Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Feb. 9, 2026, 12:59 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
217881 3.5 注意 IBM - IBM Domino の Domino Web Administrator の webadmin.nsf におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2013-4051 2013-11-11 16:54 2013-11-5 Show GitHub Exploit DB Packet Storm
217882 6 警告 IBM - IBM Domino の Domino Web Administrator の webadmin.nsf におけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反 		CVE-2013-4050 2013-11-11 16:52 2013-11-5 Show GitHub Exploit DB Packet Storm
217883 6.8 警告 アップル - Apple OS X Server の Server App の RADIUS サービスにおける RADIUS セッションをハイジャックされる脆弱性 CWE-DesignError
CVE-2013-5143 2013-11-11 16:41 2013-10-22 Show GitHub Exploit DB Packet Storm
217884 5.8 警告 アップル
Ruby on Rails project		 - Ruby on Rails の Active Support コンポーネントにおける任意のファイルを読まれる脆弱性 CWE-20
不適切な入力確認 		CVE-2013-1856 2013-11-11 16:41 2013-03-18 Show GitHub Exploit DB Packet Storm
217885 4.3 警告 たっちゃんのＨＰ - 改造版 TOWN におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2013-4716 2013-11-11 16:33 2013-11-7 Show GitHub Exploit DB Packet Storm
217886 5.8 警告 IBM - IBM Tivoli Federated Identity Manager および Tivoli Federated Identity Manager Business Gateway におけるユーザを任意の Web サイトにリダイレクトされる脆弱性 CWE-20
CWE-Other
CVE-2013-5431 2013-11-11 16:33 2013-10-28 Show GitHub Exploit DB Packet Storm
217887 5 警告 シスコシステムズ - Cisco MDS 9000 デバイス上で稼働する Cisco NX-OS におけるサービス運用妨害 (DoS) の脆弱性 CWE-119
バッファエラー 		CVE-2013-5566 2013-11-11 16:14 2013-11-6 Show GitHub Exploit DB Packet Storm
217888 4.3 警告 シスコシステムズ - Cisco IOS XR の OSPFv3 機能におけるサービス運用妨害 (DoS) の脆弱性 CWE-119
バッファエラー 		CVE-2013-5565 2013-11-11 16:13 2013-11-7 Show GitHub Exploit DB Packet Storm
217889 10 危険 シスコシステムズ - Cisco TelePresence VX Clinical Assistant の WIL-A モジュールにおけるアクセス権を取得される脆弱性 CWE-255
証明書・パスワード管理 		CVE-2013-5558 2013-11-11 16:13 2013-11-6 Show GitHub Exploit DB Packet Storm
217890 7.5 危険 シスコシステムズ - Cisco Wide Area Application Services Mobile のサーバの Web 管理インターフェースにおけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2013-5554 2013-11-11 16:12 2013-11-6 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:April 26, 2026, 4:08 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
279471 - microblog microblog Cross-site scripting (XSS) vulnerability in functions.php in microBlog 2.0 RC-10 allows remote attackers to inject arbitrary web script and HTML via a javascript: URI in a [url] BBcode tag. CWE-79
Cross-site Scripting 		CVE-2006-0233 2018-10-20 00:43 2006-01-18 Show GitHub Exploit DB Packet Storm
279472 - microblog microblog SQL injection vulnerability in index.php in microBlog 2.0 RC-10 allows remote attackers to execute arbitrary SQL commands via the (1) month and (2) year parameters. NVD-CWE-Other
CVE-2006-0234 2018-10-20 00:43 2006-01-18 Show GitHub Exploit DB Packet Storm
279473 - white_angle white_album SQL injection vulnerability in WhiteAlbum 2.5 allows remote attackers to execute arbitrary SQL commands via the dir parameter to pictures.php. NVD-CWE-Other
CVE-2006-0235 2018-10-20 00:43 2006-01-18 Show GitHub Exploit DB Packet Storm
279474 - mozilla thunderbird GUI display truncation vulnerability in Mozilla Thunderbird 1.0.2, 1.0.6, and 1.0.7 allows user-assisted attackers to execute arbitrary code via an attachment with a filename containing a large numbe… CWE-94
Code Injection 		CVE-2006-0236 2018-10-20 00:43 2006-01-18 Show GitHub Exploit DB Packet Storm
279475 - 8pixel.net simple_blog Multiple cross-site scripting (XSS) vulnerabilities in Simple Blog 2.1 allow remote attackers to inject arbitrary web script or HTML via (1) a comment to comments.asp and (2) possibly certain other f… NVD-CWE-Other
CVE-2006-0239 2018-10-20 00:43 2006-01-18 Show GitHub Exploit DB Packet Storm
279476 - webmobo wbnews Cross-site scripting vulnerability in WBNews 1.1.0 and earlier allows remote attackers to inject arbitrary web script or HTML via the Name field. NVD-CWE-Other
CVE-2006-0241 2018-10-20 00:43 2006-01-18 Show GitHub Exploit DB Packet Storm
279477 - php_fusebox php_fusebox Cross-site scripting vulnerability in index.php in PHP Fusebox 4.0.6 allows remote attackers to inject arbitrary web script or HTML via the fuseaction parameter. NVD-CWE-Other
CVE-2006-0242 2018-10-20 00:43 2006-01-18 Show GitHub Exploit DB Packet Storm
279478 - benders_calendar benders_calendar SQL injection vulnerability in Benders Calendar 1.0 allows remote attackers to execute arbitrary SQL commands via multiple parameters, as demonstrated by the (1) year, (2) month, and (3) day paramete… NVD-CWE-Other
CVE-2006-0252 2018-10-20 00:43 2006-01-18 Show GitHub Exploit DB Packet Storm
279479 - ambicom blue_neighbors Buffer overflow in the Bluetooth OBEX Object Push service in "Blue Neighbors.EXE" in AmbiCom Blue Neighbors 2.50 Build 2500 and earlier allows remote attackers to execute arbitrary code via a long fi… NVD-CWE-Other
CVE-2006-0253 2018-10-20 00:43 2006-01-18 Show GitHub Exploit DB Packet Storm
279480 - apache geronimo Multiple cross-site scripting (XSS) vulnerabilities in Apache Geronimo 1.0 allow remote attackers to inject arbitrary web script or HTML via the (1) time parameter to cal2.jsp and (2) any invalid par… NVD-CWE-Other
CVE-2006-0254 2018-10-20 00:43 2006-01-18 Show GitHub Exploit DB Packet Storm