Vulnerability Search Top
Show Search Menu
|
You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database). |
JVN Vulnerability Information
Update Date":June 4, 2026, 10 a.m.
| No | CVSS | Level Attach Vector |
Vendor Name | Project Name | Title | CWE | CVE | Update Date | Publication Date | Impact Show |
Exploit PoC Search |
|---|---|---|---|---|---|---|---|---|---|---|---|
| 233191 | 7.5 | 危険 | web wiz forums | - | Web Wiz Forums の forum/search.asp における SQL インジェクションの脆弱性 | - | CVE-2006-5635 | 2012-12-20 18:02 | 2006-10-31 | Show | GitHub Exploit DB Packet Storm |
| 233192 | 6.8 | 警告 | phpprofiles | - | phpProfiles における PHP リモートファイルインクルージョンの脆弱性 |
CWE-94
コード・インジェクション |
CVE-2006-5634 | 2012-12-20 18:02 | 2006-10-31 | Show | GitHub Exploit DB Packet Storm |
| 233193 | 7.5 | 危険 | unisor cms | - | UNISOR CMS の login.asp における SQL インジェクションの脆弱性 | - | CVE-2006-5628 | 2012-12-20 18:02 | 2006-10-31 | Show | GitHub Exploit DB Packet Storm |
| 233194 | 7.5 | 危険 | qnecms | - | QnECMS における PHP リモートファイルインクルージョンの脆弱性 | - | CVE-2006-5627 | 2012-12-20 18:02 | 2006-10-31 | Show | GitHub Exploit DB Packet Storm |
| 233195 | 4.3 | 警告 | phpfaber | - | phpFaber CMS の cms_images/js/htmlarea/htmlarea.php におけるクロスサイトスクリプティングの脆弱性 | - | CVE-2006-5626 | 2012-12-20 18:02 | 2006-10-31 | Show | GitHub Exploit DB Packet Storm |
| 233196 | 7.5 | 危険 | thepeak | - | Thepeak File Upload Manager の index.php におけるディレクトリトラバーサルの脆弱性 | - | CVE-2006-5617 | 2012-12-20 18:02 | 2006-10-30 | Show | GitHub Exploit DB Packet Storm |
| 233197 | 7.5 | 危険 | Textpattern | - | Textpattern の publish.php における PHP リモートファイルインクルージョンの脆弱性 | - | CVE-2006-5615 | 2012-12-20 18:02 | 2006-10-30 | Show | GitHub Exploit DB Packet Storm |
| 233198 | 10 | 危険 | 東芝 | - | Toshiba Bluetooth スタックにおける脆弱性 |
CWE-noinfo
情報不足 |
CVE-2006-5611 | 2012-12-20 18:02 | 2006-10-30 | Show | GitHub Exploit DB Packet Storm |
| 233199 | 5 | 警告 | TorrentFlux | - | TorrentFlux の dir.php におけるディレクトリトラバーサルの脆弱性 | - | CVE-2006-5609 | 2012-12-20 18:02 | 2006-10-30 | Show | GitHub Exploit DB Packet Storm |
| 233200 | 6.8 | 警告 | phpcards | - | phpCards の phpcards.footer.php におけるクロスサイトスクリプティングの脆弱性 | - | CVE-2006-5605 | 2012-12-20 18:02 | 2006-10-30 | Show | GitHub Exploit DB Packet Storm |
NVD Vulnerability Information
Update Date:June 4, 2026, 4:17 a.m.
| No | CVSS | Level Attach Vector |
Vendor Name | Project Name | Title | CWE | CVE | Update Date | Publication Date | Show Affected | Exploit PoC Search |
|---|---|---|---|---|---|---|---|---|---|---|---|
| 292781 | 9.8 |
CRITICAL
Network |
cryptocat_project | cryptocat | Multiple unspecified vulnerabilities in Cryptocat Project Cryptocat 2.0.18 have unknown impact and attack vectors. |
NVD-CWE-noinfo
|
CVE-2013-4108 | 2024-11-21 10:54 | 2019-11-15 | Show | GitHub Exploit DB Packet Storm |
| 292782 | 6.1 |
MEDIUM
Network |
cryptocat_project | cryptocat | A Cross-site scripting (XSS) vulnerability exists in Conversation Overview Nickname in Cryptocat before 2.0.22. |
CWE-79
Cross-site Scripting |
CVE-2013-4106 | 2024-11-21 10:54 | 2019-11-15 | Show | GitHub Exploit DB Packet Storm |
| 292783 | 6.1 |
MEDIUM
Network |
cryptocat_project | cryptocat | An unspecified cross-site scripting (XSS) vulnerability exists in Cryptocat Message Handling 1.1.165. |
CWE-79
Cross-site Scripting |
CVE-2013-4109 | 2024-11-21 10:54 | 2019-11-15 | Show | GitHub Exploit DB Packet Storm |
| 292784 | 5.3 |
MEDIUM
Network |
cryptocat_project | cryptocat | Cryptocat has an Unspecified Chat Participant User List Disclosure |
CWE-200
Information Exposure |
CVE-2013-4110 | 2024-11-21 10:54 | 2019-11-5 | Show | GitHub Exploit DB Packet Storm |
| 292785 | 6.1 |
MEDIUM
Network |
cryptocat_project | cryptocat | Cryptocat before 2.0.22: cryptocat.js handlePresence() has cross site scripting |
CWE-79
Cross-site Scripting |
CVE-2013-4107 | 2024-11-21 10:54 | 2019-11-5 | Show | GitHub Exploit DB Packet Storm |
| 292786 | 7.5 |
HIGH
Network |
cryptocat_project | cryptocat | Cryptocat before 2.0.22 has Multiparty Encryption Scheme Information Disclosure |
CWE-200
Information Exposure |
CVE-2013-4105 | 2024-11-21 10:54 | 2019-11-5 | Show | GitHub Exploit DB Packet Storm |
| 292787 | 7.5 |
HIGH
Network |
cryptocat_project | cryptocat | Cryptocat before 2.0.22 has weak encryption in the Socialist Millionnaire Protocol |
CWE-326
Inadequate Encryption Strength |
CVE-2013-4104 | 2024-11-21 10:54 | 2019-11-5 | Show | GitHub Exploit DB Packet Storm |
| 292788 | 9.8 |
CRITICAL
Network |
cryptocat_project | cryptocat | Cryptocat before 2.0.22 has Remote Script Injection due to improperly sanitizing user input |
CWE-20
Improper Input Validation |
CVE-2013-4103 | 2024-11-21 10:54 | 2019-11-5 | Show | GitHub Exploit DB Packet Storm |
| 292789 | 9.1 |
CRITICAL
Network |
cryptocat_project | cryptocat | Cryptocat before 2.0.22 strophe.js Math.random() Random Number Generator Weakness |
CWE-330
Use of Insufficiently Random Values |
CVE-2013-4102 | 2024-11-21 10:54 | 2019-11-5 | Show | GitHub Exploit DB Packet Storm |
| 292790 | 5.3 |
MEDIUM
Network |
cryptocat_project | cryptocat | Cryptocat before 2.0.22 Link Markup Decorator HTML Handling Weakness |
CWE-20
Improper Input Validation |
CVE-2013-4101 | 2024-11-21 10:54 | 2019-11-5 | Show | GitHub Exploit DB Packet Storm |