Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Feb. 9, 2026, 12:59 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
217831 6 警告 SaltStack - Salt における制限されたルーチンを実行される脆弱性 CWE-287
不適切な認証 		CVE-2013-4435 2013-11-12 11:21 2013-10-18 Show GitHub Exploit DB Packet Storm
217832 4 警告 オラクル - Oracle MySQL における Data Manipulation Language の処理に関する脆弱性 CWE-noinfo
情報不足 		CVE-2013-1544 2013-11-12 10:10 2013-04-16 Show GitHub Exploit DB Packet Storm
217833 4 警告 オラクル - Oracle MySQL における Information Schema の処理に関する脆弱性 CWE-noinfo
情報不足 		CVE-2013-1532 2013-11-12 10:09 2013-04-16 Show GitHub Exploit DB Packet Storm
217834 6 警告 オラクル - Oracle MySQL における Server Privileges の処理に関する脆弱性 CWE-noinfo
情報不足 		CVE-2013-1531 2013-11-12 10:07 2013-04-16 Show GitHub Exploit DB Packet Storm
217835 4 警告 オラクル - Oracle MySQL における Server Replication の処理に関する脆弱性 CWE-noinfo
情報不足 		CVE-2013-1526 2013-11-12 10:05 2013-04-16 Show GitHub Exploit DB Packet Storm
217836 4.6 警告 MySQL AB
オラクル		 - Oracle MySQL における Server Optimizer の処理に関する脆弱性 CWE-noinfo
情報不足 		CVE-2013-1523 2013-11-12 10:04 2013-04-16 Show GitHub Exploit DB Packet Storm
217837 6.5 警告 MySQL AB
オラクル		 - Oracle MySQL における Server Locking の処理に関する脆弱性 CWE-noinfo
情報不足 		CVE-2013-1521 2013-11-12 10:03 2013-04-16 Show GitHub Exploit DB Packet Storm
217838 4 警告 MySQL AB
オラクル		 - Oracle MySQL における Data Manipulation Language の処理に関する脆弱性 CWE-noinfo
情報不足 		CVE-2013-1512 2013-11-12 10:01 2013-04-16 Show GitHub Exploit DB Packet Storm
217839 2.8 注意 MySQL AB
オラクル		 - Oracle MySQL における Server Locking の処理に関する脆弱性 CWE-noinfo
情報不足 		CVE-2013-1506 2013-11-12 09:59 2013-04-16 Show GitHub Exploit DB Packet Storm
217840 5 警告 Django Software Foundation - Django の認証フレームワークにおけるサービス運用妨害 (DoS) の脆弱性 CWE-287
不適切な認証 		CVE-2013-1443 2013-11-11 18:51 2013-09-15 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:April 26, 2026, 4:08 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
279441 - webwiz web_wiz_forums Cross-site scripting (XSS) vulnerability in search_form.asp in Web Wiz Forums 6.34 allows remote attackers to inject arbitrary web script or HTML via the search parameter. CWE-79
Cross-site Scripting 		CVE-2006-0175 2018-10-20 00:43 2006-01-12 Show GitHub Exploit DB Packet Storm
279442 - xmame xmame Buffer overflow in certain functions in src/fileio.c and src/unix/fileio.c in xmame before 11 January 2006 may allow local users to gain privileges via a long (1) -lang, (2) -ctrlr, (3) -pb, or (4) -… NVD-CWE-Other
CVE-2006-0176 2018-10-20 00:43 2006-01-12 Show GitHub Exploit DB Packet Storm
279443 - calogic calogic_calendars Cross-site scripting (XSS) vulnerability in CaLogic Calendars 1.2.2 allows remote attackers to inject arbitrary web script or HTML via the Title field on the "Adding New Event" page, and possibly oth… NVD-CWE-Other
CVE-2006-0180 2018-10-20 00:43 2006-01-12 Show GitHub Exploit DB Packet Storm
279444 - acal calendar_project login.php in ACal Calendar Project 2.2.5 allows remote attackers to bypass authentication by setting the ACalAuthenticate cookie variable to "inside". NVD-CWE-Other
CVE-2006-0182 2018-10-20 00:43 2006-01-12 Show GitHub Exploit DB Packet Storm
279445 - acal calendar_project Direct static code injection vulnerability in edit.php in ACal Calendar Project 2.2.5 allows authenticated users to execute arbitrary PHP code via (1) the edit=header value, which modifies header.php… NVD-CWE-Other
CVE-2006-0183 2018-10-20 00:43 2006-01-12 Show GitHub Exploit DB Packet Storm
279446 - microsoft visual_studio_.net By design, Microsoft Visual Studio 2005 automatically executes code in the Load event of a user-defined control (UserControl1_Load function), which allows user-assisted attackers to execute arbitrary… NVD-CWE-Other
CVE-2006-0187 2018-10-20 00:43 2006-01-12 Show GitHub Exploit DB Packet Storm
279447 - estara softphone Buffer overflow in eStara Softphone 3.0.1.14 through 3.0.1.46 allows remote attackers to execute arbitrary code via a long attribute (aka "a") field in the SDP data of a SIP packet on UDP port 5060. NVD-CWE-Other
CVE-2006-0189 2018-10-20 00:43 2006-01-13 Show GitHub Exploit DB Packet Storm
279448 - estara softphone This is the vendor provided solution: "eStara has released Softphone version 3.0.1.47 to resolve the buffer overflow demonstrated in parsing SDP with long "a=" lines. Licensed customers can downl… NVD-CWE-Other
CVE-2006-0189 2018-10-20 00:43 2006-01-13 Show GitHub Exploit DB Packet Storm
279449 - philip_loftin aspsurvey SQL injection vulnerability in Login_Validate.asp in ASPSurvey 1.10 allows remote attackers to execute arbitrary SQL commands via the Password parameter to login.asp. CWE-89
SQL Injection 		CVE-2006-0192 2018-10-20 00:43 2006-01-13 Show GitHub Exploit DB Packet Storm
279450 - positive_software h-sphere Cross-site scripting (XSS) vulnerability in the Hosting Control Panel (psoft.hsphere.CP) in Positive Software H-Sphere 2.4.3 Patch 8 and earlier allows remote attackers to inject arbitrary web script… NVD-CWE-Other
CVE-2006-0193 2018-10-20 00:43 2006-01-13 Show GitHub Exploit DB Packet Storm