Vulnerability Search Top

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

Vulnerability Information Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":June 6, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
223991	4.3	警告	オラクル	-	Oracle PeopleSoft Products の PeopleSoft PeopleTools における Portal の処理に関する脆弱性	CWE-noinfo 情報不足	CVE-2013-0392	2013-11-8 11:27	2013-01-15	Show	GitHub Exploit DB Packet Storm

223992	5.5	警告	オラクル	-	Oracle PeopleSoft Products の PeopleSoft PeopleTools における Security の処理に関する脆弱性	CWE-noinfo 情報不足	CVE-2013-0391	2013-11-8 11:26	2013-01-15	Show	GitHub Exploit DB Packet Storm

223993	2.1	注意	オラクル	-	Oracle E-Business Suite の Oracle Applications Framework におけるブックマーク可能なページの処理に関する脆弱性	CWE-noinfo 情報不足	CVE-2013-0390	2013-11-8 11:23	2013-01-15	Show	GitHub Exploit DB Packet Storm

223994	6.8	警告	MySQL AB オラクル	-	Oracle MySQL の MySQL Server における Server Optimizer の処理に関する脆弱性	CWE-noinfo 情報不足	CVE-2013-0389	2013-11-8 11:22	2013-01-15	Show	GitHub Exploit DB Packet Storm

223995	4.3	警告	オラクル	-	Oracle PeopleSoft Products の PeopleSoft HRMS における Mobile Company Directory の処理に関する脆弱性	CWE-noinfo 情報不足	CVE-2013-0388	2013-11-8 11:21	2013-01-15	Show	GitHub Exploit DB Packet Storm

223996	4.3	警告	オラクル	-	Oracle PeopleSoft Products の PeopleSoft PeopleTools における PeopleCode の処理に関する脆弱性	CWE-noinfo 情報不足	CVE-2013-0387	2013-11-8 11:20	2013-01-15	Show	GitHub Exploit DB Packet Storm

223997	6.8	警告	MySQL AB オラクル	-	Oracle MySQL の MySQL Server における Stored Procedure の処理に関する脆弱性	CWE-noinfo 情報不足	CVE-2013-0386	2013-11-8 11:19	2013-01-15	Show	GitHub Exploit DB Packet Storm

223998	6.6	警告	MySQL AB オラクル	-	Oracle MySQL の MySQL Server における Server Replication の処理に関する脆弱性	CWE-noinfo 情報不足	CVE-2013-0385	2013-11-8 11:18	2013-01-15	Show	GitHub Exploit DB Packet Storm

223999	6.8	警告	MySQL AB オラクル	-	Oracle MySQL の MySQL Server における Information Schema の処理に関する脆弱性	CWE-noinfo 情報不足	CVE-2013-0384	2013-11-8 11:17	2013-01-15	Show	GitHub Exploit DB Packet Storm

224000	4.3	警告	MySQL AB オラクル	-	Oracle MySQL の MySQL Server における Server Locking の処理に関する脆弱性	CWE-noinfo 情報不足	CVE-2013-0383	2013-11-8 11:15	2013-01-15	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:June 6, 2026, 4:18 a.m.

No	CVSS	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
346031	-	dws_systems_inc.	sql-ledger	SQL-Ledger before 2.4.4 stores a password in a query string, which might allow context-dependent attackers to obtain the password via a Referer field or browser history.	NVD-CWE-Other	CVE-2006-4798	2017-07-20 10:33	2006-09-15	Show	GitHub Exploit DB Packet Storm

346032	-	drupal	drupal_userreview_module	Cross-site scripting (XSS) vulnerability in the Drupal 4.7 Userreview module before 1.19 2006/09/12 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.	NVD-CWE-Other	CVE-2006-4821	2017-07-20 10:33	2006-09-16	Show	GitHub Exploit DB Packet Storm

346033	-	emusoft	emucms	Multiple cross-site scripting (XSS) vulnerabilities in index.php in eMuSOFT emuCMS 0.3 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) query or (2) page paramete…	NVD-CWE-Other	CVE-2006-4822	2017-07-20 10:33	2006-09-16	Show	GitHub Exploit DB Packet Storm

346034	-	claroline dokeos	claroline open_source_learning_and_knowledge_management_tool	PHP remote file inclusion vulnerability in inc/claro_init_local.inc.php in Claroline 1.7.7 and earlier, as used in Dokeos and possibly other products, allows remote attackers to execute arbitrary PHP…	CWE-94 Code Injection	CVE-2006-4844	2017-07-20 10:33	2006-09-19	Show	GitHub Exploit DB Packet Storm

346035	-	claroline dokeos	claroline open_source_learning_and_knowledge_management_tool	Successful exploitation requires that "register_globals" is enabled. This vulnerability is addressed in the following product release: Claroline, Claroline, 1.7.8	CWE-94 Code Injection	CVE-2006-4844	2017-07-20 10:33	2006-09-19	Show	GitHub Exploit DB Packet Storm

346036	-	citrix	access_gateway	Unspecified vulnerability in Citrix Access Gateway with Advanced Access Control (AAC) 4.2 before 20060914, when AAC is configured to use LDAP authentication, allows remote attackers to bypass authent…	NVD-CWE-Other	CVE-2006-4846	2017-07-20 10:33	2006-09-19	Show	GitHub Exploit DB Packet Storm

346037	-	citrix	access_gateway	Successful exploitation requires that the Advanced Access Control option is set to use LDAP authentication. This vulnerability is addressed by hotfix AAC420W004.	NVD-CWE-Other	CVE-2006-4846	2017-07-20 10:33	2006-09-19	Show	GitHub Exploit DB Packet Storm

346038	-	bolinos	bolinos	PHP remote file inclusion vulnerability in system/_b/contentFiles/gBHTMLEditor.php in BolinOS 4.5.5 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the gBRootPath param…	NVD-CWE-Other	CVE-2006-4851	2017-07-20 10:33	2006-09-19	Show	GitHub Exploit DB Packet Storm

346039	-	qualiteam	x-cart	Dynamic variable evaluation vulnerability in cmpi.php in Qualiteam X-Cart 4.1.3 and earlier allows remote attackers to overwrite arbitrary program variables and execute arbitrary PHP code, as demonst…	NVD-CWE-Other	CVE-2006-4904	2017-07-20 10:33	2006-09-21	Show	GitHub Exploit DB Packet Storm

346040	-	cisco	guard_ddos_mitigation_appliance	Cross-site scripting (XSS) vulnerability in Cisco Guard DDoS Mitigation Appliance before 5.1(6), when anti-spoofing is enabled, allows remote attackers to inject arbitrary web script or HTML via cert…	NVD-CWE-Other	CVE-2006-4909	2017-07-20 10:33	2006-09-21	Show	GitHub Exploit DB Packet Storm