Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 5, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
233291 6.8 警告 SAMEDIA O.E. - SAMEDIA LandShop の ls.php におけるクロスサイトスクリプティングの脆弱性 - CVE-2006-5915 2012-12-20 18:02 2006-11-15 Show GitHub Exploit DB Packet Storm
233292 7.5 危険 SAMEDIA O.E. - SAMEDIA LandShop の ls.php における SQL インジェクションの脆弱性 - CVE-2006-5914 2012-12-20 18:02 2006-11-15 Show GitHub Exploit DB Packet Storm
233293 6.4 警告 web directory pro - Web Directory Pro におけるコンフィギュレーションを変更される脆弱性 - CVE-2006-5905 2012-12-20 18:02 2006-11-15 Show GitHub Exploit DB Packet Storm
233294 7.5 危険 rahul jonna - Rahul Jonna GSpace における仮想ファイルシステム操作を実行される脆弱性 - CVE-2006-5903 2012-12-20 18:02 2006-11-15 Show GitHub Exploit DB Packet Storm
233295 7.5 危険 viksoe - viksoe GMail Drive シェルエクステンションにおける仮想ファイルシステムのアクションを実行される脆弱性 - CVE-2006-5902 2012-12-20 18:02 2006-11-15 Show GitHub Exploit DB Packet Storm
233296 6.8 警告 Zend Technologies Ltd. - Zend Framework Preview の incubator/tests/Zend/Http/_files/testRedirections.php サンプルコードにおけるクロスサイトスクリプティングの脆弱性 - CVE-2006-5900 2012-12-20 18:02 2006-11-15 Show GitHub Exploit DB Packet Storm
233297 5 警告 php heaven - PhpMyChat の localization/languages.lib.php3 におけるディレクトリトラバーサルの脆弱性 - CVE-2006-5898 2012-12-20 18:02 2006-11-15 Show GitHub Exploit DB Packet Storm
233298 5 警告 php heaven - PhpMyChat Plus におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2006-5897 2012-12-20 18:02 2006-11-15 Show GitHub Exploit DB Packet Storm
233299 5 警告 remlab - REMLAB Web Mech Designer におけるスクリプトのフルパスを取得される脆弱性 - CVE-2006-5896 2012-12-20 18:02 2006-11-27 Show GitHub Exploit DB Packet Storm
233300 6.8 警告 rama cms - Rama CMS の lang.php におけるディレクトリトラバーサルの脆弱性 - CVE-2006-5894 2012-12-20 18:02 2006-11-14 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 5, 2026, 4:11 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
292491 - bas_van_beek multishop SQL injection vulnerability in the Multishop extension before 2.0.39 for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors. CWE-89
SQL Injection 		CVE-2013-4682 2024-11-21 10:56 2013-06-26 Show GitHub Exploit DB Packet Storm
292492 - michael_staatz sofortueberweisung2commerce SQL injection vulnerability in the sofortueberweisung2commerce extension before 2.0.1 for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors. CWE-89
SQL Injection 		CVE-2013-4681 2024-11-21 10:56 2013-06-26 Show GitHub Exploit DB Packet Storm
292493 - urs_maag maag_form_captcha Open redirect vulnerability in Maag Form Captcha extension 2.0.0 and earlier for TYPO3 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via unspecified ve… NVD-CWE-noinfo
CVE-2013-4680 2024-11-21 10:56 2013-06-26 Show GitHub Exploit DB Packet Storm
292494 - fortinet forticlient
forticlient_lite
forticlient_ssl_vpn 		FortiClient before 4.3.5.472 on Windows, before 4.0.3.134 on Mac OS X, and before 4.0 on Android; FortiClient Lite before 4.3.4.461 on Windows; FortiClient Lite 2.0 through 2.0.0223 on Android; and F… CWE-255
CWE-310
Credentials Management
Cryptographic Issues 		CVE-2013-4669 2024-11-21 10:56 2013-06-25 Show GitHub Exploit DB Packet Storm
292495 5.5 MEDIUM
Local 		redhat openshift In Red Hat Openshift 1, weak default permissions are applied to the /etc/openshift/server_priv.pem file on the broker server, which could allow users with local access to the broker to read this file. - CVE-2013-4281 2024-11-21 10:55 2022-10-20 Show GitHub Exploit DB Packet Storm
292496 7.5 HIGH
Network 		redhat openshift The deployment script in the unsupported "OpenShift Extras" set of add-on scripts, in Red Hat Openshift 1, installs a default public key in the root user's authorized_keys file. CWE-668
 Exposure of Resource to Wrong Sphere 		CVE-2013-4253 2024-11-21 10:55 2022-10-20 Show GitHub Exploit DB Packet Storm
292497 9.1 CRITICAL
Network 		redhat openshift In a openshift node, there is a cron job to update mcollective facts that mishandles a temporary file. This may lead to loss of confidentiality and integrity. CWE-668
 Exposure of Resource to Wrong Sphere 		CVE-2013-4561 2024-11-21 10:55 2022-07-1 Show GitHub Exploit DB Packet Storm
292498 6.1 MEDIUM
Network 		emberjs ember.js In general, Ember.js escapes or strips any user-supplied content before inserting it in strings that will be sent to innerHTML. However, the `tagName` property of an `Ember.View` was inserted into su… CWE-79
Cross-site Scripting 		CVE-2013-4170 2024-11-21 10:55 2022-06-30 Show GitHub Exploit DB Packet Storm
292499 7.8 HIGH
Local 		qemu qemu An user able to alter the savevm data (either on the disk or over the wire during migration) could use this flaw to to corrupt QEMU process memory on the (destination) host, which could potentially r… - CVE-2013-4536 2024-11-21 10:55 2021-05-29 Show GitHub Exploit DB Packet Storm
292500 4.3 MEDIUM
Network 		organic_groups_project organic_groups The OG access fields (visibility fields) implementation in Organic Groups (OG) module 7.x-2.x before 7.x-2.3 for Drupal does not properly restrict access to private groups, which allows remote authen… CWE-863
 Incorrect Authorization 		CVE-2013-4228 2024-11-21 10:55 2020-02-19 Show GitHub Exploit DB Packet Storm