Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 20, 2026, 6 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
232411 7.5 危険 zonemetrics - ZoneMetrics ZoneX Publishers Gold Edition の includes/usercp_register.php における PHP リモートファイルインクルージョンの脆弱性 - CVE-2006-4036 2012-12-20 18:02 2006-08-9 Show GitHub Exploit DB Packet Storm
232412 10 危険 WordPress.org - WordPress における脆弱性 CWE-noinfo
情報不足
CVE-2006-4028 2012-12-20 18:02 2006-07-29 Show GitHub Exploit DB Packet Storm
232413 7.5 危険 Red Graphic Systems - SAPID CMS における PHP リモートファイルインクルージョンの脆弱性 CWE-94
コード・インジェクション
CVE-2006-4026 2012-12-20 18:02 2006-08-8 Show GitHub Exploit DB Packet Storm
232414 7.5 危険 xennobb - XennoBB の profile.php における SQL インジェクションの脆弱性 - CVE-2006-4025 2012-12-20 18:02 2006-08-8 Show GitHub Exploit DB Packet Storm
232415 2.6 注意 scatterchat - ScatterChat の cryptographic モジュールにおける大量のメッセージのパターンを特定される脆弱性 - CVE-2006-4021 2012-12-20 18:02 2006-08-17 Show GitHub Exploit DB Packet Storm
232416 4.3 警告 toenda software development - toendaCMS stable および unstable の /toendaCMS におけるクロスサイトスクリプティングの脆弱性 - CVE-2006-4016 2012-12-20 18:02 2006-08-7 Show GitHub Exploit DB Packet Storm
232417 5 警告 シマンテック - SBAS におけるサービス運用妨害 (DoS) の脆弱性 - CVE-2006-4014 2012-12-20 18:02 2006-07-27 Show GitHub Exploit DB Packet Storm
232418 7.6 危険 シマンテック - SBAS におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル
CVE-2006-4013 2012-12-20 18:02 2006-07-27 Show GitHub Exploit DB Packet Storm
232419 5.1 警告 savewebportal - circeOS SaveWeb Portal における PHP リモートファイルインクルージョンの脆弱性 - CVE-2006-4012 2012-12-20 18:02 2006-08-7 Show GitHub Exploit DB Packet Storm
232420 7.5 危険 VWar - Vwar の war.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2006-4010 2012-12-20 18:02 2006-08-7 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 20, 2026, 4:14 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
292411 - wordpress wordpress Multiple cross-site scripting (XSS) vulnerabilities in WordPress before 3.5.1 allow remote attackers to inject arbitrary web script or HTML via vectors involving (1) gallery shortcodes or (2) the con… CWE-79
Cross-site Scripting
CVE-2013-0236 2024-11-21 10:47 2013-07-9 Show GitHub Exploit DB Packet Storm
292412 - wordpress wordpress The XMLRPC API in WordPress before 3.5.1 allows remote attackers to send HTTP requests to intranet servers, and conduct port-scanning attacks, by specifying a crafted source URL for a pingback, relat… NVD-CWE-Other
CVE-2013-0235 2024-11-21 10:47 2013-07-9 Show GitHub Exploit DB Packet Storm
292413 - ibm business_process_manager Multiple cross-site scripting (XSS) vulnerabilities in IBM Business Process Manager (BPM) 7.5.1.x, 8.0.0.x, and 8.0.1 before FP1 allow remote authenticated users to inject arbitrary web script or HTM… CWE-79
Cross-site Scripting
CVE-2013-0581 2024-11-21 10:47 2013-07-6 Show GitHub Exploit DB Packet Storm
292414 - ibm sterling_b2b_integrator
sterling_file_gateway
IBM Sterling B2B Integrator 5.1 and 5.2 and Sterling File Gateway 2.1 and 2.2 allow remote authenticated users to obtain sensitive information about application implementation via unspecified vectors… CWE-200
Information Exposure
CVE-2013-0568 2024-11-21 10:47 2013-07-3 Show GitHub Exploit DB Packet Storm
292415 - ibm sterling_b2b_integrator
sterling_file_gateway
IBM Sterling B2B Integrator 5.1 and 5.2 and Sterling File Gateway 2.1 and 2.2 allow remote authenticated users to obtain sensitive information about application implementation via unspecified vectors… CWE-200
Information Exposure
CVE-2013-0567 2024-11-21 10:47 2013-07-3 Show GitHub Exploit DB Packet Storm
292416 - ibm sterling_b2b_integrator
sterling_file_gateway
Multiple SQL injection vulnerabilities in IBM Sterling B2B Integrator 5.1 and 5.2 and Sterling File Gateway 2.1 and 2.2 allow remote authenticated users to execute arbitrary SQL commands via unspecif… CWE-89
SQL Injection
CVE-2013-0560 2024-11-21 10:47 2013-07-3 Show GitHub Exploit DB Packet Storm
292417 - ibm sterling_b2b_integrator
sterling_file_gateway
IBM Sterling B2B Integrator 5.1 and 5.2 and Sterling File Gateway 2.1 and 2.2 allow remote attackers to obtain sensitive information about application implementation via unspecified vectors. CWE-200
Information Exposure
CVE-2013-0558 2024-11-21 10:47 2013-07-3 Show GitHub Exploit DB Packet Storm
292418 - ibm sterling_b2b_integrator
sterling_file_gateway
An unspecified third-party component in IBM Sterling B2B Integrator 5.1 and 5.2 and Sterling File Gateway 2.1 and 2.2 uses short session ID values, which makes it easier for remote attackers to hijac… CWE-255
Credentials Management
CVE-2013-0539 2024-11-21 10:47 2013-07-3 Show GitHub Exploit DB Packet Storm
292419 - ibm sterling_b2b_integrator
sterling_file_gateway
The console in IBM Sterling B2B Integrator 5.1 and 5.2 and Sterling File Gateway 2.1 and 2.2 allows remote attackers to read stack traces by triggering (1) an error or (2) an exception. CWE-200
Information Exposure
CVE-2013-0481 2024-11-21 10:47 2013-07-3 Show GitHub Exploit DB Packet Storm
292420 - ibm sterling_b2b_integrator
sterling_file_gateway
IBM Sterling B2B Integrator 5.1 and 5.2 and Sterling File Gateway 2.1 and 2.2 do not properly restrict file types and extensions, which allows remote authenticated users to bypass intended access res… CWE-264
Permissions, Privileges, and Access Controls
CVE-2013-0479 2024-11-21 10:47 2013-07-3 Show GitHub Exploit DB Packet Storm