Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Feb. 9, 2026, 12:59 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
219421 5 警告 Jason A. Donenfeld
Lars Hjemli		 - cgit の ui-summary.c の cgit_parse_readme 関数におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2013-2117 2013-08-13 12:29 2013-05-27 Show GitHub Exploit DB Packet Storm
219422 5 警告 シスコシステムズ - Cisco Finesse の Web インタフェースにおける絶対パストラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2013-3457 2013-08-13 11:08 2013-08-12 Show GitHub Exploit DB Packet Storm
219423 4.3 警告 OpenEMR - OpenEMR の interface/main/onotes/office_comments_full.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2013-4620 2013-08-13 10:46 2013-06-10 Show GitHub Exploit DB Packet Storm
219424 6.5 警告 OpenEMR - OpenEMR における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2013-4619 2013-08-13 10:41 2013-06-10 Show GitHub Exploit DB Packet Storm
219425 9.3 危険 F5 Networks - F5 BIG-IP APM および FirePass などの製品におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2013-0150 2013-08-13 10:27 2013-06-26 Show GitHub Exploit DB Packet Storm
219426 4.3 警告 Alkacon Software - Alkacon OpenCms におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2013-4600 2013-08-13 10:08 2013-07-10 Show GitHub Exploit DB Packet Storm
219427 10 危険 オラクル - Oracle Java SE および JavaFX の Java Runtime Environment におけるヒープベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2013-0402 2013-08-12 17:55 2013-03-8 Show GitHub Exploit DB Packet Storm
219428 4.3 警告 オラクル - Oracle Java SE の Java Runtime Environment における Deployment の処理に関する脆弱性 CWE-noinfo
情報不足 		CVE-2013-2416 2013-08-12 17:48 2013-04-16 Show GitHub Exploit DB Packet Storm
219429 5 警告 オラクル - Oracle Java SE の Java Runtime Environment における JavaFX の処理に関する脆弱性 CWE-noinfo
情報不足 		CVE-2013-2438 2013-08-12 17:47 2013-04-16 Show GitHub Exploit DB Packet Storm
219430 5 警告 オラクル - Oracle Java SE および JavaFX の Java Runtime Environment における JavaFX の処理に関する脆弱性 CWE-noinfo
情報不足 		CVE-2013-1564 2013-08-12 17:46 2013-04-16 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:April 21, 2026, 4:10 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
278221 - symantec antivirus_scan_engine Symantec Scan Engine 5.0.0.24, and possibly other versions before 5.1.0.7, stores sensitive log and virus definition files under the web root with insufficient access control, which allows remote att… NVD-CWE-Other
CVE-2006-0232 2018-10-20 00:43 2006-04-25 Show GitHub Exploit DB Packet Storm
278222 - microblog microblog Cross-site scripting (XSS) vulnerability in functions.php in microBlog 2.0 RC-10 allows remote attackers to inject arbitrary web script and HTML via a javascript: URI in a [url] BBcode tag. CWE-79
Cross-site Scripting 		CVE-2006-0233 2018-10-20 00:43 2006-01-18 Show GitHub Exploit DB Packet Storm
278223 - microblog microblog SQL injection vulnerability in index.php in microBlog 2.0 RC-10 allows remote attackers to execute arbitrary SQL commands via the (1) month and (2) year parameters. NVD-CWE-Other
CVE-2006-0234 2018-10-20 00:43 2006-01-18 Show GitHub Exploit DB Packet Storm
278224 - white_angle white_album SQL injection vulnerability in WhiteAlbum 2.5 allows remote attackers to execute arbitrary SQL commands via the dir parameter to pictures.php. NVD-CWE-Other
CVE-2006-0235 2018-10-20 00:43 2006-01-18 Show GitHub Exploit DB Packet Storm
278225 - mozilla thunderbird GUI display truncation vulnerability in Mozilla Thunderbird 1.0.2, 1.0.6, and 1.0.7 allows user-assisted attackers to execute arbitrary code via an attachment with a filename containing a large numbe… CWE-94
Code Injection 		CVE-2006-0236 2018-10-20 00:43 2006-01-18 Show GitHub Exploit DB Packet Storm
278226 - 8pixel.net simple_blog Multiple cross-site scripting (XSS) vulnerabilities in Simple Blog 2.1 allow remote attackers to inject arbitrary web script or HTML via (1) a comment to comments.asp and (2) possibly certain other f… NVD-CWE-Other
CVE-2006-0239 2018-10-20 00:43 2006-01-18 Show GitHub Exploit DB Packet Storm
278227 - webmobo wbnews Cross-site scripting vulnerability in WBNews 1.1.0 and earlier allows remote attackers to inject arbitrary web script or HTML via the Name field. NVD-CWE-Other
CVE-2006-0241 2018-10-20 00:43 2006-01-18 Show GitHub Exploit DB Packet Storm
278228 - php_fusebox php_fusebox Cross-site scripting vulnerability in index.php in PHP Fusebox 4.0.6 allows remote attackers to inject arbitrary web script or HTML via the fuseaction parameter. NVD-CWE-Other
CVE-2006-0242 2018-10-20 00:43 2006-01-18 Show GitHub Exploit DB Packet Storm
278229 - benders_calendar benders_calendar SQL injection vulnerability in Benders Calendar 1.0 allows remote attackers to execute arbitrary SQL commands via multiple parameters, as demonstrated by the (1) year, (2) month, and (3) day paramete… NVD-CWE-Other
CVE-2006-0252 2018-10-20 00:43 2006-01-18 Show GitHub Exploit DB Packet Storm
278230 - ambicom blue_neighbors Buffer overflow in the Bluetooth OBEX Object Push service in "Blue Neighbors.EXE" in AmbiCom Blue Neighbors 2.50 Build 2500 and earlier allows remote attackers to execute arbitrary code via a long fi… NVD-CWE-Other
CVE-2006-0253 2018-10-20 00:43 2006-01-18 Show GitHub Exploit DB Packet Storm