Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 19, 2026, 6 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
239981 5 警告 The PHP Group - PHP の ip2long 関数におけるネットワーク情報を取得される脆弱性 - CVE-2006-4023 2012-09-25 15:35 2006-08-8 Show GitHub Exploit DB Packet Storm
239982 4.3 警告 inter network marketing ag - INM CMS G3 の search モジュールにおけるクロスサイトスクリプティングの脆弱性 - CVE-2006-4017 2012-09-25 15:35 2006-08-7 Show GitHub Exploit DB Packet Storm
239983 5 警告 ヒューレット・パッカード - HP ProCurve スイッチにおけるサービス運用妨害 (DoS) の脆弱性 - CVE-2006-4015 2012-09-25 15:35 2006-08-7 Show GitHub Exploit DB Packet Storm
239984 2.6 注意 Kayako - Kayako eSupport における PHP リモートファイルインクルージョンの脆弱性 - CVE-2006-4011 2012-09-25 15:35 2006-08-7 Show GitHub Exploit DB Packet Storm
239985 7.5 危険 knusperleicht - Knusperleicht Faq の index.php における PHP リモートファイルインクルージョンの脆弱性 - CVE-2006-4008 2012-09-25 15:35 2006-08-7 Show GitHub Exploit DB Packet Storm
239986 7.5 危険 knusperleicht - Knusperleicht Guestbook の index.php における PHP リモートファイルインクルージョンの脆弱性 - CVE-2006-4007 2012-09-25 15:35 2006-08-7 Show GitHub Exploit DB Packet Storm
239987 5 警告 hobbit monitor - Henrik Storner Hobbit モニタの config メソッドにおける重要な情報を取得される脆弱性 - CVE-2006-4003 2012-09-25 15:35 2006-08-7 Show GitHub Exploit DB Packet Storm
239988 4.6 警告 インターネット セキュリティ システムズ - ISS BlackICE PC Protection における BlackICE を破壊される脆弱性 - CVE-2006-3999 2012-09-25 15:35 2006-08-4 Show GitHub Exploit DB Packet Storm
239989 5.1 警告 knusperleicht - Knusperleicht Shoutbox の index.php における PHP リモートファイルインクルージョンの脆弱性 - CVE-2006-3989 2012-09-25 15:35 2006-08-4 Show GitHub Exploit DB Packet Storm
239990 5.1 警告 knusperleicht - Knusperleicht Guestbook の index.php における PHP リモートファイルインクルージョンの脆弱性 - CVE-2006-3988 2012-09-25 15:35 2006-08-4 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 19, 2026, 4:16 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
286271 7.3 HIGH
Network
vmware spring_security The ActiveDirectoryLdapAuthenticator in Spring Security 3.2.0 to 3.2.1 and 3.1.0 to 3.1.5 does not check the password length. If the directory allows anonymous binds then it may incorrectly authentic… CWE-287
Improper Authentication
CVE-2014-0097 2024-11-21 11:01 2017-05-26 Show GitHub Exploit DB Packet Storm
286272 7.5 HIGH
Network
aescrypt_project aescrypt The aescrypt gem 1.0.0 for Ruby does not randomize the CBC IV for use with the AESCrypt.encrypt and AESCrypt.decrypt functions, which allows attackers to defeat cryptographic protection mechanisms vi… CWE-330
 Use of Insufficiently Random Values
CVE-2013-7463 2024-11-21 11:01 2017-04-20 Show GitHub Exploit DB Packet Storm
286273 7.5 HIGH
Network
pulpproject pulp Pulp before 2.3.0 uses the same the same certificate authority key and certificate for all installations. CWE-295
Improper Certificate Validation 
CVE-2013-7450 2024-11-21 11:01 2017-04-4 Show GitHub Exploit DB Packet Storm
286274 6.5 MEDIUM
Network
cloudera
apache
cdh
hadoop
Apache Hadoop 0.23.x before 0.23.11 and 2.x before 2.4.1, as used in Cloudera CDH 5.0.x before 5.0.2, do not check authorization for the (1) refreshNamenodes, (2) deleteBlockPool, and (3) shutdownDat… CWE-264
Permissions, Privileges, and Access Controls
CVE-2014-0229 2024-11-21 11:01 2017-03-24 Show GitHub Exploit DB Packet Storm
286275 7.5 HIGH
Network
mcafee saas_control_console_platform A directory traversal vulnerability in the web application in McAfee (now Intel Security) SaaS Control Console (SCC) Platform 6.14 before patch 1070, and 6.15 before patch 1076 allows unauthenticated… CWE-22
Path Traversal
CVE-2013-7462 2024-11-21 11:01 2017-03-15 Show GitHub Exploit DB Packet Storm
286276 5.5 MEDIUM
Local
mcafee change_control
application_control
A write protection and execution bypass vulnerability in McAfee (now Intel Security) Change Control (MCC) 6.1.0 for Linux and earlier allows authenticated users to change files that are part of write… CWE-284
Improper Access Control
CVE-2013-7461 2024-11-21 11:01 2017-03-15 Show GitHub Exploit DB Packet Storm
286277 5.5 MEDIUM
Local
mcafee change_control
application_control
A write protection and execution bypass vulnerability in McAfee (now Intel Security) Application Control (MAC) 6.1.0 for Linux and earlier allows authenticated users to change binaries that are part … CWE-284
Improper Access Control
CVE-2013-7460 2024-11-21 11:01 2017-03-15 Show GitHub Exploit DB Packet Storm
286278 9.8 CRITICAL
Network
dlitz
fedoraproject
pycrypto
fedora
Heap-based buffer overflow in the ALGnew function in block_templace.c in Python Cryptography Toolkit (aka pycrypto) allows remote attackers to execute arbitrary code as demonstrated by a crafted iv p… CWE-119
Incorrect Access of Indexable Resource ('Range Error') 
CVE-2013-7459 2024-11-21 11:01 2017-02-16 Show GitHub Exploit DB Packet Storm
286279 6.1 MEDIUM
Network
nodejs node.js The validator module before 1.1.0 for Node.js allows remote attackers to bypass the cross-site scripting (XSS) filter via nested forbidden strings. CWE-79
Cross-site Scripting
CVE-2013-7454 2024-11-21 11:01 2017-01-24 Show GitHub Exploit DB Packet Storm
286280 6.1 MEDIUM
Network
nodejs node.js The validator module before 1.1.0 for Node.js allows remote attackers to bypass the cross-site scripting (XSS) filter via vectors related to UI redressing. CWE-79
Cross-site Scripting
CVE-2013-7453 2024-11-21 11:01 2017-01-24 Show GitHub Exploit DB Packet Storm