Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 13, 2026, 10 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
218801 6.8 警告 hogstorps - Hogstorps hogstorp guestbook におけるクロスサイトスクリプティングの脆弱性 - CVE-2006-2772 2014-03-11 17:43 2006-06-2 Show GitHub Exploit DB Packet Storm
218802 4.3 警告 Chipmunk Scripts - Chipmunk guestbook におけるクロスサイトスクリプティングの脆弱性 - CVE-2006-2757 2014-03-11 17:43 2006-06-2 Show GitHub Exploit DB Packet Storm
218803 6.8 警告 easy-content forums - Easy-Content Forums におけるクロスサイトスクリプティングの脆弱性 - CVE-2006-2696 2014-03-11 17:43 2006-05-31 Show GitHub Exploit DB Packet Storm
218804 4.9 警告 agtc websolutions - PHP-AGTC Membership System におけるクロスサイトスクリプティングの脆弱性 - CVE-2006-2687 2014-03-11 17:43 2006-05-31 Show GitHub Exploit DB Packet Storm
218805 2.1 注意 The PHP Group - PHP における制限を回避される脆弱性 - CVE-2006-2660 2014-03-11 17:43 2006-06-13 Show GitHub Exploit DB Packet Storm
218806 7.5 危険 Alt-N - Alt-N MDaemon におけるバッファオーバーフローの脆弱性 - CVE-2006-2646 2014-03-11 17:43 2006-05-30 Show GitHub Exploit DB Packet Storm
218807 3.5 注意 andrew godwin - Andrew Godwin ByteHoard におけるクロスサイトスクリプティングの脆弱性 - CVE-2006-2632 2014-03-11 17:43 2006-05-30 Show GitHub Exploit DB Packet Storm
218808 4.3 警告 AlstraSoft - AlstraSoft Web Host Directory におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2006-2618 2014-03-11 17:43 2006-05-26 Show GitHub Exploit DB Packet Storm
218809 4.3 警告 chatty - Chatty におけるクロスサイトスクリプティングの脆弱性 - CVE-2006-2606 2014-03-11 17:43 2006-05-25 Show GitHub Exploit DB Packet Storm
218810 5 警告 even balance - PunkBuster におけるバッファオーバーフローの脆弱性 - CVE-2006-2587 2014-03-11 17:43 2006-05-25 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 13, 2026, 5:05 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
292151 - moneybookers
oscommerce 		moneybookers
oscommerce 		The MoneyBookers module in osCommerce does not verify that the server hostname matches a domain name in the subject's Common Name (CN) or subjectAltName field of the X.509 certificate, which allows m… CWE-20
 Improper Input Validation  		CVE-2012-5794 2024-11-21 10:45 2012-11-5 Show GitHub Exploit DB Packet Storm
292152 - oscommerce
harald_ponce_de_leon 		oscommerce
authorize.net 		The Authorize.Net module in osCommerce does not verify that the server hostname matches a domain name in the subject's Common Name (CN) or subjectAltName field of the X.509 certificate, which allows … CWE-20
 Improper Input Validation  		CVE-2012-5793 2024-11-21 10:45 2012-11-5 Show GitHub Exploit DB Packet Storm
292153 - oscommerce
sagepay 		oscommerce
sage_pay_direct_module 		The Sage Pay Direct module in osCommerce does not verify that the server hostname matches a domain name in the subject's Common Name (CN) or subjectAltName field of the X.509 certificate, which allow… CWE-20
 Improper Input Validation  		CVE-2012-5792 2024-11-21 10:45 2012-11-5 Show GitHub Exploit DB Packet Storm
292154 - paypal invoicing PayPal Invoicing does not verify that the server hostname matches a domain name in the subject's Common Name (CN) or subjectAltName field of the X.509 certificate, which allows man-in-the-middle atta… CWE-20
 Improper Input Validation  		CVE-2012-5791 2024-11-21 10:45 2012-11-5 Show GitHub Exploit DB Packet Storm
292155 - paypal payments_standard PayPal Payments Standard PHP Library 20120427 does not verify that the server hostname matches a domain name in the subject's Common Name (CN) or subjectAltName field of the X.509 certificate, which … CWE-20
 Improper Input Validation  		CVE-2012-5790 2024-11-21 10:45 2012-11-5 Show GitHub Exploit DB Packet Storm
292156 - paypal payments_standard PayPal Payments Standard PHP Library before 20120427 does not verify that the server hostname matches a domain name in the subject's Common Name (CN) or subjectAltName field of the X.509 certificate,… CWE-20
 Improper Input Validation  		CVE-2012-5789 2024-11-21 10:45 2012-11-5 Show GitHub Exploit DB Packet Storm
292157 - paypal ipn The PayPal IPN utility does not verify that the server hostname matches a domain name in the subject's Common Name (CN) or subjectAltName field of the X.509 certificate, which allows man-in-the-middl… CWE-20
 Improper Input Validation  		CVE-2012-5788 2024-11-21 10:45 2012-11-5 Show GitHub Exploit DB Packet Storm
292158 - paypal merchant_sdk The PayPal merchant SDK does not verify that the server hostname matches a domain name in the subject's Common Name (CN) or subjectAltName field of the X.509 certificate, which allows man-in-the-midd… CWE-20
 Improper Input Validation  		CVE-2012-5787 2024-11-21 10:45 2012-11-5 Show GitHub Exploit DB Packet Storm
292159 - apache cxf The wsdl_first_https sample code in distribution/src/main/release/samples/wsdl_first_https/src/main/ in Apache CXF before 2.7.0 does not verify that the server hostname matches a domain name in the s… CWE-20
 Improper Input Validation  		CVE-2012-5786 2024-11-21 10:45 2012-11-5 Show GitHub Exploit DB Packet Storm
292160 - apache axis2 Apache Axis2/Java 1.6.2 and earlier does not verify that the server hostname matches a domain name in the subject's Common Name (CN) or subjectAltName field of the X.509 certificate, which allows man… CWE-20
 Improper Input Validation  		CVE-2012-5785 2024-11-21 10:45 2012-11-5 Show GitHub Exploit DB Packet Storm