Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":July 1, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
255781	7.5	危険	アップルサイバートラスト株式会社 Mozilla Foundation PNG Development Group オラクル VMware フェンリル株式会社レッドハット	-	libpng に脆弱性	CWE-119 バッファエラー	CVE-2010-1205	2012-03-27 10:29	2010-07-6	Show	GitHub Exploit DB Packet Storm

255782	7.8	危険	アップルサイバートラスト株式会社 PNG Development Group Lunascape オラクル VMware フェンリル株式会社レッドハット	-	libpng における圧縮された補助チャンクの処理に脆弱性	CWE-399 リソース管理の問題	CVE-2010-0205	2012-03-27 10:22	2010-03-4	Show	GitHub Exploit DB Packet Storm

255783	7.5	危険	クアンタムデル IBM	-	複数のテープライブラリ製品におけるアクセス権を取得される脆弱性	CWE-255 証明書・パスワード管理	CVE-2012-1844	2012-03-26 18:12	2012-03-22	Show	GitHub Exploit DB Packet Storm

255784	5	警告	クアンタムデル	-	Quantum Scalar i500 および Dell ML6000 における絶対パストラバーサルの脆弱性	CWE-22 パス・トラバーサル	CVE-2012-1841	2012-03-26 18:08	2012-03-22	Show	GitHub Exploit DB Packet Storm

255785	5	警告	LG-Nortel	-	LG-Nortel ELO GS24M に複数の脆弱性	CWE-287 不適切な認証	CVE-2012-1838	2012-03-26 16:29	2012-03-22	Show	GitHub Exploit DB Packet Storm

255786	7.5	危険	Webglimpse	-	WebGlimpse に OS コマンドインジェクションの脆弱性	CWE-78 OSコマンド・インジェクション	CVE-2012-1795	2012-03-26 16:24	2012-03-20	Show	GitHub Exploit DB Packet Storm

255787	7.5	危険	Pydio	-	AjaXplorer におけるログインのアクセス権を取得される脆弱性	CWE-287 不適切な認証	CVE-2012-1840	2012-03-26 16:08	2012-03-22	Show	GitHub Exploit DB Packet Storm

255788	7.5	危険	Pydio	-	AjaXplorer の Get Template 機能におけるディレクトリトラバーサルの脆弱性	CWE-22 パス・トラバーサル	CVE-2012-1839	2012-03-26 16:08	2012-03-22	Show	GitHub Exploit DB Packet Storm

255789	5	警告	IBM	-	IBM Tivoli Endpoint Manager における重要な情報を取得される脆弱性	CWE-200 情報漏えい	CVE-2012-1837	2012-03-26 16:07	2012-03-22	Show	GitHub Exploit DB Packet Storm

255790	4.3	警告	IBM	-	IBM Tivoli Endpoint Manager におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2012-0719	2012-03-26 16:04	2012-03-22	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:July 2, 2026, 4:03 a.m.

No	CVSS	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
345661	-	eset_software	nod32_antivirus	The "restore to" selection in the "quarantine a file" capability of ESET NOD32 before 2.51.26 allows a restore to any directory that permits read access by the invoking user, which allows local users…	NVD-CWE-Other	CVE-2006-1649	2018-10-19 01:33	2006-04-6	Show	GitHub Exploit DB Packet Storm

345662	-	eset_software	nod32_antivirus	ESET NOD32 Antivirus version 2.51.26 fixes this vulnerability. All versions of this product prior to 2.51.26 are vulnerable.	NVD-CWE-Other	CVE-2006-1649	2018-10-19 01:33	2006-04-6	Show	GitHub Exploit DB Packet Storm

345663	-	mozilla	firefox	Firefox 1.5.0.1 allows remote attackers to spoof the address bar and possibly conduct phishing attacks by re-opening the window to a malicious Shockwave Flash application, then changing the window lo…	NVD-CWE-Other	CVE-2006-1650	2018-10-19 01:33	2006-04-6	Show	GitHub Exploit DB Packet Storm

345664	-	ultravnc	tabbed_viewer vnc_viewer	Multiple buffer overflows in (a) UltraVNC (aka Ultr@VNC) 1.0.1 and earlier and (b) tabbed_viewer 1.29 (1) allow user-assisted remote attackers to execute arbitrary code via a malicious server that se…	CWE-119 Incorrect Access of Indexable Resource ('Range Error')	CVE-2006-1652	2018-10-19 01:33	2006-04-6	Show	GitHub Exploit DB Packet Storm

345665	-	ultravnc	tabbed_viewer vnc_viewer	There are two seperate vulnerabilities here; One allows escalated priveleges to authenticated users, the other allows remote unauthenticated users to cause a Denial of Service (DoS).	CWE-119 Incorrect Access of Indexable Resource ('Range Error')	CVE-2006-1652	2018-10-19 01:33	2006-04-6	Show	GitHub Exploit DB Packet Storm

345666	-	angelinecms	angelinecms	PHP remote file inclusion vulnerability in loadkernel.php in AngelineCMS 0.8.1 allows remote attackers to execute arbitrary PHP code via a URL in the installPath parameter.	NVD-CWE-Other	CVE-2006-1653	2018-10-19 01:33	2006-04-6	Show	GitHub Exploit DB Packet Storm

345667	-	hp	color_laserjet_2500_toolbox color_laserjet_4600_toolbox color_laserjet color_laserjet_2500 color_laserjet_2500l color_laserjet_2500lse color_laserjet_2500n color_laserjet_2500tn<…	Directory traversal vulnerability in the HP Color LaserJet 2500 Toolbox and Color LaserJet 4600 Toolbox on Microsoft Windows before 20060402 allows remote attackers to read arbitrary files via a .. (…	NVD-CWE-Other	CVE-2006-1654	2018-10-19 01:33	2006-04-6	Show	GitHub Exploit DB Packet Storm

345668	-	chucky_a._ivey	n.t.	Cross-site scripting (XSS) vulnerability in index.php in Chucky A. Ivey N.T. 1.1.0 allows remote attackers to inject arbitrary web script or HTML via the username parameter, which is not filtered whe…	NVD-CWE-Other	CVE-2006-1657	2018-10-19 01:33	2006-04-7	Show	GitHub Exploit DB Packet Storm

345669	-	chucky_a._ivey	n.t.	Direct static code injection vulnerability in ticker.db.php in Chucky A. Ivey N.T. 1.1.0 allows remote administrators to insert arbitrary PHP code into the config file, which is included other N.T. …	NVD-CWE-Other	CVE-2006-1658	2018-10-19 01:33	2006-04-7	Show	GitHub Exploit DB Packet Storm

345670	-	limbo_cms	limbo_cms	The frontpage option in Limbo CMS 1.0.4.2 and 1.0.4.1 allows remote attackers to execute arbitrary PHP commands via the Itemid parameter in index.php.	NVD-CWE-Other	CVE-2006-1662	2018-10-19 01:33	2006-04-7	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed