Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 6, 2026, 10 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
233281 7.5 危険 website designs for less - Website Designs for Less Inventory Manager の inventory/display/imager.asp における SQL インジェクションの脆弱性 - CVE-2006-5943 2012-12-20 18:02 2006-11-16 Show GitHub Exploit DB Packet Storm
233282 6.8 警告 website designs for less - Website Designs For Less Inventory Manager の inventory/display/display_results.asp におけるクロスサイトスクリプティングの脆弱性 - CVE-2006-5942 2012-12-20 18:02 2006-11-16 Show GitHub Exploit DB Packet Storm
233283 7.5 危険 sitexpress - SiteXpress E-Commerce System の dept.asp における SQL インジェクションの脆弱性 - CVE-2006-5936 2012-12-20 18:02 2006-11-15 Show GitHub Exploit DB Packet Storm
233284 7.5 危険 shopsystems - ShopSystems の index.php における SQL インジェクションの脆弱性 - CVE-2006-5935 2012-12-20 18:02 2006-11-15 Show GitHub Exploit DB Packet Storm
233285 7.5 危険 ultrasite - UltraSite の update.asp における SQL インジェクションの脆弱性 - CVE-2006-5933 2012-12-20 18:02 2006-11-15 Show GitHub Exploit DB Packet Storm
233286 7.5 危険 phpjobscheduler - Phpjobscheduler の firepjs.php における PHP リモートファイルインクルージョンの脆弱性 - CVE-2006-5929 2012-12-20 18:02 2006-11-15 Show GitHub Exploit DB Packet Storm
233287 7.5 危険 phpjobscheduler - Phpjobscheduler における PHP リモートファイルインクルージョンの脆弱性 - CVE-2006-5928 2012-12-20 18:02 2006-11-15 Show GitHub Exploit DB Packet Storm
233288 7.5 危険 vallheru - Vallheru の mail.php における SQL インジェクションの脆弱性 - CVE-2006-5926 2012-12-20 18:02 2006-11-15 Show GitHub Exploit DB Packet Storm
233289 5 警告 wheatblog - wB の index.php における重要な情報を取得される脆弱性 - CVE-2006-5922 2012-12-20 18:02 2006-11-15 Show GitHub Exploit DB Packet Storm
233290 5.8 警告 wheatblog - wB の add_comment.php におけるクロスサイトスクリプティングの脆弱性 - CVE-2006-5921 2012-12-20 18:02 2006-11-15 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 6, 2026, 4:18 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
293301 - redhat
scientificlinux
enterprise_linux
luci
Untrusted search path vulnerability in python-paste-script (aka paster) in Luci 0.26.0, when started using the initscript, allows local users to gain privileges via a Trojan horse .egg-info file in t… NVD-CWE-Other
CVE-2013-4482 2024-11-21 10:55 2013-11-23 Show GitHub Exploit DB Packet Storm
293302 - redhat
scientificlinux
enterprise_linux
luci
Race condition in Luci 0.26.0 creates /var/lib/luci/etc/luci.ini with world-readable permissions before restricting the permissions, which allows local users to read the file and obtain sensitive inf… CWE-362
Race Condition
CVE-2013-4481 2024-11-21 10:55 2013-11-23 Show GitHub Exploit DB Packet Storm
293303 - canonical
freedesktop
ubuntu_linux
poppler
Format string vulnerability in the extractPages function in utils/pdfseparate.cc in poppler before 0.24.3 allows remote attackers to cause a denial of service (crash) via format string specifiers in … CWE-20
 Improper Input Validation 
CVE-2013-4474 2024-11-21 10:55 2013-11-23 Show GitHub Exploit DB Packet Storm
293304 - freedesktop
canonical
poppler
ubuntu_linux
Stack-based buffer overflow in the extractPages function in utils/pdfseparate.cc in poppler before 0.24.2 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary c… CWE-119
Incorrect Access of Indexable Resource ('Range Error') 
CVE-2013-4473 2024-11-21 10:55 2013-11-23 Show GitHub Exploit DB Packet Storm
293305 - lighttpd
debian
opensuse
lighttpd
debian_linux
opensuse
lighttpd before 1.4.33 does not check the return value of the (1) setuid, (2) setgid, or (3) setgroups functions, which might cause lighttpd to run as root if it is restarted and allows remote attack… CWE-264
Permissions, Privileges, and Access Controls
CVE-2013-4559 2024-11-21 10:55 2013-11-20 Show GitHub Exploit DB Packet Storm
293306 - lighttpd
debian
opensuse
lighttpd
debian_linux
opensuse
Use-after-free vulnerability in lighttpd before 1.4.33 allows remote attackers to cause a denial of service (segmentation fault and crash) via unspecified vectors that trigger FAMMonitorDirectory fai… CWE-416
 Use After Free
CVE-2013-4560 2024-11-21 10:55 2013-11-20 Show GitHub Exploit DB Packet Storm
293307 - adaptivecomputing torque_resource_manager The send_the_mail function in server/svr_mail.c in Terascale Open-Source Resource and Queue Manager (aka TORQUE Resource Manager) before 4.2.6 allows remote attackers to execute arbitrary commands vi… CWE-94
Code Injection
CVE-2013-4495 2024-11-21 10:55 2013-11-20 Show GitHub Exploit DB Packet Storm
293308 - gnu
opensuse
gnutls
opensuse
Off-by-one error in the dane_raw_tlsa in the DANE library (libdane) in GnuTLS 3.1.x before 3.1.16 and 3.2.x before 3.2.6 allows remote servers to cause a denial of service (memory corruption) via a r… CWE-189
Numeric Errors
CVE-2013-4487 2024-11-21 10:55 2013-11-20 Show GitHub Exploit DB Packet Storm
293309 - gnu gnutls Buffer overflow in the dane_query_tlsa function in the DANE library (libdane) in GnuTLS 3.1.x before 3.1.15 and 3.2.x before 3.2.5 allows remote servers to cause a denial of service (memory corruptio… CWE-119
Incorrect Access of Indexable Resource ('Range Error') 
CVE-2013-4466 2024-11-21 10:55 2013-11-20 Show GitHub Exploit DB Packet Storm
293310 - redhat
theforeman
openstack
foreman
Multiple SQL injection vulnerabilities in app/models/concerns/host_common.rb in Foreman before 1.2.3 allow remote attackers to execute arbitrary SQL commands via the (1) fqdn or (2) hostgroup paramet… CWE-89
SQL Injection
CVE-2013-4386 2024-11-21 10:55 2013-11-20 Show GitHub Exploit DB Packet Storm