Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Feb. 9, 2026, 12:59 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
242481 10 危険 bitflux - Bitflux Upload Progress Meter の uploadprogress_php_rfc1867_file 関数におけるヒープベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2006-6361 2012-06-26 15:38 2006-12-7 Show GitHub Exploit DB Packet Storm
242482 10 危険 duware - DuWare DuClassmate の default.asp における SQL インジェクションの脆弱性 - CVE-2006-6355 2012-06-26 15:38 2006-12-6 Show GitHub Exploit DB Packet Storm
242483 7.5 危険 duware - DuWare DuNews の detail.asp における SQL インジェクションの脆弱性 - CVE-2006-6354 2012-06-26 15:38 2006-12-6 Show GitHub Exploit DB Packet Storm
242484 5 警告 アップル - Mac OS X の BOMArchiveHelper におけるサービス運用妨害 (DoS) の脆弱性 - CVE-2006-6353 2012-06-26 15:38 2006-12-6 Show GitHub Exploit DB Packet Storm
242485 5 警告 frisk software - FRISK Software F-Prot Antivirus におけるサービス運用妨害 (DoS) の脆弱性 - CVE-2006-6352 2012-06-26 15:38 2006-12-1 Show GitHub Exploit DB Packet Storm
242486 6.8 警告 deV!L'z Clanportal - DZCP の sites/index.php における SQL インジェクションの脆弱性 - CVE-2006-6339 2012-06-26 15:38 2006-12-6 Show GitHub Exploit DB Packet Storm
242487 5 警告 deV!L'z Clanportal - DZCP の upload/index.php における任意の .php ファイルをアップロードおよび実行される脆弱性 - CVE-2006-6338 2012-06-26 15:38 2006-12-6 Show GitHub Exploit DB Packet Storm
242488 7.5 危険 ASP indir - Aspee Ziyaretci Defteri の giris.asp における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2006-6337 2012-06-26 15:38 2006-12-6 Show GitHub Exploit DB Packet Storm
242489 10 危険 ライブドア - Eudora WorldMail の MAILMA.exe におけるヒープベースのバッファオーバーフローの脆弱性 - CVE-2006-6336 2012-06-26 15:38 2006-12-31 Show GitHub Exploit DB Packet Storm
242490 6.8 警告 シトリックス・システムズ - Citrix Presentation Server Client の SendChannelData 関数におけるヒープベースのバッファオーバーフローの脆弱性 - CVE-2006-6334 2012-06-26 15:38 2006-12-4 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:April 26, 2026, 4:08 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
287961 - axesstel mv_410r cgi-bin/sysconf.cgi on the Axesstel MV 410R allows remote attackers to cause a denial of service (configuration reset) via a RESTORE=RESTORE query string. NVD-CWE-Other
CVE-2009-2321 2018-10-11 04:39 2009-07-6 Show GitHub Exploit DB Packet Storm
287962 - axesstel mv_410r Cross-site scripting (XSS) vulnerability in cgi-bin/sysconf.cgi on the Axesstel MV 410R allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. CWE-79
Cross-site Scripting 		CVE-2009-2322 2018-10-11 04:39 2009-07-6 Show GitHub Exploit DB Packet Storm
287963 - axesstel mv_410r The web interface on the Axesstel MV 410R redirects users back to the referring page after execution of some CGI scripts, which makes it easier for remote attackers to avoid detection of cross-site r… CWE-352
 Origin Validation Error 		CVE-2009-2323 2018-10-11 04:39 2009-07-6 Show GitHub Exploit DB Packet Storm
287964 - fckeditor fckeditor Multiple cross-site scripting (XSS) vulnerabilities in FCKeditor before 2.6.4.1 allow remote attackers to inject arbitrary web script or HTML via components in the samples (aka _samples) directory. CWE-79
Cross-site Scripting 		CVE-2009-2324 2018-10-11 04:39 2009-07-6 Show GitHub Exploit DB Packet Storm
287965 - wordpress wordpress
wordpress_mu 		wp-admin/admin.php in WordPress and WordPress MU before 2.8.1 does not require administrative authentication to access the configuration of a plugin, which allows remote attackers to specify a config… CWE-287
Improper Authentication 		CVE-2009-2334 2018-10-11 04:39 2009-07-11 Show GitHub Exploit DB Packet Storm
287966 - sourcefire 3d_sensor
defense_center 		The web-based management interfaces in Sourcefire Defense Center (DC) and 3D Sensor before 4.8.2 allow remote authenticated users to gain privileges via a $admin value for the admin parameter in an e… CWE-264
Permissions, Privileges, and Access Controls 		CVE-2009-2344 2018-10-11 04:39 2009-07-8 Show GitHub Exploit DB Packet Storm
287967 - libtiff libtiff Multiple integer overflows in inter-color spaces conversion tools in libtiff 3.8 through 3.8.2, 3.9, and 4.0 allow context-dependent attackers to execute arbitrary code via a TIFF image with large (1… CWE-189
Numeric Errors 		CVE-2009-2347 2018-10-11 04:39 2009-07-15 Show GitHub Exploit DB Packet Storm
287968 - microsoft internet_explorer Microsoft Internet Explorer 6.0.2900.2180 and earlier does not block javascript: URIs in Refresh headers in HTTP responses, which allows remote attackers to conduct cross-site scripting (XSS) attacks… CWE-79
Cross-site Scripting 		CVE-2009-2350 2018-10-11 04:39 2009-07-8 Show GitHub Exploit DB Packet Storm
287969 - google chrome Google Chrome 1.0.154.48 and earlier does not block javascript: URIs in Refresh headers in HTTP responses, which allows remote attackers to conduct cross-site scripting (XSS) attacks via vectors rela… CWE-79
Cross-site Scripting 		CVE-2009-2352 2018-10-11 04:39 2009-07-8 Show GitHub Exploit DB Packet Storm
287970 - eaccelerator eaccelerator encoder.php in eAccelerator allows remote attackers to execute arbitrary code by copying a local executable file to a location under the web root via the -o option, and then making a direct request t… CWE-94
Code Injection 		CVE-2009-2353 2018-10-11 04:39 2009-07-8 Show GitHub Exploit DB Packet Storm