Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Feb. 9, 2026, 12:59 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
219561 4 警告 Moodle - Moodle の rss/file.php における重要な block 情報を取得される脆弱性 CWE-287
不適切な認証 		CVE-2013-2245 2013-07-30 16:16 2013-07-15 Show GitHub Exploit DB Packet Storm
219562 4.3 警告 Moodle - Moodle の lib/conditionlib.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2013-2244 2013-07-30 16:15 2013-07-15 Show GitHub Exploit DB Packet Storm
219563 4 警告 Moodle - Moodle の mod/lesson/pagetypes/matching.php における重要な answer 情報を取得される脆弱性 CWE-200
情報漏えい 		CVE-2013-2243 2013-07-30 16:15 2013-07-15 Show GitHub Exploit DB Packet Storm
219564 4 警告 Moodle - Moodle の mod/chat/gui_sockets/index.php におけるアクセス制限を回避される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2013-2242 2013-07-30 16:14 2013-07-15 Show GitHub Exploit DB Packet Storm
219565 4.3 警告 TrustGo Inc. - TrustGo Antivirus & Mobile Security にサービス運用妨害 (DoS) の脆弱性 CWE-20
不適切な入力確認 		CVE-2013-3580 2013-07-30 14:38 2013-07-29 Show GitHub Exploit DB Packet Storm
219566 9.3 危険 Apache Software Foundation - Struts で使用される Apache Struts Showcase App における任意の OGNL コードを実行される脆弱性 CWE-94
コード・インジェクション 		CVE-2013-1965 2013-07-30 13:51 2013-05-27 Show GitHub Exploit DB Packet Storm
219567 7.5 危険 ヒューレット・パッカード - HP LoadRunner における任意のコードを実行される脆弱性 CWE-noinfo
情報不足 		CVE-2013-4801 2013-07-30 12:29 2013-07-24 Show GitHub Exploit DB Packet Storm
219568 9.3 危険 ヒューレット・パッカード - HP LoadRunner における任意のコードを実行される脆弱性 CWE-noinfo
情報不足 		CVE-2013-4800 2013-07-30 12:29 2013-07-24 Show GitHub Exploit DB Packet Storm
219569 7.6 危険 ヒューレット・パッカード - HP LoadRunner における任意のコードを実行される脆弱性 CWE-noinfo
情報不足 		CVE-2013-4799 2013-07-30 12:28 2013-07-24 Show GitHub Exploit DB Packet Storm
219570 10 危険 ヒューレット・パッカード - HP LoadRunner における任意のコードを実行される脆弱性 CWE-noinfo
情報不足 		CVE-2013-4798 2013-07-30 12:28 2013-07-24 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:April 21, 2026, 4:10 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
278921 - ada imgsvr Patrice Freydiere ImgSvr (aka ADA Image Server) allows remote attackers to cause a denial of service (daemon crash) via a long HTTP POST request. NOTE: this might be the same issue as CVE-2004-2463. NVD-CWE-Other
CVE-2006-3546 2018-10-19 01:47 2006-07-13 Show GitHub Exploit DB Packet Storm
278922 - horde horde Multiple cross-site scripting (XSS) vulnerabilities in Horde Application Framework 3.0.0 through 3.0.10 and 3.1.0 through 3.1.1 allow remote attackers to inject arbitrary web script or HTML via a (1)… NVD-CWE-Other
CVE-2006-3548 2018-10-19 01:47 2006-07-13 Show GitHub Exploit DB Packet Storm
278923 - dkscript dragons_kingdom_script Multiple cross-site scripting (XSS) vulnerabilities in DKScript.com Dragon's Kingdom Script 1.0 allow remote attackers to inject arbitrary web script or HTML via a javascript URI in the SRC attribute… CWE-79
Cross-site Scripting 		CVE-2006-3539 2018-10-19 01:47 2006-07-13 Show GitHub Exploit DB Packet Storm
278924 - horde horde_application_framework services/go.php in Horde Application Framework 3.0.0 through 3.0.10 and 3.1.0 through 3.1.1 does not properly restrict its image proxy capability, which allows remote attackers to perform "Web tunnel… NVD-CWE-Other
CVE-2006-3549 2018-10-19 01:47 2006-07-13 Show GitHub Exploit DB Packet Storm
278925 - f5 firepass_4100 Multiple cross-site scripting (XSS) vulnerabilities in F5 Networks FirePass 4100 5.x allow remote attackers to inject arbitrary web script or HTML via unspecified "writable form fields and hidden fie… NVD-CWE-Other
CVE-2006-3550 2018-10-19 01:47 2006-07-13 Show GitHub Exploit DB Packet Storm
278926 - planet_concept planetnews PlaNet Concept planetNews allows remote attackers to bypass authentication and execute arbitrary code via a direct request to news/admin/planetnews.php. NVD-CWE-Other
CVE-2006-3553 2018-10-19 01:47 2006-07-13 Show GitHub Exploit DB Packet Storm
278927 - mkportal mkportal Directory traversal vulnerability in index.php in MKPortal 1.0.1 Final allows remote attackers to include and execute arbitrary local files via directory traversal sequences in the language cookie, a… NVD-CWE-Other
CVE-2006-3554 2018-10-19 01:47 2006-07-13 Show GitHub Exploit DB Packet Storm
278928 - php_fusion php_fusion Multiple cross-site scripting (XSS) vulnerabilities in submit.php in PHP-Fusion before 6.01.3 allow remote attackers to inject arbitrary web script or HTML by using edit_profile.php to upload a (1) a… NVD-CWE-Other
CVE-2006-3555 2018-10-19 01:47 2006-07-13 Show GitHub Exploit DB Packet Storm
278929 - extcalendar extcalendar PHP remote file inclusion vulnerability in extcalendar.php in Mohamed Moujami ExtCalendar 2.0 allows remote attackers to execute arbitrary PHP code via a URL in the mosConfig_absolute_path parameter. CWE-94
Code Injection 		CVE-2006-3556 2018-10-19 01:47 2006-07-13 Show GitHub Exploit DB Packet Storm
278930 - mt_orumcek mt_orumcek_toplist MT Orumcek Toplist 2.2 stores DB/orumcektoplist.mdb under the web root with insufficient access control, which allows remote attackers to obtain sensitive information via a direct request. NVD-CWE-Other
CVE-2006-3557 2018-10-19 01:47 2006-07-13 Show GitHub Exploit DB Packet Storm