Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
Urgent
Important
Warning
Warning
CVE
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
脅威度ソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Feb. 3, 2025, 1:14 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
205221 7.5 危険 Google - Google Chrome におけるサービス運用妨害 (アプリケーションクラッシュ) の脆弱性 CWE-noinfo
情報不足 		CVE-2011-3955 2012-02-13 10:35 2012-02-8 Show GitHub Exploit DB Packet Storm
205222 5 警告 Google - Google Chrome におけるサービス運用妨害 (アプリケーションクラッシュ) の脆弱性 CWE-noinfo
情報不足 		CVE-2011-3954 2012-02-13 10:34 2012-02-8 Show GitHub Exploit DB Packet Storm
205223 7.5 危険 Google - Google Chrome における詳細不明な脆弱性 CWE-noinfo
情報不足 		CVE-2011-3953 2012-02-13 10:34 2012-02-8 Show GitHub Exploit DB Packet Storm
205224 4.3 警告 EPiServer - EPiServer CMS の 管理インタフェースにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2012-1034 2012-02-10 15:04 2012-02-8 Show GitHub Exploit DB Packet Storm
205225 6 警告 EPiServer - EPiServer CMS における WebAdmins のアクセス権を取得される脆弱性 CWE-noinfo
情報不足 		CVE-2012-1031 2012-02-10 15:04 2012-02-8 Show GitHub Exploit DB Packet Storm
205226 5 警告 OfficeSIP Communications - OfficeSIP Server におけるサービス運用妨害 (デーモンクラッシュ) の脆弱性 CWE-20
不適切な入力確認 		CVE-2012-1008 2012-02-10 15:03 2012-02-8 Show GitHub Exploit DB Packet Storm
205227 2.1 注意 Foswiki - Foswiki の UI/Register.pm におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2012-1004 2012-02-10 15:02 2012-02-8 Show GitHub Exploit DB Packet Storm
205228 10 危険 Zakon Group - OpenConf における詳細不明な脆弱性 CWE-noinfo
情報不足 		CVE-2012-1002 2012-02-10 15:01 2012-02-2 Show GitHub Exploit DB Packet Storm
205229 7.5 危険 Tube Ace - Tube Ace の mobile/search/index.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2012-1029 2012-02-10 15:00 2012-02-8 Show GitHub Exploit DB Packet Storm
205230 4.3 警告 Simple Groupware Solutions - SimpleGroupware の bin/index.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2012-1028 2012-02-10 14:59 2012-02-2 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:Feb. 25, 2025, 4:06 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
268321 - unicore unicore_client The keystore file in Unicore Client before 5.6 build 5, when running on Unix systems, has insecure default permissions, which allows local users to obtain sensitive information. NVD-CWE-Other
CVE-2006-5842 2017-07-20 10:34 2006-11-10 Show GitHub Exploit DB Packet Storm
268322 - unicore unicore_client This vulnerability is addressed in the following product build: Unicore, Unicore Client, 5.6 build 5 NVD-CWE-Other
CVE-2006-5842 2017-07-20 10:34 2006-11-10 Show GitHub Exploit DB Packet Storm
268323 - freewebshop freewebshop Directory traversal vulnerability in index.php in FreeWebshop 2.2.2 and earlier allows remote attackers to read and include arbitrary files via a .. (dot dot) in the page parameter, a different vecto… CWE-22
Path Traversal 		CVE-2006-5846 2017-07-20 10:34 2006-11-10 Show GitHub Exploit DB Packet Storm
268324 6.1 MEDIUM
Network 		freewebshop freewebshop Cross-site scripting (XSS) vulnerability in index.php in FreeWebshop 2.2.2 and earlier allows remote attackers to inject arbitrary web script or HTML via the cat parameter. CWE-79
Cross-site Scripting 		CVE-2006-5847 2017-07-20 10:34 2006-11-10 Show GitHub Exploit DB Packet Storm
268325 - immediacy immediacy_.net_cms Cross-site scripting (XSS) vulnerability in logon.aspx in Immediacy CMS (Immediacy .NET CMS) 5.2 allows remote attackers to inject arbitrary web script or HTML via the lang parameter, which is return… NVD-CWE-Other
CVE-2006-5853 2017-07-20 10:34 2006-11-10 Show GitHub Exploit DB Packet Storm
268326 - adobe coldfusion
jrun 		Cross-site scripting (XSS) vulnerability in the administrator console for Adobe JRun 4.0, as used in ColdFusion, allows remote attackers to inject arbitrary web script or HTML via unknown vectors. CWE-79
Cross-site Scripting 		CVE-2006-5860 2017-07-20 10:34 2007-02-14 Show GitHub Exploit DB Packet Storm
268327 - citrix metaframe
metaframe_presentation_server 		The Independent Management Architecture (IMA) service (ImaSrv.exe) in Citrix MetaFrame XP 1.0 and 2.0, and Presentation Server 3.0 and 4.0, allows remote attackers to cause a denial of service (servi… NVD-CWE-Other
CVE-2006-5861 2017-07-20 10:34 2006-11-11 Show GitHub Exploit DB Packet Storm
268328 - network_administration_visualized network_administration_visualized Directory traversal vulnerability in the session mechanism of the web interface for Network Administration Visualized (NAV) before 3.1.1 allows attackers with filesystem write access to have an unkno… NVD-CWE-Other
CVE-2006-5862 2017-07-20 10:34 2006-11-11 Show GitHub Exploit DB Packet Storm
268329 - l2tpns
debian 		l2tpns
debian_linux 		Buffer overflow in the cluster_process_heartbeat function in cluster.c in layer 2 tunneling protocol network server (l2tpns) before 2.1.21 allows remote attackers to cause a denial of service via a l… NVD-CWE-Other
CVE-2006-5873 2017-07-20 10:34 2006-12-12 Show GitHub Exploit DB Packet Storm
268330 - libsoup libsoup The soup_headers_parse function in soup-headers.c for libsoup HTTP library before 2.2.99 allows remote attackers to cause a denial of service (crash) via malformed HTTP headers, probably involving mi… NVD-CWE-Other
CVE-2006-5876 2017-07-20 10:34 2007-01-17 Show GitHub Exploit DB Packet Storm