Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 20, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
232431 6.8 警告 scott weedon - Scott Weedon Ajax Chat の visitor/livesupport/chat.php におけるクロスサイトスクリプティングの脆弱性 - CVE-2006-3971 2012-12-20 18:02 2006-08-2 Show GitHub Exploit DB Packet Storm
232432 5 警告 サン・マイクロシステムズ - Sun Solaris 10 3/05 HW2 の暗号化プロバイダにおけるアプリケーションがデータ変更を検出しない脆弱性 - CVE-2006-3968 2012-12-20 18:02 2006-08-1 Show GitHub Exploit DB Packet Storm
232433 7.5 危険 x-scripts - X-Scripts X-Poll の top.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2006-3960 2012-12-20 18:02 2006-08-1 Show GitHub Exploit DB Packet Storm
232434 7.5 危険 x-scripts - X-Scripts X-Protection の protect.php における SQL インジェクションの脆弱性 - CVE-2006-3959 2012-12-20 18:02 2006-08-1 Show GitHub Exploit DB Packet Storm
232435 4.3 警告 pkr internet - Taskjitsu におけるクロスサイトスクリプティングの脆弱性 CWE-noinfo
情報不足 		CVE-2006-3958 2012-12-20 18:02 2006-07-6 Show GitHub Exploit DB Packet Storm
232436 4.3 警告 total online solutions - AWBS の contact.php におけるクロスサイトスクリプティングの脆弱性 - CVE-2006-3956 2012-12-20 18:02 2006-08-1 Show GitHub Exploit DB Packet Storm
232437 7.5 危険 x-scripts - X-Scripts X-Statistics の x-statistics.php における SQL インジェクションの脆弱性 - CVE-2006-3950 2012-12-20 18:02 2006-08-1 Show GitHub Exploit DB Packet Storm
232438 4.3 警告 PHPNUKE - PHP-Nuke INP の modules.php におけるクロスサイトスクリプティングの脆弱性 - CVE-2006-3948 2012-12-20 18:02 2006-08-1 Show GitHub Exploit DB Packet Storm
232439 5 警告 Opera Software ASA - Windows 上で稼動する Opera の CSS 機能におけるサービス運用妨害 (DoS) の脆弱性 - CVE-2006-3945 2012-12-20 18:02 2006-07-31 Show GitHub Exploit DB Packet Storm
232440 5 警告 マイクロソフト - Windows 上で稼動する Microsoft Internet Explorer 6 におけるサービス運用妨害 (DoS) の脆弱性 - CVE-2006-3944 2012-12-20 18:02 2006-07-31 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 20, 2026, 4:14 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
293341 - isc
redhat
canonical 		bind
enterprise_linux_hpc_node
enterprise_linux_server_eus
enterprise_linux_server_aus
enterprise_linux_desktop
enterprise_linux_server
enterprise_linux_workstation
ubuntu_linux 		ISC BIND 9.8.x through 9.8.4-P1 and 9.9.x through 9.9.2-P1, in certain configurations involving DNS64 with a Response Policy Zone that lacks an AAAA rewrite rule, allows remote attackers to cause a d… CWE-20
 Improper Input Validation  		CVE-2012-5689 2024-11-21 10:45 2013-01-25 Show GitHub Exploit DB Packet Storm
293342 - proftpd proftpd ProFTPD before 1.3.5rc1, when using the UserOwner directive, allows local users to modify the ownership of arbitrary files via a race condition and a symlink attack on the (1) MKD or (2) XMKD command… CWE-362
Race Condition 		CVE-2012-6095 2024-11-21 10:45 2013-01-25 Show GitHub Exploit DB Packet Storm
293343 - freetype freetype The _bdf_parse_glyphs function in FreeType before 2.4.11 allows context-dependent attackers to cause a denial of service (out-of-bounds write and crash) via vectors related to BDF fonts and an ENCODI… CWE-119
Incorrect Access of Indexable Resource ('Range Error')  		CVE-2012-5670 2024-11-21 10:45 2013-01-25 Show GitHub Exploit DB Packet Storm
293344 - freetype freetype The _bdf_parse_glyphs function in FreeType before 2.4.11 allows context-dependent attackers to cause a denial of service (crash) and possibly execute arbitrary code via vectors related to BDF fonts a… CWE-119
Incorrect Access of Indexable Resource ('Range Error')  		CVE-2012-5669 2024-11-21 10:45 2013-01-25 Show GitHub Exploit DB Packet Storm
293345 - freetype freetype FreeType before 2.4.11 allows context-dependent attackers to cause a denial of service (NULL pointer dereference and crash) via vectors related to BDF fonts and the improper handling of an "allocatio… CWE-119
Incorrect Access of Indexable Resource ('Range Error')  		CVE-2012-5668 2024-11-21 10:45 2013-01-25 Show GitHub Exploit DB Packet Storm
293346 - gnupg gnupg The read_block function in g10/import.c in GnuPG 1.4.x before 1.4.13 and 2.0.x through 2.0.19, when importing a key, allows remote attackers to corrupt the public keyring database or cause a denial o… CWE-20
 Improper Input Validation  		CVE-2012-6085 2024-11-21 10:45 2013-01-24 Show GitHub Exploit DB Packet Storm
293347 - nagios
icinga 		nagios
icinga 		Multiple stack-based buffer overflows in the get_history function in history.cgi in Nagios Core before 3.4.4, and Icinga 1.6.x before 1.6.2, 1.7.x before 1.7.4, and 1.8.x before 1.8.4, might allow re… CWE-119
Incorrect Access of Indexable Resource ('Range Error')  		CVE-2012-6096 2024-11-21 10:45 2013-01-23 Show GitHub Exploit DB Packet Storm
293348 - 3s-software codesys_runtime_system Directory traversal vulnerability in the Runtime Toolkit in CODESYS Runtime System 2.3.x and 2.4.x allows remote attackers to read, overwrite, or create arbitrary files via a .. (dot dot) in a reques… CWE-22
Path Traversal 		CVE-2012-6069 2024-11-21 10:45 2013-01-22 Show GitHub Exploit DB Packet Storm
293349 - 3s-software codesys_runtime_system The Runtime Toolkit in CODESYS Runtime System 2.3.x and 2.4.x does not require authentication, which allows remote attackers to (1) execute commands via the command-line interface in the TCP listener… CWE-264
Permissions, Privileges, and Access Controls 		CVE-2012-6068 2024-11-21 10:45 2013-01-22 Show GitHub Exploit DB Packet Storm
293350 - php php The openssl_encrypt function in ext/openssl/openssl.c in PHP 5.3.9 through 5.3.13 does not initialize a certain variable, which allows remote attackers to obtain sensitive information from process me… CWE-200
Information Exposure 		CVE-2012-6113 2024-11-21 10:45 2013-01-20 Show GitHub Exploit DB Packet Storm