Vulnerability Search Top

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

Vulnerability Information Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 28, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
232491	6.8	警告	sergey oblomov	-	Total Commander 用の ISO プラグインの LoadTree などの関数におけるスタックベースのバッファオーバーフローの脆弱性	-	CVE-2006-6837	2012-12-20 18:02	2006-12-31	Show	GitHub Exploit DB Packet Storm

232492	7.5	危険	yrch	-	Yrch! の plugins/metasearch/plug.inc.php における PHP リモートファイルインクルージョンの脆弱性	-	CVE-2006-6823	2012-12-20 18:02	2006-12-29	Show	GitHub Exploit DB Packet Storm

232493	7.5	危険	vladimir menshakov	-	Vladimir Menshakov buratinable templator の process.php における PHP リモートファイルインクルージョンの脆弱性	-	CVE-2006-6809	2012-12-20 18:02	2006-12-29	Show	GitHub Exploit DB Packet Storm

232494	6.8	警告	WordPress.org	-	WordPress の wp-admin/templates.php におけるクロスサイトスクリプティングの脆弱性	-	CVE-2006-6808	2012-12-20 18:02	2006-12-28	Show	GitHub Exploit DB Packet Storm

232495	7.5	危険	softwebsnepal	-	Softwebs Nepal Ananda Real Estate の list.asp における SQL インジェクションの脆弱性	-	CVE-2006-6807	2012-12-20 18:02	2006-12-28	Show	GitHub Exploit DB Packet Storm

232496	6.8	警告	sh-news	-	SH-News の misc.php における PHP リモートファイルインクルージョンの脆弱性	-	CVE-2006-6801	2012-12-20 18:02	2006-12-28	Show	GitHub Exploit DB Packet Storm

232497	7.5	危険	The Cacti Group	-	Cacti における SQL インジェクションの脆弱性	-	CVE-2006-6799	2012-12-20 18:02	2006-12-28	Show	GitHub Exploit DB Packet Storm

232498	7.5	危険	PHP Outburst	-	UPB の chat/login.php における任意の PHP コードを挿入される脆弱性	-	CVE-2006-6790	2012-12-20 18:02	2006-12-27	Show	GitHub Exploit DB Packet Storm

232499	7.5	危険	phpbbxtra	-	Phpbbxtra の includes/archive/archive_topic.php における PHP リモートファイルインクルージョンの脆弱性	-	CVE-2006-6789	2012-12-20 18:02	2006-12-27	Show	GitHub Exploit DB Packet Storm

232500	6.8	警告	timberwolf	-	TimberWolf の shownews.php におけるクロスサイトスクリプティングの脆弱性	-	CVE-2006-6778	2012-12-20 18:02	2006-12-27	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 28, 2026, 4:16 a.m.

No	CVSS	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
291801	-	microsoft	windows_server_2008 windows_xp windows_8 windows_7 windows_server_2003 windows_vista windows_server_2012	DirectShow in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, and Windows Server 2012 allows remote attacke…	CWE-94 Code Injection	CVE-2013-3174	2024-11-21 10:53	2013-07-10	Show	GitHub Exploit DB Packet Storm

291802	-	microsoft	windows_server_2008 windows_rt windows_xp windows_8 windows_7 windows_server_2003 windows_vista windows_server_2012	Buffer overflow in win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8,…	CWE-119 Incorrect Access of Indexable Resource ('Range Error')	CVE-2013-3173	2024-11-21 10:53	2013-07-10	Show	GitHub Exploit DB Packet Storm

291803	-	microsoft	windows_server_2008 windows_xp windows_7 windows_server_2003 windows_vista	Buffer overflow in win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, and Windows 7 SP1 allows …	CWE-119 Incorrect Access of Indexable Resource ('Range Error')	CVE-2013-3172	2024-11-21 10:53	2013-07-10	Show	GitHub Exploit DB Packet Storm

291804	-	microsoft	.net_framework	The serialization functionality in Microsoft .NET Framework 2.0 SP2, 3.5, 3.5 SP1, 3.5.1, 4, and 4.5 does not properly check the permissions of delegate objects, which allows remote attackers to exec…	CWE-94 Code Injection	CVE-2013-3171	2024-11-21 10:53	2013-07-10	Show	GitHub Exploit DB Packet Storm

291805	-	microsoft	windows_server_2008 windows_xp windows_7 windows_server_2003 windows_vista	win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, and Windows 7 SP1 does not properly handle o…	CWE-264 Permissions, Privileges, and Access Controls	CVE-2013-3167	2024-11-21 10:53	2013-07-10	Show	GitHub Exploit DB Packet Storm

291806	-	microsoft	internet_explorer	Cross-site scripting (XSS) vulnerability in Microsoft Internet Explorer 6 through 10 allows remote attackers to inject arbitrary web script or HTML via vectors involving incorrect auto-selection of t…	CWE-79 Cross-site Scripting	CVE-2013-3166	2024-11-21 10:53	2013-07-10	Show	GitHub Exploit DB Packet Storm

291807	-	microsoft	internet_explorer	Microsoft Internet Explorer 8 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corruption Vulne…	CWE-94 Code Injection	CVE-2013-3164	2024-11-21 10:53	2013-07-10	Show	GitHub Exploit DB Packet Storm

291808	-	microsoft	internet_explorer	Microsoft Internet Explorer 7 through 10 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corru…	CWE-94 Code Injection	CVE-2013-3162	2024-11-21 10:53	2013-07-10	Show	GitHub Exploit DB Packet Storm

291809	-	microsoft	internet_explorer	Microsoft Internet Explorer 9 and 10 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corruptio…	CWE-94 Code Injection	CVE-2013-3161	2024-11-21 10:53	2013-07-10	Show	GitHub Exploit DB Packet Storm

291810	-	microsoft	windows_defender windows_7 windows_server_2008	The signature-update functionality in Windows Defender on Microsoft Windows 7 and Windows Server 2008 R2 relies on an incorrect pathname, which allows local users to gain privileges via a Trojan hors…	CWE-264 Permissions, Privileges, and Access Controls	CVE-2013-3154	2024-11-21 10:53	2013-07-10	Show	GitHub Exploit DB Packet Storm