Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 5, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
234541 4.3 警告 Agile Access Control - Agile FleetCommander および FleetCommander Kiosk におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2012-4942 2012-11-20 15:27 2012-11-18 Show GitHub Exploit DB Packet Storm
234542 7.5 危険 Agile Access Control - Agile FleetCommander および FleetCommander Kiosk における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2012-4941 2012-11-20 15:26 2012-11-18 Show GitHub Exploit DB Packet Storm
234543 4.3 警告 Pattern Insight - Pattern Insight の Web インタフェースにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2012-4950 2012-11-20 15:16 2012-11-18 Show GitHub Exploit DB Packet Storm
234544 3.5 注意 Pattern Insight - Pattern Insight の Web インタフェースにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2012-4938 2012-11-20 15:15 2012-11-18 Show GitHub Exploit DB Packet Storm
234545 6.8 警告 Pattern Insight - Pattern Insight の Web インタフェースにおける Web セッションをハイジャックされる脆弱性 CWE-Other
その他 		CVE-2012-4937 2012-11-20 15:14 2012-11-18 Show GitHub Exploit DB Packet Storm
234546 6.8 警告 Pattern Insight - Pattern Insight の Web インタフェースにおけるクリックジャッキング攻撃を実行される脆弱性 CWE-Other
その他 		CVE-2012-4936 2012-11-20 15:12 2012-11-18 Show GitHub Exploit DB Packet Storm
234547 6.8 警告 Pattern Insight - Pattern Insight の Web インタフェースにおけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反 		CVE-2012-4935 2012-11-20 15:10 2012-11-18 Show GitHub Exploit DB Packet Storm
234548 5 警告 Marko Kreen - PostgreSQL 用 PgBouncer pooler におけるサービス運用妨害 (デーモンの停止) の脆弱性 CWE-119
バッファエラー 		CVE-2012-4575 2012-11-20 15:00 2012-11-18 Show GitHub Exploit DB Packet Storm
234549 4.3 警告 Tom Wilkason - SnackAmp におけるサービス運用妨害 (DoS) の脆弱性 CWE-119
バッファエラー 		CVE-2012-5917 2012-11-20 14:59 2012-11-17 Show GitHub Exploit DB Packet Storm
234550 5 警告 Neocrome - Neocrome Seditio における重要な情報を取得される脆弱性 CWE-200
情報漏えい 		CVE-2012-5916 2012-11-20 14:59 2012-11-17 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 6, 2026, 4:18 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
346171 - 2enetworx openforum Multiple cross-site scripting (XSS) vulnerabilities in openforum.asp in OpenForum 1.2 Beta and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) ofdisp and (2) ofmsgid… NVD-CWE-Other
CVE-2006-3321 2017-07-20 10:32 2006-06-30 Show GitHub Exploit DB Packet Storm
346172 - joesph_leung quickzip Directory traversal vulnerability in QuickZip 3.06.3 allows remote user-assisted attackers to overwrite arbitrary files or directories via .. (dot dot) sequences in filenames within (1) TAR,(2) GZ, a… NVD-CWE-Other
CVE-2006-3326 2017-07-20 10:32 2006-07-1 Show GitHub Exploit DB Packet Storm
346173 - e-cbd.biz custom_dating_biz_dating_script Cross-site scripting (XSS) vulnerability in Custom dating biz dating script 1.0 allows remote attackers to inject arbitrary web script or HTML via the (1) sn20_special_cases parameter ("Special Cases… NVD-CWE-Other
CVE-2006-3327 2017-07-20 10:32 2006-07-1 Show GitHub Exploit DB Packet Storm
346174 - starflow_software hostflow new_ticket.cgi in Hostflow 2.2.1-15 allows remote attackers to steal and replay authentication credentials via an IMG tag in the desc parameter ("Ticket Description" field) that points to a URL that … NVD-CWE-Other
CVE-2006-3328 2017-07-20 10:32 2006-07-1 Show GitHub Exploit DB Packet Storm
346175 - phpoutsourcing zorum SQL injection vulnerability in index.php in Zorum Forum 3.5 allows remote attackers to execute arbitrary SQL commands via the (1) offset, (2) tid, (3) fromid, (4) sortby, (5) fromfrommethod, and (6) … NVD-CWE-Other
CVE-2006-3332 2017-07-20 10:32 2006-07-1 Show GitHub Exploit DB Packet Storm
346176 - phpoutsourcing zorum Cross-site scripting (XSS) vulnerability in index.php in Zorum Forum 3.5 allows remote attackers to inject web script or HTML via the multiple unspecified parameters, including the (1) frommethod, (2… NVD-CWE-Other
CVE-2006-3333 2017-07-20 10:32 2006-07-1 Show GitHub Exploit DB Packet Storm
346177 - atlassian jira Cross-site scripting (XSS) vulnerability in Atlassian JIRA 3.6.2-#156 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors in a direct request to secure/ConfigureRel… NVD-CWE-Other
CVE-2006-3338 2017-07-20 10:32 2006-07-4 Show GitHub Exploit DB Packet Storm
346178 - atlassian jira secure/ConfigureReleaseNote.jspa in Atlassian JIRA 3.6.2-#156 allows remote attackers to obtain sensitive information via unspecified manipulations of the projectId parameter, which displays the inst… NVD-CWE-Other
CVE-2006-3339 2017-07-20 10:32 2006-07-4 Show GitHub Exploit DB Packet Storm
346179 - olate arctic Cross-site scripting (XSS) vulnerability in index.php in Arctic 1.0.2 and earlier allows remote attackers to inject arbitrary web script or HTML via the query parameter in a search cmd. NVD-CWE-Other
CVE-2006-3342 2017-07-20 10:32 2006-07-4 Show GitHub Exploit DB Packet Storm
346180 - swsoft hspcomplete Multiple SQL injection vulnerabilities in HSPcomplete 3.2.2 and 3.3 Beta and earlier allow remote attackers to execute arbitrary SQL commands via the (1) type parameter in report.php and (2) level pa… NVD-CWE-Other
CVE-2006-3348 2017-07-20 10:32 2006-07-4 Show GitHub Exploit DB Packet Storm