Vulnerability Search Top

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

Vulnerability Information Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":Feb. 9, 2026, 12:59 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
219111	9.3	危険	シスコシステムズ	-	Cisco WebEx Advanced Recording Format player におけるバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2013-1116	2013-09-9 14:55	2013-09-4	Show	GitHub Exploit DB Packet Storm

219112	9.3	危険	シスコシステムズ	-	Cisco WebEx Advanced Recording Format player におけるバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2013-1115	2013-09-9 14:54	2013-09-4	Show	GitHub Exploit DB Packet Storm

219113	3.5	注意	オラクル	-	Oracle E-Business Suite の Oracle Application Object Library における Logging に関する脆弱性	CWE-noinfo 情報不足	CVE-2013-3749	2013-09-6 18:22	2013-07-16	Show	GitHub Exploit DB Packet Storm

219114	4	警告	オラクル	-	Oracle E-Business Suite の Oracle Applications Technology Stack における Client System Analyzer に関する脆弱性	CWE-noinfo 情報不足	CVE-2013-3747	2013-09-6 18:20	2013-07-16	Show	GitHub Exploit DB Packet Storm

219115	4.3	警告	オラクル	-	Oracle E-Business Suite の Oracle iSupplier Portal における Supplier Management に関する脆弱性	CWE-noinfo 情報不足	CVE-2013-3788	2013-09-6 18:19	2013-07-16	Show	GitHub Exploit DB Packet Storm

219116	4.3	警告	オラクル	-	Oracle E-Business Suite の Oracle Applications Technology Stack における Help に関する脆弱性	CWE-noinfo 情報不足	CVE-2013-3778	2013-09-6 18:18	2013-07-16	Show	GitHub Exploit DB Packet Storm

219117	4.3	警告	オラクル	-	Oracle E-Business Suite の Oracle Application Object Library における Signon に関する脆弱性	CWE-noinfo 情報不足	CVE-2013-3777	2013-09-6 18:12	2013-07-16	Show	GitHub Exploit DB Packet Storm

219118	4.3	警告	オラクル	-	Oracle E-Business Suite Access Gate の Oracle Application Object Library における脆弱性	CWE-noinfo 情報不足	CVE-2013-3767	2013-09-6 18:10	2013-07-16	Show	GitHub Exploit DB Packet Storm

219119	5.5	警告	オラクル	-	Oracle E-Business Suite の Oracle Landed Cost Management における Shipment Workbench に関する脆弱性	CWE-noinfo 情報不足	CVE-2013-3756	2013-09-6 18:06	2013-07-16	Show	GitHub Exploit DB Packet Storm

219120	4.3	警告	Open-Xchange	-	Open-Xchange Server における平文のパスワードを取得される脆弱性	CWE-200 情報漏えい	CVE-2013-1649	2013-09-6 16:51	2013-03-13	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:April 18, 2026, 4:11 a.m.

No	CVSS	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
278591	-	wordpress	wordpress	WordPress 2.0.3 allows remote attackers to obtain the installation path via a direct request to various files, such as those in the (1) wp-admin, (2) wp-content, and (3) wp-includes directories, poss…	NVD-CWE-Other	CVE-2006-3390	2018-10-19 01:47	2006-07-7	Show	GitHub Exploit DB Packet Storm

278592	-	usermin webmin	usermin webmin	Webmin before 1.290 and Usermin before 1.220 calls the simplify_path function before decoding HTML, which allows remote attackers to read arbitrary files, as demonstrated using "..%01" sequences, whi…	NVD-CWE-Other	CVE-2006-3392	2018-10-19 01:47	2006-07-7	Show	GitHub Exploit DB Packet Storm

278593	-	miro_international	galleria	PHP remote file inclusion vulnerability in galleria.html.php in Galleria Mambo Module 1.0 and earlier for Mambo allows remote attackers to execute arbitrary PHP code via a URL in the mosConfig_absolu…	CWE-94 Code Injection	CVE-2006-3396	2018-10-19 01:47	2006-07-7	Show	GitHub Exploit DB Packet Storm

278594	-	moniwiki	moniwiki	Cross-site scripting (XSS) vulnerability in wiki.php in MoniWiki before 1.1.2-20060702 allows remote attackers to inject arbitrary Javascript via the URL, which is reflected back in an error message,…	NVD-CWE-Other	CVE-2006-3399	2018-10-19 01:47	2006-07-7	Show	GitHub Exploit DB Packet Storm

278595	-	samba	samba	The smdb daemon (smbd/service.c) in Samba 3.0.1 through 3.0.22 allows remote attackers to cause a denial of service (memory consumption) via a large number of share connection requests.	NVD-CWE-Other	CVE-2006-3403	2018-10-19 01:47	2006-07-13	Show	GitHub Exploit DB Packet Storm

278596	-	qto	qtofilemanager	Cross-site scripting (XSS) vulnerability in qtofm.php in QTOFileManager 1.0 allows remote attackers to inject arbitrary web script or HTML via the (1) delete, (2) pathext, and (3) edit parameters.	NVD-CWE-Other	CVE-2006-3405	2018-10-19 01:47	2006-07-7	Show	GitHub Exploit DB Packet Storm

278597	-	qto	qtofilemanager	Directory traversal vulnerability in qtofm.php in QTOFileManager 1.0 allows remote attackers to modify arbitrary files via a .. (dot dot) sequence in the edit parameter.	NVD-CWE-Other	CVE-2006-3406	2018-10-19 01:47	2006-07-7	Show	GitHub Exploit DB Packet Storm

278598	-	smartsitecms	smartsitecms	PHP remote file inclusion vulnerability in SmartSiteCMS 1.0 and earlier, when register_globals is enabled, allows remote attackers to execute arbitrary PHP code via the root parameter in (1) comment.…	NVD-CWE-Other	CVE-2006-3421	2018-10-19 01:47	2006-07-7	Show	GitHub Exploit DB Packet Storm

278599	-	webex_communications	downloader_activexcontrol downloader_java	WebEx Downloader ActiveX Control and WebEx Downloader Java before 2.1.0.0 do not validate downloaded components, which allows remote attackers to execute arbitrary code via a website that activates t…	CWE-20 Improper Input Validation	CVE-2006-3423	2018-10-19 01:47	2006-07-7	Show	GitHub Exploit DB Packet Storm

278600	-	webex_communications	downloader_activexcontrol downloader_java	Upgrade to version 2.1.0.0.	CWE-20 Improper Input Validation	CVE-2006-3423	2018-10-19 01:47	2006-07-7	Show	GitHub Exploit DB Packet Storm