Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 6, 2026, 10 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
217721 4.3 警告 brown bear software - Calcium におけるクロスサイトスクリプティングの脆弱性 - CVE-2006-0889 2014-03-11 17:43 2006-02-25 Show GitHub Exploit DB Packet Storm
217722 5 警告 south river technologies - South River WebDrive の特定のバージョンにおけるバッファオーバーフローの脆弱性 - CVE-2006-0867 2014-03-11 17:43 2006-02-23 Show GitHub Exploit DB Packet Storm
217723 4.3 警告 e107.org - e107 の Chatbox Plugin におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2006-0857 2014-03-11 17:43 2006-02-23 Show GitHub Exploit DB Packet Storm
217724 6.5 警告 truenorth software - TrueNorth Internet Anywhere eMailserver の IMAP サービスにおけるバッファオーバーフローの脆弱性 - CVE-2006-0853 2014-03-11 17:43 2006-02-23 Show GitHub Exploit DB Packet Storm
217725 4.3 警告 calacode - Calacode @Mail におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2006-0842 2014-03-11 17:43 2006-02-22 Show GitHub Exploit DB Packet Storm
217726 10 危険 京セラ株式会社 - Kyocera プリンタにおける管理メニューにアクセスされる脆弱性 - CVE-2006-0789 2014-03-11 17:43 2006-02-19 Show GitHub Exploit DB Packet Storm
217727 2.6 注意 mybulletinboard - MyBulletinBoard の calendar.php におけるクロスサイトスクリプティングの脆弱性 - CVE-2006-0770 2014-03-11 17:43 2006-02-18 Show GitHub Exploit DB Packet Storm
217728 5 警告 CGIWrap - CGIWrap における重要な情報を取得される脆弱性 - CVE-2006-0767 2014-03-11 17:43 2006-02-18 Show GitHub Exploit DB Packet Storm
217729 5.1 警告 BlackBerry - 複数ベンダの製品用 Motion BlackBerry Enterprise Server におけるバッファオーバーフローの脆弱性 - CVE-2006-0761 2014-03-11 17:43 2006-02-18 Show GitHub Exploit DB Packet Storm
217730 4.3 警告 fuzzymonkey
m blom		 - My Blog などの製品で使用される M. Blom HTML::BBCode におけるクロスサイトスクリプティングの脆弱性 - CVE-2006-0735 2014-03-11 17:43 2006-02-16 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 6, 2026, 4:08 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
294331 - mibew mibew_messenger Multiple cross-site request forgery (CSRF) vulnerabilities in Mibew Messenger 1.6.4 and earlier allow remote attackers to hijack the authentication of operators for requests that insert cross-site sc… CWE-352
 Origin Validation Error 		CVE-2012-0829 2024-11-21 10:35 2012-02-14 Show GitHub Exploit DB Packet Storm
294332 - phpldapadmin_project phpldapadmin Cross-site scripting (XSS) vulnerability in lib/QueryRender.php in phpLDAPadmin 1.2.2 and earlier allows remote attackers to inject arbitrary web script or HTML via the base parameter in a query_engi… CWE-79
Cross-site Scripting 		CVE-2012-0834 2024-11-21 10:35 2012-02-11 Show GitHub Exploit DB Packet Storm
294333 - mozilla firefox
thunderbird
seamonkey 		Use-after-free vulnerability in Mozilla Firefox 10.x before 10.0.1, Thunderbird 10.x before 10.0.1, and SeaMonkey 2.7 allows remote attackers to cause a denial of service (application crash) or possi… CWE-399
 Resource Management Errors 		CVE-2012-0452 2024-11-21 10:35 2012-02-11 Show GitHub Exploit DB Packet Storm
294334 - php php PHP before 5.3.10 does not properly perform a temporary change to the magic_quotes_gpc directive during the importing of environment variables, which makes it easier for remote attackers to conduct S… CWE-20
 Improper Input Validation  		CVE-2012-0831 2024-11-21 10:35 2012-02-11 Show GitHub Exploit DB Packet Storm
294335 - apache portable_runtime tables/apr_hash.c in the Apache Portable Runtime (APR) library through 1.4.5 computes hash values without restricting the ability to trigger hash collisions predictably, which allows context-dependen… CWE-20
 Improper Input Validation  		CVE-2012-0840 2024-11-21 10:35 2012-02-11 Show GitHub Exploit DB Packet Storm
294336 - inria ocaml OCaml 3.12.1 and earlier computes hash values without restricting the ability to trigger hash collisions predictably, which allows context-dependent attackers to cause a denial of service (CPU consum… CWE-20
 Improper Input Validation  		CVE-2012-0839 2024-11-21 10:35 2012-02-9 Show GitHub Exploit DB Packet Storm
294337 - realnetworks realplayer
realplayer_sp 		The ATRAC codec in RealNetworks RealPlayer 11.x and 14.x through 14.0.7, RealPlayer SP 1.0 through 1.1.5, and Mac RealPlayer 12.x before 12.0.0.1703 does not properly decode samples, which allows rem… CWE-94
Code Injection 		CVE-2012-0928 2024-11-21 10:35 2012-02-9 Show GitHub Exploit DB Packet Storm
294338 - realnetworks realplayer
realplayer_sp 		Unspecified vulnerability in RealNetworks RealPlayer 11.x, 14.x, and 15.x before 15.02.71, and RealPlayer SP 1.0 through 1.1.5, allows remote attackers to execute arbitrary code via vectors involving… CWE-94
NVD-CWE-noinfo
Code Injection 		CVE-2012-0927 2024-11-21 10:35 2012-02-9 Show GitHub Exploit DB Packet Storm
294339 - realnetworks realplayer
realplayer_sp 		The RV10 codec in RealNetworks RealPlayer 11.x, 14.x, and 15.x before 15.02.71, and RealPlayer SP 1.0 through 1.1.5, does not properly handle height and width values, which allows remote attackers to… CWE-94
Code Injection 		CVE-2012-0926 2024-11-21 10:35 2012-02-9 Show GitHub Exploit DB Packet Storm
294340 - realnetworks realplayer
realplayer_sp 		Unspecified vulnerability in the RV40 codec in RealNetworks RealPlayer 11.x, 14.x, and 15.x before 15.02.71, and RealPlayer SP 1.0 through 1.1.5, allows remote attackers to execute arbitrary code via… CWE-94
NVD-CWE-noinfo
Code Injection 		CVE-2012-0925 2024-11-21 10:35 2012-02-9 Show GitHub Exploit DB Packet Storm