Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Feb. 9, 2026, 12:59 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
217321 4.3 警告 Novell - SUSE Lifecycle Management Server における暗号保護メカニズムを破られる脆弱性 CWE-310
暗号の問題 		CVE-2013-3710 2013-12-16 15:09 2013-12-3 Show GitHub Exploit DB Packet Storm
217322 6.8 警告 DELL EMC (旧 EMC Corporation) - EMC RSA Security Analytics および RSA NetWitness NextGen におけるアクセス制限を回避される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2013-6180 2013-12-16 14:57 2013-12-4 Show GitHub Exploit DB Packet Storm
217323 7.5 危険 Tianjin ENORTH NETNEWS - Enorth Webpublisher CMS の m_worklog/log_searchday.jsp における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2013-6985 2013-12-16 14:40 2013-12-6 Show GitHub Exploit DB Packet Storm
217324 10 危険 アドビシステムズ - Adobe Shockwave Player における任意のコードを実行される脆弱性 CWE-119
バッファエラー 		CVE-2013-5334 2013-12-13 15:01 2013-12-10 Show GitHub Exploit DB Packet Storm
217325 10 危険 アドビシステムズ - Adobe Shockwave Player における任意のコードを実行される脆弱性 CWE-119
バッファエラー 		CVE-2013-5333 2013-12-13 15:00 2013-12-10 Show GitHub Exploit DB Packet Storm
217326 10 危険 マイクロソフト - 複数の Microsoft 製品のデフォルト設定における任意のコードを実行される脆弱性 CWE-20
不適切な入力確認 		CVE-2013-1330 2013-12-12 18:54 2013-09-10 Show GitHub Exploit DB Packet Storm
217327 9.3 危険 マイクロソフト - 複数の Microsoft 製品の GDI+ における任意のコードを実行される脆弱性 CWE-94
コード・インジェクション 		CVE-2013-3906 2013-12-12 18:08 2013-11-5 Show GitHub Exploit DB Packet Storm
217328 5 警告 シスコシステムズ - Cisco Cloud Portal における不特定のタイプのファイルを読まれる脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2013-6708 2013-12-12 17:56 2013-12-9 Show GitHub Exploit DB Packet Storm
217329 6.8 警告 IBM - IBM Forms Viewer におけるスタックベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2013-5447 2013-12-12 17:41 2013-12-5 Show GitHub Exploit DB Packet Storm
217330 4.3 警告 マイクロソフト - Microsoft Exchange Server の Outlook Web Access におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2013-5072 2013-12-12 17:16 2013-12-10 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:April 24, 2026, 4 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
280651 - michaelis_freunde contentnow SQL injection vulnerability in index.php in ContentNow 1.39 and earlier allows remote attackers to execute arbitrary SQL commands via the pageid parameter. NOTE: this issue can be leveraged for path… CWE-89
SQL Injection 		CVE-2006-6157 2018-10-18 06:46 2006-11-29 Show GitHub Exploit DB Packet Storm
280652 - ace_helpdesk
inverseflow
pmos_helpdesk 		ace_helpdesk
help_desk
pmos_helpdesk 		Multiple cross-site scripting (XSS) vulnerabilities in (a) PMOS Help Desk 2.4, formerly (b) InverseFlow Help Desk 2.31 and also sold as (c) Ace Helpdesk 2.31, allow remote attackers to inject arbitra… NVD-CWE-Other
CVE-2006-6158 2018-10-18 06:46 2006-11-29 Show GitHub Exploit DB Packet Storm
280653 - iodine iodine Stack-based buffer overflow in the handshake function in iodine 0.3.2 allows remote attackers to execute arbitrary code via a crafted DNS response. NVD-CWE-Other
CVE-2006-5781 2018-10-18 06:45 2006-11-8 Show GitHub Exploit DB Packet Storm
280654 - hp openview_client_configuraton_manager radexecd.exe in HP OpenView Client Configuraton Manager (CCM) does not require authentication before executing commands in the installation directory, which allows remote attackers to cause a denial … NVD-CWE-Other
CVE-2006-5782 2018-10-18 06:45 2006-11-9 Show GitHub Exploit DB Packet Storm
280655 - sap sap_web_application_server Unspecified vulnerability in enserver.exe in SAP Web Application Server 6.40 before patch 136 and 7.00 before patch 66 allows remote attackers to read arbitrary files via crafted data on a "3200+SYSN… NVD-CWE-noinfo
CVE-2006-5784 2018-10-18 06:45 2006-11-8 Show GitHub Exploit DB Packet Storm
280656 - sap sap_web_application_server Unspecified vulnerability in SAP Web Application Server 6.40 before patch 136 and 7.00 before patch 66 allows remote attackers to cause a denial of service (enserver.exe crash) via a 0x72F2 sequence … NVD-CWE-noinfo
CVE-2006-5785 2018-10-18 06:45 2006-11-8 Show GitHub Exploit DB Packet Storm
280657 - iprimal iprimal_forums PHP remote file inclusion vulnerability in (1) index.php and (2) admin/index.php in IPrimal Forums as of 20061105 allows remote attackers to execute arbitrary PHP code via a URL in the p parameter. CWE-94
Code Injection 		CVE-2006-5788 2018-10-18 06:45 2006-11-8 Show GitHub Exploit DB Packet Storm
280658 - jgaa warftpd War FTP Daemon (WarFTPd) 1.82.00-RC11 allows remote authenticated users to cause a denial of service via a large number of "%s" format strings in (1) CWD, (2) CDUP, (3) DELE, (4) NLST, (5) LIST, (6) … CWE-399
 Resource Management Errors 		CVE-2006-5789 2018-10-18 06:45 2006-11-8 Show GitHub Exploit DB Packet Storm
280659 - greg_roelofs libpng The sPLT chunk handling code (png_set_sPLT function in pngset.c) in libpng 1.0.6 through 1.2.12 uses a sizeof operator on the wrong data type, which allows context-dependent attackers to cause a deni… CWE-20
 Improper Input Validation  		CVE-2006-5793 2018-10-18 06:45 2006-11-18 Show GitHub Exploit DB Packet Storm
280660 - openbsd openssh Unspecified vulnerability in the sshd Privilege Separation Monitor in OpenSSH before 4.5 causes weaker verification that authentication has been successful, which might allow attackers to bypass auth… NVD-CWE-Other
CVE-2006-5794 2018-10-18 06:45 2006-11-9 Show GitHub Exploit DB Packet Storm