Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 26, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
251891 6.4 警告 blue dragon - Php Blue Dragon の pbd_engine.php におけるディレクトリトラバーサルの脆弱性 - CVE-2006-4962 2012-06-26 15:37 2006-09-23 Show GitHub Exploit DB Packet Storm
251892 7.5 危険 blue dragon - Php Blue Dragon の GetModuleConfig 関数における SQL インジェクションの脆弱性 - CVE-2006-4961 2012-06-26 15:37 2006-09-23 Show GitHub Exploit DB Packet Storm
251893 6.8 警告 blue dragon - Php Blue Dragon の index.php におけるクロスサイトスクリプティングの脆弱性 - CVE-2006-4960 2012-06-26 15:37 2006-09-23 Show GitHub Exploit DB Packet Storm
251894 4.3 警告 Drupal - Drupal の Site Profile Directory におけるクロスサイトスクリプティングの脆弱性 - CVE-2006-4949 2012-06-26 15:37 2006-09-20 Show GitHub Exploit DB Packet Storm
251895 6.8 警告 Drupal - Drupal の Search Keywords モジュールにおけるクロスサイトスクリプティングの脆弱性 - CVE-2006-4947 2012-06-26 15:37 2006-09-20 Show GitHub Exploit DB Packet Storm
251896 5.1 警告 cmsdevelopment - BCWB の include/startup.inc.php における PHP リモートファイルインクルージョンの脆弱性 - CVE-2006-4946 2012-06-26 15:37 2006-09-22 Show GitHub Exploit DB Packet Storm
251897 5.1 警告 cardway - Cardway DigitalWebShop における PHP リモートファイルインクルージョンの脆弱性 - CVE-2006-4945 2012-06-26 15:37 2006-09-22 Show GitHub Exploit DB Packet Storm
251898 7.5 危険 boesch-it - ProgSys の includes/pear/Net/DNS/RR.php における PHP リモートファイルインクルージョンの脆弱性 - CVE-2006-4944 2012-06-26 15:37 2006-09-22 Show GitHub Exploit DB Packet Storm
251899 4.3 警告 esyndicat portal system - eSyndiCat Portal System の search.php におけるクロスサイトスクリプティングの脆弱性 - CVE-2006-4923 2012-06-26 15:37 2006-09-20 Show GitHub Exploit DB Packet Storm
251900 7.5 危険 ASP indir - TR の uye_profil.asp における SQL インジェクションの脆弱性 - CVE-2006-4916 2012-06-26 15:37 2006-09-20 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 27, 2026, 4:35 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
246071 7.5 HIGH
Network 		ibm security_key_lifecycle_manager IBM Security Key Lifecycle Manager 3.0 through 3.0.0.2 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information. IBM X-Force ID: 148512. CWE-326
Inadequate Encryption Strength 		CVE-2018-1751 2024-11-21 13:00 2019-01-24 Show GitHub Exploit DB Packet Storm
246072 5.4 MEDIUM
Network 		ibm spss_analytic_server IBM SPSS Analytic Server 3.1.1.1 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality poten… CWE-79
Cross-site Scripting 		CVE-2018-1772 2024-11-21 13:00 2019-01-16 Show GitHub Exploit DB Packet Storm
246073 9.9 CRITICAL
Network 		ibm security_identity_manager IBM Security Identity Manager 6.0.0 allows the attacker to upload or transfer files of dangerous types that can be automatically processed within the product's environment. IBM X-Force ID: 153750. CWE-434
 Unrestricted Upload of File with Dangerous Type  		CVE-2018-1969 2024-11-21 13:00 2019-01-14 Show GitHub Exploit DB Packet Storm
246074 6.1 MEDIUM
Network 		ibm security_identity_manager IBM Security Identity Manager 6.0.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality po… CWE-79
Cross-site Scripting 		CVE-2018-1967 2024-11-21 13:00 2019-01-14 Show GitHub Exploit DB Packet Storm
246075 7.5 HIGH
Network 		ibm security_identity_manager IBM Security Identity Manager 6.0.0 does not require that users should have strong passwords by default, which makes it easier for attackers to compromise user accounts. IBM X-Force ID: 153628. CWE-521
Weak Password Requirements  		CVE-2018-1956 2024-11-21 13:00 2019-01-14 Show GitHub Exploit DB Packet Storm
246076 6.1 MEDIUM
Network 		google chrome Insufficiently strict origin checks during JIT payment app installation in Payments in Google Chrome prior to 70.0.3538.67 allowed a remote attacker to install a service worker for a domain that can … CWE-79
Cross-site Scripting 		CVE-2018-20071 2024-11-21 13:00 2019-01-10 Show GitHub Exploit DB Packet Storm
246077 6.5 MEDIUM
Network 		google chrome Incorrect handling of confusable characters in URL Formatter in Google Chrome prior to 71.0.3578.80 allowed a remote attacker to spoof the contents of the Omnibox (URL bar) via a crafted domain name. CWE-20
 Improper Input Validation  		CVE-2018-20070 2024-11-21 13:00 2019-01-10 Show GitHub Exploit DB Packet Storm
246078 4.3 MEDIUM
Network 		google chrome Failure to prevent navigation to top frame to data URLs in Navigation in Google Chrome on iOS prior to 71.0.3578.80 allowed a remote attacker to confuse the user about the origin of the current page … NVD-CWE-noinfo
CVE-2018-20069 2024-11-21 13:00 2019-01-10 Show GitHub Exploit DB Packet Storm
246079 4.3 MEDIUM
Network 		google chrome Incorrect handling of 304 status codes in Navigation in Google Chrome prior to 71.0.3578.80 allowed a remote attacker to confuse the user about the origin of the current page via a crafted HTML page. CWE-20
 Improper Input Validation  		CVE-2018-20068 2024-11-21 13:00 2019-01-10 Show GitHub Exploit DB Packet Storm
246080 4.3 MEDIUM
Network 		google chrome A renderer initiated back navigation was incorrectly allowed to cancel a browser initiated one in Navigation in Google Chrome prior to 71.0.3578.80 allowed a remote attacker to confuse the user about… NVD-CWE-noinfo
CVE-2018-20067 2024-11-21 13:00 2019-01-10 Show GitHub Exploit DB Packet Storm