Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 28, 2026, 10 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
232941 7.5 危険 usolved - USOLVED NEWSolved Lite における PHP リモートファイルインクルージョンの脆弱性 - CVE-2006-4059 2012-12-20 18:02 2006-08-9 Show GitHub Exploit DB Packet Storm
232942 6.8 警告 simplog - Simpliciti Locked Browser におけるクロスサイトスクリプティングの脆弱性 - CVE-2006-4058 2012-12-20 18:02 2006-08-9 Show GitHub Exploit DB Packet Storm
232943 7.5 危険 the address book reloaded
the address book		 - katzlbt Address Book などの認証プロセスにおける SQL インジェクションの脆弱性 - CVE-2006-4056 2012-12-20 18:02 2006-08-9 Show GitHub Exploit DB Packet Storm
232944 7.5 危険 tsep - Olaf Noehring TSEP における PHP リモートファイルインクルージョンの脆弱性 - CVE-2006-4055 2012-12-20 18:02 2006-08-9 Show GitHub Exploit DB Packet Storm
232945 7.5 危険 turnkey web tools - Turnkey Web Tools PHP Simple Shop における PHP リモートファイルインクルージョンの脆弱性 - CVE-2006-4052 2012-12-20 18:02 2006-08-9 Show GitHub Exploit DB Packet Storm
232946 7.5 危険 turnkey web tools - Turnkey Web Tools PHP Live Helper の global.php における PHP リモートファイルインクルージョンの脆弱性 - CVE-2006-4051 2012-12-20 18:02 2006-08-9 Show GitHub Exploit DB Packet Storm
232947 2.1 注意 サン・マイクロシステムズ - Sun Ray Server Software のユーティリティ utxconfig における任意のファイルを上書きされる脆弱性 - CVE-2006-4049 2012-12-20 18:02 2006-07-7 Show GitHub Exploit DB Packet Storm
232948 7.5 危険 torbstoff - Torbstoff News の news.php における PHP リモートファイルインクルージョンの脆弱性 - CVE-2006-4045 2012-12-20 18:02 2006-08-9 Show GitHub Exploit DB Packet Storm
232949 7.5 危険 pike - Pike における SQL インジェクションの脆弱性 - CVE-2006-4041 2012-12-20 18:02 2006-08-9 Show GitHub Exploit DB Packet Storm
232950 7.5 危険 zonemetrics - ZoneMetrics ZoneX Publishers Gold Edition の includes/usercp_register.php における PHP リモートファイルインクルージョンの脆弱性 - CVE-2006-4036 2012-12-20 18:02 2006-08-9 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 28, 2026, 4:16 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
292541 - apache santuario_xml_security_for_java jcp/xml/dsig/internal/dom/DOMCanonicalizationMethod.java in Apache Santuario XML Security for Java 1.4.x before 1.4.8 and 1.5.x before 1.5.5 allows context-dependent attackers to spoof an XML Signatu… CWE-310
Cryptographic Issues 		CVE-2013-2172 2024-11-21 10:51 2013-08-21 Show GitHub Exploit DB Packet Storm
292542 - openstack
opensuse 		havana
opensuse
grizzly
folsom 		XML injection vulnerability in account/utils.py in OpenStack Swift Folsom, Grizzly, and Havana allows attackers to trigger invalid or spoofed Swift responses via an account name. CWE-94
Code Injection 		CVE-2013-2161 2024-11-21 10:51 2013-08-21 Show GitHub Exploit DB Packet Storm
292543 - openstack keystone OpenStack Keystone Folsom, Grizzly before 2013.1.3, and Havana, when using LDAP with Anonymous binding, allows remote attackers to bypass authentication via an empty password. CWE-287
Improper Authentication 		CVE-2013-2157 2024-11-21 10:51 2013-08-21 Show GitHub Exploit DB Packet Storm
292544 - apache xml_security_for_c\+\+ Heap-based buffer overflow in the Exclusive Canonicalization functionality (xsec/canon/XSECC14n20010315.cpp) in Apache Santuario XML Security for C++ (aka xml-security-c) before 1.7.1 allows remote a… CWE-119
Incorrect Access of Indexable Resource ('Range Error')  		CVE-2013-2156 2024-11-21 10:51 2013-08-21 Show GitHub Exploit DB Packet Storm
292545 - apache xml_security_for_c\+\+ Apache Santuario XML Security for C++ (aka xml-security-c) before 1.7.1 does not properly validate length values, which allows remote attackers to cause a denial of service or bypass the CVE-2009-021… CWE-20
 Improper Input Validation  		CVE-2013-2155 2024-11-21 10:51 2013-08-21 Show GitHub Exploit DB Packet Storm
292546 - apache xml_security_for_c\+\+ Stack-based buffer overflow in the XML Signature Reference functionality (xsec/dsig/DSIGReference.cpp) in Apache Santuario XML Security for C++ (aka xml-security-c) before 1.7.1 allows context-depend… CWE-119
Incorrect Access of Indexable Resource ('Range Error')  		CVE-2013-2154 2024-11-21 10:51 2013-08-21 Show GitHub Exploit DB Packet Storm
292547 - apache xml_security_for_c\+\+ The XML digital signature functionality (xsec/dsig/DSIGReference.cpp) in Apache Santuario XML Security for C++ (aka xml-security-c) before 1.7.1 allows context-dependent attackers to reuse signatures… CWE-310
Cryptographic Issues 		CVE-2013-2153 2024-11-21 10:51 2013-08-21 Show GitHub Exploit DB Packet Storm
292548 - apache cxf The streaming XML parser in Apache CXF 2.5.x before 2.5.10, 2.6.x before 2.6.7, and 2.7.x before 2.7.4 allows remote attackers to cause a denial of service (CPU and memory consumption) via crafted XM… CWE-399
 Resource Management Errors 		CVE-2013-2160 2024-11-21 10:51 2013-08-20 Show GitHub Exploit DB Packet Storm
292549 - canonical
opensuse
perlmonks 		ubuntu_linux
opensuse
module\ 		The cpansign verify functionality in the Module::Signature module before 0.72 for Perl allows attackers to bypass the signature check and execute arbitrary code via a SIGNATURE file with a "special u… CWE-20
 Improper Input Validation  		CVE-2013-2145 2024-11-21 10:51 2013-08-20 Show GitHub Exploit DB Packet Storm
292550 - apache cloudstack Multiple cross-site scripting (XSS) vulnerabilities in Apache CloudStack before 4.1.1 allow remote attackers to inject arbitrary web script or HTML via the (1) Physical network name to the Zone wizar… CWE-79
Cross-site Scripting 		CVE-2013-2136 2024-11-21 10:51 2013-08-20 Show GitHub Exploit DB Packet Storm