Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Feb. 9, 2026, 12:59 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
223211 9.3 危険 サン・マイクロシステムズ - Go-oo の svtools/source/filter.vcl/wmf/enhwmf.cxx におけるヒープベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2009-2139 2012-12-20 19:10 2009-09-8 Show GitHub Exploit DB Packet Storm
223212 4.3 警告 tbdev - TBDev.NET におけるオープンリダイレクトの脆弱性 CWE-20
不適切な入力確認 		CVE-2009-2138 2012-12-20 19:10 2009-06-19 Show GitHub Exploit DB Packet Storm
223213 5 警告 pivot - Pivot の pivot/tb.php における重要な情報を取得される脆弱性 CWE-200
情報漏えい 		CVE-2009-2134 2012-12-20 19:10 2009-06-19 Show GitHub Exploit DB Packet Storm
223214 4.3 警告 pivot - Pivot におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2009-2133 2012-12-20 19:10 2009-06-19 Show GitHub Exploit DB Packet Storm
223215 6.5 警告 tekbase - TekBase All-in-One における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2009-2120 2012-12-20 19:10 2009-06-18 Show GitHub Exploit DB Packet Storm
223216 7.5 危険 phportal - phPortal の uye_paneli.php における管理者アクセス権を取得される脆弱性 CWE-287
不適切な認証 		CVE-2009-2117 2012-12-20 19:10 2009-06-18 Show GitHub Exploit DB Packet Storm
223217 4 警告 Iconify.it - SkyBlueCanvas の admin.php におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2009-2116 2012-12-20 19:10 2009-06-18 Show GitHub Exploit DB Packet Storm
223218 6.8 警告 Iconify.it - SkyBlueCanvas の admin.php における重要な情報を取得される脆弱性 CWE-200
情報漏えい 		CVE-2009-2115 2012-12-20 19:10 2009-06-18 Show GitHub Exploit DB Packet Storm
223219 4.3 警告 Iconify.it - SkyBlueCanvas の admin.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2009-2114 2012-12-20 19:10 2009-06-18 Show GitHub Exploit DB Packet Storm
223220 4.3 警告 webmedia explorer - webmex の index.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2009-2107 2012-12-20 19:10 2009-06-17 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:April 25, 2026, 4:08 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
278251 - cisco transport_controller
optical_networking_systems_software
ons_15310-cl_series
ons_15600
ons_15454_mspp 		The installation of Cisco Transport Controller (CTC) for Cisco Optical Networking System (ONS) 15000 series nodes adds a Java policy file entry with a wildcard that grants the java.security.AllPermis… NVD-CWE-Other
CVE-2006-1672 2018-10-31 01:26 2006-04-7 Show GitHub Exploit DB Packet Storm
278252 - vmware esx VMware ESX Server 2.0.x before 2.0.2 and 2.x before 2.5.2 patch 4 stores authentication credentials in base 64 encoded format in the vmware.mui.kid and vmware.mui.sid cookies, which allows attackers … CWE-255
Credentials Management 		CVE-2006-2481 2018-10-31 01:26 2006-08-1 Show GitHub Exploit DB Packet Storm
278253 - cisco asa_5500
vpn_3000_concentrator_series_software 		Multiple cross-site scripting (XSS) vulnerabilities in the WebVPN feature in the Cisco VPN 3000 Series Concentrators and Cisco ASA 5500 Series Adaptive Security Appliances (ASA), when in WebVPN clien… NVD-CWE-Other
CVE-2006-3073 2018-10-31 01:26 2006-06-19 Show GitHub Exploit DB Packet Storm
278254 - linux linux_kernel Linux kernel 2.6.x, when using both NFS and EXT3, allows remote attackers to cause a denial of service (file system panic) via a crafted UDP packet with a V2 lookup procedure that specifies a bad fil… NVD-CWE-Other
CVE-2006-3468 2018-10-31 01:26 2006-07-21 Show GitHub Exploit DB Packet Storm
278255 - vmware infrastructure
player
server
workstation
esx 		vmware-config.pl in VMware for Linux, ESX Server 2.x, and Infrastructure 3 does not check the return code from a Perl chmod function call, which might cause an SSL key file to be created with an unsa… NVD-CWE-Other
CVE-2006-3589 2018-10-31 01:26 2006-07-21 Show GitHub Exploit DB Packet Storm
278256 - cisco ips_sensor_software The device driver for Intel-based gigabit network adapters in Cisco Intrusion Prevention System (IPS) 5.1(1) through 5.1(p1), as installed on various Cisco Intrusion Prevention System 42xx appliances… NVD-CWE-Other
CVE-2006-3596 2018-10-31 01:26 2006-07-19 Show GitHub Exploit DB Packet Storm
278257 - sun solaris
sunos 		Unspecified vulnerability in NIS server on Sun Solaris 8, 9, and 10 allows local and remote attackers to cause a denial of service (ypserv hang) via unknown vectors. NVD-CWE-Other
CVE-2006-3664 2018-10-31 01:26 2006-07-19 Show GitHub Exploit DB Packet Storm
278258 - cisco vpn_3000_concentrator_series_software Multiple unspecified vulnerabilities in Cisco VPN 3000 series concentrators before 4.1, 4.1.x up to 4.1(7)L, and 4.7.x up to 4.7(2)F allow attackers to execute the (1) CWD, (2) MKD, (3) CDUP, (4) RNF… NVD-CWE-Other
CVE-2006-4313 2018-10-31 01:26 2006-08-24 Show GitHub Exploit DB Packet Storm
278259 - sun solaris
sunos 		Buffer overflow in the format command in Solaris 8, 9, and 10 allows local users with access to format (such as the "File System Management" RBAC profile) to execute arbitrary code via unknown vector… NVD-CWE-Other
CVE-2006-4319 2018-10-31 01:26 2006-08-24 Show GitHub Exploit DB Packet Storm
278260 - cisco network_admission_control
network_admission_control_manager_and_server_system_software 		The Cisco Network Admission Control (NAC) 3.6.4.1 and earlier allows remote attackers to prevent installation of the Cisco Clean Access (CCA) Agent and bypass local and remote protection mechanisms b… NVD-CWE-Other
CVE-2006-4430 2018-10-31 01:26 2006-08-29 Show GitHub Exploit DB Packet Storm