Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Feb. 9, 2026, 12:59 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
219171 6.8 警告 シスコシステムズ - Cisco Unified Communications Manager の Enterprise License Manager におけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反
CVE-2013-3472 2013-09-2 12:31 2013-08-28 Show GitHub Exploit DB Packet Storm
219172 4.3 警告 シスコシステムズ - Cisco Identity Services Engine の captive portal アプリケーションにおける平文のユーザ名およびパスワードを破られる脆弱性 CWE-255
証明書・パスワード管理
CVE-2013-3471 2013-09-2 12:27 2013-08-28 Show GitHub Exploit DB Packet Storm
219173 7.8 危険 シスコシステムズ - Cisco Unified IP Phone 8945 のソフトウェアにおけるサービス運用妨害 (DoS) の脆弱性 CWE-20
不適切な入力確認
CVE-2013-3468 2013-09-2 12:21 2013-08-28 Show GitHub Exploit DB Packet Storm
219174 9.3 危険 シスコシステムズ - Cisco Secure Access Control Server の EAP-FAST 認証モジュールにおける任意のコマンドを実行される脆弱性 CWE-287
不適切な認証
CVE-2013-3466 2013-09-2 12:11 2013-08-28 Show GitHub Exploit DB Packet Storm
219175 7.5 危険 Adam Zaninovich - Ruby 用 sounder gem の lib/sounder/sound.rb における任意のコマンドを実行される脆弱性 CWE-94
コード・インジェクション
CVE-2013-5647 2013-09-2 11:04 2013-08-9 Show GitHub Exploit DB Packet Storm
219176 3.5 注意 Roundcube.net - Roundcube Webmail におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2013-5646 2013-09-2 09:58 2013-08-4 Show GitHub Exploit DB Packet Storm
219177 4.3 警告 Roundcube.net - Roundcube Webmail におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2013-5645 2013-09-2 09:51 2013-08-1 Show GitHub Exploit DB Packet Storm
219178 7.5 危険 The Cacti Group - Cacti の cacti/host.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2013-5589 2013-08-30 16:46 2013-08-24 Show GitHub Exploit DB Packet Storm
219179 4.3 警告 The Cacti Group - Cacti におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2013-5588 2013-08-30 16:44 2013-08-24 Show GitHub Exploit DB Packet Storm
219180 7.8 危険 FreeBSD - FreeBSD のカーネルの SCTP の実装におけるカーネルスタックメモリから重要な情報を取得される脆弱性 CWE-200
情報漏えい
CVE-2013-5209 2013-08-30 16:42 2012-08-22 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:April 17, 2026, 4:13 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
278681 - cisco secure_access_control_server Cross-site scripting (XSS) vulnerability in LogonProxy.cgi in Cisco Secure ACS for UNIX 2.3 allows remote attackers to inject arbitrary web script or HTML via the (1) error, (2) SSL, and (3) Ok param… NVD-CWE-Other
CVE-2006-3101 2018-10-19 01:45 2006-06-21 Show GitHub Exploit DB Packet Storm
278682 - bitweaver bitweaver Race condition in articles/BitArticle.php in Bitweaver 1.3, when run on Apache with the mod_mime extension, allows remote attackers to execute arbitrary PHP code by uploading arbitrary files with dou… NVD-CWE-Other
CVE-2006-3102 2018-10-19 01:45 2006-06-21 Show GitHub Exploit DB Packet Storm
278683 - bitweaver bitweaver Cross-site scripting (XSS) vulnerability in Bitweaver 1.3 allows remote attackers to inject arbitrary web script or HTML via the (1) error parameter in users/login.php and the (2) feedback parameter … NVD-CWE-Other
CVE-2006-3103 2018-10-19 01:45 2006-06-21 Show GitHub Exploit DB Packet Storm
278684 - bitweaver bitweaver users/index.php in Bitweaver 1.3 allows remote attackers to obtain sensitive information via an invalid sort_mode parameter, which reveals the installation path and database information in the result… NVD-CWE-Other
CVE-2006-3104 2018-10-19 01:45 2006-06-21 Show GitHub Exploit DB Packet Storm
278685 - bitweaver bitweaver CRLF injection vulnerability in Bitweaver 1.3 allows remote attackers to conduct HTTP response splitting attacks by via CRLF sequences in multiple unspecified parameters that are injected into HTTP h… NVD-CWE-Other
CVE-2006-3105 2018-10-19 01:45 2006-06-21 Show GitHub Exploit DB Packet Storm
278686 - cisco call_manager Cross-site scripting (XSS) vulnerability in Cisco CallManager 3.3 before 3.3(5)SR3, 4.1 before 4.1(3)SR4, 4.2 before 4.2(3), and 4.3 before 4.3(1), allows remote attackers to inject arbitrary web scr… NVD-CWE-Other
CVE-2006-3109 2018-10-19 01:45 2006-06-21 Show GitHub Exploit DB Packet Storm
278687 - mozilla firefox
seamonkey
thunderbird
Mozilla Firefox 1.5 before 1.5.0.5, Thunderbird before 1.5.0.5, and SeaMonkey before 1.0.3 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via simulta… NVD-CWE-Other
CVE-2006-3113 2018-10-19 01:45 2006-07-28 Show GitHub Exploit DB Packet Storm
278688 - pc_tools pc_tools_antivirus PC Tools AntiVirus 2.1.0.51 uses insecure default permissions on the "PC Tools AntiVirus" directory, which allows local users to gain privileges and execute commands. NVD-CWE-Other
CVE-2006-3114 2018-10-19 01:45 2006-08-9 Show GitHub Exploit DB Packet Storm
278689 - openoffice
sun
openoffice
staroffice
Heap-based buffer overflow in OpenOffice.org (aka StarOffice) 1.1.x up to 1.1.5 and 2.0.x before 2.0.3 allows user-assisted attackers to execute arbitrary code via a crafted OpenOffice XML document t… CWE-119
Incorrect Access of Indexable Resource ('Range Error') 
CVE-2006-3117 2018-10-19 01:45 2006-07-1 Show GitHub Exploit DB Packet Storm
278690 - openssl openssl OpenSSL 0.9.7 before 0.9.7l, 0.9.8 before 0.9.8d, and earlier versions allows attackers to cause a denial of service (CPU consumption) via parasitic public keys with large (1) "public exponent" or (2… CWE-399
 Resource Management Errors
CVE-2006-2940 2018-10-19 01:44 2006-09-29 Show GitHub Exploit DB Packet Storm