Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Feb. 9, 2026, 12:59 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
228041 4.3 警告 dkscript - DKScript.com Dragon's Kingdom Script におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2006-3539 2012-12-20 18:02 2006-07-12 Show GitHub Exploit DB Packet Storm
228042 5.8 警告 beatificfaith - BeatificFaith Eprayer Alpha の demo.php におけるクロスサイトスクリプティングの脆弱性 - CVE-2006-3538 2012-12-20 18:02 2006-07-12 Show GitHub Exploit DB Packet Storm
228043 7.5 危険 randshop - Randshop の index.php における PHP リモートファイルインクルージョンの脆弱性 - CVE-2006-3537 2012-12-20 18:02 2006-07-12 Show GitHub Exploit DB Packet Storm
228044 7.5 危険 ej3 - EJ3 TOPo の code/class_db_text.php における任意の PHP コードを実行される脆弱性 - CVE-2006-3536 2012-12-20 18:02 2006-07-12 Show GitHub Exploit DB Packet Storm
228045 5 警告 Nullsoft - Nullsoft SHOUTcast DSP におけるディレクトリトラバーサルの脆弱性 - CVE-2006-3535 2012-12-20 18:02 2006-07-12 Show GitHub Exploit DB Packet Storm
228046 7.8 危険 Nullsoft - Nullsoft SHOUTcast DSP におけるディレクトリトラバーサルの脆弱性 - CVE-2006-3534 2012-12-20 18:02 2006-07-12 Show GitHub Exploit DB Packet Storm
228047 5.8 警告 pivot - Pivot におけるクロスサイトスクリプティングの脆弱性 - CVE-2006-3533 2012-12-20 18:02 2006-07-12 Show GitHub Exploit DB Packet Storm
228048 5.1 警告 pivot - Pivot の includes/edit_new.php における任意の PHP コードを実行される脆弱性 - CVE-2006-3532 2012-12-20 18:02 2006-07-12 Show GitHub Exploit DB Packet Storm
228049 7.5 危険 pivot - Pivot の includes/editor/insert_image.php における任意のファイルをアップロードされる脆弱性 - CVE-2006-3531 2012-12-20 18:02 2006-07-12 Show GitHub Exploit DB Packet Storm
228050 6.8 警告 Joomla! - Mambo 用の PccookBook Component の com_pccookbook/pccookbook.php における PHP リモートファイルインクルージョンの脆弱性 CWE-94
コード・インジェクション
CVE-2006-3530 2012-12-20 18:02 2006-07-12 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:April 19, 2026, 4:09 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
198341 4.9 MEDIUM
Network
sitecore cms In Sitecore 8.2, there is absolute path traversal via the shell/Applications/Layouts/IDE.aspx fi parameter and the admin/LinqScratchPad.aspx Reference parameter. CWE-22
Path Traversal
CVE-2017-11440 2024-11-21 12:07 2017-07-19 Show GitHub Exploit DB Packet Storm
198342 5.4 MEDIUM
Network
sitecore cms In Sitecore 8.2, there is reflected XSS in the shell/Applications/Tools/Run Program parameter. CWE-79
Cross-site Scripting
CVE-2017-11439 2024-11-21 12:07 2017-07-19 Show GitHub Exploit DB Packet Storm
198343 9.8 CRITICAL
Network
dlink dir-615 D-Link DIR-615 before v20.12PTb04 has a second admin account with a 0x1 BACKDOOR value, which might allow remote attackers to obtain access via a TELNET connection. CWE-798
 Use of Hard-coded Credentials
CVE-2017-11436 2024-11-21 12:07 2017-07-19 Show GitHub Exploit DB Packet Storm
198344 9.8 CRITICAL
Network
humaxdigital hg100r_firmware The Humax Wi-Fi Router model HG100R-* 2.0.6 is prone to an authentication bypass vulnerability via specially crafted requests to the management console. The bug is exploitable remotely when the route… CWE-200
Information Exposure
CVE-2017-11435 2024-11-21 12:07 2017-07-19 Show GitHub Exploit DB Packet Storm
198345 7.5 HIGH
Network
wireshark wireshark In Wireshark through 2.0.13 and 2.2.x through 2.2.7, the openSAFETY dissector could crash or exhaust system memory. This was addressed in epan/dissectors/packet-opensafety.c by adding length validati… CWE-20
 Improper Input Validation 
CVE-2017-11411 2024-11-21 12:07 2017-07-19 Show GitHub Exploit DB Packet Storm
198346 7.5 HIGH
Network
wireshark wireshark In Wireshark through 2.0.13 and 2.2.x through 2.2.7, the WBXML dissector could go into an infinite loop, triggered by packet injection or a malformed capture file. This was addressed in epan/dissecto… CWE-20
CWE-835
 Improper Input Validation 
 Loop with Unreachable Exit Condition ('Infinite Loop')
CVE-2017-11410 2024-11-21 12:07 2017-07-19 Show GitHub Exploit DB Packet Storm
198347 7.5 HIGH
Network
wireshark
debian
wireshark
debian_linux
In Wireshark 2.0.0 to 2.0.13, the GPRS LLC dissector could go into a large loop. This was addressed in epan/dissectors/packet-gprs-llc.c by using a different integer data type. CWE-834
 Excessive Iteration
CVE-2017-11409 2024-11-21 12:07 2017-07-19 Show GitHub Exploit DB Packet Storm
198348 7.5 HIGH
Network
wireshark wireshark In Wireshark 2.2.0 to 2.2.7 and 2.0.0 to 2.0.13, the AMQP dissector could crash. This was addressed in epan/dissectors/packet-amqp.c by checking for successful list dissection. CWE-20
 Improper Input Validation 
CVE-2017-11408 2024-11-21 12:07 2017-07-19 Show GitHub Exploit DB Packet Storm
198349 7.5 HIGH
Network
wireshark
debian
wireshark
debian_linux
In Wireshark 2.2.0 to 2.2.7 and 2.0.0 to 2.0.13, the MQ dissector could crash. This was addressed in epan/dissectors/packet-mq.c by validating the fragment length before a reassembly attempt. CWE-20
 Improper Input Validation 
CVE-2017-11407 2024-11-21 12:07 2017-07-19 Show GitHub Exploit DB Packet Storm
198350 7.5 HIGH
Network
wireshark
debian
wireshark
debian_linux
In Wireshark 2.2.0 to 2.2.7 and 2.0.0 to 2.0.13, the DOCSIS dissector could go into an infinite loop. This was addressed in plugins/docsis/packet-docsis.c by rejecting invalid Frame Control parameter… CWE-835
 Loop with Unreachable Exit Condition ('Infinite Loop')
CVE-2017-11406 2024-11-21 12:07 2017-07-19 Show GitHub Exploit DB Packet Storm