Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 4, 2026, noon

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
217691 5 警告 sherzod ruzmetov - CGI::Session における任意のファイルを上書きされる脆弱性 - CVE-2006-1279 2014-03-11 17:43 2006-03-19 Show GitHub Exploit DB Packet Storm
217692 7.2 危険 Avira - AntiVir PersonalEdition における権限を取得される脆弱性 - CVE-2006-1274 2014-03-11 17:43 2006-03-19 Show GitHub Exploit DB Packet Storm
217693 6.2 警告 rahul dhesi - zoo におけるバッファオーバーフローの脆弱性 - CVE-2006-1269 2014-03-11 17:43 2006-03-19 Show GitHub Exploit DB Packet Storm
217694 4.6 警告 Firebird Project - Firebird におけるバッファオーバーフローの脆弱性 - CVE-2006-1240 2014-03-11 17:43 2006-03-15 Show GitHub Exploit DB Packet Storm
217695 7.5 危険 crossfire - CrossFire におけるバッファオーバーフローの脆弱性 - CVE-2006-1236 2014-03-11 17:43 2006-03-15 Show GitHub Exploit DB Packet Storm
217696 1.2 注意 julian pawlowski - CAPI4HylaFAX における任意のファイルを変更される脆弱性 - CVE-2006-1231 2014-03-11 17:43 2006-03-14 Show GitHub Exploit DB Packet Storm
217697 5 警告 Drupal - Drupal における CRLF インジェクションの脆弱性 - CVE-2006-1225 2014-03-11 17:43 2006-03-14 Show GitHub Exploit DB Packet Storm
217698 4.3 警告 runcms - Runcms におけるクロスサイトスクリプティングの脆弱性 - CVE-2006-1216 2014-03-11 17:43 2006-03-14 Show GitHub Exploit DB Packet Storm
217699 3.7 注意 comvigo - Comvigo IM Lock における製品のブロック機能を回避される脆弱性 - CVE-2006-1198 2014-03-11 17:43 2006-03-14 Show GitHub Exploit DB Packet Storm
217700 7.5 危険 ebay - eBay Enhanced Picture Services におけるバッファオーバーフローの脆弱性 - CVE-2006-1176 2014-03-11 17:43 2006-07-8 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 4, 2026, 4:06 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
293561 - mathopd mathopd Directory traversal vulnerability in Mathopd 1.4.x and 1.5.x before 1.5p7, when configured with the * construct for mass virtual hosting, allows remote attackers to read arbitrary files via a crafted… CWE-22
Path Traversal 		CVE-2012-1050 2024-11-21 10:36 2012-02-14 Show GitHub Exploit DB Packet Storm
293562 - manageengine admanager_plus Multiple cross-site scripting (XSS) vulnerabilities in ManageEngine ADManager Plus 5.2 Build 5210 allow remote attackers to inject arbitrary web script or HTML via the (1) domainName parameter to jsp… CWE-79
Cross-site Scripting 		CVE-2012-1049 2024-11-21 10:36 2012-02-14 Show GitHub Exploit DB Packet Storm
293563 - efrontlearning efront_community_\+\+ Cross-site scripting (XSS) vulnerability in communityplusplus/www/administrator.php in eFront Community++ edition 3.6.10, and possibly other editions, allows remote attackers to inject arbitrary web … CWE-79
Cross-site Scripting 		CVE-2012-1048 2024-11-21 10:36 2012-02-13 Show GitHub Exploit DB Packet Storm
293564 - cyberoam cyberoam_central_console Directory traversal vulnerability in the WWWHELP Service (js/html/wwhelp.htm) in Cyberoam Central Console (CCC) 2.00.2 allows remote attackers to include and execute arbitrary local files via a .. (d… CWE-22
Path Traversal 		CVE-2012-1047 2024-11-21 10:36 2012-02-13 Show GitHub Exploit DB Packet Storm
293565 - ibm cognos_tm1 Cross-site scripting (XSS) vulnerability in TM1 Web in IBM Cognos TM1 9.5.2 FP1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, a different vulnerability than … CWE-79
Cross-site Scripting 		CVE-2012-1046 2024-11-21 10:36 2012-02-11 Show GitHub Exploit DB Packet Storm
293566 - adacore ada_web_services AdaCore Ada Web Services (AWS) before 2.10.2 computes hash values for form parameters without restricting the ability to trigger hash collisions predictably, which allows remote attackers to cause a … CWE-20
 Improper Input Validation  		CVE-2012-1035 2024-11-21 10:36 2012-02-9 Show GitHub Exploit DB Packet Storm
293567 - isc bind The resolver in ISC BIND 9 through 9.8.1-P1 overwrites cached server names and TTL values in NS records during the processing of a response to an A record query, which allows remote attackers to trig… NVD-CWE-Other
CVE-2012-1033 2024-11-21 10:36 2012-02-9 Show GitHub Exploit DB Packet Storm
293568 - episerver episerver_cms Multiple cross-site scripting (XSS) vulnerabilities in the admin interface in EPiServer CMS through 6R2 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors. CWE-79
Cross-site Scripting 		CVE-2012-1034 2024-11-21 10:36 2012-02-8 Show GitHub Exploit DB Packet Storm
293569 - episerver episerver_cms Unspecified vulnerability in EPiServer CMS 5 and 6 through 6R2, in certain configurations using Forms Authentication, allows remote authenticated users to obtain WebAdmins access by leveraging Edit M… NVD-CWE-noinfo
CVE-2012-1031 2024-11-21 10:36 2012-02-8 Show GitHub Exploit DB Packet Storm
293570 - officesip officesip_server OfficeSIP Server 3.1 allows remote attackers to cause a denial of service (daemon crash) via a crafted To header in a SIP INVITE message. CWE-20
 Improper Input Validation  		CVE-2012-1008 2024-11-21 10:36 2012-02-8 Show GitHub Exploit DB Packet Storm