Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Feb. 9, 2026, 12:59 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
218321 4.3 警告 Mozilla Foundation - 複数の Mozilla 製品における同一生成元ポリシーを回避される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2012-4192 2013-10-28 15:23 2012-10-11 Show GitHub Exploit DB Packet Storm
218322 9.3 危険 Mozilla Foundation - 複数の Mozilla 製品における同一生成元ポリシーを回避される脆弱性 CWE-DesignError
CVE-2012-4193 2013-10-28 15:22 2012-10-11 Show GitHub Exploit DB Packet Storm
218323 10 危険 Mozilla Foundation - 複数の Mozilla 製品におけるヒープベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2012-4188 2013-10-28 15:21 2012-10-9 Show GitHub Exploit DB Packet Storm
218324 10 危険 Mozilla Foundation - 複数の Mozilla 製品における任意のコードを実行される脆弱性 CWE-119
バッファエラー 		CVE-2012-4187 2013-10-28 15:20 2012-10-9 Show GitHub Exploit DB Packet Storm
218325 10 危険 Mozilla Foundation - 複数の Mozilla 製品におけるヒープベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2012-4186 2013-10-28 15:18 2012-10-9 Show GitHub Exploit DB Packet Storm
218326 7.5 危険 DELL EMC (旧 EMC Corporation) - EMC RSA Authentication Agent for Web for Internet Information Services におけるアクセス制限を回避される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2013-3280 2013-10-28 15:11 2013-10-23 Show GitHub Exploit DB Packet Storm
218327 4.3 警告 DHTMLX - WordPress 用 Spreadsheet プラグインの codebase/spreadsheet.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2013-6281 2013-10-28 14:53 2013-10-22 Show GitHub Exploit DB Packet Storm
218328 7.5 危険 Novell
Puppet
Canonical		 - Puppet および Puppet Enterprise における任意の Ruby クラスをインスタンス化される脆弱性 CWE-20
不適切な入力確認 		CVE-2013-3567 2013-10-28 14:42 2013-06-18 Show GitHub Exploit DB Packet Storm
218329 4.3 警告 LinksAlpha - WordPress 用 Social Sharing Toolkit プラグインにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2013-6280 2013-10-28 14:41 2013-10-25 Show GitHub Exploit DB Packet Storm
218330 10 危険 デル - Dell iDRAC のファームウェアの Web インタフェースにおける CLP インタフェースを変更される脆弱性 CWE-noinfo
情報不足 		CVE-2013-4785 2013-10-28 14:26 2013-07-8 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:April 25, 2026, 4:08 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
278941 - php php The (1) file_exists and (2) imap_reopen functions in PHP before 5.1.5 do not check for the safe_mode and open_basedir settings, which allows local users to bypass the settings. NOTE: the error_log f… NVD-CWE-Other
CVE-2006-4481 2018-10-31 01:25 2006-09-1 Show GitHub Exploit DB Packet Storm
278942 - php php Buffer overflow in the LWZReadByte_ function in ext/gd/libgd/gd_gif_in.c in the GD extension in PHP before 5.1.5 allows remote attackers to have an unknown impact via a GIF file with input_code_size … NVD-CWE-Other
CVE-2006-4484 2018-10-31 01:25 2006-09-1 Show GitHub Exploit DB Packet Storm
278943 - php php The stripos function in PHP before 5.1.5 has unknown impact and attack vectors related to an out-of-bounds read. NVD-CWE-Other
CVE-2006-4485 2018-10-31 01:25 2006-09-1 Show GitHub Exploit DB Packet Storm
278944 - php php Integer overflow in memory allocation routines in PHP before 5.1.6, when running on a 64-bit system, allows context-dependent attackers to bypass the memory_limit restriction. CWE-189
Numeric Errors 		CVE-2006-4486 2018-10-31 01:25 2006-09-1 Show GitHub Exploit DB Packet Storm
278945 - microsoft office Unspecified vulnerability in Microsoft Word 2000, 2002, and Office 2003 allows remote user-assisted attackers to execute arbitrary code via unspecified vectors involving a crafted file resulting in a… NVD-CWE-noinfo
CVE-2006-4534 2018-10-31 01:25 2006-09-6 Show GitHub Exploit DB Packet Storm
278946 - php php PHP 4.x up to 4.4.4 and PHP 5 up to 5.1.6 allows local users to bypass certain Apache HTTP Server httpd.conf options, such as safe_mode and open_basedir, via the ini_restore function, which resets th… NVD-CWE-Other
CVE-2006-4625 2018-10-31 01:25 2006-09-13 Show GitHub Exploit DB Packet Storm
278947 - microsoft office Unspecified vulnerability in PowerPoint in Microsoft Office 2000, Office XP and Office 2003 allows user-assisted attackers to execute arbitrary code via a crafted record in a PPT file, as exploited b… CWE-94
Code Injection 		CVE-2006-4694 2018-10-31 01:25 2006-09-28 Show GitHub Exploit DB Packet Storm
278948 - ffmpeg ffmpeg Multiple buffer overflows in libavcodec in ffmpeg before 0.4.9_p20060530 allow remote attackers to cause a denial of service or possibly execute arbitrary code via multiple unspecified vectors in (1)… NVD-CWE-Other
CVE-2006-4800 2018-10-31 01:25 2006-09-15 Show GitHub Exploit DB Packet Storm
278949 - php php Integer overflow in PHP 5 up to 5.1.6 and 4 before 4.3.0 allows remote attackers to execute arbitrary code via an argument to the unserialize PHP function with a large value for the number of array e… CWE-94
Code Injection 		CVE-2006-4812 2018-10-31 01:25 2006-10-10 Show GitHub Exploit DB Packet Storm
278950 - cisco ids_sensor_software
ips_sensor_software 		The web administration interface (mainApp) to Cisco IDS before 4.1(5c), and IPS 5.0 before 5.0(6p1) and 5.1 before 5.1(2) allows remote attackers to cause a denial of service (unresponsive device) vi… NVD-CWE-Other
CVE-2006-4910 2018-10-31 01:25 2006-09-21 Show GitHub Exploit DB Packet Storm