Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 17, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
219541 4.3 警告 e107.org - e107 の Chatbox Plugin におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2006-0857 2014-03-11 17:43 2006-02-23 Show GitHub Exploit DB Packet Storm
219542 6.5 警告 truenorth software - TrueNorth Internet Anywhere eMailserver の IMAP サービスにおけるバッファオーバーフローの脆弱性 - CVE-2006-0853 2014-03-11 17:43 2006-02-23 Show GitHub Exploit DB Packet Storm
219543 4.3 警告 calacode - Calacode @Mail におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2006-0842 2014-03-11 17:43 2006-02-22 Show GitHub Exploit DB Packet Storm
219544 10 危険 京セラ株式会社 - Kyocera プリンタにおける管理メニューにアクセスされる脆弱性 - CVE-2006-0789 2014-03-11 17:43 2006-02-19 Show GitHub Exploit DB Packet Storm
219545 2.6 注意 mybulletinboard - MyBulletinBoard の calendar.php におけるクロスサイトスクリプティングの脆弱性 - CVE-2006-0770 2014-03-11 17:43 2006-02-18 Show GitHub Exploit DB Packet Storm
219546 5 警告 CGIWrap - CGIWrap における重要な情報を取得される脆弱性 - CVE-2006-0767 2014-03-11 17:43 2006-02-18 Show GitHub Exploit DB Packet Storm
219547 5.1 警告 BlackBerry - 複数ベンダの製品用 Motion BlackBerry Enterprise Server におけるバッファオーバーフローの脆弱性 - CVE-2006-0761 2014-03-11 17:43 2006-02-18 Show GitHub Exploit DB Packet Storm
219548 4.3 警告 fuzzymonkey
m blom		 - My Blog などの製品で使用される M. Blom HTML::BBCode におけるクロスサイトスクリプティングの脆弱性 - CVE-2006-0735 2014-03-11 17:43 2006-02-16 Show GitHub Exploit DB Packet Storm
219549 7.5 危険 virtual hosting control system - Virtual Hosting Control System における許可されていないアクセス権を取得される脆弱性 - CVE-2006-0684 2014-03-11 17:43 2006-02-15 Show GitHub Exploit DB Packet Storm
219550 7.8 危険 sony ericsson - 複数の Sony Ericsson 製品におけるバッファオーバーフローの脆弱性 - CVE-2006-0671 2014-03-11 17:43 2006-02-13 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 18, 2026, 4:12 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
292971 - redhat satellite
satellite_5_managed_db
spacewalk-java 		Multiple cross-site scripting (XSS) vulnerabilities in systems/sdc/notes.jsp in Spacewalk and Red Hat Network (RHN) Satellite 5.6 allow remote attackers to inject arbitrary web script or HTML via the… CWE-79
Cross-site Scripting 		CVE-2012-6149 2024-11-21 10:45 2014-02-15 Show GitHub Exploit DB Packet Storm
292972 - pidgin pidgin The Yahoo! protocol plugin in libpurple in Pidgin before 2.10.8 does not properly validate UTF-8 data, which allows remote attackers to cause a denial of service (application crash) via crafted byte … CWE-20
 Improper Input Validation  		CVE-2012-6152 2024-11-21 10:45 2014-02-7 Show GitHub Exploit DB Packet Storm
292973 - zabbix zabbix libs/zbxmedia/eztexting.c in Zabbix 1.8.x before 1.8.18rc1, 2.0.x before 2.0.8rc1, and 2.1.x before 2.1.2 does not properly set the CURLOPT_SSL_VERIFYHOST option for libcurl, which allows man-in-the-… CWE-310
Cryptographic Issues 		CVE-2012-6086 2024-11-21 10:45 2014-01-30 Show GitHub Exploit DB Packet Storm
292974 - apple
canonical
net-snmp 		mac_os_x
ubuntu_linux
net-snmp 		Net-SNMP 5.7.1 and earlier, when AgentX is registering to handle a MIB and processing GETNEXT requests, allows remote attackers to cause a denial of service (crash or infinite loop, CPU consumption, … CWE-399
 Resource Management Errors 		CVE-2012-6151 2024-11-21 10:45 2013-12-14 Show GitHub Exploit DB Packet Storm
292975 - samba
canonical 		samba
ubuntu_linux 		The winbind_name_list_to_sid_string_list function in nsswitch/pam_winbind.c in Samba through 4.1.2 handles invalid require_membership_of group names by accepting authentication by any user, which all… CWE-20
 Improper Input Validation  		CVE-2012-6150 2024-11-21 10:45 2013-12-4 Show GitHub Exploit DB Packet Storm
292976 - kth
opensuse 		snack_sound_toolkit
wavesurfer
opensuse 		Heap-based buffer overflow in the GetWavHeader function in generic/jkSoundFile.c in the Snack Sound Toolkit, as used in WaveSurfer 1.8.8p4, allows remote attackers to cause a denial of service (crash… CWE-119
Incorrect Access of Indexable Resource ('Range Error')  		CVE-2012-6303 2024-11-21 10:45 2013-10-29 Show GitHub Exploit DB Packet Storm
292977 - oracle
mariadb 		mysql
mariadb 		Oracle MySQL and MariaDB 5.5.x before 5.5.29, 5.3.x before 5.3.12, and 5.2.x before 5.2.14 does not modify the salt during multiple executions of the change_user command within the same connection wh… CWE-522
 Insufficiently Protected Credentials 		CVE-2012-5627 2024-11-21 10:45 2013-10-2 Show GitHub Exploit DB Packet Storm
292978 - moodle moodle repository/s3/S3.php in the Amazon S3 library in Moodle through 2.2.11, 2.3.x before 2.3.9, 2.4.x before 2.4.6, and 2.5.x before 2.5.2 does not verify that the server hostname matches a domain name i… CWE-20
 Improper Input Validation  		CVE-2012-6087 2024-11-21 10:45 2013-09-16 Show GitHub Exploit DB Packet Storm
292979 - cisco wireless_control_system
prime_network_control_system 		Multiple cross-site scripting (XSS) vulnerabilities in Health Monitor Login pages in Cisco Prime Network Control System (NCS) and Wireless Control System (WCS) allow remote attackers to inject arbitr… CWE-79
Cross-site Scripting 		CVE-2012-5990 2024-11-21 10:45 2013-09-6 Show GitHub Exploit DB Packet Storm
292980 - cisco identity_services_engine_software Multiple cross-site scripting (XSS) vulnerabilities in the guest portal in Cisco Identity Services Engine (ISE) Software allow remote attackers to inject arbitrary web script or HTML via unspecified … CWE-79
Cross-site Scripting 		CVE-2012-5744 2024-11-21 10:45 2013-08-30 Show GitHub Exploit DB Packet Storm