-12-6 Show GitHub Exploit DB Packet Storm
217324 10 危険 アドビシステムズ - Adobe Shockwave Player における任意のコードを実行される脆弱性 CWE-119
バッファエラー
CVE-2013-5334 2013-12-13 15:01 2013-12-10 Show GitHub Exploit DB Packet Storm
217325 10 危険 アドビシステムズ - Adobe Shockwave Player における任意のコードを実行される脆弱性 CWE-119
バッファエラー
CVE-2013-5333 2013-12-13 15:00 2013-12-10 Show GitHub Exploit DB Packet Storm
217326 10 危険 マイクロソフト - 複数の Microsoft 製品のデフォルト設定における任意のコードを実行される脆弱性 CWE-20
不適切な入力確認
CVE-2013-1330 2013-12-12 18:54 2013-09-10 Show GitHub Exploit DB Packet Storm
217327 9.3 危険 マイクロソフト - 複数の Microsoft 製品の GDI+ における任意のコードを実行される脆弱性 CWE-94
コード・インジェクション
CVE-2013-3906 2013-12-12 18:08 2013-11-5 Show GitHub Exploit DB Packet Storm
217328 5 警告 シスコシステムズ - Cisco Cloud Portal における不特定のタイプのファイルを読まれる脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2013-6708 2013-12-12 17:56 2013-12-9 Show GitHub Exploit DB Packet Storm
217329 6.8 警告 IBM - IBM Forms Viewer におけるスタックベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー
CVE-2013-5447 2013-12-12 17:41 2013-12-5 Show GitHub Exploit DB Packet Storm
217330 4.3 警告 マイクロソフト - Microsoft Exchange Server の Outlook Web Access におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2013-5072 2013-12-12 17:16 2013-12-10 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:April 21, 2026, 4:10 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
279551 - arabless saphplesson SaphpLesson 3.0 does not initialize array variables, which allows remote attackers to obtain the full path via an non-array (1) hrow parameter to (a) show.php or (b) index.php; the (2) Lsnrow paramet… NVD-CWE-Other
CVE-2006-2278 2018-10-19 01:38 2006-05-10 Show GitHub Exploit DB Packet Storm
279552 - arabless saphplesson Multiple SQL injection vulnerabilities in SaphpLesson 3.0 allow remote attackers to execute arbitrary SQL commands via (1) the Find parameter in (a) search.php, and the (2) LID and (3) Rate parameter… NVD-CWE-Other
CVE-2006-2279 2018-10-19 01:38 2006-05-10 Show GitHub Exploit DB Packet Storm
279553 - openengine openengine Directory traversal vulnerability in website.php in openEngine 1.8 Beta 2 and earlier allows remote attackers to list arbitrary directories and read arbitrary files via a .. (dot dot) in the template… NVD-CWE-Other
CVE-2006-2280 2018-10-19 01:38 2006-05-10 Show GitHub Exploit DB Packet Storm
279554 - x-scripts x-poll X-Scripts X-Poll (xpoll) 2.30 allows remote attackers to execute arbitrary PHP code by using admin/images/add.php to upload a PHP file, then access it. CWE-94
Code Injection
CVE-2006-2281 2018-10-19 01:38 2006-05-10 Show GitHub Exploit DB Packet Storm
279555 - x7_group x7_chat Cross-site scripting (XSS) vulnerability in X7 Chat 2.0.2 and earlier allows remote attackers to inject arbitrary web script or HTML via a javascript URI in the URL of an avatar, possibly related to … NVD-CWE-Other
CVE-2006-2282 2018-10-19 01:38 2006-05-10 Show GitHub Exploit DB Packet Storm
279556 - spiffyjr phpraid Multiple PHP remote file inclusion vulnerabilities in SpiffyJr phpRaid 2.9.5 through 3.0.b3 allow remote attackers to execute arbitrary PHP code via a URL in the phpbb_root_path parameter in (1) auth… NVD-CWE-Other
CVE-2006-2283 2018-10-19 01:38 2006-05-10 Show GitHub Exploit DB Packet Storm
279557 - claroline
dokeos
claroline
dokeos
Multiple PHP remote file inclusion vulnerabilities in Claroline 1.7.5 allow remote attackers to execute arbitrary PHP code via a URL in the (1) clarolineRepositorySys parameter in ldap.inc.php and th… NVD-CWE-Other
CVE-2006-2284 2018-10-19 01:38 2006-05-10 Show GitHub Exploit DB Packet Storm
279558 - claroline
dokeos
claroline
dokeos
Successful exploitation requires that "register_globals" is enabled. NVD-CWE-Other
CVE-2006-2284 2018-10-19 01:38 2006-05-10 Show GitHub Exploit DB Packet Storm
279559 - oracle database_server SQL injection vulnerability in Oracle Database Server 9.2.0.7 and 10.1.0.5 allows remote attackers to execute arbitrary SQL commands via the DELETE_FROM_TABLE function in the DBMS_LOGMNR_SESSION (Log… CWE-89
SQL Injection
CVE-2006-1871 2018-10-19 01:37 2006-04-20 Show GitHub Exploit DB Packet Storm
279560 - oracle database_server Unspecified vulnerability in Oracle Database Server 9.0.1.5 and 9.2.0.7 has unknown impact and attack vectors in the Oracle Enterprise Manager Intelligent Agent component, aka Vuln# DB07. NVD-CWE-Other
CVE-2006-1872 2018-10-19 01:37 2006-04-20 Show GitHub Exploit DB Packet Storm