Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Feb. 9, 2026, 12:59 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
219041 9.3 危険 マイクロソフト - Microsoft Word 製品および Office 互換機能パックにおける任意のコードを実行される脆弱性 CWE-119
バッファエラー 		CVE-2013-3855 2013-09-13 10:53 2013-09-10 Show GitHub Exploit DB Packet Storm
219042 9.3 危険 マイクロソフト - Microsoft Office 2007 および Word 2007 における任意のコードを実行される脆弱性 CWE-119
バッファエラー 		CVE-2013-3854 2013-09-13 10:52 2013-09-10 Show GitHub Exploit DB Packet Storm
219043 9.3 危険 マイクロソフト - Microsoft Office 2007 および Word 2007 における任意のコードを実行される脆弱性 CWE-119
バッファエラー 		CVE-2013-3853 2013-09-13 10:48 2013-09-10 Show GitHub Exploit DB Packet Storm
219044 9.3 危険 マイクロソフト - Microsoft Word 製品および Office 互換機能パックにおける任意のコードを実行される脆弱性 CWE-119
バッファエラー 		CVE-2013-3852 2013-09-13 10:46 2013-09-10 Show GitHub Exploit DB Packet Storm
219045 9.3 危険 マイクロソフト - Microsoft Office および Word 製品における任意のコードを実行される脆弱性 CWE-119
バッファエラー 		CVE-2013-3851 2013-09-13 10:46 2013-09-10 Show GitHub Exploit DB Packet Storm
219046 9.3 危険 マイクロソフト - Microsoft Word 製品および Office 互換機能パックにおける任意のコードを実行される脆弱性 CWE-119
バッファエラー 		CVE-2013-3850 2013-09-13 10:43 2013-09-10 Show GitHub Exploit DB Packet Storm
219047 5 警告 マイクロソフト - Microsoft Office および Word 製品における任意のファイルを読まれる脆弱性 CWE-200
情報漏えい 		CVE-2013-3160 2013-09-13 10:42 2013-09-10 Show GitHub Exploit DB Packet Storm
219048 9.3 危険 マイクロソフト - 複数の Windows 製品における任意のコードを実行される脆弱性 CWE-94
コード・インジェクション 		CVE-2013-0810 2013-09-12 19:49 2013-09-10 Show GitHub Exploit DB Packet Storm
219049 9.3 危険 マイクロソフト - Windows XP および Windows Server 2003 における任意のコードを実行される脆弱性 CWE-119
バッファエラー 		CVE-2013-3863 2013-09-12 19:48 2013-09-10 Show GitHub Exploit DB Packet Storm
219050 9.3 危険 マイクロソフト - Microsoft Internet Explorer 8 および 9 における任意のコードを実行される脆弱性 CWE-119
バッファエラー 		CVE-2013-3845 2013-09-12 19:47 2013-09-10 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:April 22, 2026, 4 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
278221 - symantec antivirus_scan_engine Symantec Scan Engine 5.0.0.24, and possibly other versions before 5.1.0.7, stores sensitive log and virus definition files under the web root with insufficient access control, which allows remote att… NVD-CWE-Other
CVE-2006-0232 2018-10-20 00:43 2006-04-25 Show GitHub Exploit DB Packet Storm
278222 - microblog microblog Cross-site scripting (XSS) vulnerability in functions.php in microBlog 2.0 RC-10 allows remote attackers to inject arbitrary web script and HTML via a javascript: URI in a [url] BBcode tag. CWE-79
Cross-site Scripting 		CVE-2006-0233 2018-10-20 00:43 2006-01-18 Show GitHub Exploit DB Packet Storm
278223 - microblog microblog SQL injection vulnerability in index.php in microBlog 2.0 RC-10 allows remote attackers to execute arbitrary SQL commands via the (1) month and (2) year parameters. NVD-CWE-Other
CVE-2006-0234 2018-10-20 00:43 2006-01-18 Show GitHub Exploit DB Packet Storm
278224 - white_angle white_album SQL injection vulnerability in WhiteAlbum 2.5 allows remote attackers to execute arbitrary SQL commands via the dir parameter to pictures.php. NVD-CWE-Other
CVE-2006-0235 2018-10-20 00:43 2006-01-18 Show GitHub Exploit DB Packet Storm
278225 - mozilla thunderbird GUI display truncation vulnerability in Mozilla Thunderbird 1.0.2, 1.0.6, and 1.0.7 allows user-assisted attackers to execute arbitrary code via an attachment with a filename containing a large numbe… CWE-94
Code Injection 		CVE-2006-0236 2018-10-20 00:43 2006-01-18 Show GitHub Exploit DB Packet Storm
278226 - 8pixel.net simple_blog Multiple cross-site scripting (XSS) vulnerabilities in Simple Blog 2.1 allow remote attackers to inject arbitrary web script or HTML via (1) a comment to comments.asp and (2) possibly certain other f… NVD-CWE-Other
CVE-2006-0239 2018-10-20 00:43 2006-01-18 Show GitHub Exploit DB Packet Storm
278227 - webmobo wbnews Cross-site scripting vulnerability in WBNews 1.1.0 and earlier allows remote attackers to inject arbitrary web script or HTML via the Name field. NVD-CWE-Other
CVE-2006-0241 2018-10-20 00:43 2006-01-18 Show GitHub Exploit DB Packet Storm
278228 - php_fusebox php_fusebox Cross-site scripting vulnerability in index.php in PHP Fusebox 4.0.6 allows remote attackers to inject arbitrary web script or HTML via the fuseaction parameter. NVD-CWE-Other
CVE-2006-0242 2018-10-20 00:43 2006-01-18 Show GitHub Exploit DB Packet Storm
278229 - benders_calendar benders_calendar SQL injection vulnerability in Benders Calendar 1.0 allows remote attackers to execute arbitrary SQL commands via multiple parameters, as demonstrated by the (1) year, (2) month, and (3) day paramete… NVD-CWE-Other
CVE-2006-0252 2018-10-20 00:43 2006-01-18 Show GitHub Exploit DB Packet Storm
278230 - ambicom blue_neighbors Buffer overflow in the Bluetooth OBEX Object Push service in "Blue Neighbors.EXE" in AmbiCom Blue Neighbors 2.50 Build 2500 and earlier allows remote attackers to execute arbitrary code via a long fi… NVD-CWE-Other
CVE-2006-0253 2018-10-20 00:43 2006-01-18 Show GitHub Exploit DB Packet Storm