Vulnerability Search Top

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

Vulnerability Information Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":June 6, 2026, 4 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
217751	4.9	警告	オラクル	-	Oracle PeopleSoft Products の PeopleSoft Enterprise PeopleTools における QUERY に関する脆弱性	CWE-noinfo 情報不足	CVE-2014-6460	2014-10-16 16:36	2014-10-14	Show	GitHub Exploit DB Packet Storm

217752	9.3	危険	オラクル	-	Oracle Java SE および JavaFX における JavaFX に関する脆弱性	CWE-noinfo 情報不足	CVE-2014-6485	2014-10-16 16:28	2014-10-14	Show	GitHub Exploit DB Packet Storm

217753	5.5	警告	オラクル	-	Oracle Fusion Middleware の Oracle Access Manager における Admin Console に関する脆弱性	CWE-noinfo 情報不足	CVE-2014-6554	2014-10-16 15:41	2014-10-14	Show	GitHub Exploit DB Packet Storm

217754	6.4	警告	オラクル	-	Oracle Fusion Middleware の Oracle Access Manager における Admin Console に関する脆弱性	CWE-noinfo 情報不足	CVE-2014-6553	2014-10-16 15:41	2014-10-14	Show	GitHub Exploit DB Packet Storm

217755	4.3	警告	オラクル	-	Oracle Fusion Middleware の Oracle Access Manager における Admin Console に関する脆弱性	CWE-noinfo 情報不足	CVE-2014-6552	2014-10-16 15:40	2014-10-14	Show	GitHub Exploit DB Packet Storm

217756	4	警告	オラクル	-	Oracle Fusion Middleware の Oracle WebLogic Server における WLS Console に関する脆弱性	CWE-noinfo 情報不足	CVE-2014-6534	2014-10-16 15:39	2014-10-14	Show	GitHub Exploit DB Packet Storm

217757	4.3	警告	オラクル	-	Oracle Fusion Middleware の Oracle JDeveloper における ADF Faces に関する脆弱性	CWE-noinfo 情報不足	CVE-2014-6522	2014-10-16 15:39	2014-10-14	Show	GitHub Exploit DB Packet Storm

217758	6.8	警告	オラクル	-	Oracle Fusion Middleware の Oracle WebLogic Server における WebLogic Tuxedo Connector に関する脆弱性	CWE-noinfo 情報不足	CVE-2014-6499	2014-10-16 15:39	2014-10-14	Show	GitHub Exploit DB Packet Storm

217759	3.5	注意	オラクル	-	Oracle Fusion Middleware の Oracle Identity Manager における End User Self Service に関する脆弱性	CWE-noinfo 情報不足	CVE-2014-6487	2014-10-16 15:37	2014-10-14	Show	GitHub Exploit DB Packet Storm

217760	4.3	警告	オラクル	-	Oracle Fusion Middleware の Oracle Access Manager における Admin Console に関する脆弱性	CWE-noinfo 情報不足	CVE-2014-6462	2014-10-16 15:37	2014-10-14	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:June 6, 2026, 4:18 a.m.

No	CVSS	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
346001	-	usermin webmin	usermin webmin	Webmin before 1.296 and Usermin before 1.226 do not properly handle a URL with a null ("%00") character, which allows remote attackers to conduct cross-site scripting (XSS), read CGI program source c…	CWE-79 Cross-site Scripting	CVE-2006-4542	2017-07-20 10:33	2006-09-6	Show	GitHub Exploit DB Packet Storm

346002	-	usermin webmin	usermin webmin	This vulnerability is addressed in the following product releases: Webmin, Webmin, 1.296 Usermin, Usermin, 1.226	CWE-79 Cross-site Scripting	CVE-2006-4542	2017-07-20 10:33	2006-09-6	Show	GitHub Exploit DB Packet Storm

346003	-	retro64	cr64loader_activex_control	Buffer overflow in the Retro64 / Miniclip CR64Loader ActiveX control allows remote attackers to execute arbitrary code via unspecified vectors involving an HTML document that references the CLSID of …	NVD-CWE-Other	CVE-2006-4555	2017-07-20 10:33	2006-09-6	Show	GitHub Exploit DB Packet Storm

346004	-	phpnuke	myheadlines	Cross-site scripting (XSS) vulnerability in the MyHeadlines before 4.3.2 module for PHP-Nuke allows remote attackers to inject arbitrary web script or HTML via the myh_op parameter to modules.php.	NVD-CWE-Other	CVE-2006-4563	2017-07-20 10:33	2006-09-6	Show	GitHub Exploit DB Packet Storm

346005	-	simplemachines	smf	SQL injection vulnerability in Sources/ManageBoards.php in Simple Machines Forum 1.1 RC3 allows remote attackers to execute arbitrary SQL commands via the cur_cat parameter.	CWE-89 SQL Injection	CVE-2006-4564	2017-07-20 10:33	2006-09-6	Show	GitHub Exploit DB Packet Storm

346006	-	simplemachines	smf	Successful exploitation requires privileges to add a new board.	CWE-89 SQL Injection	CVE-2006-4564	2017-07-20 10:33	2006-09-6	Show	GitHub Exploit DB Packet Storm

346007	-	jetstat.com	js_asp_faq_manager	SQL injection vulnerability in admin/default.asp in Jetstat.com JS ASP Faq Manager 1.10 and earlier allows remote attackers to execute arbitrary SQL commands via the uid parameter, a different vector…	NVD-CWE-Other	CVE-2006-4590	2017-07-20 10:33	2006-09-7	Show	GitHub Exploit DB Packet Storm

346008	-	mailenable	mailenable_enterprise mailenable_professional mailenable_standard	SMTP service in MailEnable Standard, Professional, and Enterprise before ME-10014 (20060904) allows remote attackers to cause a denial of service via an SPF lookup for a domain with a large number of…	NVD-CWE-Other	CVE-2006-4616	2017-07-20 10:33	2006-09-7	Show	GitHub Exploit DB Packet Storm

346009	-	vcd-db	vcd-db	Cross-site scripting (XSS) vulnerability in VCD-db before 0.983 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors when handling comments.	NVD-CWE-Other	CVE-2006-4628	2017-07-20 10:33	2006-09-9	Show	GitHub Exploit DB Packet Storm

346010	-	squiz	mysource_classic	Unspecified vulnerability in MySource Classic 2.14.6, and possibly earlier, allows remote authenticated users, with superuser privileges, to inject arbitrary PHP code via unspecified vectors related …	NVD-CWE-Other	CVE-2006-4635	2017-07-20 10:33	2006-09-9	Show	GitHub Exploit DB Packet Storm