Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Feb. 9, 2026, 12:59 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
217651 9.3 危険 マイクロソフト - Microsoft Office 製品におけるスタックベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2013-1324 2013-11-22 10:14 2013-11-12 Show GitHub Exploit DB Packet Storm
217652 9.3 危険 マイクロソフト - Microsoft Office 2003 および 2007 におけるヒープベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2013-1325 2013-11-22 10:13 2013-11-12 Show GitHub Exploit DB Packet Storm
217653 5 警告 マイクロソフト - 複数の Microsoft Windows 製品におけるサービス運用妨害 (DoS) の脆弱性 CWE-20
不適切な入力確認 		CVE-2013-3869 2013-11-22 10:12 2013-11-12 Show GitHub Exploit DB Packet Storm
217654 4.9 警告 マイクロソフト - 複数の Microsoft Windows 製品のカーネルモードドライバの afd.sys 内の Ancillary Function ドライバにおける重要な情報を取得される脆弱性 CWE-200
情報漏えい 		CVE-2013-3887 2013-11-22 10:12 2013-11-12 Show GitHub Exploit DB Packet Storm
217655 7.9 危険 マイクロソフト - Microsoft Windows 8 および Windows Server 2012 における全てのゲスト OS インスタンスの任意のコードを実行される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2013-3898 2013-11-22 10:11 2013-11-12 Show GitHub Exploit DB Packet Storm
217656 5 警告 マイクロソフト - 複数の Microsoft Outlook 製品における重要なネットワーク設定および状態情報を取得される脆弱性 CWE-200
情報漏えい 		CVE-2013-3905 2013-11-22 10:10 2013-11-12 Show GitHub Exploit DB Packet Storm
217657 4.3 警告 マイクロソフト - Microsoft Internet Explorer 6 から 10 における同一生成元ポリシーを回避される脆弱性 CWE-200
情報漏えい 		CVE-2013-3908 2013-11-22 10:09 2013-11-12 Show GitHub Exploit DB Packet Storm
217658 4.3 警告 マイクロソフト - Microsoft Internet Explorer 6 から 8 におけるコンテンツを読まれる脆弱性 CWE-200
情報漏えい 		CVE-2013-3909 2013-11-22 10:08 2013-11-12 Show GitHub Exploit DB Packet Storm
217659 9.3 危険 マイクロソフト - Microsoft Internet Explorer 6 から 9 における任意のコードを実行される脆弱性 CWE-119
バッファエラー 		CVE-2013-3910 2013-11-22 10:08 2013-11-12 Show GitHub Exploit DB Packet Storm
217660 9.3 危険 マイクロソフト - Microsoft Internet Explorer 9 および 10 における任意のコードを実行される脆弱性 CWE-119
バッファエラー 		CVE-2013-3911 2013-11-22 10:07 2013-11-12 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:April 25, 2026, 4:08 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
279371 - hummingbird enterprise_collaboration Hummingbird Collaboration (aka Hummingbird Enterprise Collaboration) 5.21 and earlier allows remote attackers to misrepresent the type and name of a file via modified doc_ext and id parameters, which… NVD-CWE-Other
CVE-2006-0173 2018-10-20 00:43 2006-01-12 Show GitHub Exploit DB Packet Storm
279372 - hummingbird collaboration
enterprise_collaboration 		Hummingbird Collaboration (aka Hummingbird Enterprise Collaboration) 5.21 and earlier allows remote attackers to obtain sensitive information (intranet IP addresses and enumerations of valid paramete… NVD-CWE-Other
CVE-2006-0174 2018-10-20 00:43 2006-01-12 Show GitHub Exploit DB Packet Storm
279373 - webwiz web_wiz_forums Cross-site scripting (XSS) vulnerability in search_form.asp in Web Wiz Forums 6.34 allows remote attackers to inject arbitrary web script or HTML via the search parameter. CWE-79
Cross-site Scripting 		CVE-2006-0175 2018-10-20 00:43 2006-01-12 Show GitHub Exploit DB Packet Storm
279374 - xmame xmame Buffer overflow in certain functions in src/fileio.c and src/unix/fileio.c in xmame before 11 January 2006 may allow local users to gain privileges via a long (1) -lang, (2) -ctrlr, (3) -pb, or (4) -… NVD-CWE-Other
CVE-2006-0176 2018-10-20 00:43 2006-01-12 Show GitHub Exploit DB Packet Storm
279375 - calogic calogic_calendars Cross-site scripting (XSS) vulnerability in CaLogic Calendars 1.2.2 allows remote attackers to inject arbitrary web script or HTML via the Title field on the "Adding New Event" page, and possibly oth… NVD-CWE-Other
CVE-2006-0180 2018-10-20 00:43 2006-01-12 Show GitHub Exploit DB Packet Storm
279376 - acal calendar_project login.php in ACal Calendar Project 2.2.5 allows remote attackers to bypass authentication by setting the ACalAuthenticate cookie variable to "inside". NVD-CWE-Other
CVE-2006-0182 2018-10-20 00:43 2006-01-12 Show GitHub Exploit DB Packet Storm
279377 - acal calendar_project Direct static code injection vulnerability in edit.php in ACal Calendar Project 2.2.5 allows authenticated users to execute arbitrary PHP code via (1) the edit=header value, which modifies header.php… NVD-CWE-Other
CVE-2006-0183 2018-10-20 00:43 2006-01-12 Show GitHub Exploit DB Packet Storm
279378 - microsoft visual_studio_.net By design, Microsoft Visual Studio 2005 automatically executes code in the Load event of a user-defined control (UserControl1_Load function), which allows user-assisted attackers to execute arbitrary… NVD-CWE-Other
CVE-2006-0187 2018-10-20 00:43 2006-01-12 Show GitHub Exploit DB Packet Storm
279379 - estara softphone Buffer overflow in eStara Softphone 3.0.1.14 through 3.0.1.46 allows remote attackers to execute arbitrary code via a long attribute (aka "a") field in the SDP data of a SIP packet on UDP port 5060. NVD-CWE-Other
CVE-2006-0189 2018-10-20 00:43 2006-01-13 Show GitHub Exploit DB Packet Storm
279380 - estara softphone This is the vendor provided solution: "eStara has released Softphone version 3.0.1.47 to resolve the buffer overflow demonstrated in parsing SDP with long "a=" lines. Licensed customers can downl… NVD-CWE-Other
CVE-2006-0189 2018-10-20 00:43 2006-01-13 Show GitHub Exploit DB Packet Storm