Vulnerability Search Top

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

Vulnerability Information Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":June 2, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
233721	9.3	危険	マイクロソフト	-	複数の Microsoft Windows 製品におけるヒープベースのバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2012-1537	2012-12-17 10:56	2012-12-11	Show	GitHub Exploit DB Packet Storm

233722	9.3	危険	マイクロソフト	-	複数の Microsoft 製品における任意のコードを実行される脆弱性	CWE-399 リソース管理の問題	CVE-2012-2539	2012-12-17 10:55	2012-12-11	Show	GitHub Exploit DB Packet Storm

233723	6.8	警告	Netsweeper, Inc.	-	Netsweeper の WebAdmin Portal におけるクロスサイトリクエストフォージェリの脆弱性	CWE-352 同一生成元ポリシー違反	CVE-2012-2447	2012-12-17 10:53	2012-07-9	Show	GitHub Exploit DB Packet Storm

233724	9.3	危険	マイクロソフト	-	Microsoft Internet Explorer 6 から 10 における任意のコードを実行される脆弱性	CWE-94 コード・インジェクション	CVE-2012-4781	2012-12-17 10:52	2012-12-11	Show	GitHub Exploit DB Packet Storm

233725	10	危険	マイクロソフト	-	複数の Microsoft Windows 製品のカーネルモードドライバにおける任意のコードを実行される脆弱性	CWE-94 コード・インジェクション	CVE-2012-4786	2012-12-17 10:50	2012-12-11	Show	GitHub Exploit DB Packet Storm

233726	10	危険	マイクロソフト	-	Microsoft Internet Explorer 9 および 10 における任意のコードを実行される脆弱性	CWE-94 コード・インジェクション	CVE-2012-4787	2012-12-17 10:49	2012-12-11	Show	GitHub Exploit DB Packet Storm

233727	3.5	注意	マイクロソフト	-	Microsoft Exchange Server 2007 および 2010 におけるサービス運用妨害 (DoS) の脆弱性	CWE-94 コード・インジェクション	CVE-2012-4791	2012-12-17 10:47	2012-12-11	Show	GitHub Exploit DB Packet Storm

233728	10	危険	マイクロソフトアドビシステムズ Google	-	Adobe Flash Player および Adobe AIR における任意のコードを実行される脆弱性	CWE-94 コード・インジェクション	CVE-2012-5678	2012-12-17 10:45	2012-12-11	Show	GitHub Exploit DB Packet Storm

233729	10	危険	マイクロソフトアドビシステムズ Google	-	Adobe Flash Player および Adobe AIR における整数オーバーフローの脆弱性	CWE-189 数値処理の問題	CVE-2012-5677	2012-12-17 10:44	2012-12-11	Show	GitHub Exploit DB Packet Storm

233730	10	危険	マイクロソフトアドビシステムズ Google	-	Adobe Flash Player および Adobe AIR におけるバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2012-5676	2012-12-17 10:43	2012-12-11	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:June 2, 2026, 4:18 a.m.

No	CVSS	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
345921	-	epic_designs	eggblog	SQL injection vulnerability in eggblog 2.0 allows remote attackers to execute arbitrary SQL commands via the id parameter to blog.php.	NVD-CWE-Other	CVE-2006-0349	2017-07-20 10:29	2006-01-21	Show	GitHub Exploit DB Packet Storm

345922	-	epic_designs	eggblog	Cross-site scripting (XSS) vulnerability in eggblog 2.0 allow remote attackers to inject arbitrary web script or HTML via the message field to topic.php.	NVD-CWE-Other	CVE-2006-0350	2017-07-20 10:29	2006-01-21	Show	GitHub Exploit DB Packet Storm

345923	-	don_moore	mydns	Unspecified "critical denial-of-service vulnerability" in MyDNS before 1.1.0 has unknown impact and attack vectors.	NVD-CWE-Other	CVE-2006-0351	2017-07-20 10:29	2006-01-21	Show	GitHub Exploit DB Packet Storm

345924	-	gnu	lsh	unix_random.c in lshd for lsh 2.0.1 leaks file descriptors related to the randomness generator, which allows local users to cause a denial of service by truncating the seed file, which prevents the s…	CWE-200 Information Exposure	CVE-2006-0353	2017-07-20 10:29	2006-01-23	Show	GitHub Exploit DB Packet Storm

345925	-	mpm	hp-180w_voip_wifi_phone	MPM SIP HP-180W Wireless IP Phone WE.00.17 allows remote attackers to obtain sensitive information and possibly cause a denial of service via a direct connection to UDP port 9090, which is undocument…	NVD-CWE-Other	CVE-2006-0360	2017-07-20 10:29	2006-01-23	Show	GitHub Exploit DB Packet Storm

345926	-	mybulletinboard	mybulletinboard	Cross-site scripting (XSS) vulnerability in MyBulletinBoard (MyBB) allows remote attackers to inject arbitrary web script or HTML via a signature containing a JavaScript URI in the SRC attribute of a…	CWE-79 Cross-site Scripting	CVE-2006-0364	2017-07-20 10:29	2006-01-23	Show	GitHub Exploit DB Packet Storm

345927	-	cisco	call_manager	Unspecified vulnerability in Cisco CallManager 3.2 and earlier, 3.3 before 3.3(5)SR1, 4.0 before 4.0(2a)SR2c, and 4.1 before 4.1(3)SR2 allows remote authenticated users with read-only administrative …	NVD-CWE-noinfo	CVE-2006-0367	2017-07-20 10:29	2006-01-23	Show	GitHub Exploit DB Packet Storm

345928	-	cisco	call_manager	Cisco CallManager 3.2 and earlier, 3.3 before 3.3(5)SR1, 4.0 before 4.0(2a)SR2c, and 4.1 before 4.1(3)SR2 allow remote attackers to (1) cause a denial of service (CPU and memory consumption) via a la…	NVD-CWE-Other	CVE-2006-0368	2017-07-20 10:29	2006-01-23	Show	GitHub Exploit DB Packet Storm

345929	-	advantage_century_telecommunication	p202s	Advantage Century Telecommunication (ACT) P202S IP Phone 1.01.21 running firmware 1.1.21 has multiple undocumented ports available, which (1) might allow remote attackers to obtain sensitive informat…	CWE-287 Improper Authentication	CVE-2006-0374	2017-07-20 10:29	2006-01-23	Show	GitHub Exploit DB Packet Storm

345930	-	advantage_century_telecommunication	p202s	Advantage Century Telecommunication (ACT) P202S IP Phone 1.01.21 running firmware 1.1.21 on VxWorks uses a hardcoded Network Time Protocol (NTP) server in Taiwan, which could allow remote attackers t…	NVD-CWE-Other	CVE-2006-0375	2017-07-20 10:29	2006-01-23	Show	GitHub Exploit DB Packet Storm