Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 21, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
228471 6.9 警告 Blue Marble Geographics - Global Mapper における権限を取得される脆弱性 CWE-Other
その他 		CVE-2013-0727 2013-04-30 18:25 2013-04-26 Show GitHub Exploit DB Packet Storm
228472 7.2 危険 ヒューレット・パッカード - HP Storage Data Protector における権限を取得される脆弱性 CWE-noinfo
情報不足 		CVE-2012-5220 2013-04-30 18:24 2013-04-24 Show GitHub Exploit DB Packet Storm
228473 4 警告 The phpMyAdmin Project - phpMyAdmin の export.php における値を挿入される脆弱性 CWE-noinfo
情報不足 		CVE-2013-3241 2013-04-30 18:23 2013-04-24 Show GitHub Exploit DB Packet Storm
228474 6.5 警告 The phpMyAdmin Project - phpMyAdmin のエクスポート機能におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2013-3240 2013-04-30 18:21 2013-04-24 Show GitHub Exploit DB Packet Storm
228475 6.8 警告 Crunchify - WordPress 用 FourSquare Checkins プラグインにおけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反 		CVE-2013-2709 2013-04-30 17:54 2013-04-22 Show GitHub Exploit DB Packet Storm
228476 6.8 警告 Crunchify - WordPress 用 All in One Webmaster プラグインにおけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反 		CVE-2013-2696 2013-04-30 17:52 2013-04-22 Show GitHub Exploit DB Packet Storm
228477 5 警告 Blink Web Effects - WordPress 用 Social Media Widget プラグインにおける任意のファイルのアップロードを強制される脆弱性 CWE-noinfo
情報不足 		CVE-2013-1949 2013-04-30 17:51 2013-04-9 Show GitHub Exploit DB Packet Storm
228478 10 危険 Rob Westgeest - Ruby 用 md2pdf gem の converter.rb における任意のコマンドを実行される脆弱性 CWE-noinfo
情報不足 		CVE-2013-1948 2013-04-30 17:51 2013-04-10 Show GitHub Exploit DB Packet Storm
228479 9.3 危険 Kelly D. Redding - Ruby 用 kelredd-pruview gem における任意のコマンドを実行される脆弱性 CWE-78
OSコマンド・インジェクション 		CVE-2013-1947 2013-04-30 17:50 2013-04-4 Show GitHub Exploit DB Packet Storm
228480 9.3 危険 karteek-docsplit - Ruby 用 Karteek Docsplit gem における任意のコマンドを実行される脆弱性 CWE-78
OSコマンド・インジェクション 		CVE-2013-1933 2013-04-30 17:49 2013-04-1 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 21, 2026, 4:01 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
343851 - musicbox musicbox Cross-site scripting (XSS) vulnerability in Shalwan MusicBox 2.3.4 and earlier allows remote attackers to inject arbitrary web script or HTML via the id parameter in a request for the top-level URI. … NVD-CWE-Other
CVE-2006-3881 2018-10-18 06:32 2006-07-27 Show GitHub Exploit DB Packet Storm
343852 - musicbox musicbox Shalwan MusicBox 2.3.4 and earlier allows remote attackers to obtain configuration information via a direct request to phpinfo.php, which calls the phpinfo function. NVD-CWE-Other
CVE-2006-3882 2018-10-18 06:32 2006-07-27 Show GitHub Exploit DB Packet Storm
343853 - gonafish linkscaffe Multiple cross-site scripting (XSS) vulnerabilities in Gonafish LinksCaffe 3.0 allow remote attackers to inject arbitrary web script or HTML via (1) the tablewidth parameter in (a) counter.php; (2) t… NVD-CWE-Other
CVE-2006-3883 2018-10-18 06:32 2006-07-27 Show GitHub Exploit DB Packet Storm
343854 - gonafish linkscaffe Multiple SQL injection vulnerabilities in links.php in Gonafish LinksCaffe 3.0 allow remote attackers to execute arbitrary SQL commands via the (1) offset and (2) limit parameters, (3) newdays parame… NVD-CWE-Other
CVE-2006-3884 2018-10-18 06:32 2006-07-27 Show GitHub Exploit DB Packet Storm
343855 - checkpoint firewall-1 Directory traversal vulnerability in Check Point Firewall-1 R55W before HFA03 allows remote attackers to read arbitrary files via an encoded .. (dot dot) in the URL on TCP port 18264. NVD-CWE-Other
CVE-2006-3885 2018-10-18 06:32 2006-07-27 Show GitHub Exploit DB Packet Storm
343856 - musicbox musicbox SQL injection vulnerability in Shalwan MusicBox 2.3.4 and earlier allows remote attackers to execute arbitrary SQL commands via the page parameter in a viewgallery action in a request for the top-lev… NVD-CWE-Other
CVE-2006-3886 2018-10-18 06:32 2006-07-27 Show GitHub Exploit DB Packet Storm
343857 - tobias_kloy tp-book Cross-site scripting (XSS) vulnerability in guestbook.php in TP-Book 1.00 and earlier allows remote attackers to inject arbitrary web script or HTML via the name parameter. NVD-CWE-Other
CVE-2006-3900 2018-10-18 06:32 2006-07-27 Show GitHub Exploit DB Packet Storm
343858 - tumbleweed mailgate_email_firewall Multiple stack-based buffer overflows in Tumbleweed Email Firewall (EMF) allow remote attackers to execute arbitrary code via an email attachment with an LHA archive that contains a (1) file or (2) d… NVD-CWE-Other
CVE-2006-3901 2018-10-18 06:32 2006-07-27 Show GitHub Exploit DB Packet Storm
343859 - mywebland mybloggie CRLF injection vulnerability in (1) index.php and (2) admin.php in myWebland MyBloggie 2.1.3 allows remote attackers to hijack sessions and conduct cross-site scripting (XSS) attacks via a cookie. NVD-CWE-Other
CVE-2006-3903 2018-10-18 06:32 2006-07-28 Show GitHub Exploit DB Packet Storm
343860 - mywebland mybloggie SQL injection vulnerability in Webland MyBloggie 2.1.3 allows remote attackers to execute arbitrary SQL commands via the (1) post_id parameter in index.php and (2) search function. NVD-CWE-Other
CVE-2006-3905 2018-10-18 06:32 2006-07-28 Show GitHub Exploit DB Packet Storm