Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 15, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
219391 5 警告 comscripts - CS-Forum における CRLF インジェクションの脆弱性 - CVE-2006-3171 2014-03-11 17:43 2006-06-23 Show GitHub Exploit DB Packet Storm
219392 5 警告 Netpbm - NetPBM におけるバッファオーバーフローの脆弱性 - CVE-2006-3145 2014-03-11 17:43 2006-06-22 Show GitHub Exploit DB Packet Storm
219393 4.6 警告 easy-cms - easy-CMS における任意の PHP コードを実行される脆弱性 - CVE-2006-3128 2014-03-11 17:43 2006-06-21 Show GitHub Exploit DB Packet Storm
219394 5 警告 chipmailer - Chipmailer における重要な情報を取得される脆弱性 - CVE-2006-3112 2014-03-11 17:43 2006-06-21 Show GitHub Exploit DB Packet Storm
219395 4.3 警告 シスコシステムズ - Cisco CallManager におけるクロスサイトスクリプティングの脆弱性 - CVE-2006-3109 2014-03-11 17:43 2006-06-21 Show GitHub Exploit DB Packet Storm
219396 5 警告 Bitweaver - Bitweaver における CRLF インジェクションの脆弱性 - CVE-2006-3105 2014-03-11 17:43 2006-06-21 Show GitHub Exploit DB Packet Storm
219397 4.3 警告 Bitweaver - Bitweaver におけるクロスサイトスクリプティングの脆弱性 - CVE-2006-3103 2014-03-11 17:43 2006-06-21 Show GitHub Exploit DB Packet Storm
219398 5 警告 IBM - IBM DB2 Universal Database におけるバッファオーバーフローの脆弱性 - CVE-2006-3066 2014-03-11 17:43 2006-06-19 Show GitHub Exploit DB Packet Storm
219399 6.8 警告 lucid designs - Chris Lea Lucid Calendar におけるクロスサイトスクリプティングの脆弱性 - CVE-2006-3025 2014-03-11 17:43 2006-06-15 Show GitHub Exploit DB Packet Storm
219400 5.1 警告 hotwebscripts - CMS Mundo における任意の PHP コードを実行される脆弱性 - CVE-2006-2931 2014-03-11 17:43 2006-06-21 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 15, 2026, 4:28 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
295681 - moodle moodle Moodle 2.1.x before 2.1.6 and 2.2.x before 2.2.3 allows remote authenticated users to bypass question:use* capability requirements and add arbitrary questions to a quiz via the questions feature. CWE-264
Permissions, Privileges, and Access Controls 		CVE-2012-2355 2024-11-21 10:38 2012-07-21 Show GitHub Exploit DB Packet Storm
295682 - moodle moodle Moodle 2.1.x before 2.1.6 and 2.2.x before 2.2.3 allows remote authenticated users to bypass the moodle/site:readallmessages capability requirement and read arbitrary messages by using the "Recent co… CWE-264
Permissions, Privileges, and Access Controls 		CVE-2012-2354 2024-11-21 10:38 2012-07-21 Show GitHub Exploit DB Packet Storm
295683 - moodle moodle Moodle 2.1.x before 2.1.6 and 2.2.x before 2.2.3 allows remote authenticated users to obtain sensitive user information from hidden fields by leveraging the teacher role and navigating to "Enrolled u… CWE-200
Information Exposure 		CVE-2012-2353 2024-11-21 10:38 2012-07-21 Show GitHub Exploit DB Packet Storm
295684 - florian_weber spaces The Spaces module 6.x-3.x before 6.x-3.4 for Drupal does not enforce permissions on non-object pages, which allows remote attackers to obtain sensitive information and possibly have other impacts via… CWE-264
Permissions, Privileges, and Access Controls 		CVE-2012-2303 2024-11-21 10:38 2012-07-19 Show GitHub Exploit DB Packet Storm
295685 - rubygems mail_gem The Mail gem before 2.4.3 for Ruby allows remote attackers to execute arbitrary commands via shell metacharacters in a (1) sendmail or (2) exim delivery. CWE-20
 Improper Input Validation  		CVE-2012-2140 2024-11-21 10:38 2012-07-19 Show GitHub Exploit DB Packet Storm
295686 - rubygems mail_gem Directory traversal vulnerability in lib/mail/network/delivery_methods/file_delivery.rb in the Mail gem before 2.4.4 for Ruby allows remote attackers to read arbitrary files via a .. (dot dot) in the… CWE-22
Path Traversal 		CVE-2012-2139 2024-11-21 10:38 2012-07-19 Show GitHub Exploit DB Packet Storm
295687 - mozilla firefox
thunderbird
thunderbird_esr
seamonkey 		Mozilla Firefox 4.x through 13.0, Firefox ESR 10.x before 10.0.6, Thunderbird 5.0 through 13.0, Thunderbird ESR 10.x before 10.0.6, and SeaMonkey before 2.11 do not properly implement the JavaScript … NVD-CWE-Other
CVE-2012-1967 2024-11-21 10:38 2012-07-18 Show GitHub Exploit DB Packet Storm
295688 - mozilla firefox Mozilla Firefox 4.x through 13.0 and Firefox ESR 10.x before 10.0.6 do not have the same context-menu restrictions for data: URLs as for javascript: URLs, which allows remote attackers to conduct cro… CWE-264
Permissions, Privileges, and Access Controls 		CVE-2012-1966 2024-11-21 10:38 2012-07-18 Show GitHub Exploit DB Packet Storm
295689 - mozilla firefox Mozilla Firefox 4.x through 13.0 and Firefox ESR 10.x before 10.0.6 do not properly establish the security context of a feed: URL, which allows remote attackers to bypass unspecified cross-site scrip… CWE-79
Cross-site Scripting 		CVE-2012-1965 2024-11-21 10:38 2012-07-18 Show GitHub Exploit DB Packet Storm
295690 - mozilla firefox
thunderbird
thunderbird_esr
seamonkey 		The certificate-warning functionality in browser/components/certerror/content/aboutCertError.xhtml in Mozilla Firefox 4.x through 12.0, Firefox ESR 10.x before 10.0.6, Thunderbird 5.0 through 12.0, T… NVD-CWE-noinfo
CVE-2012-1964 2024-11-21 10:38 2012-07-18 Show GitHub Exploit DB Packet Storm