Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Feb. 9, 2026, 12:59 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
217521 9.3 危険 アップル - Apple QuickTime における任意のコードを実行される脆弱性 CWE-94
コード・インジェクション
CVE-2012-0671 2013-12-2 18:28 2012-05-16 Show GitHub Exploit DB Packet Storm
217522 9.3 危険 アップル - Apple QuickTime における整数オーバーフローの脆弱性 CWE-189
数値処理の問題
CVE-2012-0670 2013-12-2 18:12 2012-05-16 Show GitHub Exploit DB Packet Storm
217523 5.8 警告 The PHP Group
アップル
- PHP のファイルアップロードの実装におけるサービス運用妨害 (DoS) の脆弱性 CWE-20
不適切な入力確認
CVE-2012-1172 2013-12-2 17:58 2012-03-1 Show GitHub Exploit DB Packet Storm
217524 9.3 危険 FFmpeg - FFmpeg の libavcodec/h264.c の field_end 関数における脆弱性 CWE-119
バッファエラー
CVE-2013-0869 2013-12-2 17:41 2013-02-6 Show GitHub Exploit DB Packet Storm
217525 9.3 危険 アップル - Apple QuickTime におけるバッファオーバーフローの脆弱性 CWE-119
バッファエラー
CVE-2012-0668 2013-12-2 17:37 2012-05-16 Show GitHub Exploit DB Packet Storm
217526 6.8 警告 The PHP Group
アップル
- PHP における SQL インジェクション攻撃を行われる脆弱性 CWE-20
不適切な入力確認
CVE-2012-0831 2013-12-2 16:47 2012-02-10 Show GitHub Exploit DB Packet Storm
217527 5 警告 シスコシステムズ - Cisco IOS XR の SNMP モジュールにおけるサービス運用妨害 (DoS) の脆弱性 CWE-20
不適切な入力確認
CVE-2013-6700 2013-12-2 16:26 2013-11-27 Show GitHub Exploit DB Packet Storm
217528 7.5 危険 ヒューレット・パッカード - HP Service Manager および ServiceCenter における任意のコードを実行される脆弱性 CWE-noinfo
情報不足
CVE-2013-4844 2013-12-2 16:08 2013-11-26 Show GitHub Exploit DB Packet Storm
217529 3.5 注意 IBM - IBM Sterling Selling and Fulfillment Suite の Sterling Order Management におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2013-6322 2013-12-2 16:06 2013-11-22 Show GitHub Exploit DB Packet Storm
217530 7.5 危険 CiviCRM - CiviCRM の CRM/Core/Page/AJAX/Location.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2013-5957 2013-12-2 16:04 2012-10-2 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:April 21, 2026, 4:10 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
279811 - vscripts vnews Multiple cross-site scripting (XSS) vulnerabilities in news.php in vscripts (aka Kuba Kunkiewicz) VNews 1.2 allow remote attackers to inject arbitrary web script or HTML via the (1) autorkomentarza a… NVD-CWE-Other
CVE-2006-1544 2018-10-19 01:33 2006-03-30 Show GitHub Exploit DB Packet Storm
279812 - vscripts vnews Direct static code injection vulnerability in admin/config.php in vscripts (aka Kuba Kunkiewicz) VNews 1.2 allows remote authenticated administrators to execute code by inserting the code into variab… NVD-CWE-Other
CVE-2006-1545 2018-10-19 01:33 2006-03-30 Show GitHub Exploit DB Packet Storm
279813 - php php PHP 4.4.2 and 5.1.2 allows local users to cause a crash (segmentation fault) by defining and executing a recursive function. NOTE: it has been reported by a reliable third party that some later vers… CWE-399
 Resource Management Errors
CVE-2006-1549 2018-10-19 01:33 2006-04-11 Show GitHub Exploit DB Packet Storm
279814 - php php Upgrade to PHP 5.1.3-RC3 CWE-399
 Resource Management Errors
CVE-2006-1549 2018-10-19 01:33 2006-04-11 Show GitHub Exploit DB Packet Storm
279815 - dia dia Multiple buffer overflows in the xfig import code (xfig-import.c) in Dia 0.87 and later before 0.95-pre6 allow user-assisted attackers to have an unknown impact via a crafted xfig file, possibly invo… CWE-119
Incorrect Access of Indexable Resource ('Range Error') 
CVE-2006-1550 2018-10-19 01:33 2006-03-31 Show GitHub Exploit DB Packet Storm
279816 - georges_auberger pajax Eval injection vulnerability in pajax_call_dispatcher.php in PAJAX 0.5.1 and earlier allows remote attackers to execute arbitrary code via the (1) $method and (2) $args parameters. NVD-CWE-Other
CVE-2006-1551 2018-10-19 01:33 2006-04-14 Show GitHub Exploit DB Packet Storm
279817 - tachyon vsns_lemon SQL injection vulnerability in functions/final_functions.php in VSNS Lemon 3.2.0, with magic_quotes_gpc disabled, allows remote attackers to execute arbitrary SQL commands via the id parameter. NVD-CWE-Other
CVE-2006-1553 2018-10-19 01:33 2006-03-31 Show GitHub Exploit DB Packet Storm
279818 - tachyon vsns_lemon Successful exploitation requires that the "magic_quotes_gpc" parameter is disabled. NVD-CWE-Other
CVE-2006-1553 2018-10-19 01:33 2006-03-31 Show GitHub Exploit DB Packet Storm
279819 - tachyon vsns_lemon Cross-site scripting (XSS) vulnerability in VSNS Lemon 3.2.0 allows remote attackers to inject arbitrary web script or HTML via the name parameter while adding a comment. NVD-CWE-Other
CVE-2006-1554 2018-10-19 01:33 2006-03-31 Show GitHub Exploit DB Packet Storm
279820 - tachyon vsns_lemon Successful exploitation requires that the "magic_quotes_gpc" parameter is disabled. NVD-CWE-Other
CVE-2006-1554 2018-10-19 01:33 2006-03-31 Show GitHub Exploit DB Packet Storm