Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 3, 2026, 6:08 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
223711 4 警告 オラクル - Oracle Siebel CRM の Siebel Call Center における Email - COMM Server Components の処理に関する脆弱性 CWE-noinfo
情報不足 		CVE-2013-2399 2013-11-8 16:41 2013-04-16 Show GitHub Exploit DB Packet Storm
223712 6 警告 オラクル - Oracle Siebel CRM の Siebel UI Framework における Open UI Client の処理に関する脆弱性 CWE-noinfo
情報不足 		CVE-2013-2398 2013-11-8 16:39 2013-04-16 Show GitHub Exploit DB Packet Storm
223713 5.5 警告 オラクル - Oracle Industry Applications の Oracle Retail Central Office における Customer Operations の処理に関する脆弱性 CWE-noinfo
情報不足 		CVE-2013-2397 2013-11-8 16:37 2013-04-16 Show GitHub Exploit DB Packet Storm
223714 4.3 警告 オラクル - Oracle E-Business Suite の Oracle Applications Manager における HTML OAM クライアントの処理に関する脆弱性 CWE-noinfo
情報不足 		CVE-2013-2396 2013-11-8 16:37 2013-04-16 Show GitHub Exploit DB Packet Storm
223715 6.8 警告 オラクル - Oracle MySQL における Data Manipulation Language の処理に関する脆弱性 CWE-noinfo
情報不足 		CVE-2013-2395 2013-11-8 16:36 2013-04-16 Show GitHub Exploit DB Packet Storm
223716 4 警告 MySQL AB
オラクル		 - Oracle MySQL における Server Optimizer の処理に関する脆弱性 CWE-noinfo
情報不足 		CVE-2013-2392 2013-11-8 16:25 2013-04-16 Show GitHub Exploit DB Packet Storm
223717 3 注意 MySQL AB
オラクル		 - Oracle MySQL における Server Install の処理に関する脆弱性 CWE-noinfo
情報不足 		CVE-2013-2391 2013-11-8 16:24 2013-04-16 Show GitHub Exploit DB Packet Storm
223718 4.3 警告 オラクル - Oracle Fusion Middleware の Oracle WebLogic Server における WebLogic Console の処理に関する脆弱性 CWE-noinfo
情報不足 		CVE-2013-2390 2013-11-8 16:22 2013-04-16 Show GitHub Exploit DB Packet Storm
223719 4 警告 MySQL AB
オラクル		 - Oracle MySQL における InnoDB の処理に関する脆弱性 CWE-noinfo
情報不足 		CVE-2013-2389 2013-11-8 16:22 2013-04-16 Show GitHub Exploit DB Packet Storm
223720 5 警告 オラクル - Oracle E-Business Suite の Oracle Applications Technology Stack における Mid Tier File Management の処理に関する脆弱性 CWE-noinfo
情報不足 		CVE-2013-2388 2013-11-8 16:20 2013-04-16 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 4, 2026, 4:17 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
345911 - alex news-engine SQL injection vulnerability in newscomments.php in Alex News-Engine 1.5.0 and earlier allows remote attackers to execute arbitrary SQL commands via the newsid parameter. NVD-CWE-Other
CVE-2006-2879 2017-07-20 10:31 2006-06-7 Show GitHub Exploit DB Packet Storm
345912 - pyblosxom pyblosxom Cross-site scripting (XSS) vulnerability in the Contributed Packages for PyBlosxom 1.2.2 and earlier allows remote attackers to inject arbitrary web script or HTML via the Comments plugin in the (1) … NVD-CWE-Other
CVE-2006-2880 2017-07-20 10:31 2006-06-7 Show GitHub Exploit DB Packet Storm
345913 - pyblosxom pyblosxom This vulnerability is present only in the Contributed Packages of this product. NVD-CWE-Other
CVE-2006-2880 2017-07-20 10:31 2006-06-7 Show GitHub Exploit DB Packet Storm
345914 - knowledgetree knowledgetree Multiple cross-site scripting (XSS) vulnerabilities in KnowledgeTree Open Source 3.0.3 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) fDocumentId parameter in v… NVD-CWE-Other
CVE-2006-2885 2017-07-20 10:31 2006-06-7 Show GitHub Exploit DB Packet Storm
345915 - jam_warehouse knowledgetree_open_source view.php in KnowledgeTree Open Source 3.0.3 and earlier allows remote attackers to obtain the full installation path via a crafted fDocumentId parameter, which displays the path in the resulting erro… NVD-CWE-Other
CVE-2006-2886 2017-07-20 10:31 2006-06-7 Show GitHub Exploit DB Packet Storm
345916 - mediawiki mediawiki Cross-site scripting (XSS) vulnerability in MediaWiki 1.6.0 up to versions before 1.6.7 allows remote attackers to inject arbitrary HTML and web script via the edit form. NVD-CWE-Other
CVE-2006-2895 2017-07-20 10:31 2006-06-7 Show GitHub Exploit DB Packet Storm
345917 - funkboard funkboard Cross-site scripting (XSS) vulnerability in FunkBoard 0.71 allows remote attackers to inject arbitrary HTML or web script via unspecified vectors. NVD-CWE-Other
CVE-2006-2897 2017-07-20 10:31 2006-06-7 Show GitHub Exploit DB Packet Storm
345918 - cowon_america jetaudio Buffer overflow in jetAudio 6.2.6.8330 (Basic), and possibly other versions, allows user-assisted attackers to execute arbitrary code via an audio file (such as WMA) with long ID Tag values including… NVD-CWE-Other
CVE-2006-2910 2017-07-20 10:31 2006-07-6 Show GitHub Exploit DB Packet Storm
345919 - out_of_the_trees_web_design selectapix Cross-site scripting (XSS) vulnerability in SelectaPix 1.31 allows remote attackers to inject arbitrary web script or HTML via the albumID parameter to (1) popup.php and (2) view_album.php. NVD-CWE-Other
CVE-2006-2913 2017-07-20 10:31 2006-06-9 Show GitHub Exploit DB Packet Storm
345920 - cmpro_team clan_manager_pro PHP remote file inclusion vulnerability in cmpro_header.inc.php in Clan Manager Pro (CMPRO) 1.1 and earlier, when register_globals is enabled, allows remote attackers to execute arbitrary PHP code vi… NVD-CWE-Other
CVE-2006-2921 2017-07-20 10:31 2006-06-9 Show GitHub Exploit DB Packet Storm