Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 26, 2026, noon

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
232881 7.5 危険 sportsphool - SportsPHool の includes/layout/plain.footer.php における PHP リモートファイルインクルージョンの脆弱性 - CVE-2006-4278 2012-12-20 18:02 2006-08-21 Show GitHub Exploit DB Packet Storm
232882 9 危険 symantec veritas - Symantec Veritas NetBackup PureDisk Remote Office Edition における認証を回避される脆弱性 - CVE-2006-4228 2012-12-20 18:02 2006-08-16 Show GitHub Exploit DB Packet Storm
232883 4.3 警告 VWar - VWar の calendar.php におけるクロスサイトスクリプティングの脆弱性 - CVE-2006-4224 2012-12-20 18:02 2006-08-18 Show GitHub Exploit DB Packet Storm
232884 7.5 危険 Zen Cart - Zen Cart におけるディレクトリトラバーサルの脆弱性 - CVE-2006-4218 2012-12-20 18:02 2006-08-17 Show GitHub Exploit DB Packet Storm
232885 7.5 危険 webinsta - WEBInsta CMS の modules/usersonline/users.php における PHP リモートファイルインクルージョンの脆弱性 - CVE-2006-4217 2012-12-20 18:02 2006-08-17 Show GitHub Exploit DB Packet Storm
232886 5.1 警告 Zen Cart - Zen Cart の index.php における PHP リモートファイルインクルージョンの脆弱性 CWE-94
コード・インジェクション 		CVE-2006-4215 2012-12-20 18:02 2006-08-17 Show GitHub Exploit DB Packet Storm
232887 7.5 危険 Zen Cart - Zen Cart における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2006-4214 2012-12-20 18:02 2006-08-17 Show GitHub Exploit DB Packet Storm
232888 7.5 危険 webinsta - WEBInsta Mailing List Manager の install3.php における PHP リモートファイルインクルージョンの脆弱性 - CVE-2006-4209 2012-12-20 18:02 2006-08-17 Show GitHub Exploit DB Packet Storm
232889 5 警告 skippy.net - WordPress 用の Skippy WP-DB-Backup プラグインにおけるディレクトリトラバーサルの脆弱性 - CVE-2006-4208 2012-12-20 18:02 2006-08-17 Show GitHub Exploit DB Packet Storm
232890 7.5 危険 webdynamite - WebDynamite ProjectButler における PHP リモートファイルインクルージョンの脆弱性 - CVE-2006-4205 2012-12-20 18:02 2006-08-17 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 26, 2026, 4:05 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
293001 - david_alkire email2image The email2image module 6.x-1.x and 6.x-2.x for Drupal does not properly restrict access to nodes, which allows remote attackers to read images of user email addresses and email fields. CWE-264
Permissions, Privileges, and Access Controls 		CVE-2013-0257 2024-11-21 10:47 2013-03-28 Show GitHub Exploit DB Packet Storm
293002 - bart_feenstra payment The Payment module 7.x-1.x before 7.x-1.3 for Drupal does not properly restrict access to payments, which allows remote attackers to read arbitrary payments. CWE-264
Permissions, Privileges, and Access Controls 		CVE-2013-0182 2024-11-21 10:47 2013-03-28 Show GitHub Exploit DB Packet Storm
293003 - thomas_seidl search_api Cross-site scripting (XSS) vulnerability in Views in the Search API (search_api) module 7.x-1.x before 7.x-1.4 for Drupal, when using certain backends and facets, allows remote attackers to inject ar… CWE-79
Cross-site Scripting 		CVE-2013-0181 2024-11-21 10:47 2013-03-28 Show GitHub Exploit DB Packet Storm
293004 - ibm lotus_domino Cross-site request forgery (CSRF) vulnerability in webadmin.nsf (aka the Web Administrator client) in IBM Domino 8.5.x allows remote authenticated users to hijack the authentication of administrators. CWE-352
 Origin Validation Error 		CVE-2013-0489 2024-11-21 10:47 2013-03-27 Show GitHub Exploit DB Packet Storm
293005 - ibm lotus_domino Cross-site scripting (XSS) vulnerability in webadmin.nsf (aka the Web Administrator client) in IBM Domino 8.5.x allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. CWE-79
Cross-site Scripting 		CVE-2013-0488 2024-11-21 10:47 2013-03-27 Show GitHub Exploit DB Packet Storm
293006 - ibm lotus_domino The Java Console in IBM Domino 8.5.x allows remote authenticated users to hijack temporary credentials by leveraging knowledge of configuration details, aka SPR KLYH8TNNDN. CWE-287
Improper Authentication 		CVE-2013-0487 2024-11-21 10:47 2013-03-27 Show GitHub Exploit DB Packet Storm
293007 - ibm lotus_domino Memory leak in the HTTP server in IBM Domino 8.5.x allows remote attackers to cause a denial of service (memory consumption and daemon crash) via GET requests, aka SPR KLYH92NKZY. CWE-399
 Resource Management Errors 		CVE-2013-0486 2024-11-21 10:47 2013-03-27 Show GitHub Exploit DB Packet Storm
293008 - ibm lotus_inotes Multiple cross-site scripting (XSS) vulnerabilities in IBM iNotes 8.5.x allow local users to inject arbitrary web script or HTML via a shared mail file, aka SPR DKEN8PDNTX. CWE-79
Cross-site Scripting 		CVE-2013-0525 2024-11-21 10:47 2013-03-27 Show GitHub Exploit DB Packet Storm
293009 - canonical
samba
ibm 		ubuntu_linux
samba
storwize 		The SMB2 implementation in Samba 3.6.x before 3.6.6, as used on the IBM Storwize V7000 Unified 1.3 before 1.3.2.3 and 1.4 before 1.4.0.1 and possibly other products, does not properly enforce CIFS sh… CWE-264
Permissions, Privileges, and Access Controls 		CVE-2013-0454 2024-11-21 10:47 2013-03-27 Show GitHub Exploit DB Packet Storm
293010 - openstack
canonical 		essex
folsom
grizzly
ubuntu_linux 		OpenStack Compute (Nova) Grizzly, Folsom (2012.2), and Essex (2012.1) allows remote authenticated users to gain access to a VM in opportunistic circumstances by using the VNC token for a deleted VM t… CWE-264
Permissions, Privileges, and Access Controls 		CVE-2013-0335 2024-11-21 10:47 2013-03-23 Show GitHub Exploit DB Packet Storm