Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 9, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
218331 4.3 警告 シスコシステムズ - Cisco CallManager におけるクロスサイトスクリプティングの脆弱性 - CVE-2006-3109 2014-03-11 17:43 2006-06-21 Show GitHub Exploit DB Packet Storm
218332 5 警告 Bitweaver - Bitweaver における CRLF インジェクションの脆弱性 - CVE-2006-3105 2014-03-11 17:43 2006-06-21 Show GitHub Exploit DB Packet Storm
218333 4.3 警告 Bitweaver - Bitweaver におけるクロスサイトスクリプティングの脆弱性 - CVE-2006-3103 2014-03-11 17:43 2006-06-21 Show GitHub Exploit DB Packet Storm
218334 5 警告 IBM - IBM DB2 Universal Database におけるバッファオーバーフローの脆弱性 - CVE-2006-3066 2014-03-11 17:43 2006-06-19 Show GitHub Exploit DB Packet Storm
218335 6.8 警告 lucid designs - Chris Lea Lucid Calendar におけるクロスサイトスクリプティングの脆弱性 - CVE-2006-3025 2014-03-11 17:43 2006-06-15 Show GitHub Exploit DB Packet Storm
218336 5.1 警告 hotwebscripts - CMS Mundo における任意の PHP コードを実行される脆弱性 - CVE-2006-2931 2014-03-11 17:43 2006-06-21 Show GitHub Exploit DB Packet Storm
218337 5.1 警告 JetAudio - jetAudio におけるバッファオーバーフローの脆弱性 - CVE-2006-2910 2014-03-11 17:43 2006-07-5 Show GitHub Exploit DB Packet Storm
218338 2.6 注意 particle soft - Particle Links におけるクロスサイトスクリプティングの脆弱性 - CVE-2006-2903 2014-03-11 17:43 2006-06-8 Show GitHub Exploit DB Packet Storm
218339 2.6 注意 Pixelpost.org - Pixelpost におけるクロスサイトスクリプティングの脆弱性 - CVE-2006-2891 2014-03-11 17:43 2006-06-7 Show GitHub Exploit DB Packet Storm
218340 6.8 警告 DeltaScripts - PHP Pro Publish におけるクロスサイトスクリプティングの脆弱性 - CVE-2006-2876 2014-03-11 17:43 2006-06-7 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 10, 2026, 4:58 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
291971 - morbus_iff activism The Activism module 6.x-2.x before 6.x-2.1 for Drupal does not properly restrict access to the "Campaign" content type, which might allow remote attackers to bypass access restrictions and possibly h… CWE-264
Permissions, Privileges, and Access Controls 		CVE-2012-4498 2024-11-21 10:43 2012-11-3 Show GitHub Exploit DB Packet Storm
291972 - devsaran elegant_theme Cross-site scripting (XSS) vulnerability in the "3 slide gallery" in the Elegant Theme module 7.x-1.x before 7.x-1.1 for Drupal allows remote authenticated users with the "administer themes" permissi… CWE-79
Cross-site Scripting 		CVE-2012-4497 2024-11-21 10:43 2012-11-3 Show GitHub Exploit DB Packet Storm
291973 - roy_baxter better_revisions Cross-site scripting (XSS) vulnerability in the administrative interface in the Better Revisions module 7.x-1.x before 7.x-1.1 for Drupal allows remote authenticated users with the "administer better… CWE-79
Cross-site Scripting 		CVE-2012-4493 2024-11-21 10:43 2012-11-3 Show GitHub Exploit DB Packet Storm
291974 - gecad axigen_free_mail_server Multiple directory traversal vulnerabilities in the View Log Files component in Axigen Free Mail Server allow remote attackers to read or delete arbitrary files via a .. (dot dot) in (1) the fileName… CWE-22
Path Traversal 		CVE-2012-4940 2024-11-21 10:43 2012-11-1 Show GitHub Exploit DB Packet Storm
291975 - solarwinds orion_network_performance_monitor
ip_address_manager_web_interface 		Cross-site scripting (XSS) vulnerability in IPAMSummaryView.aspx in the IPAM web interface before 3.0-HotFix1 in SolarWinds Orion Network Performance Monitor might allow remote attackers to inject ar… CWE-79
Cross-site Scripting 		CVE-2012-4939 2024-11-21 10:43 2012-11-1 Show GitHub Exploit DB Packet Storm
291976 - xen xen The PV domain builder in Xen 4.2 and earlier does not validate the size of the kernel or ramdisk (1) before or (2) after decompression, which allows local guest administrators to cause a denial of se… CWE-20
 Improper Input Validation  		CVE-2012-4544 2024-11-21 10:43 2012-11-1 Show GitHub Exploit DB Packet Storm
291977 - joomla joomla\! Cross-site scripting (XSS) vulnerability in modules/mod_languages/tmpl/default.php in the Language Switcher module for Joomla! 2.5.x before 2.5.7 allows remote attackers to inject arbitrary web scrip… CWE-79
Cross-site Scripting 		CVE-2012-4532 2024-11-21 10:43 2012-11-1 Show GitHub Exploit DB Packet Storm
291978 - joomla joomla\! Cross-site scripting (XSS) vulnerability in Joomla! 2.5.x before 2.5.7 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. CWE-79
Cross-site Scripting 		CVE-2012-4531 2024-11-21 10:43 2012-11-1 Show GitHub Exploit DB Packet Storm
291979 - nancy_wichmann announcements The Announcements module 6.x-1.x before 6.x-1.5 for Drupal allows remote authenticated users with the "access announcements" permission to bypass node access restrictions and possibly have other unsp… CWE-264
Permissions, Privileges, and Access Controls 		CVE-2012-4500 2024-11-21 10:43 2012-11-1 Show GitHub Exploit DB Packet Storm
291980 - matthias_hutterer email The contact formatter page in the Email Field module 6.x-1.x before 6.x-1.2 and 7.x-1.x before 7.x-1.1 for Drupal allows remote attackers to email the stored address in the entity via unspecified vec… CWE-264
Permissions, Privileges, and Access Controls 		CVE-2012-4499 2024-11-21 10:43 2012-11-1 Show GitHub Exploit DB Packet Storm