Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 17, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
231811	5.1	警告	cheese tracker	-	Cheese Tracker の loader_xm.cpp におけるバッファオーバーフローの脆弱性	-	CVE-2006-3814	2012-12-20 18:02	2006-07-25	Show	GitHub Exploit DB Packet Storm

231812	4.3	警告	amazing flash commerce	-	Amazing Flash AFCommerce Shopping Cart におけるクロスサイトスクリプティングの脆弱性	-	CVE-2006-3800	2012-12-20 18:02	2006-07-24	Show	GitHub Exploit DB Packet Storm

231813	7.5	危険	deluxebb	-	DeluxeBB における SQL インジェクション保護を回避される脆弱性	-	CVE-2006-3799	2012-12-20 18:02	2006-07-24	Show	GitHub Exploit DB Packet Storm

231814	5	警告	deluxebb	-	DeluxeBB における _GET 変数を上書きされる脆弱性	-	CVE-2006-3798	2012-12-20 18:02	2006-07-24	Show	GitHub Exploit DB Packet Storm

231815	7.5	危険	deluxebb	-	DeluxeBB における SQL インジェクションの脆弱性	-	CVE-2006-3797	2012-12-20 18:02	2006-07-24	Show	GitHub Exploit DB Packet Storm

231816	7.5	危険	deluxebb	-	DeluxeBB における "スペース" ユーザとしてログインされる脆弱性	-	CVE-2006-3796	2012-12-20 18:02	2006-07-24	Show	GitHub Exploit DB Packet Storm

231817	2.6	注意	deluxebb	-	DeluxeBB におけるクロスサイトスクリプティングの脆弱性	-	CVE-2006-3795	2012-12-20 18:02	2006-07-24	Show	GitHub Exploit DB Packet Storm

231818	5.1	警告	sitedepth	-	SiteDepth CMS の constants.php における PHP リモートファイルインクルージョンの脆弱性	-	CVE-2006-3793	2012-12-20 18:02	2006-07-24	Show	GitHub Exploit DB Packet Storm

231819	7.5	危険	ufo2000	-	UFO2000 の server_protocol.cpp における SQL インジェクションの脆弱性	-	CVE-2006-3792	2012-12-20 18:02	2006-07-24	Show	GitHub Exploit DB Packet Storm

231820	5	警告	ufo2000	-	UFO2000 用の server_transport.cpp におけるサービス運用妨害 (DoS) の脆弱性	-	CVE-2006-3791	2012-12-20 18:02	2006-07-24	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 17, 2026, 4:15 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
291991	8.1	HIGH Network	ibm	infosphere_information_server	IBM InfoSphere Information Server 8.1, 8.5, 8.7, 9.1 has a Session Fixation Vulnerability	CWE-384 Session Fixation	CVE-2013-0507	2024-11-21 10:47	2020-02-6	Show	GitHub Exploit DB Packet Storm

291992	7.5	HIGH Network	imagely	nextgen_gallery	NextGEN Gallery Plugin for WordPress 1.9.10 and 1.9.11 has a Path Disclosure Vulnerability	CWE-200 Information Exposure	CVE-2013-0291	2024-11-21 10:47	2020-01-30	Show	GitHub Exploit DB Packet Storm

291993	5.9	MEDIUM Network	pyrad_project fedoraproject	pyrad fedora	packet.py in pyrad before 2.1 uses weak random numbers to generate RADIUS authenticators and hash passwords, which makes it easier for remote attackers to obtain sensitive information via a brute for…	CWE-330 Use of Insufficiently Random Values	CVE-2013-0294	2024-11-21 10:47	2020-01-29	Show	GitHub Exploit DB Packet Storm

291994	5.4	MEDIUM Network	pinboard_project	pinboard	Pinboard 1.0.6 theme for Wordpress has XSS.	CWE-79 Cross-site Scripting	CVE-2013-0286	2024-11-21 10:47	2020-01-28	Show	GitHub Exploit DB Packet Storm

291995	7.5	HIGH Network	redhat	mrg_management_console	An import error was introduced in Cumin in the code refactoring in r5310. Server certificate validation is always disabled when connecting to Aviary servers, even if the installed packages on a syste…	CWE-295 Improper Certificate Validation	CVE-2013-0264	2024-11-21 10:47	2019-12-31	Show	GitHub Exploit DB Packet Storm

291996	6.5	MEDIUM Network	redhat	openshift	A CSRF issue was found in OpenShift Enterprise 1.2. The web console is using 'Basic authentication' and the REST API has no CSRF attack protection mechanism. This can allow an attacker to obtain the …	CWE-352 Origin Validation Error	CVE-2013-0196	2024-11-21 10:47	2019-12-31	Show	GitHub Exploit DB Packet Storm

291997	6.1	MEDIUM Network	owncloud	owncloud	Cross-site scripting (XSS) vulnerability in ownCloud 4.5.5, 4.0.10, and earlier allows remote attackers to inject arbitrary web script or HTML via the action parameter to core/ajax/sharing.php.	CWE-79 Cross-site Scripting	CVE-2013-0202	2024-11-21 10:47	2019-12-18	Show	GitHub Exploit DB Packet Storm

291998	7.8	HIGH Local	ovirt	node	oVirt Node: Lock screen accepts F2 to drop to shell causing privilege escalation	CWE-269 Improper Privilege Management	CVE-2013-0293	2024-11-21 10:47	2019-12-10	Show	GitHub Exploit DB Packet Storm

291999	4.3	MEDIUM Network	pyrad_project	pyrad	The CreateID function in packet.py in pyrad before 2.1 uses sequential packet IDs, which makes it easier for remote attackers to spoof packets by predicting the next ID, a different vulnerability tha…	CWE-20 Improper Input Validation	CVE-2013-0342	2024-11-21 10:47	2019-12-10	Show	GitHub Exploit DB Packet Storm

292000	5.5	MEDIUM Local	openstack debian	nova debian_linux	OpenStack nova base images permissions are world readable	CWE-732 Incorrect Permission Assignment for Critical Resource	CVE-2013-0326	2024-11-21 10:47	2019-12-6	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed