Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 4, 2026, 4 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
226871 4.3 警告 Piwik - Piwik におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2013-1844 2013-03-25 16:34 2013-03-8 Show GitHub Exploit DB Packet Storm
226872 7.2 危険 Canonical - Ubuntu で使用される pam-xdg-support における権限を取得される脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2013-1052 2013-03-25 16:21 2013-03-18 Show GitHub Exploit DB Packet Storm
226873 4.3 警告 Debian
Canonical
- apt におけるパッケージを変更される脆弱性 CWE-20
不適切な入力確認
CVE-2013-1051 2013-03-25 16:20 2013-03-14 Show GitHub Exploit DB Packet Storm
226874 6.8 警告 Google - Google Chrome で使用される Google V8 におけるサービス運用妨害 (DoS) の脆弱性 CWE-DesignError
CVE-2013-2632 2013-03-25 16:04 2013-03-18 Show GitHub Exploit DB Packet Storm
226875 6.9 警告 XFree86 Project - XFree86 x11perf の x11perfcomp における権限を取得される脆弱性 CWE-Other
その他
CVE-2011-2504 2013-03-25 16:02 2011-07-27 Show GitHub Exploit DB Packet Storm
226876 5.8 警告 Apache Software Foundation - Apache CXF の URIMappingInterceptor における SOAP サービスへのアクセス権を取得される脆弱性 - CVE-2012-5633 2013-03-25 16:00 2012-11-14 Show GitHub Exploit DB Packet Storm
226877 7.5 危険 tg0 - Ruby 用 Curl Gem における任意のコマンドを実行される脆弱性 CWE-94
コード・インジェクション
CVE-2013-2617 2013-03-25 14:21 2013-03-12 Show GitHub Exploit DB Packet Storm
226878 7.5 危険 Hampton Catlin - Ruby 用 MiniMagick Gem における任意のコマンドを実行される脆弱性 CWE-94
コード・インジェクション
CVE-2013-2616 2013-03-25 14:20 2013-03-12 Show GitHub Exploit DB Packet Storm
226879 7.5 危険 Daniel Choi - Ruby 用 fastreader Gem における任意のコマンドを実行される脆弱性 CWE-94
コード・インジェクション
CVE-2013-2615 2013-03-25 14:20 2013-03-12 Show GitHub Exploit DB Packet Storm
226880 7.5 危険 Stefaan Colman - Ruby 用 command_wrap Gem における任意のコマンドを実行される脆弱性 CWE-94
コード・インジェクション
CVE-2013-1875 2013-03-25 14:19 2013-03-18 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 5, 2026, 4:11 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
345761 - fusionphp fusion_news PHP remote file inclusion vulnerability in index.php in Fusion News 3.7 allows remote attackers to execute arbitrary PHP code via a URL in the fpath parameter. NVD-CWE-Other
CVE-2006-4240 2017-07-20 10:32 2006-08-22 Show GitHub Exploit DB Packet Storm
345762 - usermin usermin Usermin before 1.220 (20060629) allows remote attackers to read arbitrary files, possibly related to chfn/save.cgi not properly handling an empty shell parameter, which results in changing root's she… NVD-CWE-Other
CVE-2006-4246 2017-07-20 10:32 2006-09-20 Show GitHub Exploit DB Packet Storm
345763 - usermin usermin This vulnerability is addressed in the following product release: Webmin, Usermin, 1.220 NVD-CWE-Other
CVE-2006-4246 2017-07-20 10:32 2006-09-20 Show GitHub Exploit DB Packet Storm
345764 - ibm aix Unspecified vulnerability in setlocale in IBM AIX 5.1.0 through 5.3.0 allows local users to gain privileges via unspecified vectors. NVD-CWE-Other
CVE-2006-4254 2017-07-20 10:32 2006-08-22 Show GitHub Exploit DB Packet Storm
345765 - ibm aix IBM has released an advisory and interim fixes to address this issue. NVD-CWE-Other
CVE-2006-4254 2017-07-20 10:32 2006-08-22 Show GitHub Exploit DB Packet Storm
345766 - john_hanna anti-spam_smtp_proxy_server Absolute path traversal vulnerability in the get functionality in Anti-Spam SMTP Proxy (ASSP) allows remote authenticated users to read arbitrary files via (1) C:\ (Windows drive letter), (2) UNC, an… NVD-CWE-Other
CVE-2006-4258 2017-07-20 10:32 2006-08-22 Show GitHub Exploit DB Packet Storm
345767 - jake_olefsky fotopholder Cross-site scripting (XSS) vulnerability in index.php in Fotopholder 1.8 allows remote attackers to inject arbitrary web script or HTML via the path parameter. NOTE: this might be resultant from a d… NVD-CWE-Other
CVE-2006-4259 2017-07-20 10:32 2006-08-22 Show GitHub Exploit DB Packet Storm
345768 - jake_olefsky fotopholder Directory traversal vulnerability in index.php in Fotopholder 1.8 allows remote attackers to read arbitrary directories or files via a .. (dot dot) in the path parameter. NVD-CWE-Other
CVE-2006-4260 2017-07-20 10:32 2006-08-22 Show GitHub Exploit DB Packet Storm
345769 - tutti_nova tutti_nova Multiple PHP remote file inclusion vulnerabilities in Tutti Nova 1.6 and earlier allow remote attackers to execute arbitrary PHP code via a URL in the TNLIB_DIR parameter to (1) include/novalib/class… NVD-CWE-Other
CVE-2006-4277 2017-07-20 10:32 2006-08-22 Show GitHub Exploit DB Packet Storm
345770 - arthur_konze_webdesign akocomment PHP remote file inclusion vulnerability in akocomments.php in AkoComment 1.1 module (com_akocomment) for Mambo 4.5 allows remote attackers to execute arbitrary PHP code via a URL in the mosConfig_abs… NVD-CWE-Other
CVE-2006-4281 2017-07-20 10:32 2006-08-22 Show GitHub Exploit DB Packet Storm