Vulnerability Search Top

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

Vulnerability Information Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":Feb. 9, 2026, 12:59 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
219131	6.8	警告	シスコシステムズ	-	Cisco Global Site Selector の Web フレームワークにおけるクロスサイトリクエストフォージェリの脆弱性	CWE-352 同一生成元ポリシー違反	CVE-2013-5471	2013-09-6 11:49	2013-09-4	Show	GitHub Exploit DB Packet Storm

219132	6.8	警告	ShareThis	-	WordPress 用 ShareThis プラグインにおけるクロスサイトリクエストフォージェリの脆弱性	CWE-352 同一生成元ポリシー違反	CVE-2013-3479	2013-09-6 11:44	2013-08-27	Show	GitHub Exploit DB Packet Storm

219133	4.3	警告	シスコシステムズ	-	Cisco Prime NCS および Cisco WCS にクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2012-5990	2013-09-5 19:40	2013-09-3	Show	GitHub Exploit DB Packet Storm

219134	5	警告	シスコシステムズ	-	Cisco Secure Access Control System におけるサービス運用妨害 (DoS) の脆弱性	CWE-20 不適切な入力確認	CVE-2013-5470	2013-09-5 12:09	2013-09-4	Show	GitHub Exploit DB Packet Storm

219135	5	警告	シスコシステムズ	-	Cisco モビリティサービスエンジンにおける認証されていないセッションを取得される脆弱性	CWE-200 情報漏えい	CVE-2013-3469	2013-09-5 12:01	2013-09-3	Show	GitHub Exploit DB Packet Storm

219136	4.3	警告	VMware	-	VMware ESXi および ESX におけるサービス運用妨害 (DoS) の脆弱性	CWE-20 不適切な入力確認	CVE-2013-1661	2013-09-5 11:50	2013-08-29	Show	GitHub Exploit DB Packet Storm

219137	4.3	警告	Palo Alto Networks	-	Palo Alto Networks PAN-OS の Web ベースのデバイス管理 API ブラウザにおけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2013-5664	2013-09-4 15:42	2013-07-22	Show	GitHub Exploit DB Packet Storm

219138	6.8	警告	Palo Alto Networks	-	Palo Alto Networks PAN-OS の App-ID キャッシュ機能におけるセキュリティポリシーを回避される脆弱性	CWE-Other その他	CVE-2013-5663	2013-09-4 15:38	2013-01-7	Show	GitHub Exploit DB Packet Storm

219139	4.3	警告	Palo Alto Networks	-	Palo Alto Networks GlobalProtect および NetConnect におけるポータルサーバになりすまされる脆弱性	CWE-Other その他	CVE-2012-6606	2013-09-4 15:22	2012-10-22	Show	GitHub Exploit DB Packet Storm

219140	9	危険	Palo Alto Networks	-	Palo Alto Networks PAN-OS のデバイス管理のコマンドラインインターフェースにおける任意のコードを実行される脆弱性	CWE-78 OSコマンド・インジェクション	CVE-2012-6605	2013-09-4 15:19	2012-04-27	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:April 21, 2026, 4:10 a.m.

No	CVSS	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
278281	-	thewebforum	thewebforum	SQL injection vulnerability in login.php in TheWebForum (twf) 1.2.1 allows remote attackers to execute arbitrary SQL commands and bypass login authentication via the username parameter (aka the u var…	NVD-CWE-Other	CVE-2006-0135	2018-10-20 00:42	2006-01-9	Show	GitHub Exploit DB Packet Storm

278282	-	phanatic_softwares	chimera_web_portal	Multiple cross-site scripting (XSS) vulnerabilities in the guestbook module in modules.php in Phanatic Softwares Chimera Web Portal System 0.2 allow remote attackers to inject arbitrary web script or…	NVD-CWE-Other	CVE-2006-0136	2018-10-20 00:42	2006-01-9	Show	GitHub Exploit DB Packet Storm

278283	-	phanatic_softwares	chimera_web_portal	SQL injection vulnerability in linkcategory.php in Phanatic Softwares Chimera Web Portal System 0.2 allows remote attackers to execute arbitrary SQL commands via the id parameter.	NVD-CWE-Other	CVE-2006-0137	2018-10-20 00:42	2006-01-9	Show	GitHub Exploit DB Packet Storm

278284	-	navboard	navboard	Cross-site scripting (XSS) vulnerability in post.php in NavBoard V16 Stable(2.6.0) and V17beta2 allows remote attackers to inject arbitrary web script or HTML via the (1) b, (2) textlarge, and (3) ur…	CWE-79 Cross-site Scripting	CVE-2006-0140	2018-10-20 00:42	2006-01-10	Show	GitHub Exploit DB Packet Storm

278285	-	apache2triad php	apache2triad pear	The proxy server feature in go-pear.php in PHP PEAR 0.2.2, as used in Apache2Triad, allows remote attackers to execute arbitrary PHP code by redirecting go-pear.php to a malicious proxy server that p…	CWE-94 Code Injection	CVE-2006-0144	2018-10-20 00:42	2006-01-10	Show	GitHub Exploit DB Packet Storm

278286	-	netbsd	netbsd	The kernfs_xread function in kernfs in NetBSD 1.6 through 2.1, and OpenBSD 3.8, does not properly validate file offsets against negative 32-bit values that occur as a result of truncation, which allo…	NVD-CWE-Other	CVE-2006-0145	2018-10-20 00:42	2006-01-10	Show	GitHub Exploit DB Packet Storm

278287	-	john_lim mantis moodle postnuke_software_foundation the_cacti_group	adodb mantis moodle postnuke cacti	Dynamic code evaluation vulnerability in tests/tmssql.php test script in ADOdb for PHP before 4.70, as used in multiple products including (1) Mantis, (2) PostNuke, (3) Moodle, (4) Cacti, (5) Xaraya,…	NVD-CWE-Other	CVE-2006-0147	2018-10-20 00:42	2006-01-10	Show	GitHub Exploit DB Packet Storm

278288	-	427bb	fourtwosevenbb	427BB 2.2 and 2.2.1 verifies authentication credentials based on the username, authenticated, and usertype cookies, which allows remote attackers to bypass authentication by using a valid username an…	NVD-CWE-Other	CVE-2006-0153	2018-10-20 00:42	2006-01-10	Show	GitHub Exploit DB Packet Storm

278289	-	427bb	fourtwosevenbb	SQL injection vulnerability in showthread.php in 427BB 2.2 and 2.2.1 allows remote attackers to execute arbitrary SQL commands via the ForumID parameter.	NVD-CWE-Other	CVE-2006-0154	2018-10-20 00:42	2006-01-10	Show	GitHub Exploit DB Packet Storm

278290	-	427bb	fourtwosevenbb	Cross-site scripting (XSS) vulnerability in posts.php in 427BB 2.2 and 2.2.1 allows remote attackers to inject arbitrary Javascript via a new message with a url bbcode tag containing a javascript URI.	NVD-CWE-Other	CVE-2006-0155	2018-10-20 00:42	2006-01-10	Show	GitHub Exploit DB Packet Storm